hashcat Forum
OpenLDAP SSHA's Dynamic Base64 Parser - Printable Version

+- hashcat Forum (https://hashcat.net/forum)
+-- Forum: Deprecated; Ancient Versions (https://hashcat.net/forum/forum-46.html)
+--- Forum: Feature Requests (https://hashcat.net/forum/forum-7.html)
+--- Thread: OpenLDAP SSHA's Dynamic Base64 Parser (/thread-1065.html)



OpenLDAP SSHA's Dynamic Base64 Parser - dakykilla - 04-10-2012

Was able to obtain some OpenLDAP SSHA's during an assessment and attempted to use oclHashcat-plus to analyze them. The hashes were disregarded as invalid SSHA's or oclHashcat-plus type "111 = nsldaps, SSHA-1(Base64), Netscape LDAP SSHA". Was able to verify the validity of the SSHA's via OpenLDAP's web site in an example used to generate OpenLDAP SSHA's via various code tid bits. The below hash came from OpenLDAP's site.

OpenLDAP SSHA Hash: {SSHA}0c0blFTXXNuAMHECS4uxrj3ZieMoWImr
OpenLDAP SSHA pass: testing123

Request: Include a Base64 parser that would allow for dynamic salt lengths in OpenLDAP SSHA's to crack using oclHashcat-plus.

Thanks!


RE: OpenLDAP SSHA's Dynamic Base64 Parser - atom - 04-10-2012

All right, will do that for oclHashcat-lite and oclHashcat-plus.


RE: OpenLDAP SSHA's Dynamic Base64 Parser - undeath - 04-10-2012

Well, this is not fully correct. The solution is quite simple. Netscape LDAP SSHA has different hashes/salts than OpenLDAP. This should be a separate algorithm.

If i remember right JtR even has different modules for both, not sure if the PSA is 100% identical.


RE: OpenLDAP SSHA's Dynamic Base64 Parser - atom - 04-11-2012

I am not sure, but maybe its just the salt length that differs. With a dynamic salt length parser this problem should disappear. If I am wrong please correct me. In this case I can save some work Smile


RE: OpenLDAP SSHA's Dynamic Base64 Parser - atom - 05-05-2012

implemented in latest oclHashcat-lite v0.10 beta. please try


RE: OpenLDAP SSHA's Dynamic Base64 Parser - TerribleIdea - 07-31-2012

Hi,

First of all, I want to thank you atom for all the hard work you put in.

Was just wondering when can we see this in plus Smile

Thanks,
T.I


RE: OpenLDAP SSHA's Dynamic Base64 Parser - atom - 07-31-2012

Its already done, just wait for the release


RE: OpenLDAP SSHA's Dynamic Base64 Parser - atom - 09-07-2012

Done with oclHashcat-plus v0.09: https://hashcat.net/forum/thread-1541.html

Thread closed