.NET SHA256Cng (SHA256 Bcrypt?)

[mobbarley]

Here's an example hash generated in the application -  password is 'hashcat'

Code:

3tKJrhwSwvp1TG0w:s+ILzfJ6MOymVTnmeQAa2iDEoEeRdlu0MmWnzyADlvU=

From the decompilation:

Code:

using (HashAlgorithm hA = (HashAlgorithm) new SHA256Cng())

        return Convert.ToBase64String(hA.ComputeHash(Encoding.Unicode.GetBytes(salt + ":" + pw)));

Salt is generated from 12 random bytes (96b).

Running base64 -> hex on each part gives:

Code:

ded289ae1c12c2fa754c6d30

b3e20bcdf27a30eca65539e679001ada20c4a04791765bb43265a7cf200396f5