Stack Overflow
Stack Overflow

Questions tagged [rainbowattack]

Type of computer attack based on precomputed tables of cryptographic hashes.

Computer attack with .

References

Wikipedia article on Rainbow Table

10 questions
61
votes
7 answers

What exactly is a rainbow attack?

I was reading a few articles on salts and password hashes and a few people were mentioning rainbow attacks. What exactly is a rainbow attack and what are the best methods to prevent it?
Dusty
  • 4,667
  • 3
  • 29
  • 35
8
votes
4 answers

Why is it called rainbow table?

Anyone know why it is called rainbow table? Just remembered we have learned there is an attack called "dictionary attack". Why it is not call dictionary?
user496949
  • 83,087
  • 147
  • 309
  • 426
6
votes
4 answers

Are Rainbow Tables Attacks even a threat?

let's just assume a simple non salted hash function, just a plain old $hash = md5($pass). Premises: the password hashing all takes place server side, and the hashes are stored in the database. The client has no way to see these. a rainbow table…
Kenny Cason
  • 12,109
  • 11
  • 47
  • 72
2
votes
3 answers

Reading rainbow tables from freerainbowtables.com

I have downloaded Rainbow Tables from freerainbowtables.com. Its extension is .rti . I was wondering if there is a way to read this file as a text file or anyother file. I want to write a simple program to read this file and store its contents in a…
Chander Shivdasani
  • 9,878
  • 20
  • 76
  • 107
1
vote
2 answers

is it possible to retrieve a password from a (partial) MD5 hash?

Suppose I have only the first 16 characters of a MD5 hash. If I use brute force attack or rainbow tables or any other method to retrieve the original password, how many compatible candidates have I to expect? 1? (I do not think) 10, 100, 1000,…
tic
  • 4,009
  • 15
  • 45
  • 86
1
vote
2 answers

Developing Rainbow Tables

I am currently working on a parallel computing project where i am trying to crack passwords using rainbow tables. The first step that i have thought of is to implement a very small version of it that cracks password of lengths 5 or 6 (only numeric…
Chander Shivdasani
  • 9,878
  • 20
  • 76
  • 107
1
vote
0 answers

Rainbow tables - how to choose the starting plaintext

I am implementing an assignment where I'm given 1000 SHA1 digests and their corresponding passwords (each 24bit or 6Hex digits long). I have to build a rainbow table <2MB on disk and in Java, I see that having chain lengths > 192 makes the search…
PKM
  • 329
  • 4
  • 17
1
vote
2 answers

Rainbow Tables: How to defend against them?

I recently obtained the l0pht-CD for windows and tried it out on my PC and It WORKS!! 2600hertz.wordpress.com/2009/12/22/100-windows-xp-vista-7-password-recovery I have also read kestas.kuliukas.com/RainbowTables/ I'm designing a…
TheCodeArtist
  • 21,479
  • 4
  • 69
  • 130
1
vote
0 answers

Rainbow attack through python lookup is failing.

I have some issues with an assignment have been given. The gist is that I have to do a rainbow attack on a "car fop". With a generator table, the RainbowAttack.py script the following: The key broadcasts to car (in this case the adversary) The…
Christian
  • 36
  • 4
1
vote
1 answer

What length of passwords do rainbow tables go to?

My bank limits my password to 14 characters and I suspect they're encrypting with MD5 or an SHA hash, unsalted. Are there rainbow tables that contain every possible hash up to 14 characters?
brentonstrine
  • 21,694
  • 25
  • 74
  • 120