MacKrack is a password hash brute forcer, supporting the Crypt, MD5 SHA-1, and Salted SHA-1 algorithms. It has two modes: dictionary and keyspace brute force. The brute force mode supports the lowercase alphabet, entire alphabet, and alphanumeric cracking, with a variable maximum password length of 1-10 characters.
What's New
Version 1.5.3:
Improved performance and stability
Fixed bug with text crash
Requirements
PPC / Intel, Mac OS X 10.3 or later.
Be the first to recommend a similar software title.
download the app, mount the dmg, read the documentation file ... admittedly, it's somewhat light on information, but then this is not an app for the faint of heart or the light of brain ... :)
MacKrack worked perfectly for me. Downloaded and ran it, entered my admin password, it extracted the hashes for all users on my system and tested their strength. One of 14 user passwords was cracked within 24 hours and I alerted the user to change their password. Thank you for a great implementation and - as far as I have found - the only program that handles the salted sha1 hashes from tiger on its own. Good work!
[Version 1.5.1]
Anonymousreviewed on 17 Jul 2005
What is this "most dishonest crackers are located offshore..." crap? What sort of idiotic comment is that?
[Version 1.5]
3 Replies
Anonymouscommented on 18 Aug 2005
Anonymous wrote: "most dishonest crackers are located offshore... What sort of idiotic comment is that?"
Lets just ask you that question, since you're the one who said that comment.
What johannes rexx really said was:
"Only a dishonest cracker located offshore would attempt such a thing". How does that translate into "most dishonest crackers are located offshore"? Would it help if he punctuated the sentence for you?
"Only a dishonest cracker, located offshore, would attempt such a thing"
Is that clear enough for you?
Anonymouscommented on 23 Sep 2005
Isn't that still saying that a dishonest cracker located onshore wouldn't attempt such a thing?
Anonymouscommented on 23 Sep 2005
Polly want a cracker!
Anonymousreviewed on 17 Jul 2005
That's hilarious -- the app actually asks you for your password in order to extract the local password! I certainly hope most aren't so gullible to walk past that one.
[Version 1.5]
1 Reply
Anonymouscommented on 03 Aug 2005
Only for 10.3 and 10.4 hashes does it require a password, but for 10.2 hashes it doesn't. This is just because of the way the permissions in Mac OS X are set up. If you know a way to extract 10.3/10.4 hashes without knowing an administrator password, please do the world a favor and tell. Until then, shut up.
Anonymousreviewed on 10 Apr 2005
I just wanted to make sure, as the developer, that everyone understands that macKrack doesn't actually phone home whether for version checking or any other purposes. It doesn't make any network connections at all, and anyone with basic knowledge of how to use tcpdump or Little Snitch could verify that. So don't worry. I was just kidding before about the Russians....
[Version 1.4.3]
2 Replies
Anonymouscommented on 10 Apr 2005
Most of us got the joke
Anonymouscommented on 21 Apr 2005
Russians? Those weren't Russians.
Fnord.
Anonymousreviewed on 10 Apr 2005
Some reviewers have expressed concern that MacKrack might "call home" and reveal cracked passwords and other personally identifying information.
The reason I doubt this is because it would be blatantly obvious to detect and document it. Only a dishonest cracker located offshore would attempt such a thing.
How about an installer that asks for your admin password? How do you know it's not really the program doing this and phoning home?
The way around a lot of this is to distribute code under the GPL so users can judge for themselves if anything is phoning home by reading the code.
Does Adobe software phone home when you run it? Does iTunes? Does RealOne. How about Azureus or eDonkey? Muahaahahh!
[Version 1.4.3]
2 Replies
Anonymouscommented on 21 Apr 2005
Does Adobe software phone home when you run it? Does iTunes? Does RealOne. How about Azureus or eDonkey
Sometimes, no, sometimes, no, no. Acquisition does, though.
Anonymouscommented on 21 Apr 2005
'The way around a lot of this is to distribute code under the GPL so users can judge for themselves if anything is phoning home by reading the code.'
This only helps if you're capable of building the app yourself. This is an old trick used by programmers for ages.
There is no necessary proof the source you read is what made the program.
