Get plain text password knowing hash and salt
#1
So first of all hi, I just want to say that im completely new to hashcat, and I noticed it's missing some docs... so that's why im here asking.

Recently I got a complete dump of a SQL members table (as of 13-01-2015) that contains lots of info but im particularly interested in 4 fields only: name (it's the username in fact), email, members_pass_hash and members_pass_salt.

The table itself comes from a site using IP.Board, so they store they passwords like this (more info) :

Code:
$hash = md5( md5( $salt ) . md5( $password ) );

Now, checking hashcat wiki I found one mode that's ALMOST the same, but concatenated in different order:

Code:
3910 = md5(md5($pass).md5($salt))

So my question is, is still possible to find those passwords? If so, how can I find them all at once? How would the args be?

Finally, if someone has some "newbie guides" or whatever, please link them Smile

Regards.


Messages In This Thread
Get plain text password knowing hash and salt - by N3HL - 01-30-2015, 02:05 PM