Weird result with MSSQL 2000 mode 131
#1
Hi,
I have a MSSQL 2000 hash - mode 131 - This hash does NOT exist :
0x040016460666FF8664F8FF8F14400064F44FFF6FFF06044FF61FFF8664F8FF8F14400064F44FFF6FFF06044FF61F

When cracked, hashcat v5.1.0 displays :
0x0400164606660000000000000000000000000000000000000000FF8664F8FF8F14400064F44FFF6FFF06044FF61F:password

Not the same hash! Why does hashcat replaces the red part with zeros?

Thanks!
Reply
#2
A MSSQL 2000 hash consists of two hashes, one with the correct case and one with all upper case letters. Hashcat probably simply ignores one of them.

see https://www.theregister.co.uk/2002/07/08...passwords/
Reply
#3
I wonder why it does not copy the hash itself in the result.

Will read.
Thanks.
Reply
#4
You're right, it should. I've never seen this block being filled with data (not being zero). Please create GitHub issue.
Reply