LCPSoft JRecoverer

JRecoverer is a product line for recovery of passwords to databases.

Development History

2018: Programs for recovery of passwords of NoSQL of databases

LCPSoft On April 5, 2018 announced a release of cross-platform applications of the JRecoverer family for recovery of passwords of NoSQL databases MongoDB, Cassandra and CouchDB.

The JRecoverer for MongoDB Passwords, JRecoverer for Cassandra Passwords and JRecoverer for CouchDB Passwords programs allow to receive hashes of passwords of users from databases of the corresponding types and to recover on them passwords by a search method, the attack according to the dictionary or a combined method.

Principle of work of utilities following: the program imports information on accounts of users, and several types of import are supported, then receive hashes of passwords from the database and try to recover from them passwords. It is important that programs of a line JRecoverer automatically determine the used algorithm of calculation of a hash. Based on a program runtime create the report on the recovered passwords with indication of the user accounts and the corresponding passwords and also different metrics and their graphical representation. Programs of the JRecoverer family offer function of security audit of passwords, revealing unsafe and weak passwords.

Products of the JRecoverer family are cross-platform. Oracle JRE 9 is necessary to have. The cost of an annual subscription to one product is $55. Besides, there is an opportunity to purchase a subscription to JRecoverer NoSQL Bundle including all three products for $80.

2017: JRecoverer for Linux Passwords 1.1.0

The LCPSoft company announced an exit of JRecoverer for Linux Passwords 1.1.0 at the beginning of a year. The program imports hashes of the user passwords of the different Linux distribution kits from the shadow file both from the local computer, and from the remote computer under the SSH protocol, recovering original passwords one of three methods.

Basis of security of a system and these users is security of passwords. The user passwords are stored in the Linux operating system not in open form, and in the form of hashes. Knowing only a hash, it is impossible to recover the original password. However it can be picked up though such method of recovery requires significantly more time.

The JRecoverer for Linux Passwords program allows to automate and accelerate both stages of recovery of the user password Linux: import of hashes from the shadow file, from the text file or using the SSH protocol, and recovery of the password on them. It is characteristic that the program is cross-platform and can work under any operating system with installed by Java Runtime Environment (JRE).

When importing information on the network protocol SSH the program obtains information on user accounts from the remote computer, being authenticated on is mute. If necessary, during copying of files, the program can automatically use the SU or SUDO commands for increase in the rights of the user.

The program supports recovery of the password from seven types of hashes - all possible options for the most popular Linux distribution kits, including Arch Linux, CentOS, Debian, Fedora, Gentoo, Knoppix, Linux Mint, openSUSE, Oracle Linux, Red Hat Enterprise Linux, Slackware, SUSE Linux Enterprise Server, Ubuntu. And for recovery consecutive search (brute-force) with restriction on the used characters and length of the password can be used as the attack according to the dictionary when the dictionary hash is compared to imported, and. Also the combination of these two methods is possible.

JRecoverer for Linux Passwords is the cross-platform application and supports any OS on which the Oracle JRE installation, including Windows, macOS and Linux is possible.

The cost of the license is $55 for the annual subscription including use of any versions and technical support during this time and $75 for the perpetual license only for the current version and its updates.

2016: JRecoverer 1.1

On March 22, 2016 the LCPSoft company announced an update to version 1.1 of a product line of JRecoverer for recovery of passwords to databases.

Utilities finds the lost passwords to a DB Oracle Database MySQL, PostgreSQL and Microsoft SQL Server using the attack according to the dictionary, brute force attack or iridescent tables.

Screenshot of a window of utility (2015)

As a part of JRecoverer line from LCPSoft company:

• JRecoverer for Oracle Database Passwords,
• JRecoverer for MySQL Passwords,
• JRecoverer for Microsoft SQL Server Passwords
• JRecoverer for PostgreSQL Passwords.

Using cumulative power of brute force attack, attack according to the dictionary and iridescent tables with in advance calculated hashes, these programs recover the user passwords of the called databases, analyze a DB on vulnerability to a similar type of cracking.

Utilities carefully import information on the user accounts to a DB one of the methods provided to DBMS. Then, using one of types of the attacks or their combination, JRecoverer recovers passwords and creates the text or graphic report. The JRecoverer series supports different methods of import of data and different types of authentication in the corresponding DB.

Screenshot of a window of the combined report (2015)

Programs are written in the Java language and completely cross-platform. Mac OS and Linux are supported Windows.