[0x09] pymd5crack.py - Python Online MD5

For a quick wiki about md5:

The MD5 message-digest algorithm is a widely used cryptographic hash function producing a 128-bit (16-byte) hash value, typically expressed in text format as a 32 digit hexadecimal number. MD5 has been utilized in a wide variety of cryptographic applications, and is also commonly used to verify data integrity.

MD5 which stands for Message Digest algorithm 5 is a widely used cryptographic hash function that was invented by Ronald Rivest in 1991. The idea behind this algorithm is to take up a random data (text or binary) as an input and generate a fixed size “hash value” as the output. The input data can be of any size or length, but the output “hash value” size is always fixed. Here is an example of MD5 Hash function at work.

A MD5 hash is nothing but a 32 digit hexadecimal number which can be something as follows:

a0c3a457b35a64fcc1733600e05e5476

88fa71f0a6e0dfedbb46d91cc0b37a50

Here, Ive written a simple script to automate the process of reversing a 1 way hash with dictionary data of public online service eg. gromweb and md5rainbow.

Here's the full source code:

	import sys
	import urllib
	import re
	import socket
	GROMWEB = 'http://md5.gromweb.com/query/'
	MDRAINBOW = 'http://www.md5rainbow.com/'
	qry = ''
	def usage():
	print('\n\t:: [PH] Index Python Hash Crack ::')
	print('\t:: http://asianzines.blogspot.com ::')
	print('Usage:')
	print('python pymd5crack.py <hashvalue>')
	print('Example: $ python pymd5crack.py 1232f297a57a5a743894a0e4a801fc3')
	print('Example: $ python pymd5crack.py admin\n')
	return
	def get_result(url, index):
	try:
	result = str(urllib.urlopen(url).read())
	return result
	except (socket.gaierror, socket.error, IOError) as e:
	if index == 1:
	return 'Error: ' + str(e.strerror)
	return get_result('%s%s' %(MDRAINBOW, qry), 1)
	if __name__ == '__main__':
	if len(sys.argv) == 2:
	h = str(sys.argv[1])
	qry = '%s%s' %(GROMWEB, h)
	if not re.findall(r"([a-fA-F\d]{32})", h):
	print '\nPlease input valid md5 hash\n'
	sys.exit(0)
	print '\n############### Searching... ###############\n'
	results = get_result(qry, 1)
	if len(results) == 0:
	print 'No results found!\n'
	else:
	print results
	print '\n############### GAME OVER ###############\n\n'
	else:
	usage()

view raw pymd5crack.py hosted with ❤ by GitHub

MD5 hashes are theoretically impossible to reverse directly, ie, it is not possible to retrieve the original string from a given hash using only mathematical operations.
Most web sites and applications store their user passwords into databases with MD5 encryption. This method appears to be safe as it seems impossible to retrieve original user passwords if, say, a hacker manages to have a look at the database content.

That's it, happy hashing!