Comments on: Google as a password cracker

By: david

david — Wed, 10 Mar 2010 19:59:13 +0000

for some of you looking for a sha1 reverse lookup tool, check this sha1 decrypter
David

By: david

david — Wed, 10 Mar 2010 19:57:45 +0000

hi guys,
just found another md5 decrypter
David

By: FoundIt

FoundIt — Thu, 06 Aug 2009 19:02:03 +0000

Google Hash: md5(jesus) = 110d46fcd978c24f306cd7fa23464d73

It worked for Jesus!

By: Arya

Arya — Mon, 20 Jul 2009 10:49:09 +0000

NIce-let us if you people can crack a pass with One capital letter+small letter+number+special character in it+upto 8 char long.
Though there is a way

By: John

John — Tue, 07 Jul 2009 15:48:27 +0000

You got pretty lucky that the password was a common/proper dictionary word. I just did a few tests by adding numbers onto some simple random words, and google didn’t have anything indexed.

Another vote for John The Ripper though. The rules engine is very good and will find things like that quickly.

An interesting project would be to develop a tool that would test your clear text password against all the common variation algorithms and help you to pick a password with a high probability of needing a pure brute force crack to discover. Much better than the simple “one letter, one number, one symbol” requirement that a lot of services are doing these days.

By: Leo Kelly

Leo Kelly — Tue, 19 May 2009 02:55:35 +0000

I use http://www.md5crack.com for everything..sometimes it can be a little off, though

By: brayan

brayan — Mon, 11 May 2009 00:29:29 +0000

mirar contraseña

By: Lynks

Lynks — Wed, 29 Apr 2009 23:09:08 +0000

http://md5.rednoize.com/

has never failed me, and it’s even google-themed

By: linux0wner

linux0wner — Thu, 28 Aug 2008 09:23:57 +0000

This is a reverse search for sha-1: http://www.sha1-lookup.com

By: ana

ana — Thu, 21 Aug 2008 13:37:28 +0000

wordpress seem to have many security issues.

And so does this site
For example when you go the the login page, you can ‘test’ if there is a username ‘admin’ (or any other name). If so, then bruteforcing could be tried.
also, often wordpress folders like
/wp-content/plugins/ or /wp-admin/ are readable.
It shows what plugins you use, and often reveals the full path of your files by directly accessing the php files.