hashcat Forum
vBulletin MD5 without Salts - Printable Version

+- hashcat Forum (https://hashcat.net/forum)
+-- Forum: Deprecated; Previous versions (https://hashcat.net/forum/forum-29.html)
+--- Forum: Old hashcat Support (https://hashcat.net/forum/forum-20.html)
+--- Thread: vBulletin MD5 without Salts (/thread-607.html)



vBulletin MD5 without Salts - moplayer - 11-02-2011

Hello I wanted to encrypt some vBulletin Hashes. The problem is that there is only the MD5 without any Salt.

I saw a video on how to do that :

http://www.youtube.com/watch?v=DLEYQCzoxVo

But there is no md5(md5($pass).$salt) as Hash type in hashcat-gui (CPU). I know there is one for vBulletin but I can't add a salt (brute-vbulletin.salt).

How do I solve this problem?



RE: vBulletin MD5 without Salts - K9 - 11-02-2011

Use the salt file. hashcat/salts/brute-vbulletin.salt

hashcat-cli.exe -a 0 -m 5 -e salts\brute-vbulletin.salt...

[Image: d448c2b8-png_thumb.jpg]
[Image: UKpq5Jtn.png]


RE: vBulletin MD5 without Salts - moplayer - 11-02-2011

which GUI is that?


RE: vBulletin MD5 without Salts - K9 - 11-02-2011

The gui of hakre


RE: vBulletin MD5 without Salts - moplayer - 11-02-2011

I only found out this about his GUI http://hakre.wordpress.com

Can you please tell me where to find his GUI?
Because there are no old versions of them for download anymore.


RE: vBulletin MD5 without Salts - K9 - 11-02-2011

I got some old versions but I guess its better to use the command line


RE: vBulletin MD5 without Salts - moplayer - 11-02-2011

Thank you for you support K9_

But I'm not seeing any results. Altough I have a huge and good wordlist. Why?


RE: vBulletin MD5 without Salts - mastercracker - 11-03-2011

(11-02-2011, 10:41 PM)moplayer Wrote: Thank you for you support K9_

But I'm not seeing any results. Altough I have a huge and good wordlist. Why?
Maybe they are not Vbulletin hashes or if they are Vbulletin > 3.8.5 then this method can't work. The method is for 3 character salts and the newer versions of Vbulletin uses 30 characters salts which are impossible to have a list of unless you extract them with the hashes.




RE: vBulletin MD5 without Salts - moplayer - 11-04-2011

(11-03-2011, 07:03 AM)mastercracker Wrote:
(11-02-2011, 10:41 PM)moplayer Wrote: Thank you for you support K9_

But I'm not seeing any results. Altough I have a huge and good wordlist. Why?
Maybe they are not Vbulletin hashes or if they are Vbulletin > 3.8.5 then this method can't work. The method is for 3 character salts and the newer versions of Vbulletin uses 30 characters salts which are impossible to have a list of unless you extract them with the hashes.

Oh, thank you. Yes it is Vbulletin > 3.8.5 Sad
No chance?


RE: vBulletin MD5 without Salts - undeath - 11-04-2011

of course you could try to bruteforce a password AND a 30 character salts. It only slightly increases the work. 95^8 for the password and 95^30 for the salt. All in all 95^8+95^30. I don't think you will finish in this century.