Waraxe IT Security Portal

thelma · Regular user

Do you know the why? Rolling Eyes

waraxe · Site admin

thelma · Regular user

The problem is that all the hashes of a determinate forum(Invision Power Board v2.0.3) are impossible to crack, I have everywhere tried, on all the site possible online... while with my forum I have not have problem to crack the md5.. my succesfull to crack them is the 70%

waraxe · Site admin

thelma · Regular user

ok,I have lost any hope!!

thank you

Vixje · Active user

Hi waraxe. I still want to give it a go with a salted pw. I have a database of a 2.0.x forum, with the converged records inside. Could you give me a brief explanation, on how I could make a start on cracking such salts? Considering I do have the usernames, the hashes, and the salt-values. For example, is there a easy way (tool) where u can just insert the usercode+hash+salt and do a dictionary or bruteforce on it? Or do i first need to "unsalt" the hash to get the real md5 hash value?

Indiction · Regular user

Basically if there is a salt, you cannot remove it at the MD5 step.

First you will have to know what the salt is. If the salt is say md(x+5), then you must first reverse the hash through bruteforcing or whatever. Then subtract the salt (which will give you the original cleartext). Thanks to the fact that if md5(x+c) = md5(y+c) (collision), all you need to do is reverse the mathematical operation on the salt. Unless its something like, say, modulus, in which case good luck Smile

.

But one thing you can't do is reverse the salt when all you have is the hash. You must first reverse the hash.