Generating Rainbow Tables With RainbowCrack Video Lecture | Get to know Ethical Hacking (English) - Software Development

[Music]
hey guys hackers Floyd here back again
with another video and in this video
gonna be looking at how to generate
rainbow tables with rainbow crack
alright so this was another video that
was really really requested quite a
while ago but I've decided to do it now
and for the reason being that I haven't
really covered the generation of rainbow
tables on my channel and this is as you
know very very important because when
you talk about password cracks password
cracking sorry rainbow tables and word
lists are extremely important now I've
covered how to generate word lists with
crunch so you pretty much have a good
idea of how to generate word lists and
how to use them for different types of
attacks you with Hydra or with Medusa
you know etcetera etcetera you get the
idea but when it comes down to cracking
password hashes this is where rainbow
tables come into play now of course this
is quite an advanced type of thing that
not many people talk about but extremely
important and I've come across it many
many times because if you try cracking a
password hash for example with John the
Ripper and you use a word list then it
will take an extremely long time given
the complexity of the password hash it
doesn't really matter
ah you know the algorithm really doesn't
matter but if it's more complex then you
get the idea it's gonna take a long time
this is where rainbow tables coming into
play alright so you might be asking
yourself what exactly is a rainbow table
well well essentially a rainbow table is
simply put a table of hashes that are
encoded by a particular algorithm
alright so this is a table of hashes
that are encoded by a particular
algorithm for example base64 it could be
encoded with base64 that's just a simple
example now the hash tables are a hash
of each word stored in the table so
essentially what's happening is the
tables are hashed and then the hash
tables are a hash of words stored in the
table
alright so rainbow tables are used to
crack password hashes and of course you
get the the context in which I'm saying
this they are used for offline attacks
only that means you can't use rainbow
tables for cracking
you know for online cracking meaning
cracking for example a a captured packet
file or the handshake trying to capture
a handshake you can't crack that with
rainbow tables and of course I'll be
talking about GPU cracking in probably
the next videos because this is an area
that I haven't really covered as well as
I would have liked to but that's for
another day so rainbow tables are used
to crack up harder and more complex
hashes you can crack basic crack hashes
with word lists but when it comes down
to really you know like for example
system hashes or with used the hash dump
on your exploited system and you got
some password hashes cracking them will
be in best practice performed with
rainbow tables all right so we are going
to be using we're going to be using
rainbow crack being the package that
we'll be using and before we get started
I just want to let you know the the
philosophy behind a a rainbow generating
rainbow tables is that what's happening
here is that rainbow tables uses a
dictionary attack now let me explain why
that's because what's happening here is
we essentially guessing of course it's
calculated guessing based on on the
parameters that you have specified but
if you're using a word list what's
happening is you're essentially going
through each of the words sequentially
or however you decide to sort the word
list and as you can as you probably
would have guessed if the word does not
exist in the word list then you're not
going to get the password but if in that
in the case of dictionary attacks it's
going to go through random random
combinations of the different characters
of course hashed by the by the algorithm
but I'll explain that in a second I
don't want you to get too carried away
all right so we are going to be using
rainbow crack and rainbow crack is a
package that is used to generate the
rainbow tables and the syntax is really
quite simple so as you probably would
have guessed I'm using kali linux
alright so let's get started so i'm
gonna open up my terminal here and let
me just expand that so we can see what's
going on and the syntax to start it up
is our tgen alright so rainbow tables
generate alright now of course a rainbow
crack is a pack
that has other functions that probably I
will cover in the next set of videos but
this is something that I really just
want to demonstrate because it is
extremely important in the scope of a
penetration test especially when you
talk about password cracking so we use
the syntax our TGN alright and that will
essentially prompt up the rainbow tables
or the rainbow crack rainbow tables
generation so you can see that it gives
you the syntax here so you specify the R
TGen to start it and then you specify
the hash algorithm let me explain
something very important here that many
people mock up a red hashing algorithms
are specific the the hashing algorithm
here is specific to the hash in which
you are trying to crack let's say you're
trying to crack a char to 256 hash you
need to then specify you need to then
create a rainbow table and specify the
sha-256 algorithm here the character set
you can then specify to whatever you
feel is suitable now of course this can
be done with experimentation but you get
the idea but it's very important to
specify the hash algorithm in direct
correlation to the hash the password
hash that you're trying to crack alright
so let me go through this this syntax
here the character set is essentially
this will end cap this will encapsulate
all the the possible characters that you
want to specify in plain text all right
you then have the plain text a length
this is the we can talk about the index
but the length minimum this these two
parameters essentially will control the
plaintext length of the range in that in
the rainbow table all right so I'll
explain this so for example you can
specify the range of 1 to 7 so you this
