Hash? Vai alla sfida "Railsbin"
Posizione globale: 2360
Punteggio totale: 11058
Posts : 2
Grazie: 1
Voti+: 1
Registrato: 10a 355gg
Ultima visita: 1a 309gg
L'utente è Offline
Hash?
27 Apr 2018 - 17:39:15 (8a 189gg)
27 Apr 2018 - 17:39:15 (8a 189gg)
It looks like I've found the salted hash in Blowfish format but it seems to be too short. Plus I've found 2 different versions of it.
Should I get it rather from DB by using SQL injection instead?
Should I get it rather from DB by using SQL injection instead?
Ultima modifica: bfumaster - 27 Apr 2018 - 17:40:06
Posizione globale: 2
Punteggio totale: 747640
Posts : 441
Grazie: 501
Voti+: 478
Registrato: 17a 98gg
L'utente è Offline
RE: Hash?
27 Apr 2018 - 17:52:47 (8a 189gg)
27 Apr 2018 - 17:52:47 (8a 189gg)
How to find it is the whole challenge.
As for the two versions, obviously someone else added a user with the same name, but I'm sure you can figure out which is the right one.
As for the two versions, obviously someone else added a user with the same name, but I'm sure you can figure out which is the right one.
Posizione globale: 2360
Punteggio totale: 11058
Posts : 2
Grazie: 1
Voti+: 1
Registrato: 10a 355gg
Ultima visita: 1a 309gg
L'utente è Offline
RE: Hash?
30 Apr 2018 - 08:42:20 (8a 186gg)
30 Apr 2018 - 08:42:20 (8a 186gg)
I was not talking about two different users but 2 hash versions of the same user. Whatever.
Ultima modifica: bfumaster - 30 Apr 2018 - 08:44:28
Posizione globale: 2
Punteggio totale: 747640
Posts : 441
Grazie: 501
Voti+: 478
Registrato: 17a 98gg
L'utente è Offline
RE: Hash?
30 Apr 2018 - 15:07:12 (8a 186gg)
30 Apr 2018 - 15:07:12 (8a 186gg)
Citazione da bfumaster30 Apr 2018 - 08:42:20
Whatever.
That's the spirit...
I've had another look an it is indeed true that in some places different hashes are shown for the same user. This is due to some Rails magic in combination with bad coding.
As far as I can tell, if you find a way to get the full hash, you'll get the right one. So no need to worry about it at this stage.
Posizione globale: 198
Punteggio totale: 110647
Posts : 1795
Grazie: 1390
Voti+: 961
Registrato: 18a 259gg
Ultima visita: 65gg 20ore
L'utente è Offline
RE: Hash?
01 Mag 2018 - 00:56:23 (8a 185gg)
01 Mag 2018 - 00:56:23 (8a 185gg)
Citazione da dloser30 Apr 2018 - 15:07:12
Citazione da bfumaster30 Apr 2018 - 08:42:20
Whatever.
That's the spirit...
I've had another look an it is indeed true that in some places different hashes are shown for the same user. This is due to some Rails magic in combination with bad coding.
As far as I can tell, if you find a way to get the full hash, you'll get the right one. So no need to worry about it at this stage.
Haha... "Rails magic and bad coding" does not involve @gizmore, right?
i only wrote like 5 lines for that railsbin app...
Happy Hacking!
The geeks shall inherit the properties and methods of object earth.
Ultima modifica: gizmore - 01 Mag 2018 - 00:57:49
zM_, silenttrack, n0tHappy, nonfungiblesecurity, quangntenemy, TheHiveMind, Z, balicocat, Ge0, arraez, jcquinterov, hophuocthinh, alfamen2, burhanudinn123, Ben_Dover, stephanduran89, braddie0, fpombal, csuquvq utenti hanno sottoscritto il thread e ricevo le E-Mail di notifica.
1 persone stanno visualizzando il thread.
Questo thread è stato visualizzato 9778 volte.
1 persone stanno visualizzando il thread.
Questo thread è stato visualizzato 9778 volte.