{"id":282,"date":"2014-04-25T22:52:42","date_gmt":"2014-04-25T22:52:42","guid":{"rendered":"http:\/\/www.incredigeek.com\/home\/?page_id=282"},"modified":"2015-10-01T23:23:12","modified_gmt":"2015-10-01T23:23:12","slug":"grond","status":"publish","type":"page","link":"https:\/\/www.incredigeek.com\/home\/projects\/grond\/","title":{"rendered":"Grond:  The LUKS Password Cracker"},"content":{"rendered":"<p>Grond is a LUKS (Linux Unified Key Setup) password cracker.<\/p>\n<p><strong>Download Grond:<\/strong><\/p>\n<p>You can download Grond script with this link. <a title=\"Download Grond\" href=\"http:\/\/www.incredigeek.com\/home\/downloads\/grond.sh\">grond.sh<\/a><\/p>\n<p><strong>What does it do?<\/strong><\/p>\n<p>Grond was created to simplify and semi-automate the process of cracking a LUKS volume.\u00a0 All you need is a word list.<\/p>\n<p><strong>How does it work?<\/strong><\/p>\n<p>Grond tries to mount a drive or image with a password from the word list, if the password fails it moves onto the next password in line.\u00a0 When the password is found it exit&#8217;s giving you the password.\u00a0 If no password is found you will have to create a better wordlist.<\/p>\n<h1><strong>How to use:<\/strong><\/h1>\n<p>Download the script <a title=\"Grond Download\" href=\"http:\/\/www.incredigeek.com\/home\/downloads\/grond.sh\">here<\/a> or with wget, chmod +x it and then launch.<\/p>\n<p>example:<\/p>\n<pre>wget http:\/\/www.incredigeek.com\/home\/downloads\/grond.sh \r\nchmod +x grond.sh<\/pre>\n<p>Replace the grondwordlist.txt and \/dev\/sda2 with your wordlist and drive path.<\/p>\n<pre>.\/grond.sh -t1 -w grondwordlist.txt -d \/dev\/luksvolume<\/pre>\n<p>The above command launches Grond using a single thread i.e.(CPU core).\u00a0 If you have more than one CPU core, try using more threads to speed up the process.\u00a0 The (-t) option controls how many threads are executed, simply change the number after it to either 1, 2 , 4, or 8.<\/p>\n<p>&nbsp;<\/p>\n<p><em>Recommendations and Warnings<\/em><\/p>\n<p>The recommended amount of threads is the same as the number of logical CPU cores, so if your running a Intel Quad Core CPU with 8 Logical cores, the recommended thread value is 8.<\/p>\n<p>It is advisable to disable things like sleep, screen auto turning off, and automatic locking.\u00a0 It can be close to impossible to log back in or turn the screen on once the script starts running.<\/p>\n<p>If the number of threads your using is the same as the logical processor cores, then your CPU will be at 100% on all cores.\u00a0 Don&#8217;t expect to be doing anything else on the computer while the script is running.<\/p>\n<p>Watch you CPU temps!\u00a0 Running the script is like running a CPU benchmark.\u00a0 If you have lm-sensors installed you can watch the CPU temp with the following command.<\/p>\n<pre>watch sensors<\/pre>\n<p>&nbsp;<\/p>\n<p><em>Manually terminate Grond<\/em><\/p>\n<p>Currently if you need to manually kill the grond script, hit control+c in the main terminal window, and then run the following command to kill any remaining processes.<\/p>\n<pre>for p in `ps aux | grep grond.sh | awk '{print $2}'` ; do kill $p ; done<\/pre>\n<p>&nbsp;<\/p>\n<p><strong>Examples<\/strong>:<\/p>\n<p>launch ground with 1 thread against \/dev\/sda2<\/p>\n<pre>.\/grond.sh -t 1 -w grondwordlist.txt -d \/dev\/sda2<\/pre>\n<p>Launch with 8 threads<\/p>\n<pre>.\/grond.sh -t 8 -w grondwordlist.txt -d \/dev\/sda2<\/pre>\n<p>You can also run the Grond script against an image and\/or partial image of the encrypted drive.\u00a0 All that is really needed is the first few MB&#8217;s of the encrypted partition.