 |
Menu |
 |
|
 Home |
| |
|
 Discussions |
| |
|
 Tools |
| |
|
| Affiliates |
| |
|
 Content |
| |
|
 Info |
| | |
|
|
|
|
|
User Info |
|
 Membership:
 Latest: MichaelSnaRe
 New Today: 0
 New Yesterday: 0
 Overall: 9144
 People Online:
 Visitors: 50
 Members: 0
 Total: 50
|
|
|
|
|
|
Full disclosure |
|
|
|
 |
|
 |
 |
|
 |
IT Security and Insecurity Portal |
|
|
Joomla salted password cracking by PasswordPro(Please help) |
|
 Posted: Mon Jun 14, 2010 5:53 pm |
 |
|
| exploit100 |
| Beginner |
 |
|
| Joined: Jun 14, 2010 |
| Posts: 2 |
|
|
|
 |
|
 |
|
I am new to this site. But i am having some problem to crack Joomla salted password.
However some information to understand my problem here. The Data like this :
| Quote: | INSERT INTO `jos_users` (`id`, `name`, `username`, `email`, `password`, `usertype`, `block`, `pub`, `sendEmail`, `gid`, `registerDate`, `lastvisitDate`, `activation`, `params`) VALUES
(62, 'distro', 'admin', 'dis@site.com', '736bd90b1c89501be302fe6bdbd58d09:gp3cCLXuFWzVivcjh8zPUvSQGAbQzSig', 'Super Administrator', 0, 0, 1, 25, '2009-10-29 06:39:27', '2009-12-05 09:13:44', '', |
Here salted hash is which is md5($pass.$salt)formated: | Quote: | | 736bd90b1c89501be302fe6bdbd58d09:gp3cCLXuFWzVivcjh8zPUvSQGAbQzSig |
and the username is : admin (database tell)
I am trying to crack with PasswordPro.
But after i import the salt in PasswordPro then it tell to configur like this : 1. password:salt
2. username:pass:salt
etc etc, But i do not know should i use user name "admin"(because it using it) or not. I do not know also if i use user name to crack salted password then it is better or not.
Please someone help me.
Here more salted hash to crack :
| Quote: | 1. 736bd90b1c89501be302fe6bdbd58d09:gp3cCLXuFWzVivcjh8zPUvSQGAbQzSig
2. 0d913373bcaa74381781e334e3e13805:seVjORLv80e6RuJOgwvZwWm82A3Ev4FH
3. 136c2e11d25435657164b82f41699438:O8etUxvquGNOCi1ywRzhJfg01WNq0tXS
4. e827fb6d6f28976c68d9dec147cdb48b:VkxM99THfJe5FLBtz6lyUGaKOa67YmSc
5. 82cd71e84adf0180df9fca94587dd920:Dz7mN48pnza2DFxiYrgRol5o9FMl9tOT |
I need to crack these password(i have the user name).
Please help
Sorry for Bad English
Thanks to all |
|
|
|
|
|
|
|
|
| Posted: Mon Jun 14, 2010 8:46 pm |
|
|
| waraxe |
| Site admin |
 |
|
| Joined: May 11, 2004 |
| Posts: 2407 |
| Location: Estonia, Tartu |
|
|
|
|
|
|
Plaintext of 736bd90b1c89501be302fe6bdbd58d09 is admin
Plaintext of 136c2e11d25435657164b82f41699438 is user1
Plaintext of e827fb6d6f28976c68d9dec147cdb48b is user2 |
|
|
|
|
|
Re: Joomla salted password cracking by PasswordPro(Please he |
|
| Posted: Mon Jun 14, 2010 9:38 pm |
|
|
| vince213333 |
| Advanced user |
 |
|
| Joined: Aug 03, 2009 |
| Posts: 737 |
| Location: Belgium |
|
|
|
|
|
|
| exploit100 wrote: |
Here salted hash is which is md5($pass.$salt)formated: | Quote: | | 736bd90b1c89501be302fe6bdbd58d09:gp3cCLXuFWzVivcjh8zPUvSQGAbQzSig |
and the username is : admin (database tell)
I am trying to crack with PasswordPro.
But after i import the salt in PasswordPro then it tell to configur like this : 1. password:salt
2. username:pass:salt
etc etc, But i do not know should i use user name "admin"(because it using it) or not. I do not know also if i use user name to crack salted password then it is better or not.
|
It doesn't matter if you use the username:hash:salt format or hash:salt because joomla uses the ($pass.$salt) algorithm which doesn't use the user name  So you can use either one, if you know the usernames, it's easier to use the username:hash:salt format, just to keep things organized for yourself. |
|
|
|
|
|
|
|
|
| Posted: Tue Jun 15, 2010 5:31 am |
|
|
| exploit100 |
| Beginner |
|
|
| Joined: Jun 14, 2010 |
| Posts: 2 |
|
|
|
|
|
|
|
| waraxe wrote: | Plaintext of 736bd90b1c89501be302fe6bdbd58d09 is admin
Plaintext of 136c2e11d25435657164b82f41699438 is user1
Plaintext of e827fb6d6f28976c68d9dec147cdb48b is user2 |
Thank you very much. theses cracked passwords are right but having another problem. If you can then please help me. I need to login remotely . But when i use the user name and password then the site tell "E_NOLOGIN_BLOCKED". How can I pass this problem please?
I need to crack this hash also : | Quote: | | 0d913373bcaa74381781e334e3e13805:seVjORLv80e6RuJOgwvZwWm82A3Ev4FH |
Please help if you can.
thanks[/b] |
|
|
|
|
www.waraxe.us Forum Index -> All other hashes
You cannot post new topics in this forum
You cannot reply to topics in this forum
You cannot edit your posts in this forum
You cannot delete your posts in this forum
You cannot vote in polls in this forum
|
All times are GMT
Page 1 of 1
|
|
|
|
Powered by phpBB © 2001-2008 phpBB Group
|
|
|
|
|
|
