BruteForce.py

#!/usr/bin/env python
# encoding: utf-8
"""
BruteForce.py

Created by Peter Meckiffe on 2013-02-15.
Copyright (c) 2013 UWE. All rights reserved.
"""

import sys
import os
import unittest
from hashlib import sha1
import time

class BruteForce:
	def __init__(self, hashtuple, salt):
		# Set alphabet, salt and tuple of hash values
		self.alphabet = "docs034atif156beghjklmnpqruvwxyz2789"
		self.salt = salt
		self.hashtuple = hashtuple
		# Create a list of None values for collecting passwords
		self.passwordList = [None]*len(self.hashtuple)
		self.hashesMatched = 0

	def bruteAttack(self):
		# start timer
		self.start = time.time()
		try:
			# For each possible password length cascade the levels
			for i in range(0,6):
				self.levelCascade("",i)
		except Exception as e:
			pass 
		# Get total time
		self.time_elapsed = time.time() - self.start
		# Return tidied output
		return self.finaliseOutput()
		
	def levelCascade(self, previous, level):
		# If the focus is the final letter
		if level==0:
			# for each letter in alphabet
			for i in self.alphabet:
				# create hash, check if it's in tuple, if it is log it.
				digest = sha1(self.salt+previous+i).hexdigest()
				if digest in self.hashtuple:
					elapsed_time = self.formatTime(time.time() - self.start)
					
					print "Found: %s matches %s Time taken %s" % (previous+i,digest,elapsed_time)
					self.passwordList[self.hashtuple.index(digest)] = "Password %s = %s\n\t Cracked in %s\n" % (previous+i, digest, elapsed_time)
					
					# If all the hashes are found, escape the sequence
					self.hashesMatched += 1
					if self.hashesMatched == len(self.hashtuple):
						raise Exception()
		else:
			# for each letter, explore one letter to the right
			for i in self.alphabet:
				self.levelCascade(previous+i, level-1)
	
	# Method for formatting time message
	def formatTime(self, elapsed_time):
		if elapsed_time > 3600:
			hours = int(elapsed_time) / 3600
			mins = (int(elapsed_time) % 3600) / 60
			secs = elapsed_time % 60
			return "%d h, %d m, %f seconds, or %f seconds" % (hours, mins, secs, elapsed_time)
		elif elapsed_time > 60:
			mins = int(elapsed_time) / 60
			secs = elapsed_time % 60
			return "%d m, %f seconds, or %f seconds" % (mins, secs, elapsed_time)
		else:
			return "%f seconds" % (elapsed_time)
	
	# Format results into readable output
	def finaliseOutput(self):
		if None in self.passwordList:
			output = "%d passwords not matched, apologies...\n" % (len(self.hashtuple) - self.hashesMatched)
			output+="Time taken = %f seconds\n" % self.time_elapsed
		else:
			output = "All hashes cracked. Take that!\n"
		output = "List of passwords:\n"
		for x in self.passwordList:
			if x is None:
				output += "Hash not found at this index.\n"
			else:
				output += x
		return output
		
if __name__ == '__main__':
	# static main function
	hashes = ("c2543fff3bfa6f144c2f06a7de6cd10c0b650cae",
	"b47f363e2b430c0647f14deea3eced9b0ef300ce",
	"e74295bfc2ed0b52d40073e8ebad555100df1380",
	"0f7d0d088b6ea936fb25b477722d734706fe8b40",
	"77cfc481d3e76b543daf39e7f9bf86be2e664959",
	"5cc48a1da13ad8cef1f5fad70ead8362aabc68a1",
	"4bcc3a95bdd9a11b28883290b03086e82af90212",
	"7302ba343c5ef19004df7489794a0adaee68d285",
	"21e7133508c40bbdf2be8a7bdc35b7de0b618ae4",
	"6ef80072f39071d4118a6e7890e209d4dd07e504",
	"02285af8f969dc5c7b12be72fbce858997afe80a",
	"57864da96344366865dd7cade69467d811a7961b")
	saltedHashes = ("2cb3c01f1d6851ac471cc848cba786f9edf9a15b",
	"a20cdc214b652b8f9578f7d9b7a9ad0b13021aef",
	"76bcb777cd5eb130893203ffd058af2d4f46e495",
	"9208c87b4d81e7026f354e63e04f7a6e9ca8b535",
	"d5e694e1182362ee806e4b03eee9bb453a535482",
	"120282760b8322ad7caed09edc011fc8dafb2f0b"
	)
	a = BruteForce(saltedHashes,"uwe.ac.uk")
	print a.bruteAttack()
	a = BruteForce(hashes,"")
	print a.bruteAttack()