Markopy
Utilizing Markov Models for brute forcing attacks
Markopy

Contributors Forks Stargazers Issues GitHub


Markopy

Generate wordlists with markov models.
HTML documentation · PDF documentation · Github Page · Report Bug · Add a Bug

Table of Contents

  1. About The Project
  2. Using the Project
  3. Building
  4. File Structure
  5. Known Common Issues
  6. Contributing
  7. Contact

About The Project

This projects primary goal is to create a comfortable development environment for working with Markov Models, as well as creating an end product which can be used for generating password wordlists using Markov Models.

This project contains following sub-projects:

  • MarkovModel
    • A versatile header-only template library for basic Markov Model structure.
  • MarkovAPI
    • A static/dynamic library built on MarkovModel, specialized to generate single-word lines.
  • MarkovAPICLI
    • A command line interface built on top of MarkovAPI
  • Markopy
    • A CPython extension wrapper for MarkovAPI, along with its own command line interface.
  • MarkovPasswordsGUI
    • A graphical user interface for MarkovAPI
  • CudaMarkovAPI
    • GPU-accelerated wrapper for MarkovAPI
  • CudaMarkopy
    • GPU-accelereted wrapper for CudaMarkovAPI

Possible Use Cases

While main focus of the development has been towards random walk performance and password generation, underlying libraries could be used for other applications such as specific use cases of hidden markov models in bioinformatics and gene research.

Getting Started

If you'd just like to use the project without contributing, check out the releases page. Latest minor release (0.8.x, 0.9.x) is even with main branch, and latest patch release (0.8.1, 0.8.2) is even with development branch.

Releases

Releases are maintained automatically via github actions. Each push to the main branch will trigger a minor version release, while each accepted pull request into the development branch will trigger a patch version release.

Pull requests to the development branch will also trigger a draft release only visible to the maintainers.

Release files contain:

  • libmarkov-{version}-{platform}.zip
    • Depending on the platform, contains the libmarkov.so or markov.lib from that version.
  • libcudamarkov-{version}-{platform}.zip
    • Depending on the platform, contains the libcudamarkov.so or cudamarkov.lib from that version.
  • markopy-{version}-{platform}-py{ver}.{extension}.zip
    • Depending on the paltform, contains markopy.so or markopy.pyd. CPython extensions are compiled for specific versions. If your python version is not supported by the releases, you can create an issue, or build it yourself using the python3.x-dev package.
  • cudamarkopy-{version}-{platform}-py{ver}.{extension}.zip
    • Depending on the paltform, contains cudamarkopy.so or cudamarkopy.pyd. CPython extensions are compiled for specific versions. If your python version is not supported by the releases, you can create an issue, or build it yourself using the python3.x-dev package.
  • models-{version}.zip
    • Contains the latest models with the release version. Contains base models (untrained), trained models, and language-specific models.

Using the Project

You may use any section of this project, but we highly recommend using Markopy/CudaMarkopy python modules becaue they are optimized for the better user experience.

asciicast

Using Markopy/CudaMarkopy

You can access basic operations from various model types using the python module, and if you are inexperienced with:

  • Libmarkov and Libcudamarkov internals
  • C++ code in general
  • Importing and extending libraries in general
  • Working with Python/C++ intermixed code

We strongly recommend using the python module.

While almost all of the python files provide their own entry point, you should use markopy.py or cudamarkopy.py depending on your preferences. Please note that CUDA code will not run without an NVIDIA graphics card, and without CUDA runtime.

markopy.py and cudamarkopy.py will let you select the model type you want to use with the -mt parameter. With each model, there are slightly different parameters available.

For top level CLI selector (markopy.py and cudamarkopy.py)

Model Mode selection choices:
usage: cudamarkopy.py [-mt MODEL_TYPE] [-h] [-ev EVALUATE] [-evt EVALUATE_TYPE]
Python wrapper for MarkovPasswords.
optional arguments:
-mt MODEL_TYPE, --model_type MODEL_TYPE
Model type to use. Accepted values: MP, MMX
-h, --help Model type to use. Accepted values: MP, MMX
-ev EVALUATE, --evaluate EVALUATE
Evaluate a models integrity
-evt EVALUATE_TYPE, --evaluate_type EVALUATE_TYPE
Evaluation type, model or corpus
Sample runs:
markopy.py -mt MP generate trained.mdl -n 500 -w output.txt
Import trained.mdl, and generate 500 lines to output.txt
markopy.py -mt MMX generate trained.mdl -n 500 -w output.txt
Import trained.mdl, and generate 500 lines to output.txt
cudamarkopy.py -mt CUDA generate trained.mdl -n 500 -w output.txt
Import trained.mdl, and generate 500 lines to output.txt

Help

You can use the --help function to print all the parameter details for all of the model types. Alternatively, you can combine it with -mt parameter to only print a single models parameters.

