Hack This Site - Realistic 5 Tutorial

[CorvetteBG]

Holy crap i could've done all this stuff if ONLY i wouldn't directly go to /secret/admin.html!

WHY didn't i even think about going just on /secret WHY?

[pencilbroker96]

My anti-virus deleted the file immediately!

[rotsebanotman]

how do u know its md4?

[1014Timothybrooks]

is there something like Cain and Abel for Ubuntu 11.04? Tried some variation of Jack and John the Ripper but with no avail. I had Cain and Abel before but I don't think it runs on Linux. Any suggestions.

[yinge101]

stupid md4

Y CANT YOU ME MD5 (easier to crack)

[sime0n4o]

can some1 crat this 3edcf0f036e209bd75c9be6dba16ff­22 and pm me?

[abhinavchat4]

hash.online-convert/md4-genera­tor

try that no dwnld required

[jimdil4st]

I was sitting here for about an hour with cain running came and watch this video to see if i was doing anything then i realized i was trying to crack it as a MD5 not MD4.... it took about 5 secs to crack lol

[hanskiesG3R]

Hey could someone decrypt the hash for me? im on a mac and cant find a good program...The hash is : b5adfee3265d0d774b3d8f44badb17­10

PM me the answer :D

Thanks!

[Bigminimus1]

How do u know its MD4?

[Endang3red]

Does this program support Linux Ubuntu?

[TheMasterMind555]

<.< Abel can be used to make an Trojan, but it's not activated, so it's concidered as low dangerousity malware, but it's just rubbish, Avast! Doesn't concider it as an malware anymore, because they added it to the list of OK softwares even if blablabla so STFU Cain and Abel is safe

[disasterVoiceNZ]

i like the clicking sound.

[Silverormen]

OXID.IT HAS BEEN POISONED. CAIN AND ABEL NOW CONTAINS GENETIC MALWARE.

[TheKoksvik]

so people who it there is 2 virus in the ca file but they are weak so you can just remove em (=

[Foxified789]

uhh that clicking sound wrecks my head!!! good vid tho

[AcerofAces]

Lol, your download link tried to attack my computer. Wtf dude.

[cwade12c]

@AcerofAces

1) Not hosted by me.

2) Not coded by me.

3) False positive.

4) Thanks

[Nicholasclark1993]

@cwade12c Dude, how did you know its MD4 Hash? What be teh difference. TY.

[ImSoOffended]

My antivirus is not allowing me to use john the ripper or cain and able... what should I do?

[achraf96]

thnxx it workt for me but what meens hash ????

[achraf96]

whats meen hash ??

[rvngizswt]

How can I get Cain and Abel past Norton?

[coolguyflex]

I wrote a quick md5 bruteforcer, that doesn't set off your anti-virus software

haxme(.)org/forum/index(.)php?­showtopic=12607

[cwade12c]

@coolguyflex Legit status people. Check this out. :D

[rvngizswt]

@cwade12c ....5 hours later....

[meuske95]

for other sites, how to find out what hash type?

[cwade12c]

@meuske95

**IF ANYONE IS INTERESTED IN FIGURING OUT HASH TYPE, I'VE MADE A DETAILED THREAD ON HOW YOU CAN ACHIEVE THIS OVER AT MY SITE/FORUM...**

haxme[dot]org/forum/index[dot]­php?showtopic=12424

[meuske95]

@cwade12c ty:3

[munpong1989]

@cwade12c hey the haxme[dot]org/forum/index[dot]­­php?showtopic=12424 is not available

[mikkygirl18]

the password is 0e229, yet it doesn't work!

[LaraIsBeast]

Hey, I googled from md5 hash crackers, and entered the hash that i was given. All of them said it wasnt found? And I downloaded the program you were using, but my computer cant find it, so I dont know how to allow or open it. Help? Lol.

[Bubbbbbbbbbbles]

@LaraIsBeast

use md4 hash not 5

[blacksiddis]

How on earth did you know it was a MD4 hash?

[kli365]

it took me a long time...but then i realized i accidently chose md5 instead of md4...rofled at that

[Crosswalknorway]

When i try admin.bak.php it says Error

Require_Auth

What do i do?

[blacksiddis]

@Crosswalknorway you need to login on hachthissite

[Crosswalknorway]

@blacksiddis lol... yeah... that helps...  LOL

[Crosswalknorway]

When i try admin.bak.php it says Error

Require_Auth

What do i do?

[Crosswalknorway]

@Crosswalknorway I fail... it helps to be logged in!!!! LOL

[Bustah1992]

@Crosswalknorway LOL, i read comment, thinking, hey i have that too

read your second command and think, "haha fail"

look back to my webbrowser... Doh!

