Posts: 5
Threads: 1
Joined: Nov 2011
11-02-2011, 03:04 PM
Hello I wanted to encrypt some vBulletin Hashes. The problem is that there is only the MD5 without any Salt.
I saw a video on how to do that :
http://www.youtube.com/watch?v=DLEYQCzoxVo
But there is no md5(md5($pass).$salt) as Hash type in hashcat-gui (CPU). I know there is one for vBulletin but I can't add a salt (brute-vbulletin.salt).
How do I solve this problem?
Posts: 124
Threads: 12
Joined: Apr 2010
Use the salt file. hashcat/salts/
brute-vbulletin.salt
hashcat-cli.exe -a 0 -m 5 -e salts\brute-vbulletin.salt...
![[Image: d448c2b8-png_thumb.jpg]](http://img0.www.suckmypic.net/img/h/J/UKpq5Jtn/d448c2b8-png_thumb.jpg)
![[Image: UKpq5Jtn.png]](http://www.suckmypic.net/UKpq5Jtn.png)
Posts: 5
Threads: 1
Joined: Nov 2011
Posts: 124
Threads: 12
Joined: Apr 2010
Posts: 5
Threads: 1
Joined: Nov 2011
11-02-2011, 04:53 PM
(This post was last modified: 11-02-2011, 05:07 PM by moplayer.)
I only found out this about his GUI
http://hakre.wordpress.com
Can you please tell me where to find his GUI?
Because there are no old versions of them for download anymore.
Posts: 124
Threads: 12
Joined: Apr 2010
I got some old versions but I guess its better to use the command line
Posts: 5
Threads: 1
Joined: Nov 2011
Thank you for you support K9_
But I'm not seeing any results. Altough I have a huge and good wordlist. Why?
Posts: 621
Threads: 57
Joined: May 2010
(11-02-2011, 10:41 PM)moplayer Wrote: Thank you for you support K9_
But I'm not seeing any results. Altough I have a huge and good wordlist. Why?
Maybe they are not Vbulletin hashes or if they are Vbulletin > 3.8.5 then this method can't work. The method is for 3 character salts and the newer versions of Vbulletin uses 30 characters salts which are impossible to have a list of unless you extract them with the hashes.
Posts: 5
Threads: 1
Joined: Nov 2011
(11-03-2011, 07:03 AM)mastercracker Wrote: (11-02-2011, 10:41 PM)moplayer Wrote: Thank you for you support K9_
But I'm not seeing any results. Altough I have a huge and good wordlist. Why?
Maybe they are not Vbulletin hashes or if they are Vbulletin > 3.8.5 then this method can't work. The method is for 3 character salts and the newer versions of Vbulletin uses 30 characters salts which are impossible to have a list of unless you extract them with the hashes.
Oh, thank you. Yes it is Vbulletin > 3.8.5
No chance?
Posts: 2,301
Threads: 11
Joined: Jul 2010
of course you could try to bruteforce a password AND a 30 character salts. It only slightly increases the work. 95^8 for the password and 95^30 for the salt. All in all 95^8+95^30. I don't think you will finish in this century.
