(adsbygoogle = window.adsbygoogle || []).push({}); This function will crack plain Md5 hashes when given a good wordlist file.

    

<?php

function rmd5($hash,$wordlist)

{

    $words = file($wordlist);

    $solve = "Could not crack";

    foreach($words as $word)

    {

        if(md5(trim($word)) == $hash)

        {

            $solve = $word;

            break;

        }

    }

    return $solve;

}

?>

Usage example:

    

echo rmd5("5f17dd871dacc61834234a9cd5aa375d","words.txt");

When used it will return the password if it was matched with a word in your wordlist (in this case words.txt)! If it goes through the whole list and doesn't find it, it will return "Could not crack."

But we all know that everyone wants to crack vbulletin hashes! :carling: The following function will do that.

    

<?php

function rvbmd5($hash, $salt, $wordlist)

{

    $solve = "Could not crack.";

    foreach(file($wordlist) as $word)

    {

        if(md5(md5(trim($word)).$salt) == $hash)

        {

            $solve = $word;

            break;

        }

    }

    return $solve;

}

?>

Usage example:

    

echo rvbmd5("5f17dd871dacc61834234a9cd5aa375d", "309rk23094k", "words.txt");

Have fun making web hash crackers! :blank:

Now what must suck is if they double hash it, MD5->MD5->Text. :/

if they md5 to md5 the text it should be crackable by just using the method twice.
now if they were to use any other encryption method e.g. base64->md5 it would be more difficult.

    

<?php

function rmd5md5($hash,$wordlist)

{

    $words = file($wordlist);

    $solve = "Could not crack";

    foreach($words as $word)

    {

        if(md5(md5(trim($word))) == $hash)

        {

            $solve = $word;

            break;

        }

    }

    return $solve;

}

?>

    

<?php

function rb64md5($hash,$wordlist)

{

    $words = file($wordlist);

    $solve = "Could not crack";

    foreach($words as $word)

    {

        if(base64_encode(md5(trim($word))) == $hash)

        {

            $solve = $word;

            break;

        }

    }

    return $solve;

}

?>

It's all the same really, you just need to change the algorithm. :p

I know. I was just making a point.

PHP crackers take forever to run with larger wordlists. I would just prefer to run hashes in hashcat. Especially an MD5 hash.

This is quite nice as plummy said PHP crackers take ages, depends on the server really but also if you were going for a more complicated hash, algorithm or encryption PHP doesn't support rainbow tables so it could be hard. :p nice anyway.