[Crosswalknorway]

@Bustah1992 Haha... wow... that took me a long time to read! Anyway... hope your having a good life dude!

[Dexdix2]

Oh i have to wait 10 years more to unhash password

[airsoftwarrior247]

Could cain be used to crack an account's password on a website where is says

Username

Password

It would be helpful for this if it could because ive had accounts stolen on game sites and it would also help if I wanted to do the main objective, HACK THE SITE

[ApEkV2]

@airsoftwarrior247 no, a bruteforce attack over the Internet will take ages. You would need to acquire a hash and bruteforce it offline like in this hts mission.

[guitargodsx411]

@cwade12c

also a fellow hacker, hack this site provided what i took as a worthy challenge.

when i get stuck, your videos really help, i trust no one elses knowledge of technology because most are stupid

recently i went back to complete every mission again, realistic 5 cannot be completed because Cain and Able is no longer supported, and the version that does only runs on os xp, and contains a virus

if you know of any other trustworthy software programs similar to this one please let me know

[KeystoneDeKript]

For those of you who run a unix based system you can use ophcrack or mdcrack instead of cain.

[pjw4452]

ha wen i downloaded the password hasher my computer codintt find it anny ware

[tookietheclown]

hello i woderd if u could help me out i am just starting out and cane and able will not work with my mac book any suggestions ?

[BringBrutality]

e87a872fdf7290bbc8ff3e1a8faf78­4a

Cain isn't decrypting it. anyone know a better program? //Jkain isn't working either

[stormtiger92]

hey can some1 please decrypt this?

coz my antivirus said that the program is a virus!

b56dd5de533d958bbb89fe2c364b95­fa

thx!

[obiwanfisher537]

@stormtiger92 Ur anti virus prog says it is an virus, cauze it is an not so normal progie. So u can download it without any problems. Just say ignore, or something like that.

[xXxserenityxXx]

Erm. Decrypting MD hashes, wow this tool is going to become handy until MD6 developed by MIT is implemented.

[cabrian1]

4:26 :0 what was that? racisim?? XD jk

[xXxserenityxXx]

Lol.

[svampebob007]

if any one have problem (or scared of viruses) with this program just send it to me and i will almost guaranty give you the password.

I can crack the hash @ 1.7 billion password/sec way faster then this crappy program

[suzuki307]

the updated CA took about a sec to crack also..

[cowboyfrmh3ll]

I'm not much the expert on this kinda stuff at all but for linux i think a program along the lines of jhon the ripper is for cracking passwords i may be wrong but look it up.. i believe that may help you

[darthvaderyoda]

can someone please crack this? 0779d9d770014770b59a3ae58f469c­f3 thanks

[1996quique]

@darthvaderyoda sorry when i try with the program it say it to long

[darthvaderyoda]

its ok

[svampebob007]

@darthvaderyoda

hey iv crack ti its 65f83

im sorry if its a double post but youtube if F**** up here

[darthvaderyoda]

@svampebob007 thanks

[michael00wendel]

65f83

[FunnyGreekBoy]

thanks a lot.. the programm works perfect on windows...

[thingy291]

does anyone know of a way to make CnA work with linux?

[gonzalezluis78]

What if you didnt know the hash type? how would you know what type it is?

[settwi]

There are plenty of forms on the internet saying the type.. It's MD4

[Megatronsucksoptimus]

is the download and software free?

[l3m0np13]

hey guys if you're having trouble contact me on HTS my user is Agent Spoon

and guys please don't watch these videos until after you've tried the challenge and are practically pulling your hair out or else what's the point in even trying it. but i must say i watch these after i've completed them just to see if there's another way to do them.

[uitham]

I did watch this because I found all the steps here by my own, but had no idea on how to decode the hashes. I thought bruteforcing was illegal, even for legal hacking sites.

[l3m0np13]

That's understandable, I suppose some states it is illegal, and as well as many countries.

[cwade12c]

There is no law saying you can not bruteforce.

There is no law saying I can not walk into a bank with a ski mask on.

There is however a law, about you going on about stealing sensitive information. (CC numbers, SS, etc.)

Guessing a password however, even if it is multiple times; is not illegal.

[uitham]

What about hijacking the admin control panel of a site?

[palaceman555]

@cwade12c tbh its there own fault for putting it in a file

[BobSaget37]

i installed cane and able and wen i click it 2 run it nothing happens

[BobSaget37]

i took extra time just to find the vid made by u

[MrCricketcracker]

does anybody know a good brute force program for mac? either that or i guess help meh

9c6e9bbae3948731a926853cb812b6­89

[Eviktion]

cain.exe was not installed.

