How to find a salt for a hash if you have the plain text

[epixoip]

Erm, guys, this isn't hard. If the algorithm is e.g. md5(p.s) and you know p but need to find s, just switch them: use p as s and run it as md5(s.p). Same goes with hmac, just reverse k & d.