+- hashcat Forum (https://hashcat.net/forum)
+-- Forum: Support (https://hashcat.net/forum/forum-3.html)
+--- Forum: hashcat (https://hashcat.net/forum/forum-45.html)
+--- Thread: PeopleSoft Salted Hash Support (/thread-6241.html)
PeopleSoft Salted Hash Support - polarbear35 - 01-27-2017
AFAIK, hashcat currently only supports regular PeopleSoft hashes (-m 133), which are 28-character long Base64 strings, which I believe are generated using the PeopleCode Hash() function.
PeopleCode also has a salted hash function, called HashWithSalt(), which neither Hashcat nor JTR seem to support. I do not know the specifics of the algorithm which is used for this hash, but it has the same format as Hash(), except it begins with {1}.
{1}f+B0qgfNYGoedmHr2doZ+rN2Kso= (this is not a real hash, but shares the same format as HashWithSalt)
If anyone knows a way to use hashcat for this hash type in it's current implementation, please let me know. Otherwise, it would be great if this could be added to HC.
RE: PeopleSoft Salted Hash Support - atom - 01-27-2017
If the algorithm is unknown someone needs to RE it first. Then we can add it to hashcat.
RE: PeopleSoft Salted Hash Support - dhiru - 02-13-2017
(01-27-2017, 05:55 PM)polarbear35 Wrote: PeopleCode also has a salted hash function, called HashWithSalt(), which neither Hashcat nor JtR seem to support. I do not know the specifics of the algorithm which is used for this hash, but it has the same format as Hash(), except it begins with {1}.
{1}f+B0qgfNYGoedmHr2doZ+rN2Kso= (this is not a real hash, but shares the same format as HashWithSalt)
Can you please post some sample test hashes with known passwords?