Find Jobs
Hire Freelancers

Dictionary Attack - Cryptography

$12-30 SGD

Completed
Posted almost 10 years ago

$12-30 SGD

Paid on delivery
In this assignment, you are to implement the dictionary attack we have discussed in the lectures. You are given a list of hashed salted passwords (the le [login to view URL] described below), and your task is to nd the password that corresponds to each hash. The hashes are computed using Linux crypt(3) function. As discussed in the lectures, crypt supports di fferent hash functions to compute the password hashes. In this assignment, all the passwords are hashed using MD5, and each hash value is 128 bit long. The hashes are encoded in a base-64 encoding as explained in the lectures. You do not need to understand the details of how crypt and MD5 work. You will be utilizing an open source implementation of the crypt function, which is part of the Apache Commons Codec (see the `Technical Speci cation' section). There will be a time limit set for computing the passwords, so for the scope of this assignment, it is not feasible to nd the passwords using brute force. Instead, you are to guess the passwords using a `dictionary', which contains a list of commonly used passwords and selected words from English dictionary. This dictionary (the le [login to view URL] described below) is provided to you and you must use only the provided dictionary to implement your attack. Some, but not all, hashes in [login to view URL] are computed from selected words from the dictionary. For the rest of the hashes, the passwords are generated from the dictionary following certain common patterns for generating passwords. Recent leaked password lists resulting from several hacks on commercial servers show recurring patterns of passwords. For example, here is a non-exhaustive list of patterns found in those leaked passwords:  Numeric pre x or sux: A large number of passwords are obtained by simply appending or prepending some numeric constants to a dictionary word. For example, leaked passwords from LinkedIn hack contains passwords of this pattern, such as `march31', '19link'.  Character substitution: One or more character in a password is substituted by similar looking characters. One very common substitution used is based on the so-called `leetspeak' that substitutes alphabets with similar looking numbers. For example, `e' is replaced by `3', `i' is replace by `1', `o' is replaced by `0', `s' is replaced by `5', `t' is replaced by `7', etc. So from a dictionary word such as `password' one could generate `passw0rd' (which is one of the frequently used passwords), and from `linkedin' one can generate `l1nked1n', etc.  Combination of words: This combines two or more words from a dictionary. For example, `gohome' is obtained by combining the dictionary words `go' and `home'. To crack all the hashes in [login to view URL] you need to consider these and other kinds of transformations.
Project ID: 5813920

About the project

6 proposals
Remote project
Active 10 yrs ago

Looking to make some money?

Benefits of bidding on Freelancer

Set your budget and timeframe
Get paid for your work
Outline your proposal
It's free to sign up and bid on jobs
Awarded to:
User Avatar
Hi, I am Java expert and can surely help you here with this project. Please communicate so we can discuss further. Thank you
$150 SGD in 2 days
4.7 (241 reviews)
6.8
6.8
6 freelancers are bidding on average $115 SGD for this job
User Avatar
A proposal has not yet been provided
$88 SGD in 5 days
5.0 (14 reviews)
3.7
3.7
User Avatar
一个有效的提议尚未被提供
$260 SGD in 3 days
4.5 (2 reviews)
2.1
2.1
User Avatar
I am interesting with this project. Let me help you to solve this challenge. I just did a homework for another guy yesterday (cracked 10 hashes SHA1 use hashcat tool)
$111 SGD in 1 day
5.0 (2 reviews)
1.5
1.5
User Avatar
I've done this in my Bachelor's course in IT security. If you need dedicated, serious freelancer, let me know. Thanks.
$66 SGD in 2 days
0.0 (1 review)
0.0
0.0
User Avatar
Added Me Skype>>>>> silakot09 <<<<<<<<For More Details ..........................................................................................
$15 SGD in 1 day
0.0 (0 reviews)
0.0
0.0

About the client

Flag of SINGAPORE
Singapore, Singapore
5.0
3
Payment method verified
Member since Mar 24, 2012

Client Verification

Thanks! We’ve emailed you a link to claim your free credit.
Something went wrong while sending your email. Please try again.
Registered Users Total Jobs Posted
Freelancer ® is a registered Trademark of Freelancer Technology Pty Limited (ACN 142 189 759)
Copyright © 2024 Freelancer Technology Pty Limited (ACN 142 189 759)
Loading preview
Permission granted for Geolocation.
Your login session has expired and you have been logged out. Please log in again.