[Home] Saltine Cracker Products FAQ / README / Release Notes Texts EMail If you have reached this screen, you may be in luck. This Hyperlinks contains some useful information about Saltine Cracker I forgot to include in the documentation. Saltine Cracker is [CDNow] going to be revised and expanded this January, so keep checking back for new information. What passwords does it try? 8 character alpha-numeric (a-z,0-9) passwords for NT Hashes and 7 character alpha-numeric passwords for POSIX crypt(3) hashes. Saltine Cracker won't try passwords such as '123' and 'fish', those are too small and trivial. All 3, 4, 5, and 6 character alpha-numeric crypt(3) passwords can be tested within a few days, and up to 7 character alpha-numberic NT passwords can be tested in approximately the same amount of time ussing your standard tool such as john or l0phtcrack. These simpler tests should be run before implimenting Saltine Cracker. Also, there is no sense in trying to retrieve an 8 character password that contains special symbols such as '$' and such. Those are computationally infeaseable for the general person. How fast is Saltine Cracker? This is a multi-part answer. Stand alone, running on 1 client machine (which btw is not what it is intended for) it is slower that John the Ripper 1.6 by about 25% when testing POSIX crypt(3) passwords. It's faster than l0phtcrack when testing MD4 NT Hashes. What makes Saltine special is that is is distributed, meaning it links multiple computers together to form a distributed computing environment which can be exponentially faster than both john and l0phtcrack. What are those characters the server displays after a request? [msg]: get server message [g:*]: get keyspace '*' [p:*]: put keyspace '*' [h:*]: get hash field '*' [f:*]: password found '*' [s:*]: get current status A brief description of the Distributed Model Two-dimensional star-shaped interconnection network with a dynamic number of nodes connected to a central node acting as a data distribution server using a proprietary messaging protocol embeded in TCP/IP. This is enough for now. If you have any questions concerning Saltine Cracker, just email me at chrisa@eeye.com