Statistics

73485 Users

52 Donations

Top 10 Players

Last 20 Activities

Online within 1d

WeChall->Challenges->Challenge: WC Hashing Game

WC4 hash list check up Go to the WC Hashing Game challenge

IPYouFy

Global Rank: 97

Totalscore: 184191

Posts: 6

Thanks: 5

UpVotes: 5

Registered: 18y 178d

Last Seen: 14y 154d

The User is Offline

WC4 hash list check up
Apr 06, 2011 - 22:35:11 (15y 210d) Google/translate1Thank You!1Good Post!0Bad Post! link

Hi,

is the WC4 hash list generated for this challenge all right? It seems a bit weird that it changes with each page refresh (WC3 list doesn't). Also, attacking WC4 hashes never got any result for me (which of course might be my problem Happy

).

Edit: Never mind. It was my problem and the changing hash is actually a feature of the random salt...

Last edited by IPYouFy - Apr 07, 2011 - 02:17:25

p0lar

Global Rank: 1431

Totalscore: 19330

Posts: 19

Thanks: 9

UpVotes: 12

Registered: 15y 258d

Last Seen: 353d 16h

The User is Offline

RE: WC4 hash list check up
Apr 06, 2011 - 23:49:35 (15y 210d) Google/translate1Thank You!1Good Post!0Bad Post! link

Haven't noticed this before, but this should not pose a problem.

cheers, p0lar

gizmore

Global Rank: 198

Totalscore: 110647

Posts: 1795

Thanks: 1390

UpVotes: 961

Registered: 18y 258d

Last Seen: 64d 14h

The User is Offline

Send EMail to gizmore

RE: WC4 hash list check up
Apr 08, 2011 - 03:25:40 (15y 209d) Google/translate1Thank You!2Good Post!0Bad Post! link

Quote from IPYouFy
Apr 06, 2011 - 22:35:11

Edit: Never mind. It was my problem and the changing hash is actually a feature of the random salt...

Of course i could have computed a fixed table for the hashes.
But this is against my "Code you see is code in use" philosophy Smile

Happy Challenging!

The geeks shall inherit the properties and methods of object earth.

occasus

Global Rank: 135

Totalscore: 143258

Posts: 128

Thanks: 109

UpVotes: 127

Registered: 12y 47d

Last Seen: 113d 19h

The User is Offline

RE: WC4 hash list check up
Mar 19, 2020 - 03:17:59 (6y 226d) Google/translate1Thank You!1Good Post!0Bad Post! link

Hello all dear Challengers,
... I see right now how the hashes Happy

shame on me. I leave the question under the spoiler so you can make fun of me Sad

Kindest Regards to All - occasus

I got a little question about the code of WC4 part. On line 19 after the function hash(...) how to interpret this: ).$salt; ? I'm really not understanding that concatenation... Maybe it's obvious for many, but not for me, yet.

Any explanation highly appreciated Smile

and thanks in advance

Last edited by occasus - Mar 19, 2020 - 03:26:26

dloser

Global Rank: 2

Totalscore: 747640

Posts: 441

Thanks: 501

UpVotes: 478

Registered: 17y 96d

The User is Offline

RE: WC4 hash list check up
Mar 19, 2020 - 14:03:39 (6y 225d) Google/translate2Thank You!2Good Post!0Bad Post! link

Not really a spoiler, but...

This is normal when you have a unique salt per password hash, as is the case here. Here you have to store the salt with the hash, otherwise you cannot verify the hash at a later point. Perhaps it is clearer if you try to make corresponding verification functions (e.g. function verify_wc4($password, $hash)).

The reason to do this should be(come) clear from the difference in cracking the WC3 and WC4 hashes.

Redknee, silenttrack, n0tHappy, nonfungiblesecurity, quangntenemy, TheHiveMind, Z, balicocat, Ge0, arraez, jcquinterov, hophuocthinh, alfamen2, burhanudinn123, Ben_Dover, stephanduran89, braddie0, fpombal, csuquvq have subscribed to this thread and receive emails on new posts.
1 people are watching the thread at the moment.
This thread has been viewed 14725 times.