Windows is searching for Cain.exe. To locate the file yourself, click Browse.

Yeah...it's not there.

[cwade12c]

It means your AntiVirus quarantined/deleted it.

Turn off your AV, and re-install.

-cwade

[Eviktion]

nod32 won't uninstall. tried it several times

[borin1as1hell]

mine says it cant download it coz theres something protecting it from being saved

[DavidFabb]

60c731f298679a9262c723d5bc6480­b1

plis.

[headstrong440]

whered you learn to do all this stuff?? message me i have a few questions! thanks man! take care

[Eruantien1]

It all worked, but how do you know to select MD4 for the hash type?

[13GH05T]

can someone do this

bb1035233eb3a071d151490d565e38­d3

i cant install the program

[cwade12c]

No, but, there are some online md5 hash crackers. Google em

[289Chris289]

@12GH05T

24b77

[baalpeteor]

@13GH05T why not?

[1996quique]

@13GH05T i know its 9 mounth ago that u ask this but here it is 24b77

[Bubbbbbbbbbbles]

@13GH05T

24b77

[739199]

did you say the program will cause harm? or it wont?

[739199]

also I used this program a long time ago but my computer's motherboard burnt and I only got my gaming computer so I dont want to mess it up. So then again will it harm it?

[cwade12c]

Cain and Abel won't harm your computer. It's a very common hacking tool. Go look around and gather some research. You can take my word for it bro.

[739199]

Thanks for letting me know. By the way, your awesome. Keep up the good work!

[313c7r0idPu153]

anyone know a brute force program for ubuntu?or can someone brute this for me 66eb4cef1f1d19d52659f26a4cd952­e5

[princeofexcess]

how about this one kind fellows

f5bfa98ff8cb37b91a4e6f60de412d­c9

appreciate it

[LifelessIsBeat]

3ed6a

[princeofexcess]

thanks whole bunch would done it myself but i have vista and cant install the program.

IOU

[imnotstpid]

can someone crack this code for me please? i can't find i decent hash cracker and can't download anything. thanks. 1fc84bcd5e46f3df2742edac3405d9­6f

[AnThOnYrox8]

6b996

[livefognik]

Thanks for this video and all the others you added.

You used 2 ways to gain the needed information about the secret directory.

The last one being robots.txt

Like to learn so tried that way as well after finding first way myself.

With robots.txt I noticed /lib directory as well. In there I found doc called hash

So is there a 3th way to get the code? Or is there an other way to crack the hash code.

If you can help, thanks.

[Makrai21]

Can someone crack mine? afd5e160775afff80b95c4c881139d­23

[alwinovich]

there is something wrong with your hash

[alwinovich]

there is one character too much

[cheesycheesenugget]

You have an extra character in there, and I'm guessing it was the space. So I cracked it without the space, and it is 4010d .

[2Fast4uNos]

That hash is wrong

[chimaera2695]

Yeah it's: 4010d

[EazyMixes]

Hey I got a question for cwade12c how would I know what type of hash it is?

[cwade12c]

exploitnation(dot)org/forum/in­dex(dot)php?showtopic=9124

[EazyMixes]

Lol this worked! awesome I wonder If I can get into other sites doing this

[AnThOnYrox8]

lol i had the same reaction i was like wtf

[fsmvda]

How would you know that it is an MD4 Hash?

[PWNSJOONRTO]

69265109905374bba4d89f04c9b55a­03

[moosemanty]

PWNSJOONRTO

95993

[Ihateyoutoube]

decode a10f1eedc9ec04f0554827ffe27f57­6b please.

[moosemanty]

Ihateyoutoube

4feb4

[Arightwizard]

Could someone crack my hash? I'm not going to download cain and able, and writing a script to brute force it is beyond my ability...My hash is:

c8dcb03ed41aed6294c49a64c0ea08­14

Thanks.

[TheMajesticOne1]

efe38

[fsmvda]

It's different for everyone :I

[EA26097]

someone crack mine please:

fac9ef47d032d8cfc2ec555f5d5501­c2

[WRbugs]

Your hash is fd89a

(i deleted the space because the hash had to be exactly 16 bytes long)

[prankster163]

someone crack mine? 9d59effb73fbf2c5eb731359970c24­4c

[CRaZYpOpTaRToo]

9d59effb73fbf2c5eb731359970c24­4c == b4009

[Scurril0us]

Could someone please crack my hash??? Cause im running Windows 7 on 64bit it is kinda, not compatible with my system xD

Code: c22a417da12f01430269b082cd81d0­4c

Thanks ;)

[ColabyWoW]

0137f

[Scurril0us]

Thanks :D Helps me to go on again ;)

[Adnorm]

Seems a lot of people are asking the same question. Here's the part you missed.

