john-users - Re: checking only first 5 characters of a md5 hash

Openwall Project		/home Owl JtR Pro crypt pam_passwdqc tcb phpass scanlogd popa3d msulogin / Linux BIND / advisories presentations / services donations / wordlists passwords / news community lists wiki CVSweb mirrors signatures
bringing security into open environments

Password Recovery Resources on the Net

[<prev] [next>] [<thread-prev] [thread-next>] [month] [year] [list]

Date: Sat, 11 Mar 2006 11:10:36 +0100
From: Turko <granturko@...il.com>
To: john-users@...ts.openwall.com
Subject: Re: checking only first 5 characters of a md5 hash

On 3/11/06, Solar Designer <solar@...nwall.com> wrote:
>
> On Sat, Mar 11, 2006 at 08:49:08AM +0100, Turko wrote:
> [38 lines of context removed]
> > OK
>
> Please try to not quote irrelevant context in your responses.  You did
> not need to quote all those many lines just to say "OK".


Yes you are right. SORRY.


There's no point in running this for more than a few seconds.  If it
> does not crack a password, then $mycode is not set to a string produced
> by the $code = ... line.
>
> > I m sure that $mycode is an existing part of the hash.
>
> ...existing "part of the hash" or "the first 5 characters of base64
> encoding of hex encoding of the MD5 hash"?  Obviously, the script will
> only crack the latter.


Now it works!
I tried to remove the encoding base 64 and in 5 seconds it found the key !

Thanks a lot Solar for your precious help and support.
Really.

Bye,
Turko




--
L'imbecille cade sulla schiena e si sbuccia il naso. (Proverbio Yiddish).
Non esistono donne brutte. Dipende solo da quanta vodka bevi (Proverbio
russo).