john-users - Vbulletin hashes with more than 3 chars salt

Follow @Openwall on Twitter for new release announcements and other news

[<prev] [next>] [thread-next>] [day] [month] [year] [list]

Message-ID: <1313496097.11424.YahooMailClassic@web120708.mail.ne1.yahoo.com>
Date: Tue, 16 Aug 2011 05:01:37 -0700 (PDT)
From: firstname lastname <psykosonik_frequenz@...oo.com>
To: john-users@...ts.openwall.com
Subject: Vbulletin hashes with more than 3 chars salt

Hi All,

I want to know if there's a possibility to crack VBulletin hashes with more than 3 char salt.

I can use JTR to successfully crack VB hashes with a 3 char salt.

>From what I know, md5_gen(6) doesn't check for the salt length while cracking. However, it doesn't work with salt lengths greater than 3 either.

Some example hashes:

671347ef2477b0de65b7d3090b74271f:m;O`bs]j+tl~U4+$j+Gto=YK=*g-:d
d726d8405f5e38a6452aff9e7378b4d6:>b&y/g6WDVdb:vqD[NKY7v.+&o<6#
83d1994655d58be430bfa96b1e816284:enp)t1yev,ly=R"7\>X<;0*.5+#p$j
a75604023723df61b7288380eeb9e9c4:#1:RWakb|;8!eWMqhh@...m4[UtE_E
4967093e7eb764f8652512624cf40935:@n6)`#;AVg/!^s?w_[}*Lf?")Yl?^_
ad05d8e1ae087239b366e76834f93dd9:|:yoL3L%CM@%"bb.K(7rE~>0d(4Xy%
6e36748b726aa206c3d28b8213a45f39:Fp{~P3;3d4.\u(x0jiI)cl#Gr7uo,Z
e89d6004a9633802b1a55117aee866cc:*XK4@...vuP-x29y)1emOa:QpO*"bv

I have the cracked hashes' passwords. So, I put those plain texts in a file and used it as a wordlist to see if JTR can crack them using md5_gen(6).

It didn't work!

Is there a patch which has been developed for these kind of VB hashes or is it being developed?

Thanks.

Regards,
NeonFlash

Confused about mailing lists and their use? Read about mailing lists on Wikipedia and check out these guidelines on proper formatting of your messages.