7
Thank you for your review
Free
http://www.macupdate.com/download/14710/mackrack.dmg
Email me when discounted: 

MacKrack is a password hash brute forcer, supporting the Crypt, MD5 SHA-1, and Salted SHA-1 algorithms. It has two modes: dictionary and keyspace brute force. The brute force mode supports the lowercase alphabet, entire alphabet, and alphanumeric cracking, with a variable maximum password length of 1-10 characters.

What's New

Version 1.5.3:
  • Improved performance and stability
  • Fixed bug with text crash

Requirements

Mac OS X 10.3 or later

Similar Software

Open Comparison
Suggest Other Similar Software
Leave a Review

MacKrack User Discussion

Nobody has reviewed or commented on this app yet. Add your own comment and get a discussion going!
Sort by: Time | Smiles
St00pid-M0nk3y Member IconComment+945
St00pid-M0nk3y
+0

Is there any documentation on how to use this thing?

Reply1 reply
Version 1.5.3
kobalt
+0

download the app, mount the dmg, read the documentation file ... admittedly, it's somewhat light on information, but then this is not an app for the faint of heart or the light of brain ... :)

juliew Member IconComment+3
juliew
+0

MacKrack worked perfectly for me. Downloaded and ran it, entered my admin password, it extracted the hashes for all users on my system and tested their strength. One of 14 user passwords was cracked within 24 hours and I alerted the user to change their password. Thank you for a great implementation and - as far as I have found - the only program that handles the salted sha1 hashes from tiger on its own. Good work!

Reply0 replies
Version 1.5.1
Anonymous Member IconReview
Anonymous
+0

What is this "most dishonest crackers are located offshore..." crap? What sort of idiotic comment is that?

Reply3 replies
Version 1.5
Anonymous Member Icon
Anonymous
+0

Anonymous wrote: "most dishonest crackers are located offshore... What sort of idiotic comment is that?"

Lets just ask you that question, since you're the one who said that comment.

What johannes rexx really said was:
"Only a dishonest cracker located offshore would attempt such a thing". How does that translate into "most dishonest crackers are located offshore"? Would it help if he punctuated the sentence for you?

"Only a dishonest cracker, located offshore, would attempt such a thing"

Is that clear enough for you?

Anonymous Member Icon
Anonymous
+0

Isn't that still saying that a dishonest cracker located onshore wouldn't attempt such a thing?

Anonymous Member Icon
Anonymous
+0

Polly want a cracker!

Anonymous Member IconReview
Anonymous
+0

That's hilarious -- the app actually asks you for your password in order to extract the local password! I certainly hope most aren't so gullible to walk past that one.

Reply1 reply
Version 1.5
Anonymous Member Icon
Anonymous
+0

Only for 10.3 and 10.4 hashes does it require a password, but for 10.2 hashes it doesn't. This is just because of the way the permissions in Mac OS X are set up. If you know a way to extract 10.3/10.4 hashes without knowing an administrator password, please do the world a favor and tell. Until then, shut up.

Anonymous Member IconReview
Anonymous
+0

I just wanted to make sure, as the developer, that everyone understands that macKrack doesn't actually phone home whether for version checking or any other purposes. It doesn't make any network connections at all, and anyone with basic knowledge of how to use tcpdump or Little Snitch could verify that. So don't worry. I was just kidding before about the Russians....

Reply2 replies
Version 1.4.3
Anonymous Member Icon
Anonymous
+0

Most of us got the joke

Anonymous Member Icon
Anonymous
+0

Russians? Those weren't Russians.

Fnord.

Anonymous Member IconReview
Anonymous
+0

Some reviewers have expressed concern that MacKrack might "call home" and reveal cracked passwords and other personally identifying information.

The reason I doubt this is because it would be blatantly obvious to detect and document it. Only a dishonest cracker located offshore would attempt such a thing.

How about an installer that asks for your admin password? How do you know it's not really the program doing this and phoning home?

The way around a lot of this is to distribute code under the GPL so users can judge for themselves if anything is phoning home by reading the code.

Does Adobe software phone home when you run it? Does iTunes? Does RealOne. How about Azureus or eDonkey? Muahaahahh!

Reply2 replies
Version 1.4.3
Anonymous Member Icon
Anonymous
+0

Does Adobe software phone home when you run it? Does iTunes? Does RealOne. How about Azureus or eDonkey

Sometimes, no, sometimes, no, no. Acquisition does, though.

Anonymous Member Icon
Anonymous
+0

'The way around a lot of this is to distribute code under the GPL so users can judge for themselves if anything is phoning home by reading the code.'

This only helps if you're capable of building the app yourself. This is an old trick used by programmers for ages.

There is no necessary proof the source you read is what made the program.

Smell the coffee.

Anonymous Member IconReview
Anonymous
+0

Excellent! I'm a bit disappointed though it doesn't send all my info to the FBI, tut tut, where would we be without paranoia.

Nice app and useful (although not everyday), Thanks.

Reply0 replies
Version 1.4.3
Anonymous Member IconReview
Anonymous
+0

I think the phrase is: "I would not bother with this dog", but then again I am just guessing.

Reply0 replies
Version 1.4.3
Anonymous Member IconReview
Anonymous
+2

Actually it does call home, and report to me all the passwords you cracked along with your IP address, email address, name, address, phone number, weight, and the names of your children. I review it all while cackling demonically, and promptly sell all the information to the Russians (none in particular). But seriously -- what does "I would bother with this dog" mean?

Would you feel better if the application WASN'T free? Jeez... just because I write software for free my intentions are in question? Anyway, all password crackers are free as an unspoken rule (LC aside, because its creators are the evil capitalists). Which is not to mention that all the software I've ever written is free.

Anyway -- as mentioned by neil_m, Little Snitch is a good program to make sure apps aren't calling home.

Reply1 reply
Version 1.4
Anonymous Member Icon
Anonymous
+0

LOL Good one. ;-)

Anonymous Member IconReview
Anonymous
+0

Can anyone verify that this thing does not "call home" with other information. A free application that can crack passwords sound a bit suspicious to me. I would bother with this dog.

Reply1 reply
Version 1.4
Anonymous Member Icon
Anonymous
+0

Calling home check.

http://www.macupdate.com/info.php/id/10426

Little Snitch - is the answer to your question

user icon+0
Julian Severe
Version 1.5.3
> 4 7

Ratings

Overall
(7)
Current Version (1.x)
(7)

Details

Downloads 80,009
Version Downloads 54,738
License Free
Date 04 Aug 2006
Platform OS X / PPC 32 / Intel 32
Price Free
Learn how MacUpdate Desktop makes installing apps from MacUpdate.com one-click easy.
Next time, install MacKrack with 1-click

Learn how MacUpdate Desktop can install apps on MacUpdate with the simple click of the Install apps with MacUpdate Desktop icon. Plus, keep all your apps updated.