Click here to Skip to main content
15,885,366 members
Please Sign up or sign in to vote.
0.00/5 (No votes)
I am looking for a way to generate a medium-large database that stores users passwords and usernames via a hash algorithm.

The reason for this is I want to simulate a large scale decryption or pentest on users passwords with various options such password length, complexity,hash algorithm, if it is commonly used ect. if anyone can point me to a program I would be grateful.

I wanna try this method instead of hacking my way into someone's web server via SQL injection, and winding up in jail.

Cheers,
Posted
Comments
Sergey Alexandrovich Kryukov 27-Jul-12 22:54pm    
This is quite easy, but how is that related to Generator? Cryptographic hash functions are used for storing passwords and authentication, but the generator?.. just a random-number generator, nothing else. And what kind of help do you want and why? Both things are easy, but... you platform? language? -- tag it.
--SA
CodeMaster38 27-Jul-12 23:06pm    
I'm looking for a program that will basically generate a database with password hashes in it with lots of options for generation. Such as files from a dictionary or mutation and that such.

I want to try and hack the passwords, I guess I did not make that clear enough. I want a program to generate that stuff for me, I don't really want to write it myself I'm rather lazy.
Sandeep Mewara 27-Jul-12 23:18pm    
You want is ok but what have you tried so far?

BTW, why keep two profiles to ask question?
CodeMaster38 28-Jul-12 9:20am    
Um actually I don't have two profiles, I posted in incognito mode in chrome, that apparently screwed up my display name. Had to reset it.

1 solution

I think you are looking for code that already exists to do this. Versus writing it yourself.

I doubt you are going to find that in a generic way. It would normally only be useful for testing a specific application because specific applications do this in different ways. So you might find it in a open source project that already stored user/pwds but it would be in the unit test code. And might be more trouble than it is worth to dig it out and then modify it to your purpose.

To create your own test tool you can design it along the following
1. Create 'get user/pwd' API implement this as an interface.
2. Create code to use 1 which then pushes through your existing user creation API. This can be an interface as well if you wish to support multiple different creation APIs.
3. Provide a mechanism to run 1/2 in a loop.

Initially 1 returns a single user. This is used to test the app.

After the above works then create a new version of 1 that returns a random user name and password. Then create another version that uses a dictionary file for passwords.

After that add other options that you wish.
 
Share this answer
 
Comments
CodeMaster38 28-Jul-12 23:30pm    
I gotta say I have to agree with you, just gonna have to get my lazy behind up and write some code.

Thanks for the push!
Sergey Alexandrovich Kryukov 28-Jul-12 23:56pm    
Well, this is a rare case when a push produced some positive effect, so I voted 5 for the answer :-)
--SA

This content, along with any associated source code and files, is licensed under The Code Project Open License (CPOL)



CodeProject, 20 Bay Street, 11th Floor Toronto, Ontario, Canada M5J 2N8 +1 (416) 849-8900