In the message from spiffomatic64, he says "the new password seems to be a 'message digest'". Don't know what that is? Google for it, and you'll get a lot of results about the "Message Digest algorithm 4". MD4!

You might also need to use the fact that spiffomatic says "Everything they used was 10 years out of date". This is a good hint for why you should try MD4 instead of the newer MD5.

[inf3ction808]

i almost got a virus from it

[SuurTatti]

Nice vid again. :)

But i was thinking the same as last post, how did you know it was MD4?

[LikeABawse]

I can't get a working cain and abel your link failed

[Ronald21215]

good job I tried Cain and Abel and it works!!! Thanks

[riproarious]

When I download Cain and Abel, I get; Abel.dll.sig and Abel.exe.sig. how do do I run the .exe with a .sig suffix?

[cwade12c]

Did you install it? XP? Vista?

[ophcrack2008]

erm...when you open up the cain and abel...how did you know it was MD4? Plox respond to the PM I sent you coupla dayz back... nice vid tho

[norwegianbocker]

I would like to know this too!

[riproarious]

Vista 32bit I installed, I went to drag the Abels into the Windows directory from which im supposed to run the Abel.exe ... but it comes up as .exe.sig

[cwade12c]

Hmm... did you make sure you downloaded the correct installer?

Also, try running it as an Administrator.

Cain and Able was discontinued on XP, I have heard it works on Vista, but you never know, it varies.

[riproarious]

What is the .sig extension?

Could it be being added by my anti-virus, spyware protection... to protect me from opening it?

I've definitively downloaded the right version (++Trojan free :) )

[cwade12c]

Possibly.

Try removing the .sig off of the filename, and try running it. Additionally, turn off your AV and install Cain&Abel.

[magick205]

The oxide site still has it up and I've run it just fine on XP Professional with no problems for this challenge. BTW, excellent tutorial. I'd forgotten how much fun this is.

[maskocek]

how did you know it was md4 ??

[kennytheamazing]

in /lib you find a file called hash.. download that and open in hexeditor.. you will find a part named md4 somewhere.

[jmm1233]

tip for those wanting to run cain and abel under linux , use virtualbox with windows install , had trouble trying to run it under wine ,

[dinkybird1992]

when i download cain and abel, i try to open it on the desktop and it says need local administrator privileges

i want to finish this realistic, but i cant without cain and abel

[cwade12c]

Right Click --> Run As Administrator

[dinkybird1992]

thanks a lot...that worked

[dado3212]

got to Run --> cmd --> and type in net localgroup administrators (your username on your computer) /add

[vityav]

Your tutorials are great. I too wondered how you found what hash function was used though. Googling 'RFC test vectors' didn't explain too much but I get the idea. How would you go about this if it wasn't a published hash function? Is there a way to extract it from the code?

[diabolus6066]

it wont even let me do rainbow table crack??

[diabolus6066]

i cant download cain @ able even if i disable my virus program what now???

[Muurcas]

How did you know it was a md4 hash?

[cwade12c]

You can figure it out from RFC test vectors.

[Ccsteph22]

didn't it says in the hash error?

[Muurcas]

Oh thanks :D

[dtran09]

What can I use on my mac instead of Cain and Abel (a windows only software)

[cwade12c]

Mac doesn't offer many hacking services / tools. Try downloading Backtrack, burning it to a disc, and livebooting from it.

[dtran09]

Thanks for the reply.

What if I ran ubuntu in Parallels?

What suggestions would you have for me there?

Your tutorials are really good by the way.

[cwade12c]

Go check out my Ubuntu tutorial on my profile.

[nitroeero7]

man what does "Try downloading Backtrack, burning it to a disc, and livebooting from it." mean

[cwade12c]

BackTrack is a UNIX Based Operating System. You download it (which is an .iso file) and you burn it to a blank CD Rom, from there you place it into your CD/DVD-R Tray in your computer, restart your computer, go into boot menu via Bios (F8, F10, or F11 commonly) and you select "Boot From Disc".

The Operating System will load from the disc, without overwriting your current OS, rather it be XP, Vista, Mac, or Linux.

[panther1234598765]

hey dude u shoudl do relalistic mission # 10 i know its probably easy but i cant seem to get it maybe my head is on backwards or something..........

[ZeroFaster]

Yeah I have it as well, and it doesn't cause any problems and is completely safe.

[IlikethatBabyH]

run the program as administrator!