can be a b c d e f g and then you can
you get the ID you can specify a minimum
or a maximum so you can say from if you
wanted to specify from B you'd say 2 to
be cdef to like a 5 that would be B to F
all right so that's your your range
that's how you specify the range you
know when you talk about the index
essentially what this does is the table
index will select the what's it called
the reduction function alright so this
will essentially use a different
reduction function now of course this is
a bit advanced I'll not cover what the
the table index does but when you talk
about the chain length the chain length
essentially controls how long the
rainbow chain will store the plaintext
and how essentially the length of of the
plaintext and what is required to
generate the the character set now of
course this might sound a little bit
complex but hopefully as time goes on
I'll explain all of this alright and
then you have the the chain number which
is right here which essentially this
will specify the number of chains you
want to generate all right so rainbow
tables essentially have a an array of
rainbow chains alright and the Desai's
I'll explain later on because again it's
very complex our cryptographic stuff
here and then finally we have the part
index which is used to store the the
large thing is it's going to start the
it's going to store the large rainbow
tables into smaller chunks alright and
again we can specify this so with that
out of the way of course I know that's a
mouthful and hopefully I'll have the
resources on my website so you can you
can check them out for yourself but the
syntax is quite simple so let's generate
our own rainbow table here and I'm going
to keep it really really simple so I'm
gonna say RTG N and let's say we wanted
to crack a sha-256 password - so to
specify the the hash algorithm here so
char 256 and then I'll specify how then
specify the character set which is for
example I wanted to specify lower I'll
the alphanumeric I believe that is
specified as followed I checked up on
the resources and the documentation for
a rainbow crack so that's how you
specify the character set and then you
need to specify the character range here
which which is the the minimum and the
maximum range which we is really simple
so for example if we wanted to say a 2 a
2 let's see ABCD efg sorry about that
IJ we can specify 2
J so we can say or we can say 10 which
will take us all the way to 2 I we then
need to specify after that with any to
specify the the length of the chain now
of course the length of the chain is
something I'll probably need to explain
quite a few times but this is
essentially the the length of how long
each chain can be so the the the length
here would specifies a thousand of
course I'll explain all of this probably
in the next video because there's a lot
of stuff here that is in regards to end
coding and and a cryptographic type of
calculations we then specify the the
chain number the the number of chains to
generate so I'll specify a modest number
like two thousand it seems to work best
or we can actually specify this to be
four thousand this would be a pretty
good rainbow table and then finally we
would specify the index here let's see
what index would we need to specify yeah
you know what I'm not going to specify
any index so I'll just keep this as zero
because I don't want to chunk it down I
don't want to chunk the chains down so
once that's done I'm going to hit enter
and it's gonna start generating whoops
for some reason we didn't that did not
start up anything that's weird
let me just see what the error is the
issue is here believe I specified
everything that I needed to specify did
I specify I specify the minimum and the
maximum is the table index that's what I
forgot to specify so the table index
will essentially this is the reduction
function that would be used here we can
keep that to zero because again that's
not really what we need to do now and
there we are so it started and the
rainbow chain was generated so actually
where exactly they did stall is probably
stored at my root directory let's see
where this is is it in my root directory
not to show where it's stored it but let
me just try and find it here it probably
stored it in the
in the rainbow crack folder which I
believe is in the user share folder let
me just go back here user and we can say
share and it should be in rainbow crack
let me just find it sorry about this
case I should have been more prepared
and for some reason can't find it
rainbow crack there we are and where is
yeah there there it is this is the one
that we generated so here is the rainbow
table and of course I would recommend
that you specify your output directory
which I'll look at you know probably in
the next set of videos when we look at
GPU cracking but here is our rainbow
table and essentially you can now use
this rainbow table you can see the
extension is a tort rainbow table file
so we can use that to crack our password
hashes and you can specify this as your
as your rainbow table so you can always
rename it to keep to keep it simpler and
you can always experiment with the
different type of character sets and the
range as well if you wanted to have the
whole the whole alphabet as your range
you can also specify that as well I'll
be talking about the the functions that
have not explained really well here and
that's because I want to give you guys
the exact information so that's probably
something I'll be taking a look in the
next set of videos so that's gonna be it
for this video guys I hope you liked
this video you found value in it if you
did please leave a like down below if
you want to support the channel you can
support the channel on patreon I would
really really appreciate the help any
help that you can you can provide but
you really don't have to if you don't
want to that being said that's gonna be
it for this video if you have any
suggestions or questions let me know in
the comments section on my social
networks or on my website and I'll be
short to leave you some feedback on
answer so that's gonna be it for this
video guys and I'll be seeing you in the
next video peace
[Music]