Cracking a specific MSSQL hash type
#5
again: are these hashed passwords or just IDs ? an id is just an identiier that has nothing to do with passwords.

It also seems that this type of table (sysxlogins) is very old and doesn't exist anymore. I would recommend looking at the table column/field name and see if the column names have something to do with login data or are just (random) ids or similar. not everything is a password hash that looks "random" !

some (old) web sites say that the sysxlogins table looked like this:
Code:
srvid smallint(2)
sid varbinary(85)
xstatus smallint(2)
xdate1 datetime(8)
xdate2 datetime(8)
name sysname(128)
password varbinary(256)
dbid smallint(2)
language sysname(128)
isrpcinmap smallint(2)
ishqoutmap smallint(2)
selfoutmap smallint(2)

so there are several IDs (but only SID is quite long, but it is not the "password" field, that's the important point here), see https://www.databasejournal.com/features...m#part_2_9

what is the name of these 0x0102 and 0x0105 fields ? do they even have something to do with passwords ? It doesn't seem so from internet searches
Reply


Messages In This Thread
RE: Cracking a specific MSSQL hash type - by philsmd - 07-13-2021, 09:25 AM