Printable View
Hi, I've lost some passwords and recovered the hashes. The hashes look like this:
Does anyone know which hashing algorithm was used?Code:$P$Bqd24EhYfUB5vBIFsHOzLnKgxljyqO1
$P$B3VLyW1nvYr9rLGQvlxTEWd6zBh73h0
$P$BUF6ew1MKNIr.OXhUl..QJX24NfgiT.
$P$BjzHI4jZ72CO95KTLyW3zQbYfWZdtQ.
$P$B1n6Ay91eC0sdT1oi6v7oFukFmBceq.
$P$B9eZtyxysy7OHLfd6f/GdgJhVf/jpH1
Looks like some MD5 mixed with RadioGatún and some SHA-1. I also notice a smattering of WHIRLPOOL and Tiger2. Looks like you have some work ahead of you.
Hello Noo, and welcome to AntiOnline.
What are these passwords for........ operating system logon or an application?
:)
This one leaves me curious. I actually did some searching to find a list or chart or something of what passwords or text looks like in different encryptions/hashs/etc. I found almost nothing? I should have probably started my own thread but if anyone knows of such a thing please let me know! :-)
Hey oofki,
I don't know of any references or tool either, but you might like to play with this free tool.
http://www.hashemall.com/
:cool:
As for the original post............. if he hasthen he must know what they are for. If you know what the passwords are for, a simple Google search for it should tell you what algorithm or algorithms are used by that software.Quote:
lost some passwords and recovered the hashes
Why is it that I distinctly detect the aroma of rodent here? :D
@SD
Of course! damn, how could I have missed something that obvious. :lildevil:Quote:
Looks like some MD5 mixed with RadioGatún and some SHA-1. I also notice a smattering of WHIRLPOOL and Tiger2.
Actually I tried that site in my search, it isnt that great, a lot of the same algo's just different bit sizes. I tried searching google for ' $P$B9 ' And well yeah I forgot special symbols don't work....
Yes,
The $P$B is consistent to them all. I can't say that I recognise it though.
The only thing I can think of along those lines is PunkBuster, the gamesite anti-cheating system?
Or some sort of constant salt, but in that case I would really have expected it to be stored separately from the hash?????????
Yep its a pretty big anti-cheat system.
Its almost like it's added after it has been hashed, and with-or-without it that is a strange sized hash (34/30). Most hashes come out to be 16/32/etc. I am definitely interested in what this ends up being a hash for..
Yes, I am interested as well as it looks weird to me as well.
As for trying to recover passwords from hashes...........your mileage might vary :D
Firstly the hash might be so strong that it would take too long............after all, that is the intention isn't it?
Another problem that I have encountered is that the hash itself has become corrupted so you couldn't extract a working password anyway?
If we knew what it was for, we might be able to find out what algorithm has been used and consider the feasibility of cracking it. Even better, we might be able to suggest an easier way of restoring access to whatever it is.
If the problem has "just happened" and you feel that you do know what the password is then I would recommend scanning the HDD with the manufacturer's diagnostic toolkit ;)
Well I came across this **** Nihil, it is the most complete I have found yet:
http://www.sinfocol.org/herramientas/hashes.php
And I think I figured out that, that is some type of crypt, which means it will be impossible to decrypt or even use a lookup table because they are hashed and salted multiple times :-P
Thanks for that link oofki, I have bookmarked it and will have a play later:D
If the original hashes were salted, it would make cracking a very daunting task. If we are looking at multiples then it is mission impossible, without knowing what they are for.
:)
I mean even if the salt is KNOWN and so is the algorithm as well, lookup tables are useless, and if they were complex passwords, then yup forget it about it!