PyBozoCrack 3 is a depressingly effective MD5 password hash cracker with almost zero CPU/GPU load written in Python 3. Instead of rainbow tables, dictionaries, or brute force, PyBozoCrack simply finds the plaintext password. Specifically, it googles the MD5 hash and hopes the plaintext appears somewhere on the first page of results.
Free software: BSD license
It works way better than it ever should. Go ahead and try.
How?
Basic usage:
$ pybozocrack -f my_md5_hashes.txt
Or:
$ pybozocrack -s fcf1eed8596699624167416a1e7e122e
The input file has no specified format. BozoCrack automatically picks up strings that look like MD5 hashes. A single line shouldn’t contain more than one hash.
Example with output:
$ pybozocrack -f example.txt
Loaded 5 unique hashes
fcf1eed8596699624167416a1e7e122e:octopus
bed128365216c019988915ed3add75fb:passw0rd
d0763edaa9d9bd2a9516280e9044d885:monkey
dfd8c10c1b9b58c8bf102225ae3be9eb:12081977
ede6b50e7b5826fe48fc1f0fe772c48f:1q2w3e4r5t6y
$ pybozocrack -s fcf1eed8596699624167416a1e7e122e
fcf1eed8596699624167416a1e7e122e:octopus
Why?
To show just how bad an idea it is to use plain MD5 as a password hashing mechanism. Honestly, if the passwords can be cracked with this software, there are no excuses.
Who?
BozoCrack was originally written by Juuso Salonen (http://twitter.com/juusosalonen).
PyBozoCrack was rewritten in Python by Henrique Pereira (http://ikke.top).
History
3.0.2 (2021-01-16)
Standalone script should work now
3.0.1 (2021-01-16)
Removed universal wheel
3.0 (2021-01-16)
Now supports exclusively Python 3
1.2.2.3 (2014-05-21)
Docs now should show 100% on PyPi.
Skipped the broken test on PyPy.
1.2.2.2 (2014-05-08)
Fixed typo.
1.2.2.1 (2014-05-08)
Fixed typo.
1.2.2 (2014-05-08)
Cracked hashes are now stored
Error message if no cracked hashes are found
1.2.1 (2014-05-07)
Bugfix
1.2.0 (2014-05-05)
Stand-alone file. Works on windows.
1.0.2 (2014-05-02)
Increased test coverage
1.0.1 (2014-05-01)
Trying to fix problems with Travis
1.0 (2014-05-01)
First release on PyPI.
Metadata
Release files for pybozocrack 3.0.2
For a detailed explanation of source distributions (sdists) and built distributions (wheels), please see the package formats documentation.
Source distribution (sdist)
| File | Size | Uploaded | Provenance | |
|---|---|---|---|---|
| pybozocrack-3.0.2.tar.gz | 15.0 kB | Without provenance | Details |
Release files / pybozocrack-3.0.2.tar.gz
| Download URL | pybozocrack-3.0.2.tar.gz |
|---|---|
| Size | 15.0 kB |
| Tags | Source |
|
SHA-256 checksum How to use checksums |
6f0e742c227f49d764febb1dc04f0994e9e887c800a458c3fe51fa16b8faf9ac
|
|
BLAKE2b-256 checksum How to use checksums |
1e6285e590f62b4e5f96c3fef57c25704e082d313a3fd5ca46c73c14e531d8c9
|
| Upload date | |
|
Uploaded using Trusted Publishing? What is trusted publishing? |
No |
| Uploaded via |
Python-urllib/3.7
|
Security for pybozocrack 3.0.2
Provenance
Provenance describes where a file came from. On PyPI, provenance is shared via attestations, which provide a verifiable record of the build or publishing details. View details, limitations and caveats.
No provenance found
None of the files in this release were uploaded with provenance metadata.
A note on package security
PyPI is a repository for distributing packages, not a service for auditing them. While third-party security researchers and our staff do their best to detect and remove malicious packages, PyPI cannot guarantee the quality, security or suitability of any given package.