plain-text.info

1) Anonymous hash submission

We define this as a private service with restricted public usage. Please look at the left box below main menu to see if you can submit hashes at the present time. 2/2 in 1 h means that the limit is full on this particular algorithm. Unless you have an account this limiter increases whenever ANY non member submits a hash.

2) Statuses explanation & Why cracking takes so long?

queued - Means that server hasnt given the hash to any client for cracking yet.
cracking - Status is cracking until all crackers have come online, and searched the hash. Its on front page how many crackers are online, this info is real-time.
notfound - Hash has been tried by all clients and is not found.
cracked - The hash has been found.
For LM hashes the pipe character seperates status for particular half of LM hash. Read about LM hash and dumps to find out why it is so.
Cracking status is set for very long time usually because many or at least one cracker is offline and unless it comes online the status wont change, so be patient or come and ask if you can help and do a better job of being a client in network. See How can I help you or how can I join/register?

3) What kind of hashes does the cracker accept?

This depends on what rainbowtables sets we have online and what tables you have permission to use. Basically you will find LM, NTLM and MD5.

Examples:
LM: Administrador:500:E52CAC67419A9A224A3B108F3FA6CB6D:8846F7EAEE8FB117AD06BDD830B7586C:::
NTLM: Administrador:500:AAD3B435B51404EEAAD3B435B51404EE:8846F7EAEE8FB117AD06BDD830B7586C:::
MD5: 5f4dcc3b5aa765d61d8327deb882cf99

4) Can I download tables/are they for sale?

We do not sell our rainbow tables, but we have decided to offer a rainbow table generating service to anyone wanting tables made with their own charset. Any profit made from this service will go towards the cost of maintaining and upgrading hardware for dedicated webcrackers/generaters and keep access to webcracker free of charge.

We will also offer an audit service for checking password strength of lanman hashes on your network, audit will be carried out on a dedicated pc by one of our admin and results will be kept confidential (for your eyes only).

5) Could you explain a bit more about this rainbowtables technique?

- Heintz's rainbow tables article
- pentoo.ch Easily extract hashes with this great live cd and it's unique tool. Video download
- irongeek.com LM/NTLM hashes extraction and password recovering. Video download
- How to use C3P0 (IRC)

6) How can I help you or how can I join/register?

If you are a network administrator, you can help us by using your computers to generate rainbowtables and run a client for cracking for our network. You will receive an account which lets you to submit hashes with no wait, option to add hashes list and customized View my Hashes.

Some of the things you should think trough before wanting to join:
1) Firs rule is to keep your machine online 24 hours a day 7 days a week.
2) If the machine that is going to run the client is in daily use then know that client will very often use full harddrive reading capability, and 100% processor, so even with lowered priority , running other resource taking apps like games, video editing etc is out of the question.
3) You have to be at our members irc channel at minimum every two weeks (for possible client or server updates etc). Exceptions are allowed but notify us before.
4) When you plan to join then you need to stay at minimum for 6 months (if you leave after 6 months you will still lose your account too) otherwise you waste admins time because making calculations for particular client is hard work so being online for short period of time does not really help us.
5) You have to have legal premission to use the machine

If you have carefully thought through and have decided you want to be part of network then join our IRC channel and let an admin know about yourself, have a lot of patience while there, we respond to you whenever we have time.
And when you contact an admin then let know how about your hardware ( HD,CPU,RAM ). Also if you have been there for a week without answer then let us know again about yourself, dont bug admins too often, it servers no use. We reserve the right to delete your account any time, usually as result of too much offline time.

7) How can I contact you?

You can contact us by joining our IRC channel at:
irc.Plain-Text.info #rainbowcrack

8) How does your system work?

