Zero Identity
Username: Password:
[Forgot Password?] [Not Registered?]

Navigation

Navigation
Challenges
Media
Contribute

ZI Store Updates

Zi Store

Link to UsIf you'd like to become an affilate, please Link to Us!


Online Users

Registered Users: 2016
Latest Registration: yhamrodne
Online Users: 10
(0 Members, 10 Guests)

Poll

What should be done first on the ZI overhaul?
Find more staff (45%) [10 Votes]
Fix all bugs (36%) [8 Votes]
Make new features (not challenges) (9%) [2 Votes]
Get more content (challenges etc) (9%) [2 Votes]

[Poll Archive]

If your shout contains ! in the begining, your links will not be clickable.
If you enter the user's full username, it will be highlighted just for that user.Shoutbox

Kr0wKr0w

Avatar

Last Login:
2012-01-20
Joined:
December 11 2009 01:08
Experience:
2 (17 day(s) ago)
The crashed tables for registration and other stuff is easy to fix (using the Mysql command "REPAIR TABLE").
Kr0wKr0w

Avatar

Last Login:
2012-01-20
Joined:
December 11 2009 01:08
Experience:
2 (17 day(s) ago)
Link Bugs List
ttyler333ttyler333
php coder
Avatar

Last Login:
0000-00-00
Joined:
May 09 2008 01:45
Experience:
1095.2 (18 day(s) ago)
according to a friend the registration doesn't work.
Hunter XHunter X

Avatar

Last Login:
0000-00-00
Joined:
September 25 2010 15:44
Experience:
0 (18 day(s) ago)
Oh hey, the site's back! :)
hack4uhack4u
ZI Owner
Avatar

Last Login:
0000-00-00
Joined:
March 30 2008 22:30
Experience:
20492 (19 day(s) ago)
Please do keep a list of all the bugs. They might eventually get fixed.. lol.
Hunter XHunter X

Avatar

Last Login:
0000-00-00
Joined:
September 25 2010 15:44
Experience:
0 (01 month(s) ago)
What we could do is start compling a list of bugs on the Tasks page, so if and when development resumes the developers know what needs doing.
Kr0wKr0w

Avatar

Last Login:
2012-01-20
Joined:
December 11 2009 01:08
Experience:
2 (02 month(s) ago)
Kewl, the domain renewed another year. :) Any other future plans?
Hunter XHunter X

Avatar

Last Login:
0000-00-00
Joined:
September 25 2010 15:44
Experience:
0 (02 month(s) ago)
Huh, Kr0w's posts disappeared.
Hunter XHunter X

Avatar

Last Login:
0000-00-00
Joined:
September 25 2010 15:44
Experience:
0 (02 month(s) ago)
I've got no idea. I'll send off an email to one of the admins in a moment to check, since I've been meaning to contact them anyway.
Hunter XHunter X

Avatar

Last Login:
0000-00-00
Joined:
September 25 2010 15:44
Experience:
0 (02 month(s) ago)
There seems to be ~10 guests on most days, but I have no idea if that's genuine users or crawler bots. If they are real users we need to do something to convince them to register.
[Shoutbox Archive]


Icon Zero Identity Forums - General - Cryptology - crack md5 with salt


Are you bored? Check out the unaswered threads!

Tux
Veteran Member
the killer penguin

Avatar
Professional Analyst

Joined: 04/03/2008
Last Seen: 0000-00-00
Experience: 579.08
Points: 585
#1 crack md5 with salt on 01/01/1970 00:00
hey guys,

i'm not very good at hash cracking, and i have some md5's with 32 char salts on them. any advice on the easiest way to crack them? i have an excellent wordlist and jtc, i'm just not sure how to use jtr with salt.

thanks an oodle,

tux.
<person i was helping> says:
SELECT ' UNION ALL FROM users?
bigggnick@gmail.com says:
lol
person says:
SELECT 'UNION ALL' FROM users?

LEARN SQL BEFORE ATTEMPTING TO INJECT IT!!!!!!
MarianG
Member
Devil in Nirvana.

