Nome Utente: 
Password : 
Restringi sessione all'IP 
Online in 1gg

Have almost everything  Vai alla sfida "MD5.SALT"

1 2
Posizione globale: 170
Punteggio totale: 122326
Posts : 14
Grazie: 15
Voti+: 13
Registrato: 15a 354gg



Ultima visita: 1a 140gg
L'utente è Offline
Have almost everything
Google/traduci2Grazie!2Bel post!0Brutto post! Link
Hi!

Do I have to crack the admin's hash or there is an easier way? I have the hash and I also know what the salt is...
Punteggio totale: 956654
Posts : 127
Grazie: 167
Voti+: 115
Registrato: 18a 202gg
Avatar di Jinx














L'utente è Offline
RE: Have almost everything
Google/traduci2Grazie!2Bel post!0Brutto post! Link
Yes the hash needs to be cracked.
Posizione globale: 198
Punteggio totale: 110647
Posts : 1795
Grazie: 1390
Voti+: 961
Registrato: 18a 259gg




Ultima visita: 65gg 14ore
L'utente è Offline
RE: Have almost everything
Google/traduci1Grazie!1Bel post!0Brutto post! Link
As an additional hint:
It can be easily cracked with a common english wordlist.
I chose a long, plural, lowercase word.

Good luck and have fun with the challenges Smile
The geeks shall inherit the properties and methods of object earth.
Posizione globale: 76
Punteggio totale: 227334
Posts : 245
Grazie: 420
Voti+: 281
Registrato: 17a 310gg
Avatar di shadum







Ultima visita: 2a 106gg
L'utente è Offline
RE: Have almost everything
Google/traduci2Grazie!2Bel post!0Brutto post! Link
Citazione da CHItA
15 Nov 2010 - 18:46:40

Do I have to crack the admin's hash or there is an easier way?


I tried, unsuccessfully, to get around cracking the hash. I'm not sure that would have been an easier way though. Smile

Cracking it isn't hard if you know the salt, have a decent wordlist, and the right tool. It cracked in seconds for me, once I had those three things. Really, if you've got the hash and the salt you have already done the hardest part.
Punteggio totale: 956654
Posts : 127
Grazie: 167
Voti+: 115
Registrato: 18a 202gg
Avatar di Jinx














L'utente è Offline
RE: Have almost everything
Google/traduci2Grazie!1Bel post!1Brutto post! Link
Citazione da shadum
Cracking it isn't hard if you know the salt, have a decent wordlist, and the right tool. It cracked in seconds for me, once I had those three things. Really, if you've got the hash and the salt you have already done the hardest part.



I totally agree with Gizmore and shadum. The cracking part took me around 10 seconds. The hardest part was to find the hash .. it took me ages!
Ultima modifica: Jinx - 15 Nov 2010 - 21:04:00
Posizione globale: 170
Punteggio totale: 122326
Posts : 14
Grazie: 15
Voti+: 13
Registrato: 15a 354gg



Ultima visita: 1a 140gg
L'utente è Offline
RE: Have almost everything
Google/traduci2Grazie!2Bel post!0Brutto post! Link
That's quiet funny because for me to get these stuff was the shorter part, now i try to find wordlists and password crackers that is able to crack pass.salt format and these stuff didn't work at all... :/

EDIT: Finally I got the answer Smile thanks for hints!
Ultima modifica: CHItA - 15 Nov 2010 - 22:17:52
Posizione globale: 1544
Punteggio totale: 17819
Posts : 2
Grazie: 2
Voti+: 2
Registrato: 15a 339gg
L'utente è Offline
RE: Have almost everything
Google/traduci1Grazie!1Bel post!0Brutto post! Link
I have the hash, it was the easier part for me. The cracking could be easy also, but I don't know what the salt is.
Is it a "guess the salt" challenge or I have to get the salt somehow else?
Posizione globale: 38
Punteggio totale: 311682
Posts : 54
Grazie: 80
Voti+: 59
Registrato: 18a 209gg










Ultima visita: 114gg 11ore
L'utente è Offline
RE: Have almost everything
Google/traduci1Grazie!1Bel post!0Brutto post! Link
yeap you can guess the salt if you are lucky enough.. Drool
but there is a way to find it so you don't have to guess anything...
so no it's not a "guess the salt" challenge.. Smile
good luck

criple_ripper
Posizione globale: 1544
Punteggio totale: 17819
Posts : 2
Grazie: 2
Voti+: 2
Registrato: 15a 339gg
L'utente è Offline
RE: Have almost everything
Google/traduci1Grazie!1Bel post!0Brutto post! Link
Citazione da criple_ripper
03 Dic 2010 - 12:04:15

yeap you can guess the salt if you are lucky enough.. Drool
but there is a way to find it so you don't have to guess anything...
so no it's not a "guess the salt" challenge.. Smile
good luck

criple_ripper

oh, ok, then i've to rethink it Smile
thx
Posizione globale: 233
Punteggio totale: 95263
Posts : 15
Grazie: 19
Voti+: 15
Registrato: 16a 253gg


Ultima visita: 3a 64gg
L'utente è Offline
RE: Have almost everything
Google/traduci1Grazie!1Bel post!0Brutto post! Link
there are many ways to use the salt..
like md5(md5(pass).md5(salt)) or md5(pass.md5(salt)) or md5(md5(pass).salt) or even md5(pass.salt)
is the used way mentioned in the title (md5(md5(pass).salt))?
1 2
faxtorial, Redknee, silenttrack, n0tHappy, nonfungiblesecurity, quangntenemy, TheHiveMind, Z, balicocat, Ge0, arraez, jcquinterov, hophuocthinh, alfamen2, burhanudinn123, Ben_Dover, stephanduran89, braddie0, fpombal, csuquvq utenti hanno sottoscritto il thread e ricevo le E-Mail di notifica.
1 persone stanno visualizzando il thread.
Questo thread è stato visualizzato 51198 volte.

PHP Fatal Error(1): Constant E_STRICT is deprecated since 8.4, the error level was removed in www/protected/config.php line 6


Backtrace starts in [unknown file] line ?. GWF_Debug::shutdown_function() core/inc/util/GWF_Debug.php line 109. GWF_Debug::error_handler().... core/inc/util/GWF_Debug.php line 180.