Lepton's Crack is a generic password cracker, easily customizable with a simple plug-in system.
It can perform a dictionary-based (wordlist) attack, as well as a brute-force (incremental) password scan, including enumeration of a regular expression (useful if you know something about the password)
Currently the formats supported are: standard MD4 hash, standard MD5 hash, NT MD4/Unicode, Lotus Domino HTTP password (R4) and SHA-1. LM (LAN Manager) support added by Piero Brunati, see below.
IMPORTANT: Lepton's Crack development here is frozen (more or less :).
Please visit Piero Brunati's site at http://www.nestonline.com/lcrack/ for newer versions.
Don't get confused by the word "Windows", it compiles on Windows, Linux and Cygwin provided you've the right libraries and tools.
If you plan to compile Piero's last version with LM (LAN Manager) support, you need the libdes.a library, this comes with libdes-4.01, that can be downloaded from ftp://ftp.psy.uq.oz.au/pub/Crypto/DES/ (or as part of SSLeay).
Linux is the primary development platform of Lepton's Crack, so it's supposed to compile on Linux with no problems, provided you've the standard utilities (i.e. a decent gcc, make, and the needed headers).
It should compile on any Unix system with an ANSI C compiler, but the configure script sets the optimization flags only for the GNU compiler.
To compile on Linux simply issue the following commands (after extracting the tarball to a suitable directory):
Read the provided README before you do anything (I mean it!), and verify the Makefile before compiling (I also mean it! :)
Lepton's Crack should compile on Cygwin with no problems, let us know if you've any issues (be sure to use the latest Cygwin).
You must follow this guide to compile under Cygwin:
Lepton's Crack should compile with any ANSI C compiler, provided that it includes the strdup(3) function (which is trivial to implement), and the gettimeofday(2) system call, which is only used in the calculation of the cracking speed.
NOTE: If you use the MINGW libraries, then Lepton's Crack provides an altrnative gettimeofday(), though I haven't tested it much..
If you have additional problems, you're on your own, sorry :)
.. but you can always e-mail me or Mike and we'll be glad to help, of course :)
THIS SOFTWARE IS PROVIDED BY THE AUTHOR 'AS IS' AND ANY EXPRESS OR IMPLIED WARRANTIES, INCLUDING, BUT NOT LIMITED TO, THE IMPLIED WARRANTIES OF MERCHANTABILITY AND FITNESS FOR A PARTICULAR PURPOSE ARE DISCLAIMED. IN NO EVENT SHALL THE AUTHOR OR CONTRIBUTORS BE LIABLE FOR ANY DIRECT, INDIRECT, INCIDENTAL, SPECIAL, EXEMPLARY, OR CONSEQUENTIAL DAMAGES (INCLUDING, BUT NOT LIMITED TO, PROCUREMENT OF SUBSTITUTE GOODS OR SERVICES; LOSS OF USE, DATA, OR PROFITS; OR BUSINESS INTERRUPTION) HOWEVER CAUSED AND ON ANY THEORY OF LIABILITY, WHETHER IN CONTRACT, STRICT LIABILITY, OR TORT (INCLUDING NEGLIGENCE OR OTHERWISE) ARISING IN ANY WAY OUT OF THE USE OF THIS SOFTWARE, EVEN IF ADVISED OF THE POSSIBILITY OF SUCH DAMAGE.
(i.e. you're on your own, so don't bother us :)
FIRST: Check the latest CHANGES.
Also read the README if you want to learn how to use the program.
You can get Lepton's Crack here (directory listing) or from Piero Brunati's website, see the top of the page.
(C) 2002 - Bernardo Reino, aka Lepton