hashcat Forum

Full Version: vBulletin MD5 without Salts
You're currently viewing a stripped down version of our content. View the full version with proper formatting.
Hello I wanted to encrypt some vBulletin Hashes. The problem is that there is only the MD5 without any Salt.

I saw a video on how to do that :

http://www.youtube.com/watch?v=DLEYQCzoxVo

But there is no md5(md5($pass).$salt) as Hash type in hashcat-gui (CPU). I know there is one for vBulletin but I can't add a salt (brute-vbulletin.salt).

How do I solve this problem?
Use the salt file. hashcat/salts/brute-vbulletin.salt

hashcat-cli.exe -a 0 -m 5 -e salts\brute-vbulletin.salt...

[Image: d448c2b8-png_thumb.jpg]
[Image: UKpq5Jtn.png]
which GUI is that?
The gui of hakre
I only found out this about his GUI http://hakre.wordpress.com

Can you please tell me where to find his GUI?
Because there are no old versions of them for download anymore.
I got some old versions but I guess its better to use the command line
Thank you for you support K9_

But I'm not seeing any results. Altough I have a huge and good wordlist. Why?
(11-02-2011, 10:41 PM)moplayer Wrote: [ -> ]Thank you for you support K9_

But I'm not seeing any results. Altough I have a huge and good wordlist. Why?
Maybe they are not Vbulletin hashes or if they are Vbulletin > 3.8.5 then this method can't work. The method is for 3 character salts and the newer versions of Vbulletin uses 30 characters salts which are impossible to have a list of unless you extract them with the hashes.

(11-03-2011, 07:03 AM)mastercracker Wrote: [ -> ]
(11-02-2011, 10:41 PM)moplayer Wrote: [ -> ]Thank you for you support K9_

But I'm not seeing any results. Altough I have a huge and good wordlist. Why?
Maybe they are not Vbulletin hashes or if they are Vbulletin > 3.8.5 then this method can't work. The method is for 3 character salts and the newer versions of Vbulletin uses 30 characters salts which are impossible to have a list of unless you extract them with the hashes.

Oh, thank you. Yes it is Vbulletin > 3.8.5 Sad
No chance?
of course you could try to bruteforce a password AND a 30 character salts. It only slightly increases the work. 95^8 for the password and 95^30 for the salt. All in all 95^8+95^30. I don't think you will finish in this century.