ExclamationOutdated[Official] [Cracker] Egg.Crack 1.6

Posts 1–15 of 40 · Page 1 of 3
[Official] [Cracker] Egg.Crack 1.6
Egg.Crack();


Hi MPGH. I was just checking on an old program I made and found it was quite... broken. Thank-you to all of you who've supported my cracker over the last few months (that is, before it broke!). Consider this a late Christmas present: Egg.Crack 1.6 with a patch for the rather annoying "Not Premium" bug. Perhaps some of you will also notice there are new features that I didn't quite get the chance to share with Nodus before it shut down.

Not sure how I can prove it's really me being so late in the game on this, but I guess the registration date on my account should vouch for me.


Yggdrasil

Since Yggdrasil runs on a new authentication system, Mojang took the time to ensure that new logins without a previously known session token introduced to this new API (which replaces the poorly secured lastlogin file most of you are aware of) will invalidate previous sessions. This means if you crack 50 accounts overnight, it's very possible 50 people will attempt to log into their 1.6+ clients later that week, and find that their sessions are broken. Which means you could lose accounts. As you can imagine, with this in mind I did not update Egg.Crack to even support Yggdrasil, as it's far too useless for a program that needs to log into a massive amount of accounts in a short period of time (such is how all crackers work by nature).


Release Notes

I've added some neat features, such as password streaming and buffering, so the new hash cracking methods can input massive password dictionaries without requiring 1GB of your RAM upfront. Basically, just a preventative measure. That, and a bunch of other things are present in this new official build of the program.


Download & Virus Scans

Current version: 1.7 (January 4th)
EggCrack17_mpgh.net.zip - Jotti's malware scan
I suppose you guys are adamant about the virus-scans like most other forums. I will provide--although, you really need to decompile programs if you can (you'll find I haven't obfuscated anything), it's just good practice in the ever-evolving world of malware.

Seeing as how I cannot post links (still), I will need a moderator to edit my post again.


Contact

In the future, I can be contacted on Skype (thesillyputty [I use a mitigating VPN, don't bother.]). Please keep me in the loop if something breaks again!


Footnote

This Jar was compiled with the Java 7 JDK; you'll need Java 7 to run it.

I really owe mrBombast, for making a thread to get Egg.Crack out to the community (thanks for providing credit!), Flamegunners and his wonderful tutorial thread, and ayed12345 for posting a thread about the crippling bugs (Which, of course, got me to update it and post here). It really made me gratified to see all the thanks on the reposts; I'm glad to keep you guys up to date!

Oh, and it's not technically egg.cracker; I originally called it EggCrack, but Egg.Crack is growing on me now (the header graphic is just a design thing).

Trouble I've been causing:
All of the following were done with a friend of mine. Not sure if he wants me to give him credit (for obvious reasons).
- 'netted a bunch of Bukkit servers with the PSA-worthy breach of their reviewal process: NanoGuard and InfiniteDispenser.
- Managed to grief Planet Minecraft, Reddit, etc. etc. as Op.
- Defaced a bunch of Bukkit plugin pages with a Bukkit mod's password.
EggCrack17_mpgh.net.zip74 KB · 337 downloads Scanning…
Quote Originally Posted by Manevolent View Post
Why in the world can I not post links? When I figure this out I will provide VirusTotal scans right away. For now, the SHA256 of the Jar inside the Zip is:
f02a8374fe422f2fa33dd9e3fa6aac6359f501e07eb9b6cfe3 af8e1d832a1185
Because you need like 10+ posts to be allowed to post links
Thanks, I might as well post around so I can get this show running.
You created EggCracker? And yes I was using it until it broke.
//Approved
Hi, I have 1 question about this tool. Well I am playing minecraft on cracked server, so the users are not guys with Original Minecraft (bought one), and im wondering, how can I crack passwords of players just from that server?
Going to test it out right now.


Currently Scanning my ENTIRE ALT LIST, i'll give you a full picture once it's done
still not properly working. please fix it
not work so well the checking is not work
Quote Originally Posted by liam096 View Post
not work so well the checking is not work
Dude it's working fine, I'm using the checker now and this is how far it is atm:
http://gyazo.com/ea446e4dbf161737a10690ab7ced0099.pngⓘ

Seems to be working fine =.=

Maybe needs a few fixes?
But it could be that my alt list is EXTREMELY OUTDATED, i'll check my smaller alt list after this one (47k)
Quote Originally Posted by liam096 View Post
not work so well the checking is not work
at least say thanks for the maker.
It's still showing some alts as not working when they are working
Thank you for the feedback! I'll research this. It's unusual for a cracker to crack 1% of lists that should be 60-70% working; instead, it's often to see them turn up a ton of false positives and report 90% working. Either way, this could be challenging, but I'll try to find any problems so it's all working by tomorrow.
I've identified the problems in EggCrack 1.6, and I'll be uploading 1.7 shortly.

Thank you for notifying me of the issue, here's what it was:

Mojang modified the way login.minecraft.net responded to HTTP POST requests; it seems as though there is an issue in the function EggCrack uses to build a poststring. For now, I've changed the method back to an HTTP GET request with the parameters in-line the URL (e.g. ?user=john&password=smith). I've run it through my own lists and found that a good majority of the accounts there are working with verifiable responses from the login servers.

I've also removed the performance clock on the thread creation method. This means that if you request 256 threads, you will start 256 threads locally instantly (As opposed to a limited, static number started every 1000ms). Please take caution when using high thread counts. I expect this to improve the performance of checks dramatically (I checked 100 accounts in less than 5 seconds with 200 threads, compared to 20 or 30 seconds before with the clock enabled).
Posts 1–15 of 40 · Page 1 of 3
This thread is closed for replies.

Similar Threads

Tags for this Thread

Need help?