Hash thread

[DNR]

https://code.google.com/p/hash-identifier/" onclick="window.open(this.href);return false;
and

https://rstcenter.com/forum/47075-art-hashing.rst" onclick="window.open(this.href);return false;


DNR

[ayu]

Could anyone run these maybe?

I just got a new computer with a better graphics card, but haven't set it up yet, so no cracking atm ^^

Code: Select all

0cbea5d289379ee9c35e41a05f40784a
28f8ec9f3360dfe70e88b3a2449b8d46
32f82466e4a96f6d7d22305592537bf2 

The lovely tool DNR posted identifies it as

Code: Select all

Possible Hashs:
[+]  MD5
[+]  Domain Cached Credentials - MD4(MD4(($pass)).(strtolower($username)))

But I'm pretty sure it's an MD5

[ayu]

One cracked

Code: Select all

28f8ec9f3360dfe70e88b3a2449b8d46 MD5 : ayf2wn

[DNR]

Good work brah

DNR

[ayu]

If anyone needs any hashes cracked, I have now setup my work machine as a hash cracking station ^^ (It packs a Nvidia Quadro FX card, newer model).

[bad_brain]

bazinga:

Results
---------------------------------------------------
Hash:0cbea5d289379ee9c35e41a05f40784a Plain:tipp0925 (Hex:7469707030393235)
Hash:32f82466e4a96f6d7d22305592537bf2 Plain:busgrabb (Hex:6275736772616262)

finally figured out how to correct the charsets for some of the rainbow tables, hit quote is much better now...

[ayu]

bazinga:

Results
---------------------------------------------------
Hash:0cbea5d289379ee9c35e41a05f40784a Plain:tipp0925 (Hex:7469707030393235)
Hash:32f82466e4a96f6d7d22305592537bf2 Plain:busgrabb (Hex:6275736772616262)

finally figured out how to correct the charsets for some of the rainbow tables, hit quote is much better now...

Nice! : D

I'm thinking about making a cluster software for cracking hashes with oclHashcat.

Like, I'll have a server that is connected to a database which stores "jobs".
A client connects to a server and gets a "job" to take care of, which can be a part of bruteforcing the hash.
Like, maybe the first few million combinations of the hash.
And then the next client gets another few million combination to solve.

And when a job is finished the client said so, if the hash was found or not, etc.

Might be fun =)

[DNR]

Hmm I think I know what server to put that on...Waiting for funds.

DNR

[ayu]

Hmm I think I know what server to put that on...Waiting for funds.

DNR

That sounds interesting

[ayu]

Playing around with a hash a bit today.
The username it's connected to is "koe" and the password that is hashed is also "koe" (random keyboard pressing).
The problem is that I need to crack it to figure out what algorithm is used and what salt is used (if any).

I'm pretty sure it's either SHA1 or MySQL5, and so far I have tried "SHA1 A-Za-z0-9+specials length 1-6"

Anyone that wants to try it, here's the hash

Code: Select all

5de2693b9dd05c74efbd6d94b75be579cf6bf91e

[bad_brain]

hmm...Cain accepts it as MySQL hash and says it's a SHA1 one. will run my rainbow tables over it in the next days...

[ayu]

hmm...Cain accepts it as MySQL hash and says it's a SHA1 one. will run my rainbow tables over it in the next days...

That would be awesomely appreciated! <3

[ayu]

Two new hashes here that I need help with.
They are joomla hashes (method 11 in hashcat)

Code: Select all

26a0de9e3eedba9e4532044b988d8a0f:H9JewcVQYk4j7OUmkJsX9rjsewNOU1jN
bca2e528ffe66ba20da8981bbdb66d37:ZaR1CMKcTTQje2BtGdsfLIQbLoVu3qJ0

They are in the format salt:hash, so rainbowtables wont work here.
My hash cracking machine will probably be finished today, so if anyone have any hashes they need help with, just say the word and I'll run them through my wordlists as well as 1-8 length bruteforcing with the ?a charset in hashcat.

[bad_brain]

trying 1-6 mixedalphanumeric on the 1st one.

edit: darn, no luck with both.

[ayu]

trying 1-6 mixedalphanumeric on the 1st one.

edit: darn, no luck with both.

Yup, thanks for the attempt man.

I have tried 1-8 (a-zA-Z0-9+specials+my 50 different dictionaries) now, with zero luck.
The hash machine has been upgraded today and will constantly be working on this.
If anyone need me to run hashes then just put them here, and I'll run anything 1-7 (a-zA-Z0-9+specials+50 different dictionaries).

PS: I will not run hashes for newly registered members.
You will need a post count of about 20 posts before I do you a favour like that