Nmap Development mailing list archives

Re: C++ Development


From: H D Moore <hdm () secureaustin com>
Date: Sat, 09 Sep 2000 23:23:52 -0500

Fyodor wrote:

I have to say that I do find some of the C++ features to be rather handy.
My next security program (ncrack) (not finished yet) uses C++. 

Speaking of distributed network cracking programs, I built my first john
cluster today:

2 linux machines ( dual 525 Mhz celeron and a AMD K6-2 500)
mosix (www.mosix.org - transparent process load balancing across a
cluster)
john the ripper 1.6.22-dev

The latest development version of john contains a external:parallel
mode, which lets you split the keyspace john uses (words) into as many
different nodes as you want.  I wrote a perl wrapper which would
automagically create the conf file required for each node (how many
nodes, which one am I) and distribute the processes across the cluster. 
The results are pretty amazing, I can add a new machine to cluster
really easily, and the processes will automatically migrate onto the
best machine (dependent on the IO/CPU requirements of the program).  

The original network was an aging 10bT shared with about 8 other
machines (mostly dinosaurs), I quickly realized how important network
speed was and bought 2 shiny new 3com nics and ran a crossover between
them.  The kernel tuning time was abysmally long (30 minutes per node),
but with identical hardware this wouldn't be needed.  If you want to see
this in action let me know, I can probably isolate the cluster and give
you access.  The next step is making these systems boot from my cd-based
linux distro...  Imagine walking into a lab and turning the room into a
massive cracking cluster instantly....

What is ncrack's architecture? 


-HD


PS.  I am slowing making progress with the loadable output modules, just
I have no free time anymore...

---------------------------------------------------------------------
For help using this (nmap-dev) mailing list, send a blank email to 
nmap-dev-help () insecure org . List run by ezmlm-idx (www.ezmlm.org).



Current thread: