Analysis and Evaluation of the Windows Event Log - Bill Buchanan

Barrie Codona, BSc (Hons) Network Computing, 2007
Figure 55: iFrame.in Hash Calculator
To further check the security of HMAC a brute force cracker was written that would
systematically check for the key that was used to create the hash signature. The brute
force application starts checking all the possible single character keys from ‘0’ to ‘z’.
There are 75 different characters, so there are 75 different possible single character
keys. The program then checks all the two character keys ’00, 01, 02…’ through to
‘zz’, for this there are 5,625 different combinations. Next it checks the for all the
three character keys ‘000, 001, 002…’ until ‘zzz’. The full code for this can be found
in Appendix H.
63