hashcat
advanced password recovery

chick0n · 12-24-2010, 07:14 PM

Hi

I have Vbulletin salted hashes in format:

f8388939f6cb9b197d56d856a72ff759:uWg^~wB"T.|sSp@UI+]x4SZ>>6MVfh
It's md5(md5($pass).$salt)
(password is "testt")

But I can't crack it with oclHashcat or ighashgpu. What seems to be the problem?

I had no problems with passwordspro. Maybe its the long salt?

**Rolf** · 12-24-2010, 07:27 PM

It's the long salt.

chick0n · 12-24-2010, 11:47 PM

Then I have a new Feature that could be Implemented: Salts with max 30 chars Big Grin

K9 · 12-29-2010, 05:52 PM

This would be really useful. SOme sites got hacked a few days ago. One of them uses vBulletin 4.x.x (the long salt). I don't want to use PasswordsPro because it's slow and has problems with the seperator.

Another thing. I noticed when the last character of the salt is a [space] it is broken sometimes.

Code:

50118cc55aa3481cc834b725a9665ed5:

f844d6bb6e961352543af0e82bf2734d: 9

8199974801239edaedb5d06444fe8ab1:y

Code:

50118cc55aa3481cc834b725a9665ed5:[space][space][space]

f844d6bb6e961352543af0e82bf2734d:[space]9[space]

8199974801239edaedb5d06444fe8ab1:y[space][space]

It would be cool if it adds a space at the end if there are less then 3 characters.

***atom*** · 01-31-2011, 05:53 PM

support for hex salts in oclHashcat v0.26

hashcat advanced password recovery

hashcat
advanced password recovery