Smell the coffee.
Anonymousreviewed on 10 Apr 2005
Excellent! I'm a bit disappointed though it doesn't send all my info to the FBI, tut tut, where would we be without paranoia.
Nice app and useful (although not everyday), Thanks.
[Version 1.4.3]
Anonymousreviewed on 10 Apr 2005
I think the phrase is: "I would not bother with this dog", but then again I am just guessing.
[Version 1.4.3]
Anonymousreviewed on 09 Apr 2005
Actually it does call home, and report to me all the passwords you cracked along with your IP address, email address, name, address, phone number, weight, and the names of your children. I review it all while cackling demonically, and promptly sell all the information to the Russians (none in particular). But seriously -- what does "I would bother with this dog" mean?
Would you feel better if the application WASN'T free? Jeez... just because I write software for free my intentions are in question? Anyway, all password crackers are free as an unspoken rule (LC aside, because its creators are the evil capitalists). Which is not to mention that all the software I've ever written is free.
Anyway -- as mentioned by neil_m, Little Snitch is a good program to make sure apps aren't calling home.
[Version 1.4]
1 Reply
Anonymouscommented on 02 Aug 2005
LOL Good one. ;-)
Anonymousreviewed on 08 Apr 2005
Can anyone verify that this thing does not "call home" with other information. A free application that can crack passwords sound a bit suspicious to me. I would bother with this dog.
[Version 1.4]
1 Reply
Anonymouscommented on 08 Apr 2005
Calling home check.
http://www.macupdate.com/info.php/id/10426
Little Snitch - is the answer to your question
There are currently no troubleshooting comments. If you are experiencing a problem with this app, please post a comment.
Please login or create a new MacUpdate Member account to use this feature
Watch Lists are available to MacUpdate Desktop Members Upgrade Now
Download and auto-install
using MacUpdate Desktop. Save
time moving folders and cleaning-up.
MacKrack is a password hash brute forcer, supporting the Crypt, MD5 SHA-1, and Salted SHA-1 algorithms. It has two modes: dictionary and keyspace brute force. The brute force mode supports the lowercase alphabet, entire alphabet, and alphanumeric cracking, with a variable maximum password length of 1-10 characters.
+228
+293
+3
Anonymous reviewed on 17 Jul 2005
Lets just ask you that question, since you're the one who said that comment.
What johannes rexx really said was:
"Only a dishonest cracker located offshore would attempt such a thing". How does that translate into "most dishonest crackers are located offshore"? Would it help if he punctuated the sentence for you?
"Only a dishonest cracker, located offshore, would attempt such a thing"
Is that clear enough for you?
Anonymous reviewed on 17 Jul 2005
Anonymous reviewed on 10 Apr 2005
Fnord.
Anonymous reviewed on 10 Apr 2005
The reason I doubt this is because it would be blatantly obvious to detect and document it. Only a dishonest cracker located offshore would attempt such a thing.
How about an installer that asks for your admin password? How do you know it's not really the program doing this and phoning home?
The way around a lot of this is to distribute code under the GPL so users can judge for themselves if anything is phoning home by reading the code.
Does Adobe software phone home when you run it? Does iTunes? Does RealOne. How about Azureus or eDonkey? Muahaahahh!
Sometimes, no, sometimes, no, no. Acquisition does, though.
This only helps if you're capable of building the app yourself. This is an old trick used by programmers for ages.
There is no necessary proof the source you read is what made the program.
Smell the coffee.
Anonymous reviewed on 10 Apr 2005
Nice app and useful (although not everyday), Thanks.
Anonymous reviewed on 10 Apr 2005
Anonymous reviewed on 09 Apr 2005
Would you feel better if the application WASN'T free? Jeez... just because I write software for free my intentions are in question? Anyway, all password crackers are free as an unspoken rule (LC aside, because its creators are the evil capitalists). Which is not to mention that all the software I've ever written is free.
Anyway -- as mentioned by neil_m, Little Snitch is a good program to make sure apps aren't calling home.
Anonymous reviewed on 08 Apr 2005
http://www.macupdate.com/info.php/id/10426
Little Snitch - is the answer to your question