SHA256 w/ Custom Salt
#2
(08-26-2016, 09:04 PM)msf004 Wrote: I have a hash that was created from CakePHP SimplePasswordHasher class using sha256.

This class sets a salt in a cfg file.  In my case the salt looks something like this:

DYhG93b0qyJfIxfs1guVoUubWwvniR2G0FgaC9mi-aoyioueryiqyeryuwry-allup

The hashed password looks something like this:

54800209da18376ee8251f509c112ac13c7cbb9b480e440f9f60cb184999482d

I know the actual password, I am simply trying to understand how to have hashcat crack the password using the configured salt.  the salt looks encoded to some extent too, which is adding confusion.  The salt is setup in a simple config file in the filesystem.

I tried throwing the known password into a file (real.password) and the hashed password into a file (hash.password) and running:

Code:
# hashcat64.bin -m 1410 -a 0 hash.password real.password

I also tried appending the salt to the hashed password with a . separator.  

No luck thus far.

Code:
WARNING: Hashfile 'hash.password' on line 1 (54800209da18376ee8251f509c112ac13c7cbb9b480e440f9f60cb184999482d.DYhG93b0qyJfIxfs1guVoUubWwvniR2G0FgaC9mi-aoyioueryiqyeryuwry-allup): Separator unmatched

...or...

Code:
WARNING: Hashfile 'hash.password' on line 1 (54800209da18376ee8251f509c112ac13c7cbb9b480e440f9f60cb184999482d): Line-length exception

My assumption is that I am either setting the has incorrectly and/or the hash is in an invalid format.

https://hashcat.net/wiki/doku.php?id=example_hashes

and its telling u Separator unmatched


54800209da18376ee8251f509c112ac13c7cbb9b480e440f9f60cb184999482d:DYhG93b0qyJfIxfs1guVoUubWwvniR2G0FgaC9mi-aoyioueryiqyeryuwry-allup


Messages In This Thread
SHA256 w/ Custom Salt - by msf004 - 08-26-2016, 09:04 PM
RE: SHA256 w/ Custom Salt - by kiara - 08-26-2016, 10:46 PM
RE: SHA256 w/ Custom Salt - by msf004 - 08-27-2016, 05:57 AM
RE: SHA256 w/ Custom Salt - by kiara - 08-27-2016, 02:22 PM
RE: SHA256 w/ Custom Salt - by msf004 - 08-27-2016, 02:59 PM
RE: SHA256 w/ Custom Salt - by atom - 08-27-2016, 11:03 PM
RE: SHA256 w/ Custom Salt - by msf004 - 08-27-2016, 11:28 PM
RE: SHA256 w/ Custom Salt - by msf004 - 08-28-2016, 02:19 AM
RE: SHA256 w/ Custom Salt - by kiara - 08-28-2016, 12:58 PM
RE: SHA256 w/ Custom Salt - by atom - 08-28-2016, 10:56 AM