Hash thread

[bad_brain]

aaaaaand had to start again....
obviously there is a bug in the latest rcracki version (0.70) which makes it impossible to resume sessions...when trying to resume it simply starts again from the beginning.
version 0.6.6 works fine though, more soon...I hope...

[ayu]

aaaaaand had to start again....
obviously there is a bug in the latest rcracki version (0.70) which makes it impossible to resume sessions...when trying to resume it simply starts again from the beginning.
version 0.6.6 works fine though, more soon...I hope...

lol, that sucks >_<
Don't put too much time on it ^^
I'll just have mine running on it for a bit longer.

[bad_brain]

no luck so far:

statistics
-------------------------------------------------------
plaintext found: 0 of 4 (0.00%)
total disk access time: 22708.07 s
total cryptanalysis time: 3594.58 s
total pre-calculation time: 7749.12 s
total chain walk step: 18446744064986474960
total false alarm: 1476686
total chain walk step due to false alarm: 27077461076

running the biggest set now, which I saved for last because the initial cryptanalysis takes an aweful long time for some odd reason.
for the other sets the first block always took about 60-180 sec., while this one:

cryptanalysis time: 25919.53 s

might be because it's a perfect table (loweralpha numeric 1-10) with a size of more than 800GB already. will let you know when it's done...

[ayu]

Awesome!

Same here though, no luck.

Well, I have most of the hashes cracked, but these are administrative ones.
So if we can't crack these then I'll see what access the other accounts have, and go from there.

[ayu]

The second hash in the list cracked, of the ones I sent you b_b
It was "atlasdiesel" xF

[bad_brain]

oh, great! explains why it wasn't cracked by me yet, the tables I have ran so far are 1-10...still haven't run the last huge sets of alphanumeric tables, so hopefully some success on the 3 other ones there..

[ayu]

So far no luck here on the last ones.
I will give up so and go over to phase 2 of the project.
Which is to use the cracked passwords in a dictionary attack against a bunch of bcrypted passes from the same entity (password reusal ftw).

[bad_brain]

hm, yeah, no luck here too yet....I have to add that I still had no time to run the 2 biggest table sets yet, too much work to do (and rcracki occupies a lot of CPU resources).
I will let you know once I had time for that, hopefully in the next couple of days...

[ayu]

hm, yeah, no luck here too yet....I have to add that I still had no time to run the 2 biggest table sets yet, too much work to do (and rcracki occupies a lot of CPU resources).
I will let you know once I had time for that, hopefully in the next couple of days...

Sweet!

[l0ngb1t]

anyone can give this one a shot

Code: Select all

945d8fe37e54a08253f6b1a5805d8eeb15e7d4b4

according to hash ID:

Possible Hashs:
[+] SHA-1
[+] MySQL5 - SHA-1(SHA-1($pass))

[ayu]

anyone can give this one a shot

Code: Select all

945d8fe37e54a08253f6b1a5805d8eeb15e7d4b4

according to hash ID:

Possible Hashs:
[+] SHA-1
[+] MySQL5 - SHA-1(SHA-1($pass))

Cracking away with 2x R9 290 cards (usually 4 but 2 are not detected today for some reason. No time to fix).
I'm going to my nephews birthday party now so I wont be able to give you any results until later tonight.

[l0ngb1t]

wow that's nice, much appreciated...

[ayu]

wow that's nice, much appreciated...

Home again.
Went through all of my wordlists, and so far no hit.
Doing length 1-8 (a-zA-Z0-9 + special chars) now SHA1.
I will try MySQL with the same set.

When this run is finished (MySQL as well) I wont go any further though.

EDIT: it might help me if you can tell me in what kind of environment you got this hash?

[l0ngb1t]

SQLi
Mysql DB(obviously) with php...
again thank you very much for your effort.

[ayu]

SQLi
Mysql DB(obviously) with php...
again thank you very much for your effort.

Was the hash taken from the MySQL user table (mysql.users) or from a generic table like somedatabase.users?