joomla_brute.py

#!/usr/bin/python
# joomla hash brute force by nasa
# thanks buat IBTeam
# visit http://forum.indonesianbacktrack.or.id



from hashlib import md5
import sys
import string
import binascii, re
import time


print '''
 ___ ____ _____
|_ _| __ )_   _|__  __ _ _ __ ___
 | ||  _ \ | |/ _ \/ _` | '_ ` _ \
 | || |_) || |  __/ (_| | | | | | |
|___|____/ |_|\___|\__,_|_| |_| |_|  joomla hash cracker !
__________________________________________________________
Http://forum.indonesianbacktrack.or.id            by nasa



 [*] Starting joomla hash cracker at ''' + time.ctime() + ''' \n\n '''

time.sleep(1)

if len(sys.argv) != 3:
    print 'Error !!'
        print 'Usage: ' + sys.argv[0] + ' <hash:salt> <wordlist>'
        sys.exit(1)

else:
    _hash = sys.argv[1].split(':')
    _md5 = _hash[0]
    _salt = _hash[1]

    f = open(sys.argv[2], 'r')
    for line in f:
        kata = re.sub(r'\W+', '',line)
        crack = md5(kata + _salt).hexdigest()
        print ' [*] Cracking ' + _md5 + ':' + _salt + ' With : ' + kata
        if(crack == _md5):
            print '\n'
            print ' [+] ' + _md5 + ':' + _salt + ' --- Password found: ' + kata
            print ' Viva la Backtrack, by IBTeam !'
            sys.exit(0)
    print '\n'
    print ' [*] No word match, never give up'
    print ' [*] try other wordlist : - ('
    sys.exit(1)