Evaluation

You can use the top level CLI selector to evaluate validity of a model or a corpus file (or many, if you provide a glob path pattern). A couple of examples:

asciicast

Evaluate all of the models in the repository.

python3 cudamarkopy.py -ev "../../../models/**/*" -evt model

Example outputs:

  • A well trained model
[+] Model: trained.mdl:
[+] total edges: 9024
[+] unique left nodes: 95
[+] unique right nodes: 95
################ Checks ################
[+] No dangling nodes :✅
[+] Median in expected ratio :✅
[+] Good bottom 10% :✅
[+] 0 edges below threshold :✅
[+] Model structure :✅
[+] Model has any training :✅
[+] Model has training :✅
[+] Model training score: 3500088 :✅
  • An untrained model:
[+] Model: 2gram.mdl:
[+] total edges: 9024
[+] unique left nodes: 95
[+] unique right nodes: 95
division by zero
[+] 0 weighted edges are dangerous and may halt the model.
[+] Model seems to be untrained
[+] Model is not adequately trained. Might result in inadequate results
################ Checks ################
[+] No dangling nodes :✅
[+] Exceptionn in check_distrib :❌
[+] Median in expected ratio :✅
[+] Good bottom 10% :✅
[+] Too many 0 edges :❌
[+] Model structure :✅
[+] Model has any training :❌
[+] Model has training :❌
[+] Model training score: 0.0 :❌
  • A model with inadequate training due to small corpus file
    [+] Model: corpus-Icelandic.mdl:
    [+] total edges: 9024
    [+] unique left nodes: 95
    [+] unique right nodes: 95
    [+] Model is not adequately trained. Might result in inadequate results
    ################ Checks ################
    [+] No dangling nodes :✅
    [+] Median in expected ratio :✅
    [+] Good bottom 10% :✅
    [+] 0 edges below threshold :✅
    [+] Model structure :✅
    [+] Model has any training :✅
    [+] Model has training :❌
    [+] Model training score: 208.68 :❌
  • A model with improper training due to alphabet conflicts (Mostly seen in languages with non-latin alphabets)
[+] Model: corpus-Japanese.mdl:
[+] total edges: 9024
[+] unique left nodes: 95
[+] unique right nodes: 95
[+] Median is too left leaning and might indicate high entropy
################ Checks ################
[+] No dangling nodes :✅
[+] Median too left leaning :❌
[+] Good bottom 10% :✅
[+] 0 edges below threshold :✅
[+] Model structure :✅
[+] Model has any training :✅
[+] Model has training :✅
[+] Model training score: 10952 :✅

Evaluate a corpus file.

python3 cudamarkopy.py -ev "../../../datasets/pwdb.corpus"
[+] Corpus: graduation.corpus:
[+] Delimiter is: b'\t'
[+] Total number of lines: 157668136
[+] Sum of all string weights: 700089109
[+] Character total: 1498134485
[+] Average length: 9.501821503109545
[+] Average weight: 4.440270093635153
################ Checks ################
[+] No structural conflicts :✅

Model selection

You may use the -mt parameter from markopy.py or cudamarkopy.py to select a model type. Allowed parameters are: MP, MMX, CUDA

Following, is each of the parameters required for these model types.

Following are applicable for -mt MP mode:

