THC Releases

Keyfinder analyses files for public/private keys, encrypted or compressed data. It identified such areas by measuring the entropy, arithemtical mean and counter checking, and dumps appropriate file sections.

Flood Connect is a connection flooding tool which supports SSL, sending + dumping data, closing or keeping sessions etc. Just a small release. Have fun.

Snooze is the next-generation sniffing tool, supporting modularized protocol dissectors and remote log file retrieval. Modules are written in the high-level language LUA and are easy to develop and extend, even during runtime. Supported protocols: POP3, IMAP, FTP, RLOGIN, TELNET and others.

The first publicly available full blown cracker for Oracle 11g. This tool can crack passwords which are stored using the latest SHA1 based password hashing algorithm. To speed up cracking, the tool exploits a weakness in the Oracle password storage strategy. Therfore, cracking - for most passwords - is still just as fast as it was before the introduction of Oralce 11g.

The ultimate host scanner compilation for Linux, featuring nmap, snmpscan, netbios auditing tool and super-cool vh shell script.

Search data on a harddisk/partition/file, extract the part you are interested in, and write it back after you modified it. Useful to find and modify really all unencrypted Logfiles on a system. Does everything in RAW mode, and hence does not tamper a/m/ctimes.

Vmap stands for version mapper. It allows you to find out the version of a daemon by fingerprinting the features and replys of bogus commands. It's a great addition to the other *map tools.

This little tool generates fuzzy fingerprints as described in the corresponding paper. It is an ideal extension to man-in-the-middle attacks against the SSH service. The current version supports RSA and DSA key generation and MD5 and SHA1 fingerprints.

Backdoors, viris, traps and explainations for RemoteAccess BBS hacking. Sophisticated ways of getting hidden into BBS systems. Issue #2

A tool to automatically hack any pbx, handles up to 10 different pbx numbers with features like random dialing, random dial/tone speed and length, completely programmable and much more. This will trick out any pattern detection switch.

IPF is the first command line tool for configuring the packet filter of Windows NT4 and Window 2000 systems. It replaces the annoying GUI alternatives and can be used as an elegant entry for writing advanced firewall scripts under the Windows system.

Long, long time ago, we released a tool called Login Hacker, for penetrating dialup modems. Today we are releasing a similar and easier tool for Linux which does the same job better. All you need is UNIX and minicom. Have fun with this little release!

The official At&t Security Booklet "Don´t become a Toll Fraud Victim" from the funky visit by Wilkins and Plasmoid at Lucent Technologies.

Grenzgaenger is a Socks-based tool for tunneling nmap, netcat and exploits transparently through systems into protected networks. This tool is in ALPHA state!

Backdoors, viris, traps and explainations for RemoteAccess BBS hacking. Sophisticated ways of getting hidden into BBS systems. Issue #1

THC-Orakel is a tool suite for analysis of the database authentication mechanism used in Oracle products. Provided are utilities for sniffing and breaking authentication password on the wire within seconds.