|
|
|
|
|
|
IT Security and Insecurity Portal |
|
|
How to crack Vbulletin passes |
|
Posted: Sun Jul 09, 2006 11:40 am |
|
|
superninja |
Active user |
|
|
Joined: Jul 03, 2006 |
Posts: 38 |
|
|
|
|
|
|
|
in database /user\ there is column with the passes but i can't crack it with md5 reversing.And the hash of my password is different in phpbb?Ideas oh and someone know how can i import 50 MB Database because phpmyadmin allowes only 16kb? |
|
|
|
|
|
md5 salted |
|
Posted: Sun Jul 09, 2006 4:04 pm |
|
|
oxygenne |
Advanced user |
|
|
Joined: Apr 13, 2005 |
Posts: 52 |
|
|
|
|
|
|
|
This is the simpliest explanation for vbulletin hashes
Lets say having password="test" and salt="h^1"
md5(md5(test)+h^1)
md5(098f6bcd4621d373cade4e832627b4f6+h^1)
md5(098f6bcd4621d373cade4e832627b4f6h^1)
final hash would be
8743363d7e7b25f28292d3e501e21029
The only way cracking these as far as i know is using passwordspro |
|
|
|
|
|
Re: How to crack Vbulletin passes |
|
Posted: Sun Jul 09, 2006 7:35 pm |
|
|
waraxe |
Site admin |
|
|
Joined: May 11, 2004 |
Posts: 2407 |
Location: Estonia, Tartu |
|
|
|
|
|
|
superninja wrote: | Ideas oh and someone know how can i import 50 MB Database because phpmyadmin allowes only 16kb? |
For big databases I have been using this script:
http://www.ozerov.de/bigdump
Code: |
// BigDump ver. 0.21b from 2005-02-08
// Staggered import of an large MySQL Dump (like phpMyAdmin 2.x Dump)
// Even through the webservers with hard runtime limit and those in safe mode
// Works fine with Internet Explorer 6.0 SP1, Mozilla 1.x and even Netscape 4.8
// Author: Alexey Ozerov (alexey at ozerov dot de)
// Copyright: GPL (C) 2003-2005
// More Infos: http://www.ozerov.de/bigdump
|
It works perfectly, even with safe_mode and restricted execution time limit |
|
|
|
|
|
Re: md5 salted |
|
Posted: Mon Jul 10, 2006 8:09 am |
|
|
ALuserX |
Regular user |
|
|
Joined: Jul 09, 2006 |
Posts: 5 |
|
|
|
|
|
|
|
oxygenne wrote: | This is the simpliest explanation for vbulletin hashes
Lets say having password="test" and salt="h^1"
md5(md5(test)+h^1)
md5(098f6bcd4621d373cade4e832627b4f6+h^1)
md5(098f6bcd4621d373cade4e832627b4f6h^1)
final hash would be
8743363d7e7b25f28292d3e501e21029
The only way cracking these as far as i know is using passwordspro |
could you please tell me how to crack these using pswpro or at least help me to crack these
dbdd0a0c4fd0cd9f75dd8b3427c6cbfe
and
fd7550731c14dded64dc0a24b7f68910
please |
|
|
|
|
|
:) |
|
Posted: Mon Jul 10, 2006 9:50 am |
|
|
oxygenne |
Advanced user |
|
|
Joined: Apr 13, 2005 |
Posts: 52 |
|
|
|
|
|
|
|
Besides hashes you need salt and cracking method which will be md5(md5($password).$salt) .Then choose between diferent types of attack dictionary,bruteforce,rainbow tables...Right click add hashes,add salts |
|
|
|
|
Posted: Mon Jul 10, 2006 12:31 pm |
|
|
superninja |
Active user |
|
|
Joined: Jul 03, 2006 |
Posts: 38 |
|
|
|
|
|
|
|
damn it i have the datsbase user but there are different hashes just tell me how to crack it |
|
|
|
|
