The Ethical Hacker Network - MD5 with salt encryption

Latest Additions

Who's Online

EH-Net > Resources > Tutorials (Moderator: don) > MD5 with salt encryption

Pages: [1] Go Down

	Author	Topic: MD5 with salt encryption (Read 8722 times)
0 Members and 1 Guest are viewing this topic.

xorf

Newbie

Offline

Posts: 4

MD5 with salt encryption

« on: October 13, 2007, 05:22:05 AM »

I currently run a VBulletin community forum.

I only started to use cain, but it will not decrypt any of the MD5 hashes, even a very simple 5 dictionary character that i purposely added as a test.

is it because vbulletin uses salt along with the MD5?


	Logged

Manu Zacharia (-M-)

Sr. Member

Offline

Posts: 393

c0c0n Hacking Conference - where hackers unite

Re: MD5 with salt encryption

« Reply #1 on: October 13, 2007, 08:25:32 AM »

Hi Xorf,

I think that is the reason why you are unable to decrypt any of the MD5 hashes. vBulletin passwords are stored in the following format:

Code:

$password_hash = md5(md5($password_text) . $user_salt);

Note - $user_salt is a random three character string stored in the user table as 'salt'.


	Logged

Manu Zacharia
MVP (Enterprise Security), ISLA-2010 (ISC)², C|EH, C|HFI, CCNA, MCP,
Certified ISO 27001:2005 Lead Auditor

There are 3 roads to spoil; women, gambling & hacking. The most pleasant with women, the quickest with gambling, but the surest is hacking - c0c0n

xorf

Newbie

Offline

Posts: 4

Re: MD5 with salt encryption

« Reply #2 on: October 13, 2007, 08:39:48 AM »

Hey Morpheus,

Ya i noticed the string within the table. a combination of a-z A-Z 0-9 and a symbol

is there a way to decrypt the MD5 hash even if it is further encrypted with slat?


	Logged

Craig

EH-Net Columnist
Jr. Member

Offline

Posts: 69

Re: MD5 with salt encryption

« Reply #3 on: October 13, 2007, 07:17:51 PM »

Yahoo mail used to use the exact same method to hash their passwords. Google for a program called Ycrack (dictionary attack tool), it should work for your situation - just substitute your $user_salt string for the challenge string that Yahoo used.

P.S. - If you want to speed up Ycrack, delete the line

Code:

printf("Trying:%s\n",string);

before compiling it.