Image
 
linkedin_logo.png rss_logo.jpg
twitter_logo.png youtube_logo.jpg
Latest Additions
 
EH-Net Login
Welcome Guest.






Lost Password?
No account yet? Register
Who's Online
We have 72 guests online
 
Free Business and Tech Magazines and eBooks

You are here: Home arrow Resourcesarrow Toolsarrow Password Question
EH-Net
May 21, 2013, 01:12:33 AM *
Welcome, Guest. Please login or register.
Did you miss your activation email?

Login with username, password and session length
News: Go back to The Ethical Hacker Network Online Magazine Home Page
 
   Home   Help Calendar Login Register  
Pages: [1]   Go Down
  Print  
Author Topic: Password Question  (Read 6079 times)
0 Members and 1 Guest are viewing this topic.
millwalll
Guest
« on: July 20, 2011, 02:54:51 PM »

Hi All,

Got a quick question about cracking password I have noticed online there are lots online password cracking sites.

Every time I try supply a hash I get error saying its not a Hash I just want to make sure I was passing the correct thing to the site.

for example take this hash
root:$1$3OF/pWTC$lvasdl74pAHAcrvepWqpu.:12859:0::::: what would be the hash ?
Logged
lorddicranius
Sr. Member
****
Offline Offline

Posts: 447



View Profile WWW
« Reply #1 on: July 20, 2011, 03:33:24 PM »

Hi All,

Got a quick question about cracking password I have noticed online there are lots online password cracking sites.

Every time I try supply a hash I get error saying its not a Hash I just want to make sure I was passing the correct thing to the site.

for example take this hash
root:$1$3OF/pWTC$lvasdl74pAHAcrvepWqpu.:12859:0::::: what would be the hash ?

The portion between the first and second colons would be the hash.  Be sure to include the period just after the lowercase "u" also (wisdom from a past experience haha).
« Last Edit: July 20, 2011, 03:39:33 PM by lorddicranius » Logged

GSEC, eCPPT, Sec+
Data_Raid
Full Member
***
Offline Offline

Posts: 165



View Profile
« Reply #2 on: July 20, 2011, 04:15:25 PM »

As lordcranius mentioned, the password hash ends at the first colon (the password may or may not include a period but should be included if you're extracting just the hash). In the example you provided, the password hash is
$1$3OF/pWTC$lvasdl74pAHAcrvepWqpu.

Here's a useful link to that explains the format of the shadow file and what each field represents:
http://www.cyberciti.biz/faq/understanding-etcshadow-file/
Logged

All men by nature desire knowledge.

Aristotle
SephStorm
Hero Member
*****
Offline Offline

Posts: 530


View Profile WWW
« Reply #3 on: July 20, 2011, 04:23:39 PM »

fyi, thats an MD5 salted hash, and I have yet to find a site that can crack them.
Logged

tturner
Sr. Member
****
Offline Offline

Posts: 432


View Profile WWW
« Reply #4 on: July 20, 2011, 08:46:28 PM »

I hope you guys aren't actually posting hashes for a customer or anything important on a public web forum Wink
Logged

Certifications:
CISSP, CISA, GPEN, GWAPT, GAWN, GCIA, GCIH, GSEC, OPSE, CSWAE, CSTP, VCP

WIP: OSWP, GSSP-JAVA, GXPN

Udacity on hold, again. I suck.

http://sentinel24.com/blog  @tonylturner http://bsidesorlando.org
millwalll
Guest
« Reply #5 on: July 21, 2011, 12:36:22 PM »

lol no tturner it was something I made up was just curious.

Logged
Pages: [1]   Go Up
  Print  
 
Jump to:  

Powered by MySQL Powered by PHP Powered by SMF 1.1.18 | SMF © 2013, Simple Machines
Joomla Bridge by JoomlaHacks.com
Valid XHTML 1.0! Valid CSS!
Page created in 0.091 seconds with 22 queries.
 
Exclusive Deal

sansfire13_245x90_cw90.jpg
SANSFIRE 2013
June 15 - 22

5% Off w/ Code: EHN_5

SANS Deals 4 EH-Netters
5% OFF Any SANS Course in Any Format!
Coupon Code: EHN_5 Including SANS Rocky Mountain 2013 & SANS Boston 2013
Polls
Compared to this year, 2013 will be:
 
Recent Forum Topics
EH-Net News Feeds
Latest Additions
 
         
Advertisement

© 2013 The Ethical Hacker Network
Joomla! is Free Software released under the GNU/GPL License.