Old Office and KDF
#1
Hello,

I am trying to crack an old-office hash following the steps given at https://hashcat.net/forum/thread-3665-po...l#pid20935 :

Thanks to mode 9710 I found : 'deebd8f416' as output.

Quote:Append 4 byte zeros to result
-> deebd8f41600000000
Quote:MD5 the 9 bytes
md5("deebd8f41600000000") = CF205B696DC9CB05FB008C2B90BFD2AC

Then I'm lost :
Quote:Use 16 byte result as 128 bit RC4 Key
Decrypt encryptedVerifier with RC4 to decryptedVerifier
Decrypt encryptedVerifierHash with RC4 to decryptedVerifierHash
MD5 the decrypted encryptedVerifier
Compare 16 byte result with decrypted encryptedVerifierHash

Could you please provide deeper explanation ?


Messages In This Thread
Old Office and KDF - by Mem5 - 01-19-2018, 08:15 PM
RE: Old Office and KDF - by undeath - 01-19-2018, 08:31 PM
RE: Old Office and KDF - by Mem5 - 01-20-2018, 12:43 AM
RE: Old Office and KDF - by undeath - 01-20-2018, 12:46 AM
RE: Old Office and KDF - by Mem5 - 01-20-2018, 12:34 PM
RE: Old Office and KDF - by atom - 01-23-2018, 11:34 AM
RE: Old Office and KDF - by Mem5 - 01-23-2018, 11:59 AM
RE: Old Office and KDF - by atom - 01-24-2018, 11:02 AM
RE: Old Office and KDF - by Mem5 - 01-25-2018, 10:58 PM
RE: Old Office and KDF - by atom - 01-27-2018, 10:12 PM
RE: Old Office and KDF - by Mem5 - 02-25-2018, 11:32 AM
RE: Old Office and KDF - by undeath - 02-25-2018, 01:58 PM
RE: Old Office and KDF - by Mem5 - 02-25-2018, 02:52 PM
RE: Old Office and KDF - by philsmd - 02-27-2018, 07:16 PM