Openwall GNU/*/Linux - a small security-enhanced Linux distro for servers
[<prev] [next>] [<thread-prev] [thread-next>] [day] [month] [year] [list]
Date: Wed, 20 Jul 2016 16:18:11 -0500
From: jfoug <>
Subject: Re: need to find salt

On 7/20/2016 2:34 PM, Joe Konecny wrote:
> I have a salted MD5 hash.  I have the string that was hashed I just want
> to find the salt.  I don't know the salt size or location.

Without knowing anything about the salting method, it will simply be a 
trial and error way of proceeding.  If you 'knew' that the algorithm was 
md5($p.$s) and $s was a ascii string of 8 characters, then you have a 
better target (but a pretty large universe of candidates).  If you know 
that it is md5($p.$s) and $s is 16 character lower case hex values, then 
again you can target that.  If you find the salt is 32 bytes of random 
binary data, then you might as well give up finding the salt.

I tested all binary data, from 1 to 4 bytes for md5($s.$p) and 
md5($p.$s) and the salt was not found.

Powered by blists - more mailing lists

Your e-mail address:

Confused about mailing lists and their use? Read about mailing lists on Wikipedia and check out these guidelines on proper formatting of your messages.