Openwall GNU/*/Linux - a small security-enhanced Linux distro for servers
[<prev] [next>] [thread-next>] [day] [month] [year] [list]
Date: Thu, 5 Apr 2012 21:05:07 +0530
From: Dhiru Kholia <>
To: Per Thorsheim <>
Subject: Re: [john-users] EPiServer hashes

On Thu, Apr 5, 2012 at 3:01 PM, Dhiru Kholia <> wrote:
> On Thu, Apr 5, 2012 at 2:09 PM, Per Thorsheim <> wrote:
>> 2. I will make a bunch of other examples as well as find a decent way of exporting them (user:hash:salt or just hash:salt). I'm on vacation now, back to work and colleagues with episerver on Tuesday. I'll get back to you then.
> Sure. (user:hash:salt) seems to be fine. I can write a small utility
> to convert (user:hash:salt) into format required by JtR (namely
> "user:$episerver$*salt*hash"). Thanks!

I have added support to crack new EPiServer hashes to JtR
( So far, the code is
not tested much (might crash or not work!). The patch has OMP support

The input format is
"user:$episerver$*version*base64(salt)*base64(hash)" where version ==
0 for now.
E.g. testUser:$episerver$*0*fGJ2wn/5WlzqQoDeCA2kXA==*UQgnz/vPWap9UeD8Dhaw3h/fgFA=


Powered by blists - more mailing lists

Your e-mail address:

Powered by Openwall GNU/*/Linux - Powered by OpenVZ