Avatar
Professional Analyst

Joined: 08/25/2008
Last Seen: 2011-03-30
Experience: 177.1
Points: 1470
#2 RE: crack md5 with salt on 01/01/1970 00:00
Try with Cain & Abel. :)
Code Highlighting :: Select Code
UPDATE world SET genius="1" WHERE nick="MarianG";

7 --- 13 --- 23 --- 666 --- 90213.
Good Luck - Bad Luck - Destiny - Devil - MarianG
Image
rohansingh47
Member


Avatar
Professional Analyst

Joined: 07/17/2008
Last Seen: 0000-00-00
Experience: 1041.05
Points: 565
#3 RE: crack md5 with salt on 01/01/1970 00:00
try this http://www.milw0rm.com/cracker/insert.php
Image
I would love to change the world, but they won't give me the source code

Tux
Veteran Member
the killer penguin

Avatar
Professional Analyst

Joined: 04/03/2008
Last Seen: 0000-00-00
Experience: 579.08
Points: 585
#4 RE: crack md5 with salt on 01/01/1970 00:00
neither of those will work because of the salt. thanks for the replys, tho.
<person i was helping> says:
SELECT ' UNION ALL FROM users?
bigggnick@gmail.com says:
lol
person says:
SELECT 'UNION ALL' FROM users?

LEARN SQL BEFORE ATTEMPTING TO INJECT IT!!!!!!
scankyfrank
Veteran Member
King of the Jews

Avatar
Professional Analyst

Joined: 04/03/2008
Last Seen: 0000-00-00
Experience: 865.28
Points: 220
#5 RE: crack md5 with salt on 01/01/1970 00:00
do you have the salts? if not then I really dont think you should bother because you probably dont want to to crack a 32+ passwod/salt. If you do have the salts then I sure you could write a simple dictionary cracker that adds on the salt at the end. If you need it, I have a simple md5 cracker that you could modify.

:)
_('~')_/ how does it feel to be something on?
Grindordie
Administrator
Software Engineer

Avatar
ZI Guru

Joined: 11/04/2007
Last Seen: 0000-00-00
Experience: 1207.57
Points: 1100
#6 RE: crack md5 with salt on 01/01/1970 00:00
Well, if you know the salt like scanky said, you can create a dictionary attack/brute forcer to use the same salting algorithm and compare the hashes.

Otherwise, the only way to find the plain text would be to guess the whole plain-text or find a collision.

MD5 has become really insecure.. I've started to use sha-256 to hash stuff.
That's not a bug, that's an unexpected feature

phpFort - light-weight content management system.
Tux
Veteran Member
the killer penguin

Avatar
Professional Analyst

Joined: 04/03/2008
Last Seen: 0000-00-00
Experience: 579.08
Points: 585
#7 RE: crack md5 with salt on 01/01/1970 00:00
ok, i'm 99% sure this is the code used to make encrypt and authenticate.

Code Highlighting :: Select Code

    $query = 'SELECT `id`, `password`, `gid`'
            . ' FROM `#__users`'
            . ' WHERE username=' . $db->Quote( $credentials['username'] )
            ;
        $db->setQuery( $query );
        $result = $db->loadObject();


        if($result)
        {
            $parts    = explode( ':', $result->password );
            $crypt    = $parts[0];
            $salt    = @$parts[1];
            $testcrypt = JUserHelper::getCryptedPassword($credentials['password'], $salt);
<person i was helping> says:
SELECT ' UNION ALL FROM users?
bigggnick@gmail.com says:
lol
person says:
SELECT 'UNION ALL' FROM users?

LEARN SQL BEFORE ATTEMPTING TO INJECT IT!!!!!!
SirGod
Member
One of Godz

Avatar
Professional Analyst

Joined: 09/05/2008
Last Seen: 2011-05-29
Experience: 507.38
Points: 1310
#8 RE: crack md5 with salt on 01/01/1970 00:00
Use PasswordsPro
Nothing.
hack4u
Administrator
ZI Owner

Avatar
ZI Guru

Joined: 03/30/2008
Last Seen: 0000-00-00
Experience: 20492
Points: 1285
#9 RE: crack md5 with salt on 01/01/1970 00:00
Quoted from SirGod:
Use PasswordsPro


agreed. its free and can crack damm near everything i put in it :D

Image
Image


Who is watching forums


Users viewing this page: Guests (1)
Users viewing the forum: 0



© 2009 ZeroIdentity.org

Powered by phpFort © 2008
Page generated in 0.053 seconds. :: MySQL Queries: 12