 |
|
 |
 |
Menu |
 |
|
 Home |
| |
|
 Discussions |
| |
|
 Tools |
| |
|
| Affiliates |
| |
|
 Content |
| |
|
 Info |
| | |
|
|
|
|
|
User Info |
|
 Membership:
 Latest: MichaelSnaRe
 New Today: 0
 New Yesterday: 0
 Overall: 9144
 People Online:
 Visitors: 89
 Members: 0
 Total: 89
|
|
|
|
|
|
Full disclosure |
|
|
|
 |
|
 |
 |
|
 |
IT Security and Insecurity Portal |
|
|
phpbb 3.0 salt and admin panel |
|
 Posted: Wed Mar 26, 2008 3:14 pm |
 |
|
| Nial |
| Advanced user |
 |
|
| Joined: Feb 29, 2008 |
| Posts: 103 |
|
|
|
 |
|
 |
|
Hi all, I know phpbb 3.0 is a rock, but is there a way to breach it from the admin panel? Like fake template, or security modification etc?
Another question about salt : i get the backup of the user table, and it seems the salt is crypted like :
password : $H$9t6dsS0mPW7Kz8MTxrGG8hKWRn6Qbf.
salt : dfe084853af62444
What is the algo of the salt? |
|
|
|
|
|
|
|
|
| Posted: Wed Mar 26, 2008 5:13 pm |
|
|
| waraxe |
| Site admin |
 |
|
| Joined: May 11, 2004 |
| Posts: 2407 |
| Location: Estonia, Tartu |
|
|
|
|
|
|
PhpBB hashing algorithm is flexible and can be in some degree different from installation to installation, but main feature is using of THOUSANDS md5 hashing rounds for just one hash. It's comparable to Unix-style MD5 hash and it means, that bruteforce attack is PAINFULLY SLOW. I can crack simple md5 hashes on my PC with speed > 6 000 000 passwords per second, phpBB3 algorithm's speed is ~2800 passwords per second (on Conroe 6600 Processor). And of course no rainbow tables because of salting. So basically phpBB hashes are extremely hard to crack  |
|
|
|
|
|
|
|
|
| Posted: Thu Mar 27, 2008 3:41 am |
|
|
| Frigo |
| Regular user |
|
|
| Joined: Feb 10, 2008 |
| Posts: 13 |
| Location: European Union |
|
|
|
|
|
|
Salted hashes are bad enough, but grilled & salted ones are nightmare.
Though a dictionary attack can be successful to some degree, especially if it is ordered by the occurrence of passwords, but expect a much slower attack, and much lower crack rates. |
|
|
|
|
| Posted: Thu Mar 27, 2008 12:22 pm |
|
|
| Nial |
| Advanced user |
|
|
| Joined: Feb 29, 2008 |
| Posts: 103 |
|
|
|
|
|
|
|
So if i cannot crack the pass with my admin account, is there something else i can do to get my shell on the server?
And another question, if i reset the password in the salt row of a forum like phpbb or ipb etc..., the new password entered by the user will be in simple md5? |
|
|
|
|
|
|
|
|
| Posted: Thu Apr 03, 2008 11:52 am |
|
|
| theparadox |
| Regular user |
 |
|
| Joined: Mar 26, 2008 |
| Posts: 10 |
|
|
|
|
|
|
|
| waraxe wrote: | | PhpBB hashing algorithm is flexible and can be in some degree different from installation to installation, but main feature is using of THOUSANDS md5 hashing rounds for just one hash. It's comparable to Unix-style MD5 hash and it means, that bruteforce attack is PAINFULLY SLOW. I can crack simple md5 hashes on my PC with speed > 6 000 000 passwords per second, phpBB3 algorithm's speed is ~2800 passwords per second (on Conroe 6600 Processor). And of course no rainbow tables because of salting. So basically phpBB hashes are extremely hard to crack |
this feature makes phpbb3 slower too. |
|
|
|
|
www.waraxe.us Forum Index -> PhpBB
You cannot post new topics in this forum
You cannot reply to topics in this forum
You cannot edit your posts in this forum
You cannot delete your posts in this forum
You cannot vote in polls in this forum
|
All times are GMT
Page 1 of 1
|
|
|
|
Powered by phpBB © 2001-2008 phpBB Group
|
|
|
|
|
|
|
