+- hashcat Forum (https://hashcat.net/forum)
+-- Forum: Misc (https://hashcat.net/forum/forum-15.html)
+--- Forum: General Talk (https://hashcat.net/forum/forum-33.html)
+--- Thread: Please, help identifying hash type (/thread-7789.html)
Please, help identifying hash type - bugfix - 09-06-2018
Hash looks like
$h$6$[a-zA-Z0-9\+]{16}$[a-zA-Z0-9\+]{87}==
Globally, looks like some kind of SHA-512, but there is $ sign, which presence confused me.
First part '[a-zA-Z0-9\+]{16}' looks like MD5, but have '+' sign in it.
Second part is similar to base64, but decoding results with unreadable characters.
Thanks in advance
RE: Please, help identifying hash type - DanielG - 09-06-2018
It would help to tell us where you got the hash from, it saves us searching for it and discovering it is a HP Switch config password. On http://h20628.www2.hp.com/km-ext/kmcsdirect/emr_na-c04149503-1.pdf you can see it being used in config as "password hash $h$6$[...]$[...]== ".
Is this also where you got your hash from?
It could be this: http://inejge.github.io/pwhash/pwhash/sha512_crypt/ but you would need to test by setting a known password first.
RE: Please, help identifying hash type - gnubie - 09-06-2018
http://finder.insidepro.team
RE: Please, help identifying hash type - bugfix - 09-06-2018
Yes, sorry, forgot to mention, this is hash from HP switch backup file.
I was trying to bruteforce it with hachcat, but got 'Signature unmatched' error, and if I remove '$h' prefix, I got 'Token encoding exception'.
Anyway, thanks for the reply!