Python wrapper for MarkovPasswords.
positional arguments:
mode Process mode. Either 'Train', 'Generate', or 'Combine'.
input Input model file. This model will be imported before starting operation.
optional arguments:
-h, --help show this help message and exit
-o OUTPUT, --output OUTPUT
Output model file. This model will be exported when done. Will be ignored for generation mode.
-d DATASET, --dataset DATASET
Dataset file to read input from for training. Will be ignored for generation mode.
-s SEPERATOR, --seperator SEPERATOR
Seperator character to use with training data.(character between occurrence and value)
-t THREADS, --threads THREADS
Number of lines to generate. Ignored in training mode.
-v, --verbosity Output verbosity.
-b, --bulk Bulk generate or bulk train every corpus/model in the folder.
-w WORDLIST, --wordlist WORDLIST
Wordlist file path to export generation results to. Will be ignored for training mode
--min MIN Minimum length that is allowed during generation
--max MAX Maximum length that is allowed during generation
-n COUNT, --count COUNT
Number of lines to generate. Ignored in training mode.
Sample runs:
base.py train untrained.mdl -d dataset.dat -s "\t" -o trained.mdl
Import untrained.mdl, train it with dataset.dat which has tab delimited data, output resulting model to trained.mdl
base.py generate trained.mdl -n 500 -w output.txt
Import trained.mdl, and generate 500 lines to output.txt
base.py combine untrained.mdl -d dataset.dat -s "\t" -n 500 -w output.txt
Train and immediately generate 500 lines to output.txt. Do not export trained model.
base.py combine untrained.mdl -d dataset.dat -s "\t" -n 500 -w output.txt -o trained.mdl
Train and immediately generate 500 lines to output.txt. Export trained model.
usage: cudamarkopy.py [-h] [-o OUTPUT] [-d DATASET] [-s SEPERATOR] [-t THREADS] [-v] [-b] [-w WORDLIST]
[--min MIN] [--max MAX] [-n COUNT]
mode input

Following are applicable for -mt MMX mode:

usage: cudamarkopy.py [-h] [-t THREADS] [-v] [-b] [-w WORDLIST] [--min MIN] [--max MAX] [-n COUNT] [-st]
mode input
Python wrapper for MarkovPasswords.
positional arguments:
mode Process mode. Either 'Train', 'Generate', or 'Combine'.
input Input model file. This model will be imported before starting operation.
optional arguments:
-h, --help show this help message and exit
-t THREADS, --threads THREADS
Number of lines to generate. Ignored in training mode.
-v, --verbosity Output verbosity.
-b, --bulk Bulk generate or bulk train every corpus/model in the folder.
-w WORDLIST, --wordlist WORDLIST
Wordlist file path to export generation results to. Will be ignored for training mode
--min MIN Minimum length that is allowed during generation
--max MAX Maximum length that is allowed during generation
-n COUNT, --count COUNT
Number of lines to generate. Ignored in training mode.
-st, --stdout Stdout mode
Sample runs:
base.py train untrained.mdl -d dataset.dat -s "\t" -o trained.mdl
Import untrained.mdl, train it with dataset.dat which has tab delimited data, output resulting model to trained.mdl
base.py generate trained.mdl -n 500 -w output.txt
Import trained.mdl, and generate 500 lines to output.txt
base.py combine untrained.mdl -d dataset.dat -s "\t" -n 500 -w output.txt
Train and immediately generate 500 lines to output.txt. Do not export trained model.
base.py combine untrained.mdl -d dataset.dat -s "\t" -n 500 -w output.txt -o trained.mdl
Train and immediately generate 500 lines to output.txt. Export trained model.

Following are applicable for -mt CUDA mode:

usage: cudamarkopy.py [-h] [-t THREADS] [-v] [-b] [-w WORDLIST] [--min MIN] [--max MAX] [-n COUNT] [-st] [-if]
mode input
Python wrapper for MarkovPasswords.
positional arguments:
mode Process mode. Either 'Train', 'Generate', or 'Combine'.
input Input model file. This model will be imported before starting operation.
optional arguments:
-h, --help show this help message and exit
-t THREADS, --threads THREADS
Number of lines to generate. Ignored in training mode.
-v, --verbosity Output verbosity.
-b, --bulk Bulk generate or bulk train every corpus/model in the folder.
-w WORDLIST, --wordlist WORDLIST
Wordlist file path to export generation results to. Will be ignored for training mode
--min MIN Minimum length that is allowed during generation
--max MAX Maximum length that is allowed during generation
-n COUNT, --count COUNT
Number of lines to generate. Ignored in training mode.
-st, --stdout Stdout mode
-if, --infinite Infinite generation mode
Sample runs:
base.py train untrained.mdl -d dataset.dat -s "\t" -o trained.mdl
Import untrained.mdl, train it with dataset.dat which has tab delimited data, output resulting model to trained.mdl
base.py generate trained.mdl -n 500 -w output.txt
Import trained.mdl, and generate 500 lines to output.txt
base.py combine untrained.mdl -d dataset.dat -s "\t" -n 500 -w output.txt
Train and immediately generate 500 lines to output.txt. Do not export trained model.
base.py combine untrained.mdl -d dataset.dat -s "\t" -n 500 -w output.txt -o trained.mdl
Train and immediately generate 500 lines to output.txt. Export trained model.

