Demonstration of RainbowCrack 1.2 software to crack 5 alpha-numeric windows password in 80 seconds. Below is the screen output of the cracking process. The pwfile file contain 5 windows password hashes in pwdump format. The *.rt file are precomputed hash table files (rainbow table) we generated before with rtgen.exe utility. The rcrack.exe program find all plaintext in 39 seconds, with additional 41 seconds to load the files from disk. This demonstration run on a PC with one P4 3.0GHz processor and 512MB memory. ============================================================================================================= D:\rainbowcrack-1.2-win>type pwfile user0:1455:43878949026ac2bc22ce4b7a1c8b8de1:140fe806c21d78ebfbc9cfa807d932ca::: user1:1456:30741a6b6b9adb1d6d91e0438a82bc22:063a9448c02da9db08c67bf5e5301f92::: user2:1457:d6fd58a39f3ec515ff760a17bfe2d2b3:acbc056249889332816e95c1bf98c348::: user3:1458:b16d02a5c912302f95f840ebf2eb22ae:cb4bee74da9f9e6dc5535a9f68657487::: user4:1459:ff4fe19443649f7d298bb5356847fae0:26f4c7f7c7c14048e85b1d5d048dfd37::: D:\rainbowcrack-1.2-win>dir k:\rt1\*.rt 驱动器 K 中的卷是 SATA0 卷的序列号是 64BE-26CB k:\rt1 的目录 2003-09-05 09:24 640,000,000 lm_alpha-numeric_0_2400x40000000_all.rt 2003-09-05 16:38 640,000,000 lm_alpha-numeric_1_2400x40000000_all.rt 2003-09-05 09:29 640,000,000 lm_alpha-numeric_2_2400x40000000_all.rt 2003-09-05 09:34 640,000,000 lm_alpha-numeric_3_2400x40000000_all.rt 2003-09-07 08:14 640,000,000 lm_alpha-numeric_4_2400x40000000_all.rt 5 个文件 3,200,000,000 字节 0 个目录 9,026,281,472 可用字节 D:\rainbowcrack-1.2-win>rcrack k:\rt1\*.rt -f pwfile lm_alpha-numeric_0_2400x40000000_all.rt: 386355200 bytes read, disk access time: 9.22 s verifying the file... searching for 10 hashes... plaintext of 43878949026ac2bc is SNLXL5I plaintext of 22ce4b7a1c8b8de1 is DJB4GZW plaintext of d6fd58a39f3ec515 is MPMCUHV cryptanalysis time: 23.75 s 253644800 bytes read, disk access time: 5.95 s searching for 7 hashes... plaintext of ff760a17bfe2d2b3 is EKPXKJU plaintext of b16d02a5c912302f is H9K5UIS plaintext of 298bb5356847fae0 is XNMCW4L cryptanalysis time: 1.75 s lm_alpha-numeric_1_2400x40000000_all.rt: 386355200 bytes read, disk access time: 9.70 s verifying the file... searching for 4 hashes... plaintext of 95f840ebf2eb22ae is CATGUK0 cryptanalysis time: 9.00 s 253644800 bytes read, disk access time: 6.20 s searching for 3 hashes... plaintext of 30741a6b6b9adb1d is VBXKLHY cryptanalysis time: 0.83 s lm_alpha-numeric_2_2400x40000000_all.rt: 386355200 bytes read, disk access time: 9.74 s verifying the file... searching for 2 hashes... plaintext of 6d91e0438a82bc22 is GFU3CHH plaintext of ff4fe19443649f7d is A5BZZW7 cryptanalysis time: 3.56 s statistics ------------------------------------------------------- plaintext found: 10 of 10 (100.00%) total disk access time: 40.81 s total cryptanalysis time: 38.89 s total chain walk step: 34741333 total false alarm: 14434 total chain walk step due to false alarm: 12460405 result ------------------------------------------------------- user0 SNlxL5idJb4GZW hex:534e6c784c3569644a6234475a57 user1 VbxkLhYGFU3CHh hex:5662786b4c685947465533434868 user2 mpMcuhVEKPxkJU hex:6d704d63756856454b50786b4a55 user3 h9k5UIScatgUk0 hex:68396b3555495363617467556b30 user4 A5BZzW7xnmCw4L hex:4135425a7a5737786e6d4377344c