Nome Utente: 
Password : 
Restringi sessione all'IP 
Online in 1gg

WC4 hash list check up  Vai alla sfida "WC Hashing Game"

Posizione globale: 97
Punteggio totale: 184191
Posts : 6
Grazie: 5
Voti+: 5
Registrato: 18a 180gg
Avatar di IPYouFy


Ultima visita: 14a 155gg
L'utente è Offline
WC4 hash list check up
Google/traduci1Grazie!1Bel post!0Brutto post! Link
Hi,

is the WC4 hash list generated for this challenge all right? It seems a bit weird that it changes with each page refresh (WC3 list doesn't). Also, attacking WC4 hashes never got any result for me (which of course might be my problem Happy).

Edit: Never mind. It was my problem and the changing hash is actually a feature of the random salt...
Ultima modifica: IPYouFy - 07 Apr 2011 - 02:17:25
Posizione globale: 1431
Punteggio totale: 19330
Posts : 19
Grazie: 9
Voti+: 12
Registrato: 15a 259gg
Ultima visita: 354gg 18ore
L'utente è Offline
RE: WC4 hash list check up
Google/traduci1Grazie!1Bel post!0Brutto post! Link
Haven't noticed this before, but this should not pose a problem.

cheers, p0lar
Posizione globale: 198
Punteggio totale: 110647
Posts : 1795
Grazie: 1390
Voti+: 961
Registrato: 18a 259gg




Ultima visita: 65gg 17ore
L'utente è Offline
RE: WC4 hash list check up
Google/traduci1Grazie!2Bel post!0Brutto post! Link
Citazione da IPYouFy
06 Apr 2011 - 22:35:11

Edit: Never mind. It was my problem and the changing hash is actually a feature of the random salt...


Of course i could have computed a fixed table for the hashes.
But this is against my "Code you see is code in use" philosophy Smile

Happy Challenging!
The geeks shall inherit the properties and methods of object earth.
Posizione globale: 135
Punteggio totale: 143258
Posts : 128
Grazie: 109
Voti+: 127
Registrato: 12a 48gg
Avatar di occasus



Ultima visita: 114gg 21ore
L'utente è Offline
RE: WC4 hash list check up
Google/traduci1Grazie!1Bel post!0Brutto post! Link
Hello all dear Challengers,
... I see right now how the hashes Happy shame on me. I leave the question under the spoiler so you can make fun of me Sad Smile
Kindest Regards to All - occasus

I got a little question about the code of WC4 part. On line 19 after the function hash(...) how to interpret this: ).$salt; ? I'm really not understanding that concatenation... Maybe it's obvious for many, but not for me, yet.

Any explanation highly appreciated Smile and thanks in advance
Ultima modifica: occasus - 19 Mar 2020 - 03:26:26
Posizione globale: 2
Punteggio totale: 747640
Posts : 441
Grazie: 501
Voti+: 478
Registrato: 17a 98gg












L'utente è Offline
RE: WC4 hash list check up
Google/traduci2Grazie!2Bel post!0Brutto post! Link
Not really a spoiler, but...
This is normal when you have a unique salt per password hash, as is the case here. Here you have to store the salt with the hash, otherwise you cannot verify the hash at a later point. Perhaps it is clearer if you try to make corresponding verification functions (e.g. function verify_wc4($password, $hash)).

The reason to do this should be(come) clear from the difference in cracking the WC3 and WC4 hashes.
Redknee, silenttrack, n0tHappy, nonfungiblesecurity, quangntenemy, TheHiveMind, Z, balicocat, Ge0, arraez, jcquinterov, hophuocthinh, alfamen2, burhanudinn123, Ben_Dover, stephanduran89, braddie0, fpombal, csuquvq utenti hanno sottoscritto il thread e ricevo le E-Mail di notifica.
1 persone stanno visualizzando il thread.
Questo thread è stato visualizzato 14726 volte.

PHP Fatal Error(1): Constant E_STRICT is deprecated since 8.4, the error level was removed in www/protected/config.php line 6


Backtrace starts in [unknown file] line ?. GWF_Debug::shutdown_function() core/inc/util/GWF_Debug.php line 109. GWF_Debug::error_handler().... core/inc/util/GWF_Debug.php line 180.