Training

If you do not have a custom corpus to train with, you may use one of the pre-trained models from the github releases.

python3 cudamarkopy.py train ../../../models/base-models/2gram.mdl -d ../../../datasets/graduation.corpus -s "\\t" -o test.mdl -vvvvvvvvv

Generation

If you have not trained a model, you may download on of the trained models (preferably models/trained/trained.mdl) from the releases and use it for generation.

Generating to a file

python3 cudamarkopy.py generate trained.mdl -mt MMX -n 5000 --min 6 --max 12 -w test.txt -vvvv

Generating to stdout

python3 cudamarkopy.py generate trained.mdl -mt MMX -n 5000 --min 6 --max 12 --stdout

Generating with CUDA model WARNING Do not use CUDA model unless you want to generate 500M+ lines. Prefer stdout mode with pipes instead of writing to disk whenever possible

Using with Hashcat

python3 cudamarkopy.py generate trained.mdl -mt CUDA -n 5000 --min 6 --max 12 --stdout | hashcat -m 1400 hashes.txt -O

Use with hashcat, continue until terminated

python3 cudamarkopy.py generate trained.mdl -mt CUDA -n 5000 --min 6 --max 12 --stdout --infinite | hashcat -m 1400 hashes.txt -O

Building

You can build the project using cmake with g++ & nvcc on linux, and msbuild & nvcc on windows.

Prerequisites

You can find a list of the dependencies below. If you have any missing, check out the setting up prequisites part.

General prequisites

To build the simple core of this project, you'll need:

Linux

  • CMake, preferably one of the latest versions.
  • CXX compiler, preferably g++ or clang++ (LLVM 3.9+).

Windows

  • CMake, preferably one of the latest versions.
  • CXX compiler, preferably msbuild(cl.exe) or clang++ (LLVM 3.9+). Please note that mingw is not recommended as it is not officially supported by the nvcc.exe, and might not be linkable if you are building the CUDA components too.

MarkovModel

This project does not have any extra dependencies, and it can be compiled with general dependencies without anything extra.

MarkovAPI

This project does not have any extra dependencies, and it can be compiled with general dependencies without anything extra.

MarkovAPICLI

  • Boost.program_options (tested on 1.71.0-1.76.0)

Markopy

  • Boost.Python (tested on 1.71.0-1.76.0)
  • Python development package (tested on python 36-39)

CudaMarkovAPI

  • CUDA toolkit (11.0+, c++17 support required)

CudaMarkopy

  • CUDA toolkit (11.0+, c++17 support required)
  • Boost.Python (tested on 1.71.0-1.76.0)
  • Python development package (tested on python 36-39)

MarkovPasswordsGUI

  • QT5 development environment. (qt5-qmake on ubuntu apt-get)
  • QTWebEngine5 plugin. (qtwebengine5-dev on ubuntu apt-get)

CMake Configuration

You can build this project with cmake.

If you don't have prequisites for some of the projects set up, you can use the partial set up configuration to ignore those projects when setting the project up.

If you do not meet the prequisites, you'll have to partially set up the CMake file (you cant use –target to build some of the targets, because configuration phase will fail too).

Some examples for partially setting up and building the project are below.

Build everything

$ cmake . -DPYTHON_VER=38 && cmake --build .

This will build all the libraries and executables. Requires python-dev, CUDA, QT5, QT5-Webview

Build libraries only

$ cmake . -DPARTIAL=1 -DB_LIBS=1 && cmake --build .

Only build basic libraries. Requires only CXX compiler.

Build CUDA-accelerated libraries

$ cmake . -DPARTIAL=1 -DB_CUDA=1 && cmake --build .

Build libraries along with cuda accelerated ones.

Build python module & libraries

$ cmake . -DPARTIAL=1 -DPYTHON_VER=39 && cmake --build .

Will build basic libraries and python modules.

Build CUDA accelerated python module

$ cmake . -DPARTIAL=1 -DPYTHON_VER=39 -DB_CUDA=1 && cmake --build .

Will build cudamarkopy.

Build CUDA accelerated python module and the GUI

$ cmake . -DPARTIAL=1 -DPYTHON_VER=39 -DB_CUDA=1 -DB_GUI && cmake --build .

Combine methods


Installing Dependencies

Windows

  • QT: Install QT For Windows
  • Boost (program_options and python):
    • Download Boost from its website. Prefer one of the tested versions, 1.71.0 to 1.76.0
    • Unzip the contents.
    • Launch "Visual Studio Developer Command Prompt" (If you don't have this, properly set up the PATH% variable for cl.exe)
    • Move to the boost installation directory. Bootstrap libraries with your python version:
      .\bootstrap.bat --with-python=$(which python3.6) --with-python-version=3.6;
    • Run b2 to build the libraries.
      .\b2.exe --layout=system address-model=64 variant=release link=static runtime-link=shared threading=multi --with-program_options --with-python stage;
  • Python: You can use the windows app store to download python runtime and libraries.

