how can i crack hexmd5 hash ?
#28
(02-24-2019, 06:57 PM)philsmd Wrote: [Image: a.png]

the wireshark filter used in this image:
frame contains " = hexMD5" || frame contains "password="

answer 1: A1 (response (POST) from client with "password=", ERROR, VERY BAD, question missing)

question 2: Q2 (= hexMD5('\137' ... new question for a password, salt: '\115\116\213\305...)
answer 2: A2   (password" = "cbc5d1a36621e0f824f5491ae9cf172c", answer from client (POST) for question Q2)

question 3: Q3 (= hexMD5('\115' ... new question for a new password, salt: '\017\226\132\264..., after that we got no answer A3: ERROR, VERY BAD)

You can also see that Q3 was sent by the server about 2 minutes later than A1. They are completely unrelate
Only A2 is an answer for Q2, as our successful MD5 crack showed.
If we were able to crack the hash from A2 with the salt of Q2, we know that A2 and Q2 are related.

Q3 instead is a new question, asked 2 minutes after the answer A1. A question Qx is always a new exchange. It is never related to a previous answer Ax.

Remember this: First question, then answer. First question, then answer. First question, then answer.
"frame contains " = hexMD5" || frame contains "password=" "
thanks about that i really didn't know that i have to use a custom filter not just follow tcp trick
...........
"First question, then answer. First question, then answer. First question, then answer"
lol finally i got it !!!
because of the order of the packets i thought it was First answer then question First answer then question
so i didn't think of the additional question number 3 i thought it was Q2 ....
sorry for the misunderstanding 😅😅😅
so our keys are
1-the difference of time between each packet
2- the order First question, then answer
and question is the java script/salt and the answer is the hash

big thanks to you for the very good explanation Smile
Reply


Messages In This Thread
how can i crack hexmd5 hash ? - by monminamon - 02-19-2019, 10:27 AM
RE: how can i crack hexmd5 hash ? - by philsmd - 02-19-2019, 12:35 PM
RE: how can i crack hexmd5 hash ? - by monminamon - 02-19-2019, 01:28 PM
RE: how can i crack hexmd5 hash ? - by DanielG - 02-19-2019, 02:04 PM
RE: how can i crack hexmd5 hash ? - by monminamon - 02-21-2019, 09:31 AM
RE: how can i crack hexmd5 hash ? - by monminamon - 02-19-2019, 04:46 PM
RE: how can i crack hexmd5 hash ? - by philsmd - 02-21-2019, 10:45 AM
RE: how can i crack hexmd5 hash ? - by monminamon - 02-21-2019, 02:17 PM
RE: how can i crack hexmd5 hash ? - by DanielG - 02-21-2019, 11:42 AM
RE: how can i crack hexmd5 hash ? - by monminamon - 02-21-2019, 01:17 PM
RE: how can i crack hexmd5 hash ? - by monminamon - 02-21-2019, 02:15 PM
RE: how can i crack hexmd5 hash ? - by philsmd - 02-21-2019, 04:38 PM
RE: how can i crack hexmd5 hash ? - by monminamon - 02-21-2019, 09:20 PM
RE: how can i crack hexmd5 hash ? - by monminamon - 02-21-2019, 10:35 PM
RE: how can i crack hexmd5 hash ? - by DanielG - 02-22-2019, 10:23 AM
RE: how can i crack hexmd5 hash ? - by monminamon - 02-22-2019, 12:53 PM
RE: how can i crack hexmd5 hash ? - by philsmd - 02-22-2019, 01:29 PM
RE: how can i crack hexmd5 hash ? - by monminamon - 02-22-2019, 05:12 PM
RE: how can i crack hexmd5 hash ? - by philsmd - 02-22-2019, 07:25 PM
RE: how can i crack hexmd5 hash ? - by monminamon - 02-23-2019, 12:45 AM
RE: how can i crack hexmd5 hash ? - by philsmd - 02-23-2019, 01:08 AM
RE: how can i crack hexmd5 hash ? - by monminamon - 02-23-2019, 04:11 PM
RE: how can i crack hexmd5 hash ? - by philsmd - 02-23-2019, 04:28 PM
RE: how can i crack hexmd5 hash ? - by monminamon - 02-24-2019, 03:11 PM
RE: how can i crack hexmd5 hash ? - by undeath - 02-24-2019, 03:50 PM
RE: how can i crack hexmd5 hash ? - by monminamon - 02-24-2019, 05:29 PM
RE: how can i crack hexmd5 hash ? - by philsmd - 02-24-2019, 06:57 PM
RE: how can i crack hexmd5 hash ? - by monminamon - 02-25-2019, 08:44 PM