Thunk / News: Recent posts

New features include successful match caching and using the successful crypt strings and clear text passwords when cracking new entries.
Also, extended the substitutions array to include several new character substitutions.

Ronen.

I've been working on a version of Thunk that will significantly improve the speed of comparisons. Let's say O(1) instead of O(n). This rewrite was done in PHP, independent of cracklib.

Crack utilization has yet to be implemented since I'm having problems compiling PHP 4.1.1 --with-crack

Please check the site for the new download in the next few days.

Ronen.

Hi,

I've just uploaded release 0.4 of thunk.
The main addition has been a first pass Jon crack attempt if the k (k===crack) modifier is chosen. The idea is to point out the weakest passwords first (you should never, ever use login/password matching pairs).

Also, I've recompiled PHP 4.0.6 with the cracklib extension, but I still get unkown function errors on crack_opendict(). Since there is no documentation, I can't really figure what's up.
Still, I am dedicated to work use of cracklib into thunk.... read more

Friends and Neighbors,

I've been dying to speed up thunk considerably, by offering a version which wraps around cracklib (arguably the best open-source password cracker out there). However, the crack extension to PHP4 is still in Prototype stage, and no decent documentation is available.

Also, I'd like to get some feedback regarding Thunk, it's use for you, problems, any requested features. Otherwise, it's development will slog along, whenever I have time away from the day job and Counter-Strike (heehee).... read more

Hi all. Sorry about the lag in updating this project, but I had some tight work deadlines to meet.

I am bumping thunk to beta, since it has been extensively QAed, as it is a bundled utility in the project I am developing for work.

Thanks for all the downloads and interest.
Ronen.

A tarball (605k), containing several dictionary files has been uploaded to the project home page.

Now that I have managed to successfully upload the tarballs for releases 0.1 through 0.3, I have updated the dev status to alpha.

Thunk is being alpha tested as a security component in my company's product.
I believe beta testing should start within three weeks. Any volunteers?
Ronen.