ftp://ftp.brute.cl.cam.ac.uk/pub/brute/

This directory contains various usefule bits ane pieces relating to brute -- a scheme to use spare cycles to show that using a small number of bits does not give any real level of security.

NB: Please check that the version you pick up actually matches the version number given here (or is later !) as I have had a number of complaints that the WWW version of brclient and brwork are out of date when the actual problem was that some WWW code had "cached" the old copy (I wish someone would teach those guys what the word cache means !).

brutessl.tar.gz Source of the program to do a brute force attack on SSL. This is a private patched version, 1.03 (Sep 3 15:24).
brclient a perl script to get data and keys from the keyspace server, and also to return acknowledgements. brc0.26 is ALPHA code. You will need to update it soon (Sep 19 15:01)
brwork a shell script (the idea is that people can read it check it is "safe", and feel able to tailor it) to get on with doing some work. As well as using SKSP to get the work, the -k and -A can be used the (re-)process segments, and ACK segments respectively (brw0.00). (Sep 12 15:42)
brslave.pl a perl script (for UNIX systems) to allow the management of a local CPU Farm (See the -h and -i flags). It can require a per project config file (Sep 3 12:29) to avoid any need to contact the master server. (brs0.02). (Sep 4 19:04)
w32clnt.zip a Windows 3.1 / Windows 95 / NT client to get data and keys from the keyspace server, and also to return acknowledgements. Andy Brown <asb@nexor.co.uk> (Aug 30 13:07) .
Under NT (and maybe Windows 95 -- "be careful not to start too many searches as Win95 supports only a limited amount of multithreading") it can also start up a brutessl which does the scanning. Unfortunately, win32s does *NOT* support multi-threading so it is not able to start a second thread to actually run brutessl.
"It seems to work under windows 3.1 *if* you have win32s installed. It is thought that you might need >= 6Mb RAM to use win32s. Try it and see." -- but it can't actually search!
bruterc4.c Source of the program to do a brute force attack on RC4.
rc4.pl Simple perl script to implement RC4.
brutessl-djgcc.zip brutessl 1.02 compiled under djgcc under DOS on a 386, and go32. Use 'go32 brutessl test.pdf .... '. (Aug 29 13:38)
"9800 k/s on a dos 486/66"
BRUTESSL.ZIP brutessl 1.02 compiled under VC++ 1.5 under DOS (16 bit). Peter Trei <trei@iii.net> (Aug 23 19:50) "4000 k/s on a dos 486/33, 16000 k/s on an NT P5/90" so although it will run on any DOS machine, it is slow.
brutessl.exe (ziped) brutessl 1.02 compiled under symantic c++ Version 7.0 under win95 with NT flags by tomb <meteu@io.com> (Aug 23 06:38)
"You must run this binary in a win NT/win 95 console window"
"brutessl.exe (Win 95/NT) does NOT run under Win 3.1 with Win32s :-("
Said to get more like 36200 k/s on an NT P5/90.
brutesslos2.exe(sig) brutessl 1.02 compiled with gcc for OS/2 from TJ Hardin <hardin@cyberspace.com> PGP-key: 0x16A12465 (Aug 24 10:44)
"19900 k/s on P5/100 running OS/2"
brutessl.hqx . Self extracting archive of brutessl 1.02 for the Power Mac (MetroWerks C). Runs on PPC only (sorry to all you 68k mac owners). It achieves 12600 k/s on a Power Mac 6100/66, 23000 k/s on a 9500/120. (Sep 5 13:59)
There is a second version for the Power MAC from Matt Pauker <mpauker@peganet.com> compiled under Metrowerks' CodeWarrior 6 which runs about 20% faster, giving 30100 k/s on a 9500/120 (120mhz PowerPC 604) with extensions off and no applications open (27900 k/s in normal use). You just need to de-BinHex and de-StuffIt. Inludes a README and source. (Sep 11 09:16)

Sites behind FireWalls may care to follow this advise:

Get DeleGate and compile it. Start it, on the firewall, with the following command line:
delegated -P19957 SERVER=telnet://sksp.brute.cl.cam.ac.uk:19957/ RELIABLE=* REACHABLE=*
Now, in your Windoze client, just type your firewall hostname and port 19957 and you actually connect to the brute machine....

Comments, etc to postmaster@cl.cam.ac.uk. Back to parent