hashcat Forum › Deprecated; Ancient Versions › Very old oclHashcat-plus Support v
what's the hash type of $99$

Threaded Mode
what's the hash type of $99$
perlish Offline
Member
***
Posts: 58
Threads: 22
Joined: May 2010
#1
07-29-2012, 11:12 AM (This post was last modified: 07-30-2012, 06:28 AM by radix.)
chapcrack for ms-chapV2
https://github.com/moxie0/chapcrack

so anybody know the hash type of $99$ ?
Can I use plus or lite instead of Cloudcracker ?

thank you !

./chapcrack.py parse -i tests/pptp.cap
Got completed handshake []
Cracking K3.............
User = moxie
C1 = 1c93abce81540068
C2 = 6baeca315f348469
C3 = 256420598a73ad49
P = 6d0e1c056cd94d5f
K3 = c3d40000000000
CloudCracker Submission = $99$<removed>
Find
perlish Offline
Member
***
Posts: 58
Threads: 22
Joined: May 2010
#2
07-29-2012, 12:45 PM
(07-29-2012, 11:32 AM)box Wrote: salted wordpress?

I dont think so,because the cloudcracker said they can crack it in 1 day.


Attached Files Thumbnail(s)
   
Find
box Offline
Junior Member
**
Posts: 1
Threads: 0
Joined: Jul 2012
#3
07-29-2012, 07:35 PM (This post was last modified: 07-29-2012, 07:41 PM by box.)
Ok so I'm tired and accidently deleted my post when I ment to edit it... I looked over this again and I'm almost positive the "cloudcracker submission" isn't even a hash It's base64 I'm not sure what the $99 is though...
And...... looking at this.... https://github.com/moxie0/chapcrack/blob...Command.py just confirmed that it's base64.... ok time for sleep....
Find
ava1ar Offline
Junior Member
**
Posts: 1
Threads: 0
Joined: Aug 2012
#4
08-19-2012, 09:33 PM (This post was last modified: 08-19-2012, 09:34 PM by ava1ar.)
(07-29-2012, 07:35 PM)box Wrote: Ok so I'm tired and accidently deleted my post when I ment to edit it... I looked over this again and I'm almost positive the "cloudcracker submission" isn't even a hash It's base64 I'm not sure what the $99 is though...
And...... looking at this.... https://github.com/moxie0/chapcrack/blob...Command.py just confirmed that it's base64.... ok time for sleep....

Your are absolutely correct, this is line from the sources:

print "CloudCracker Submission = $99$%s" % base64.b64encode("%s%s%s%s" % (plaintext, c1, c2, k3[0:2]))

Looks like $99$ is just a unique id for CloudCracker to identify hashed data for decription produced by chapcrack.
Find