Need help to identify encryption

Need help to identify encryption - Printable Version

+- hashcat Forum (https://hashcat.net/forum)
+-- Forum: Support (https://hashcat.net/forum/forum-3.html)
+--- Forum: hashcat (https://hashcat.net/forum/forum-45.html)
+--- Thread: Need help to identify encryption (/thread-8954.html)

Need help to identify encryption - Vido - 02-08-2020

I have a router Huawei HG8145V5 and I backed-up config file in order to find root password, but I found that password is encrypted and here is how does it look like

Code:
    UserName="root" Password="$2tMx=+eY3+*g46l*b@Uk&lt;3YN$L`&lt;#K!j(5a%(5\G1ma7;;hP=RH.:q[XMze!FL43,O#}Fz9zLFQ6/&gt;!:)aHY:QL/Bg&lt;TMj(5^U2$I$"

and

Code:
    Salt="8d72593e65eac9eccfc75ce7"

I tried SHA256(MD5(password)) but its not sha256 its something diferent, can anyone guess what encryption is it ?

RE: Need help to identify encryption - philsmd - 02-08-2020

I think this is not a good strategy to get a helpful answer:
1. breaking forum rules (https://hashcat.net/forum/announcement-2.html). Do NOT post hashes
2. it could be anything... I think you either should find the answer online (on some router forensic/dissecting/pwning forums etc) or try to reverse the firmware yourself (we actually already got some similar questions like this here: https://github.com/hashcat/hashcat/issues/2111 , and it's a similar user name to yours ? but what should we do with this if the algorithm is not 100% known... hash cracking is NOT really a algorithm guessing game, at least in most of the cases, fortunately)

RE: Need help to identify encryption - DanielG - 02-10-2020

On a lot of "Default Usernames & Passwords" lists for routers Huawei devices seem to have the password 'admin' or 'admin@huawei.com' as the password. Perhaps try that before trying to break the configfile crypto.