 |
|
 |
 |
Menu |
 |
|
 Home |
| |
|
 Discussions |
| |
|
 Tools |
| |
|
| Affiliates |
| |
|
 Content |
| |
|
 Info |
| | |
|
|
|
|
|
User Info |
|
 Membership:
 Latest: MichaelSnaRe
 New Today: 0
 New Yesterday: 0
 Overall: 9144
 People Online:
 Visitors: 143
 Members: 0
 Total: 143
|
|
|
|
|
|
Full disclosure |
|
|
|
 |
|
 |
 |
|
 |
IT Security and Insecurity Portal |
|
|
salted hashes are doing my head in |
|
 Posted: Wed Dec 06, 2006 1:04 am |
 |
|
| J_CSW |
| Regular user |
 |
|
| Joined: Nov 29, 2006 |
| Posts: 9 |
|
|
|
 |
|
 |
|
i exploited vbb forum downloaded users db and got hashes
but
cant crack them due to salt.
however cant find the salt to add in.
nor can i find an online cracker for salted md5's.
ran it thru a forum members 200gb rainbow table and it didnt crack it!!!!!
so what to do now ? |
|
|
|
|
| Posted: Tue May 20, 2008 11:50 am |
|
|
| dabs |
| Regular user |
|
|
| Joined: May 19, 2008 |
| Posts: 6 |
|
|
|
|
|
|
|
to crack salted md5s you'll have a few options. One is to generate salted md5 rainbowtables.. if you are rather certain it's an easy password (i.e. no special chars), try to use MDcrack on a fast processor... It'll let you define the salt as well.. and MDCrack support MD5MD5s passwords (md5(md5string+salt)) 
GL |
|
|
|
|
| Posted: Tue May 20, 2008 4:32 pm |
|
|
| waraxe |
| Site admin |
 |
|
| Joined: May 11, 2004 |
| Posts: 2407 |
| Location: Estonia, Tartu |
|
|
|
|
|
|
| That's why threre are salted hashes - for improved security. You cannot use Rainbow tables against salted hashes, because for every different salt you will need new table set. And bruteforce will take more resources in case of salting. So right now best you can do, is to use Passwordspro with powerful PC. Or you can use distributed cracking, based on Passwordspro, if you have multiple PC-s in your possession. |
|
|
|
|
www.waraxe.us Forum Index -> vBulletin Board
You cannot post new topics in this forum
You cannot reply to topics in this forum
You cannot edit your posts in this forum
You cannot delete your posts in this forum
You cannot vote in polls in this forum
|
All times are GMT
Page 1 of 1
|
|
|
|
Powered by phpBB © 2001-2008 phpBB Group
|
|
|
|
|
|
|
