EPiServer hash format
#1
I'd like to see support for EPiServer hash format:

EPiServer is a CMS - and much more. Info at www.episerver.com

Runs on top of Microsoft IIS, uses Microsoft .NETs capabilities for password hashing. .NET supports the use of PBKDF2, SHA-1 and more.

Default password configuration for EPiServer 6.x installations:
passwordFormat="Hashed"
maxInvalidPasswordAttempts="5"
minRequiredPasswordLength="7" minRequiredNonalphanumericCharacters="0" passwordAttemptWindow="10"
passwordStrengthRegularExpression=""

Creating a test user with a test password:
testUser:testPassword

Gives us the following data stored into DB (before any decode etc..):
Password hash: UQgnz/vPWap9UeD8Dhaw3h/fgFA=
Salt: fGJ2wn/5WlzqQoDeCA2kXA==

JtR got support in jumbo 12 for 1.7.2 in 2008, thx to Johannes Gumbel in Sweden. At least some older code on it is available here: http://fossies.org/unix/privat/john-1.7....fmt_plug.c

Best regards,
Per Thorsheim


Messages In This Thread
EPiServer hash format - by thorsheim - 03-16-2012, 12:12 AM
RE: EPiServer hash format - by atom - 03-16-2012, 06:15 PM
RE: EPiServer hash format - by thorsheim - 03-16-2012, 08:21 PM
RE: EPiServer hash format - by atom - 03-23-2012, 10:37 AM
RE: EPiServer hash format - by thorsheim - 03-23-2012, 11:18 AM
RE: EPiServer hash format - by atom - 03-23-2012, 05:07 PM
RE: EPiServer hash format - by thorsheim - 03-27-2012, 12:25 PM
RE: EPiServer hash format - by atom - 03-27-2012, 03:17 PM
RE: EPiServer hash format - by thorsheim - 03-27-2012, 03:27 PM
RE: EPiServer hash format - by sk5t - 03-27-2012, 05:48 PM
RE: EPiServer hash format - by atom - 03-27-2012, 06:07 PM
RE: EPiServer hash format - by thorsheim - 03-27-2012, 10:26 PM
RE: EPiServer hash format - by thorsheim - 04-04-2012, 11:25 PM
RE: EPiServer hash format - by thorsheim - 04-05-2012, 01:08 AM
RE: EPiServer hash format - by atom - 04-06-2012, 09:43 AM
RE: EPiServer hash format - by atom - 05-06-2012, 12:55 AM
RE: EPiServer hash format - by thorsheim - 05-06-2012, 01:03 AM
RE: EPiServer hash format - by atom - 05-06-2012, 03:37 PM
RE: EPiServer hash format - by troyhunt - 06-20-2012, 02:29 PM
RE: EPiServer hash format - by atom - 06-20-2012, 03:49 PM
RE: EPiServer hash format - by troyhunt - 06-21-2012, 01:12 AM
RE: EPiServer hash format - by atom - 09-07-2012, 05:12 PM