Posted: Mon Jul 10, 2006 12:47 pm |
|
|
superninja |
Active user |
|
|
Joined: Jul 03, 2006 |
Posts: 38 |
|
|
|
|
|
|
|
and where can i found the salt speak more clear if you want to help not just to make some posts |
|
|
|
|
|
:) |
|
Posted: Mon Jul 10, 2006 5:28 pm |
|
|
oxygenne |
Advanced user |
|
|
Joined: Apr 13, 2005 |
Posts: 52 |
|
|
|
|
|
|
|
Ok here is a hint /forum/install/upgrade_300b3.php?step=backup you can dump hashes and salts from user table.Working mostly on nulled vbulletin boards |
|
|
|
|
Posted: Mon Jul 10, 2006 8:42 pm |
|
|
superninja |
Active user |
|
|
Joined: Jul 03, 2006 |
Posts: 38 |
|
|
|
|
|
|
|
ok can you tell me the pass for
Hash : 4804a7f36fd8261daab27ef64cdcd91a
salt : tvH
i don't know what md5(md5(test)+h^1) is and what must i do with it but i'm sure i saw md5(md5($md5)$salt)[PHP] in passwords pro and the time for cracking was 2 days |
|
|
|
|
Posted: Sat Jul 15, 2006 11:17 am |
|
|
Vixje |
Active user |
|
|
Joined: Mar 25, 2006 |
Posts: 35 |
|
|
|
|
|
|
|
superninja wrote: | ok can you tell me the pass for
Hash : 4804a7f36fd8261daab27ef64cdcd91a
salt : tvH
i don't know what md5(md5(test)+h^1) is and what must i do with it but i'm sure i saw md5(md5($md5)$salt)[PHP] in passwords pro and the time for cracking was 2 days |
thats the thing with salted pw's, could take days, weeks, months.. years? |
|
|
|
|
|
|
|
|
Posted: Wed Dec 06, 2006 1:09 am |
|
|
J_CSW |
Regular user |
|
|
Joined: Nov 29, 2006 |
Posts: 9 |
|
|
|
|
|
|
|
superninja wrote: | ok can you tell me the pass for
Hash : 4804a7f36fd8261daab27ef64cdcd91a
salt : tvH
i don't know what md5(md5(test)+h^1) is and what must i do with it but i'm sure i saw md5(md5($md5)$salt)[PHP] in passwords pro and the time for cracking was 2 days |
how do you know what the salt is ? my raw data shows
INSERT INTO user VALUES('28','3','','0','username','74e13d4228ed5ecc542c3db110923b84','2006-10-20','username@email.com','0','','','','','','','','1','0',title','0','1161383649','0','1161383896','1161789938','0','0','10','5','0','1','0','0','0','7383','','0000-00-00','-1','-1','172.142.137.112','0','1','0','0','2','0','0',':#V','0','0','')
is 7383 the hash or :#V ??? |
|
|
|
|
|
|
|
|
Posted: Wed Dec 06, 2006 12:55 pm |
|
|
Chb |
Valuable expert |
|
|
Joined: Jul 23, 2005 |
Posts: 206 |
Location: Germany |
|
|
|
|
|
|
Actually I don't know (I haven't got a table structure here), but I'd say your salt is ':#V'. Looks in my opinion a bit more like a typical salt than a number. |
|
|
|
|
Posted: Fri May 16, 2008 10:51 pm |
|
|
Terrivel |
Beginner |
|
|
Joined: Jan 05, 2008 |
Posts: 3 |
|
|
|
|
|
|
|
Please
Hash: 68b9fffbf6ea664988af37a175be3f69
Salt: UG8
Vbulletin |
|
|
|
|
www.waraxe.us Forum Index -> Hash related information
You cannot post new topics in this forum You cannot reply to topics in this forum You cannot edit your posts in this forum You cannot delete your posts in this forum You cannot vote in polls in this forum
|
All times are GMT
Page 1 of 1
|
|
|
Powered by phpBB © 2001-2008 phpBB Group
|
|
|
|
|