@@ -11,7 +11,7 @@ config.whiny_nils = true # Show full error reports and disable caching config.action_controller.consider_all_requests_local = true config.action_view.debug_rjs = false -config.action_controller.perform_caching = false +config.action_controller.perform_caching = true # Don't care if the mailer can't send config.action_mailer.raise_delivery_errors = false \ No newline at end of file config/environments/development.rb @@ -6,8 +6,6 @@ * *--------------------------------------------------------------------------*/ -var shackeronly = true - var Prototype = { Version: '1.6.0.3', @@ -5792,59 +5790,30 @@ Observed = Behavior.create({ }); -function test_extensions() { - var tmp = characters - characters = ["a", "b", "c", "d", "e", "f", "g", "h", "i", "j", "k", "l", "m", "n", "o", "p", "q", "r", "s", "t", "u", "v", "w", "x", "y", "z", "A", "B", "C", "D", "E", "F", "G", "H", "I", "J", "K", "L", "M", "N", "O", "P", "Q", "R", "S", "T", "U", "V", "W", "X", "Y", "Z"]; - console.log("test_string_last();") - test_string_last(); - console.log("test_string_is_highest();") - test_string_is_highest(); - console.log("test_string_increment();") - test_string_increment(); - console.log("test_string_increment_last();") - test_string_increment_last(); - console.log("test_string_next_chunk();") - test_string_next_chunk(); - evaluate_test_results(); - characters = tmp +// Centers the absolute div for flash messages +function centerflash(id) { + if (screen && screen.availWidth && $(id) && $('container')) { + containerleft = $('container').makePositioned().cumulativeOffset($(id)).first(); + containerwidth = $('container').getDimensions()['width']; + $(id).setStyle({left: (containerleft + (containerwidth - $(id).getDimensions()['width']) / 2) + "px"}); + } } // Returns last character of a string String.prototype.last = function() { return this.charAt(this.length-1) }; -function test_string_last() { - assert_equal("a", "a".last()); - assert_equal("B", "aB".last()); - assert_equal("f", "ASDf".last()); - assert_equal("", "".last()); -} // Indicates, whether a character is the highest String.prototype.is_highest = function() { return this == characters.last(); }; -function test_string_is_highest() { - assert_equal("a", characters.first()); - assert_equal("Z", characters.last()); - assert_equal(false, "a".is_highest()); - assert_equal(true, "Z".is_highest()); - assert_equal(false, "".is_highest()); -} // Increments a character by one (returns lowest character if not found) String.prototype.increment = function() { if (this.is_highest()) return characters.first(); // If already highest character, return lowest character return characters[characters.indexOf(String(this)) + 1]; // Else, increment character by one } -function test_string_increment() { - assert_equal("b", "a".increment()); - assert_equal("A", "z".increment()); - assert_equal("a", "Z".increment()); - assert_equal("a", "!".increment()); - assert_equal("a", "abc".increment()); - assert_equal("a", "".increment()); -} // Increments only the last character of a string String.prototype.increment_last = function() { @@ -5852,13 +5821,6 @@ String.prototype.increment_last = function() { if (this.length == 1) return this.increment(); return this.slice(0, this.length - 1) + this.last().increment(); }; -function test_string_increment_last() { - assert_equal("b", "a".increment_last()); - assert_equal("aC", "aB".increment_last()); - assert_equal("ASDg", "ASDf".increment_last()); - assert_equal("asdasdasdasdasda", "asdasdasdasdasdZ".increment_last()); - assert_equal("", "".increment_last()); -} // Increments a chunk according to the given characters String.prototype.next_chunk = function() { @@ -5883,18 +5845,6 @@ String.prototype.next_chunk = function() { } return characters.first().times(size + 1) // Every character is highest, add one character and return everything lowest } - -} -function test_string_next_chunk() { - assert_equal("a", "".next_chunk()); - assert_equal("aa", "Z".next_chunk()); - assert_equal("y", "x".next_chunk()); - assert_equal("abce", "abcd".next_chunk()); - assert_equal("abcy", "abcx".next_chunk()); - assert_equal("abda", "abcZ".next_chunk()); - assert_equal("aaaabaaab", "aaaabaaaa".next_chunk()); - assert_equal("aaaabaaaa", "aaaaaZZZZ".next_chunk()); - assert_equal("aaaa", "ZZZ".next_chunk()); } @@ -6026,46 +5976,74 @@ function SHA256(s){ } -var step = -1 -var secret -var chunk -var characters = [] -var counter = 0 - -function setup() { - if (!secret.empty() && characters.length > 0 && !chunk.empty()) { - $('setup').insert('Secret: ' + secret + '<br/>'); - $('setup').insert('Initial password: "' + chunk + '"<br/>'); - setTimeout(function() { shacker() }, 10); - } +// Keeping track of how many passwords we tried. +// We want to send this to the server in our report intervals +counter = 0; + +// You may want to override this if you are creating a widget. +function start_shacker() { + console.log("Starting algorithm."); + shacker(); } +// This is the main brute force algorithm function shacker() { - if (secret.empty() || characters.length == 0 || chunk.empty()) return; + if (secret.empty()) return; counter++; + if (secret == SHA256(chunk)) { - return report(chunk); + // Congratulations, you found it + return solution(chunk); + } else { - chunk = chunk.next_chunk(); - if (counter % 1000 == 0) { - $('status').update(counter); - setTimeout(function() { shacker() }, 10); + + + // Nothing found yet, let's try the next password + if (chunk == last_chunk || chunk.length > length) { + // Start from the beginning, when ran out of password space + chunk = first_chunk; + console.log('Starting at ' + chunk) } else { - shacker(); + // Increment the chunk by one if we're somewhere in the middle + chunk = chunk.next_chunk(); + } + + // Hand in a report + if (report_interval > 0 && counter % report_interval == 0) { + report(counter) + } + + // Update status message every status_interval tries + if (counter % status_interval == 0) { + status(); + setTimeout(function() { shacker() }, status_delay); + + // Continue + } else { + //console.log(chunk); + if (loop_delay > 0) { + setTimeout(function() { shacker() }, loop_delay); + } else { + shacker(); + } } } } -function report(password) { - alert('I found it: ' + password); +// Updating the <div id="status"></div> +function status() { + if (!$('status')) return; + $('status').update(": " + counter + " " + (counter / realm) + "% " + first_chunk + "-" + chunk); } -function centerflash(id) { - if (screen && screen.availWidth && $(id) && $('container')) { - containerleft = $('container').makePositioned().cumulativeOffset($(id)).first(); - containerwidth = $('container').getDimensions()['width']; - $(id).setStyle({left: (containerleft + (containerwidth - $(id).getDimensions()['width']) / 2) + "px"}); - } +// Send interval report +function report(counter_to_report) { + console.log('Reporting "' + counter_to_report + '"'); + new Ajax.Request(report_url.sub('COUNTERPLACEHOLDER', counter_to_report), {asynchronous:true}); } - +// Redirect to solution page +function solution(password) { + console.log('Handing in solution "' + password + '"'); + window.location.href = solution_url.sub('PASSWORDPLACEHOLDER', encodeURIComponent(String.interpret(password))); +} public/javascripts/shacker.js @@ -12,6 +12,7 @@ html{color:#000;background:#FFF;}body,div,dl,dt,dd,ul,ol,li,h1,h2,h3,h4,h5,h6,pr html { font-size:12px; color:#222; font-family:"Helvetica Neue", Arial, Helvetica, sans-serif; } a, a:visited, a:active, a:hover, a:focus { text-decoration: none; color: #f90; } h1 { font-weight: bold; font-size:20px; line-height:1; padding-bottom: 14px; } +h2 { font-weight: bold; font-size:15px; line-height:1; padding-bottom: 14px; } body { margin-top: 50px; } /* Structure */ @@ -23,6 +24,32 @@ div#container { background: #eee; } +div#solution { + text-align: center; + font-weight: bold; font-size:40px; line-height:1; padding-bottom: 14px; + color: red; +} + +span#status { word-spacing:2em; } +div#busy { float:right; } + +/* Admin */ + +input#reset_settings { color: red; } +div#statistics { padding: 30px; } +div.tcol {font-weight: bold;} +div.attacks { width: 900px; background-color: yellow;} +div.attack { float:left } +div.id { width: 34px; } +div.position { width: 34px; } +div.offset { width: 80px; } +div.chunk { width: 70px; } +div.client { width: 80px; } +div.created_at { width: 140px; } +div.updated_at { width: 140px; } +div.response { font-weight: bold; width: 70px;} +div.timespan { font-weight: bold; } + /* Flash messages */ div#flash-notice { background: #7f7; } public/stylesheets/shacker.css 54d4b8342cd99c4ef0582ef276ac2cdda89a95cb Commander Keen nom@ximus.de http://github.com/funkensturm/shacker/commit/ea6379d250508f122b2c2e0c38e6b94b5eb75877 ea6379d250508f122b2c2e0c38e6b94b5eb75877 2009-11-10T14:12:28-08:00 2009-11-10T14:12:28-08:00 quick deploy e5b99cb76e1d5f29809881073495a37a65c5d96e Commander Keen nom@ximus.de