A short post for Ravan this time. It is a JavaScript based Distributed Computing system that can perform brute force attacks on salted hashes by distributing the task across several browsers. Salted and plain versions of the following hashing algorithms are currently supported:
- MD5
- SHA1
- SHA256
- SHA512
How to use?
Using Ravan is very simple, just follow these steps:
Using Ravan is very simple, just follow these steps:
- Go to https://www.andlabs.org/tools/ravan.html
- Enter the value of the hash that must be cracked
- Enter the value of the salt, if it is not a salted hash then leave it blank
- Enter the charset. Only these characters will be use in the brute force attack
- Select the hashing algorithm (MD5, SHA1, SHA256, SHA512)
- Select the position of the salt. (clear-text+salt or salt+clear-text)
- Hit 'Submit Hash'.
- If hash is successfully submitted it would return a URL. Send this URL to all the workers and get them to click 'start' on that page.
- Keep the main page open without reloading till the hash is cracked.
That is all! Once the HTML5 WebWorkers start, they would be doing pieces of the work and submitting results back. The main page would constantly monitor the progress of the cracking process and manage it across all the workers. You would be able to see the stats throughout the process, once the hash is cracked the clear-text value is displayed. Ravan uses HTML5 WebWorkers to start background JavaScript threads in the browsers of the workers, each worker computes a part of the hash cracking activity.
Download : https://www.andlabs.org/tools/ravan.html
