GROAR(1) User Manuals GROAR(1) NAME groar - password cracker crypt - crypts a password SYNOPSIS groar -p passwd -f format [ -s ] [ -w dico ] [ -i ] [ -v ] groar -V | -h DESCRIPTION groar is a password cracker. Its primary purpose is to detect weak passwords using a large number of crypt algo- rithms. Known crypt algorithms are DES, MD5, BF, SHA1, LM & NTLM with & without challenge / response. groar is a temporary name for the older (but never pub- licly released) sha1_crack package. groar is going to be renamed dru as soon as formats with salt are supported (I hope very soon). By default, groar prints the number of previously cracked passwords and exits. The different crypt functions are coming from OpenBSD 2.5 (DES, MD5, BF) and the Unix L0phtCrack v1.5 (LANMAN & NTLM with & without challenge / response). This package needs OpenSSL installed in /usr/local/ssl/ to compile and have been tested only with the 0.9.4 and newer versions. Look at . Note : now autoconf looks in some standard directories to find OpenSSL. You can specify where OpenSSL is installed (--with-openssl) or if the system is OpenBSD (--with- openbsd). Old OpenSSL and ssleay should be detected auto- maticaly. Attention : this is groarware, with a little chance it compile, it Seg.Fault regularly and it may infringe one hundred of copyrights and licences. OPTIONS -p passwd Specifies the password file. -f format Ignored: not yet implemented, actually only SHA1 is known. Specifies the crypt algorithm to use: DES, MD5, BF, LM, NTLM or SHA1. Unix November 05, 2000 1 GROAR(1) User Manuals GROAR(1) -s Activates single mode: tests the login as password. -w dico Activates word mode and specifies the dictionnary file. -i Activates stdin mode: reads the dictionnary from standard input. -v Shows previously cracked passwords. -V Shows program version and exits - no crack. -h Shows help and exits - no crack. FILES groar.pot Every cracked password is saved in that file. That file is loaded after the password file and before any crack. ENVIRONMENT none as far as I know DIAGNOSTICS todo but not prioritary BUGS groar used md4 files aren't 64 bits compliant so ntlm is broken on 64 bits systems. TODO: use md4 functions from OpenSSL (>=0.9.6) when available or use local copies of md4 files from OpenSSL when unavailable. groar only knows saltless formats : CLEAR , LANMAN & NTLM without challenge / response and SHA1 crypt algo- rithmes. doesn't know DES , MD5 , BlowFish , LanMan & NTLM with challenge / response and APOP groar The password file must have the format login:pass- word. Passwords mustn't have any prefix as {sha1} . groar no configuration file yet. groar no rules option yet. Passwords generated by John the Ripper are so great that if it's implemented it will be basic. Unix November 05, 2000 2 GROAR(1) User Manuals GROAR(1) crypt isn't implemented. Get the package titi. AUTHOR groar is written by Denis Ducamp from Herve Schauer Consultants . Thanks to Herve Schauer to let me use different systems of his own to develop that personal project. DISTRIBUTION The distribution of groar is available via http from the host sourceforge.net. You'll find the latest version at the following URL : and . SEE ALSO crypt(3), John the Ripper (greatest tool) by Solar Designer (great guy) available at , (the Unix version of) L0phtCrack by Mudge available at , Crack by Alec Muffet available at . Unix November 05, 2000 3