-
Notifications
You must be signed in to change notification settings - Fork 0
/
README
36 lines (26 loc) · 1.71 KB
/
README
1
2
3
4
5
6
7
8
9
10
11
12
13
14
15
16
17
18
19
20
21
22
23
24
25
26
27
28
29
30
31
32
33
34
35
36
eggbeater
================================================================================
OVERVIEW
================================================================================
This hack-week project attempts to use brute force to discover the Meebo session
key secret. It takes the initial part of the session key (ip:port:salt), appends
a possible secret key, takes the SHA-1 hash, and compares the result to a hash
that is known to be good.
This is a lot of computation, so eggbeater offloads the secret key generation,
SHA-1 calculation, and verification to the GPU using PyCUDA. On my system, with
a GeForce GTX 560 Ti, it's capable of checking about 100,000,000 secrets per second.
The Meebo secret key is 9 characters of lowercase alpha and digits. Thus, a
brute-force crack needs to try 36^9 keys, which on my machine will take about 11 days.
Amazon EC2 offers GPU instances that come with 2 beefy GPUs each for about $2 an hour.
Pessimistically, these should each be able to check about 720,000,000,000 keys per hour.
Thus, for about $140, the Meebo session key could be brute forced in less than one hour.
================================================================================
USE
================================================================================
Requires PyCUDA, Numpy, and a decent NVIDIA GPU (with compute capability >= 2).
The top of the script has some tweakable parameters. Run with:
python eggbeater.py
================================================================================
CAVEATS
================================================================================
I threw this together hastily for hack week. It's ugly and probably broken! ^_^