01-30-2015, 02:05 PM
So first of all hi, I just want to say that im completely new to hashcat, and I noticed it's missing some docs... so that's why im here asking.
Recently I got a complete dump of a SQL members table (as of 13-01-2015) that contains lots of info but im particularly interested in 4 fields only: name (it's the username in fact), email, members_pass_hash and members_pass_salt.
The table itself comes from a site using IP.Board, so they store they passwords like this (more info) :
Now, checking hashcat wiki I found one mode that's ALMOST the same, but concatenated in different order:
So my question is, is still possible to find those passwords? If so, how can I find them all at once? How would the args be?
Finally, if someone has some "newbie guides" or whatever, please link them
Regards.
Recently I got a complete dump of a SQL members table (as of 13-01-2015) that contains lots of info but im particularly interested in 4 fields only: name (it's the username in fact), email, members_pass_hash and members_pass_salt.
The table itself comes from a site using IP.Board, so they store they passwords like this (more info) :
Code:
$hash = md5( md5( $salt ) . md5( $password ) );
Now, checking hashcat wiki I found one mode that's ALMOST the same, but concatenated in different order:
Code:
3910 = md5(md5($pass).md5($salt))
So my question is, is still possible to find those passwords? If so, how can I find them all at once? How would the args be?
Finally, if someone has some "newbie guides" or whatever, please link them
Regards.