Linux

  • QT: Follow this guide to install QT on Linux. Alternatively, on ubuntu you can sudo apt-get install qt5-qmake qtwebengine5-dev
  • Boost (program options and python):
    • Download Boost from its website. Prefer one of the tested versions, 1.71.0 to 1.76.0
    • Unzip the contents.
    • Move to the boost installation directory. Bootstrap libraries with your python version:
      ./bootstrap.sh --with-python=$(which python3.6) --with-python-version=3.6;
    • Run b2 to build the libraries.
      ./b2 variant=release link=static threading=multi --with-program_options install;
      ./b2 --with-python --buildid=3.6 install;
  • Boost (alternative)
    • Use a package manager to install boost
      sudo apt-get install libboost-all-dev
  • Python:
    sudo apt-get install python3-dev

File Structure

You may chose to create your own model structures or corpus files. Following, is the reference for the current structure for them.

Model

Model files are basically a list of edges in the model

Format is {left_node_content},weight,{right_node_content}\n

Example:

l,5,r
l,12,g
...

There are additional requirements for a model for entry and termination nodes. Entry nodes are represented with 0x00, and termination nodes are represented with 0xff

It is expected (but not mandatory) to have an edge from starting node to all of the other nodes, and same applies for edges from each nodes to the termination nodes.

If termination node has any edges that it is position on the left (meaning model file expectation is to traverse to another node after termination node) it will be loaded to the edges, but will be ignored during the random walk logic.

Corpus

Corpus files are used to train models. You may chose to train your own model (preferably over an existing base model, like 2gram.mdl) to have your own generation style.

Corpus file format is:

{occurrence}{seperator}{string}\n

  • Occurrence is the weight associated with that string.
  • Seperator is a single character seperator used to seperate occurrence with the string
  • String is the password/string/sequence you want to add to the model.

Known Common issues

Linux

Markopy - Python.h - Not found

Make sure you have the development version of python package, which includes the required header files. Check if header files exist: /usr/include/python* or locate Python.h.

If it doesn't, run sudo apt-get install python3-dev

Markopy/MarkovAPI - *.so not found, or other library related issues when building

Run:

ls /usr/lib/x86_64-linux-gnu/ | grep boost

and check the shared object filenames. A common issue is that lboost is required but filenames are formatted as libboost, or vice versa.

Do the same for python related library issues, run:

ls /usr/lib/x86_64-linux-gnu/ | grep python

to verify filename format is as required.

If not, you can modify the makefile, or create symlinks such as:

ln -s /usr/lib/x86_64-linux-gnu/libboost_python38.so /usr/lib/x86_64-linux-gnu/boost_python38.so

Windows

Boost - Bootstrap.bat "ctype.h" not found

  • Make sure you are working in the "Visual Studio Developer Command Prompt" terminal.
  • Make sure you have Windows 10 SDK installed.
  • From VS developer terminal, run echo INCLUDE%. If result does not have the windows sdk folders, run the following before running bootstrap (change your sdk version instead of 10.0.19041.0):
    set INCLUDE=%INCLUDE%;C:\Program Files (x86)\Windows Kits\NETFXSDK\4.8\include\um;C:\Program Files (x86)\Windows Kits\10\include\10.0.19041.0\ucrt;C:\Program Files (x86)\Windows Kits\10\include\10.0.19041.0\shared;C:\Program Files (x86)\Windows Kits\10\include\10.0.19041.0\um;C:\Program Files (x86)\Windows Kits\10\include\10.0.19041.0\winrt;C:\Program Files (x86)\Windows Kits\10\include\10.0.19041.0\cppwinrt
    set LIB=%LIB%;C:\Program Files (x86)\Windows Kits\10\lib\10.0.19041.0\ucrt\x64;C:\Program Files (x86)\Windows Kits\10\lib\10.0.19041.0\um\x64

Cannot open file "*.lib"

Make sure you have set the BOOST_ROOT environment variable correctly. Make sure you ran b2 to build library files from boost sources.

Python.h not found

Make sure you have python installed, and make sure you set PYTHON_PATH environment variable.


Contributing

Feel free to contribute. We welcome all the issues and pull requests.

Contact

Twitter - @ahakcil