First of all C3P0 and web system has nothing to do with each other.There are two seperate systems as explained below
Web 'n friends
This website connects to a server which is custom built for distributed cracking with wordlists and rainbowtables (like apache is built for web). Web page acts as interface. Web cgi interpreter does that to notify about events like hashes submittion in real-time. Both web interpreter and the standalone server connect to mysql, so these two are very independent parts. communication between web interpreter and cracking server is minimal. Cracking server consist under-the-hood actually as 3 small servers in one software, 1-st server listens locally only connections and authendication from web interpreter. 2-nd server listens for connection and authendication from a IRC bot called Crack. If Crack is connected (which is not a must be) then it receives real-time data (when hash is cracked,some cracker drops) from server and has roll of notifying it. 3-rd "under-server" (thread) is the cracking clients listener and authendicator. This clientserver creates a new thread for each client when authendicated which provides maximum response time ( Because the clientserver acts as a secure interface to mysql it spends lots of time validating and making queries).
C3P0 irc bot's system
C3P0 is a bot/software that connects to our IRC server (like regular users do, and it also has to be represented by a nickname which is C3P0, so it has to appear on nick list like all users) but instead of chatting like regular users (unless the bot operator doesn't feel like it) it reads commands (chat) from irc channel #rainbowcrack which has to have specific format. See which format above. C3P0 takes advantage of irc communication capabilities by using a seperate irc channel to communicate with wordlist bots which only appear in that channel. C3P0 does rainbowtables search by itself.
Conclusion
Two different distributed systems belonging to same project but not tied functionally in any way. Take that into account when submitting hashes.

1) How do I connect to your IRC server?

There's two things you can try.. either download an IRC client (such as XChat, mIRC, etc).. or use our web-based IRC client (popup).

2) How do I join your channel?

If you're using the web-based client, you should be joined automatically.. or manually type /join #rainbowcrack

3) How do I change my IRC nickname?

If you're using the web-based IRC client, your nickname will be 'Anonymous' (sometimes followed by a number).
To change your nickname, type /nick new_nickname_here

4) Why am I kicked/banned?

Typically, you'll get kicked whenever you ignore our rules.. you'll get banned if you continue to ignore our rules after getting kicked.
Things like spamming, flooding, abuse of services, ignoring what admins are telling you, asking how to hack, pasting SQL queries, etc, will get you banned and will most likely stay banned until further notice.

5) What kinds of hashes can/can't I submit?

The robot accepts MD5, LM, NTLM, MySQL v2.32 and SHA1 hashes..
The robot will not accept salted hashes (this includes hashes from Jooma!, IPB 2.x, vBulletin 3.x) as well as Unix and Cisco hashes upon many more.

6) How do I submit a hash to IRC?

Firstly, once you connect and join, type .C3P0 help into the channel for a list of commands you may use (C3P0 is our robot that cracks).
The following formats are required for a particular submission (examples):

  MD5 -- .C3P0 addMD5 D41D8CD98F00B204E9800998ECF8427E
  C3P0 Will first try wordlists (takes 3 seconds) then rainbowtables every 30 minutes

  LM -- .C3P0 addLM Username:500:AAD3B435B51404EEAAD3B435B51404EE:31D6CFE0D16AE931B73C59D7E0C089C0:::
  (All LM hashes must be in PWDUMP format)
  C3P0 Will first try wordlists (takes 3 seconds) then rainbowtables every 30 minutes

  TO ADD NTLM use same command as LM hash
  C3P0 Will try wordlists only (if no result in 3 seconds your hash was not cracked)

  SHA1 -- .C3P0 addSHA1 DA39A3EE5E6B4B0D3255BFEF95601890AFD80709
  C3P0 Will try wordlists only (if no result in 3 seconds your hash was not cracked)

  MySQL v3.23 -- .C3P0 addMySQL 5030573512345671
  C3P0 Will try wordlists only (if no result in 3 seconds your hash was not cracked)

7) My hash was already submitted before! What do I do?

When you submit your hash C3P0 answers "That hash was submitted before" you can use search to find your hash from already processed hashes
Only MD5 and LM hashes can be searched.
Here are search commands :

Search MD5
!search D41D8CD98F00B204E9800998ECF8427E

Search LM
!lmsearch Username:500:AAD3B435B51404EEAAD3B435B51404EE:31D6CFE0D16AE931B73C59D7E0C089C0:::

8) I have a large list of hashes, how can you crack them?

Great! Please contact an administrator on IRC such as legion, RandomCode or Nitrogen for further information.