Waraxe IT Security Portal
Login or Register
November 5, 2024
Menu
Home
Logout
Discussions
Forums
Members List
IRC chat
Tools
Base64 coder
MD5 hash
CRC32 checksum
ROT13 coder
SHA-1 hash
URL-decoder
Sql Char Encoder
Affiliates
y3dips ITsec
Md5 Cracker
User Manuals
AlbumNow
Content
Content
Sections
FAQ
Top
Info
Feedback
Recommend Us
Search
Journal
Your Account
User Info
Welcome, Anonymous
Nickname
Password
(Register)

Membership:
Latest: MichaelSnaRe
New Today: 0
New Yesterday: 0
Overall: 9144

People Online:
Visitors: 117
Members: 0
Total: 117
Full disclosure
4 vulnerabilities in ibmsecurity
32 vulnerabilities in IBM Security Verify Access
xlibre Xnest security advisory & bugfix releases
APPLE-SA-10-29-2024-1 Safari 18.1
SEC Consult SA-20241030-0 :: Query Filter Injection in Ping Identity PingIDM (formerly known as ForgeRock Identity Management) (CVE-2024-23600)
SEC Consult SA-20241023-0 :: Authenticated Remote Code Execution in Multiple Xerox printers (CVE-2024-6333)
APPLE-SA-10-28-2024-8 visionOS 2.1
APPLE-SA-10-28-2024-7 tvOS 18.1
APPLE-SA-10-28-2024-6 watchOS 11.1
APPLE-SA-10-28-2024-5 macOS Ventura 13.7.1
APPLE-SA-10-28-2024-4 macOS Sonoma 14.7.1
APPLE-SA-10-28-2024-3 macOS Sequoia 15.1
APPLE-SA-10-28-2024-2 iOS 17.7.1 and iPadOS 17.7.1
APPLE-SA-10-28-2024-1 iOS 18.1 and iPadOS 18.1
Open Redirect / Reflected XSS - booked-schedulerv2.8.5
Log in Register Forum FAQ Memberlist Search
IT Security and Insecurity Portal

www.waraxe.us Forum Index -> Hash related information -> Question regarding md5 and salt.. (hope this is right place)
Post new topicReply to topic View previous topic :: View next topic
Question regarding md5 and salt.. (hope this is right place)
PostPosted: Thu Feb 14, 2008 1:22 am Reply with quote
bluejay44
Beginner
Beginner
Joined: Feb 12, 2008
Posts: 2




Feel free to flame if this isnt the right place Smile

Im a noob at this sort of thing, but ive gotten curious. I decided to try to crack one of my own passwords to see if i can do it. Well, after a few mins i thought i had my md5... much to my surprise, the md5 wasn't being decoded from any of the online applications i tried, and i simply could not produce a proper password from cain or passwordspro. Then I learned about salt... ><

is there any way to get around this salt? remove it from the equation, or wtvr is necessary, so I can properly decode this md5? If it is possible, i'd rather learn how to do it myself than have someone do it, so i wont post the md5 unless I have to. Thanks! Smile
View user's profile Send private message
Re: Question regarding md5 and salt.. (hope this is right pl
PostPosted: Tue Apr 08, 2008 11:45 am Reply with quote
ToXiC
Moderator
Moderator
Joined: Dec 01, 2004
Posts: 181
Location: Cyprus




bluejay44 wrote:
Feel free to flame if this isnt the right place Smile

Im a noob at this sort of thing, but ive gotten curious. I decided to try to crack one of my own passwords to see if i can do it. Well, after a few mins i thought i had my md5... much to my surprise, the md5 wasn't being decoded from any of the online applications i tried, and i simply could not produce a proper password from cain or passwordspro. Then I learned about salt... ><

is there any way to get around this salt? remove it from the equation, or wtvr is necessary, so I can properly decode this md5? If it is possible, i'd rather learn how to do it myself than have someone do it, so i wont post the md5 unless I have to. Thanks! Smile


salting is an extra feuture added to the actual method of hashing a password.
The result though of that method is a different MD5 value.. but more difficult to crack.
md5 output is a fix 32 character [A-f] [0_9] value

salted md5 has the same output.

but the method of hashing it :
if you need a method like this to make a simple hash
md5($value)

the salted is
md5(md5($value+$salt)
where $salt is a NON FIXED random value

as i mentioned above at both cases the result is a fixed value so you cannot distinguish whether a value is salted or not.

The best thing to do is to make a research on the php application how it stores the value to the database or when you post in the forum to crack a value for the people who are willing to help you you have to tell the php application that hash came from and the salted value.

Most of the times salted value is located at the same table that the password is.So with a small modification of the query you can come up with the salted value.

_________________
who|grep -i blonde|talk; cd~;wine;talk;touch;unzip;touch; strip;gasp;finger;gasp;mount; fsck; more; yes; gasp; umount; make clean; sleep;wakeup;goto http://www.md5this.com
View user's profile Send private message Visit poster's website MSN Messenger
Question regarding md5 and salt.. (hope this is right place)
www.waraxe.us Forum Index -> Hash related information
You cannot post new topics in this forum
You cannot reply to topics in this forum
You cannot edit your posts in this forum
You cannot delete your posts in this forum
You cannot vote in polls in this forum
All times are GMT
Page 1 of 1

Post new topicReply to topic


Powered by phpBB © 2001-2008 phpBB Group



Space Raider game for Android, free download - Space Raider gameplay video - Zone Raider mobile games
All logos and trademarks in this site are property of their respective owner. The comments and posts are property of their posters, all the rest (c) 2004-2024 Janek Vind "waraxe"
Page Generation: 0.050 Seconds