<br \/>\nA partial image can be helpful if you need to run the script on a different computer, and can not bring or remove the LUKS encrypted hard drive.\u00a0 To get a partial image run the following command, and then hit &#8220;Control + c&#8221; to terminate dd, this will leave you with a image file that should be a couple hundred MB&#8217;s.<\/p>\n<pre>dd if=\/dev\/sda2 of=\/lukspart.img<\/pre>\n<p>Now copy lukspart.img to your cracking machine and then run Grond against the image.<\/p>\n<pre>.\/grond.sh -t 8 -w grondwordlist.txt -d lukspart.img<\/pre>\n<p>&nbsp;<\/p>\n<p><strong>How Fast is it?<\/strong><\/p>\n<p>Due to how the script works, and how LUKS was designed, cracking a password can take a long time.\u00a0 Below are some examples of what kind of speed to expect.\u00a0 The more threads you can spare the faster the cracking process goes.<\/p>\n<table width=\"488\">\n<tbody>\n<tr>\n<td width=\"299\">Processor<\/td>\n<td width=\"64\">Threads<\/td>\n<td width=\"125\">Passwords\/Minute<\/td>\n<\/tr>\n<tr>\n<td>2 x Intel Core Xeon(r) CPU x5460 @ 3.16 x 8<\/td>\n<td><\/td>\n<td><\/td>\n<\/tr>\n<tr>\n<td><\/td>\n<td>8<\/td>\n<td>272<\/td>\n<\/tr>\n<tr>\n<td><\/td>\n<td>16<\/td>\n<td>336<\/td>\n<\/tr>\n<tr>\n<td>Intel Core i7-3612QM CPU @ 2.10GHz \u00d7 8<\/td>\n<td><\/td>\n<td><\/td>\n<\/tr>\n<tr>\n<td><\/td>\n<td>1<\/td>\n<td>35<\/td>\n<\/tr>\n<tr>\n<td><\/td>\n<td>2<\/td>\n<td>69<\/td>\n<\/tr>\n<tr>\n<td><\/td>\n<td>4<\/td>\n<td>120<\/td>\n<\/tr>\n<tr>\n<td><\/td>\n<td>8<\/td>\n<td>152<\/td>\n<\/tr>\n<tr>\n<td>Intel Core i5-560M CPU @ 2.66 GHz x 4<\/td>\n<td><\/td>\n<td><\/td>\n<\/tr>\n<tr>\n<td><\/td>\n<td>1<\/td>\n<td>26<\/td>\n<\/tr>\n<tr>\n<td><\/td>\n<td>2<\/td>\n<td>40<\/td>\n<\/tr>\n<tr>\n<td><\/td>\n<td>4<\/td>\n<td>48<\/td>\n<\/tr>\n<tr>\n<td>Intel Core i7-2630QM @ 2.00 GHz x 4<\/td>\n<td><\/td>\n<td><\/td>\n<\/tr>\n<tr>\n<td><\/td>\n<td>8<\/td>\n<td>142<\/td>\n<\/tr>\n<\/tbody>\n<\/table>\n<p>&nbsp;<\/p>\n","protected":false},"excerpt":{"rendered":"<p>Grond is a LUKS (Linux Unified Key Setup) password cracker. Download Grond: You can download Grond script with this link. grond.sh What does it do? Grond was created to simplify and semi-automate the process of cracking a LUKS volume.\u00a0 All &hellip; <a href=\"https:\/\/www.incredigeek.com\/home\/projects\/grond\/\">Continue reading <span class=\"meta-nav\">&rarr;<\/span><\/a><\/p>\n","protected":false},"author":1,"featured_media":0,"parent":350,"menu_order":0,"comment_status":"open","ping_status":"closed","template":"","meta":{"footnotes":""},"class_list":["post-282","page","type-page","status-publish","hentry"],"_links":{"self":[{"href":"https:\/\/www.incredigeek.com\/home\/wp-json\/wp\/v2\/pages\/282","targetHints":{"allow":["GET"]}}],"collection":[{"href":"https:\/\/www.incredigeek.com\/home\/wp-json\/wp\/v2\/pages"}],"about":[{"href":"https:\/\/www.incredigeek.com\/home\/wp-json\/wp\/v2\/types\/page"}],"author":[{"embeddable":true,"href":"https:\/\/www.incredigeek.com\/home\/wp-json\/wp\/v2\/users\/1"}],"replies":[{"embeddable":true,"href":"https:\/\/www.incredigeek.com\/home\/wp-json\/wp\/v2\/comments?post=282"}],"version-history":[{"count":18,"href":"https:\/\/www.incredigeek.com\/home\/wp-json\/wp\/v2\/pages\/282\/revisions"}],"predecessor-version":[{"id":286,"href":"https:\/\/www.incredigeek.com\/home\/wp-json\/wp\/v2\/pages\/282\/revisions\/286"}],"up":[{"embeddable":true,"href":"https:\/\/www.incredigeek.com\/home\/wp-json\/wp\/v2\/pages\/350"}],"wp:attachment":[{"href":"https:\/\/www.incredigeek.com\/home\/wp-json\/wp\/v2\/media?parent=282"}],"curies":[{"name":"wp","href":"https:\/\/api.w.org\/{rel}","templated":true}]}}