Date: Wed, 20 Jul 2016 16:18:11 -0500 From: jfoug <jfoug@...nwall.net> To: john-users@...ts.openwall.com Subject: Re: need to find salt On 7/20/2016 2:34 PM, Joe Konecny wrote: > I have a salted MD5 hash. I have the string that was hashed I just want > to find the salt. I don't know the salt size or location. Without knowing anything about the salting method, it will simply be a trial and error way of proceeding. If you 'knew' that the algorithm was md5($p.$s) and $s was a ascii string of 8 characters, then you have a better target (but a pretty large universe of candidates). If you know that it is md5($p.$s) and $s is 16 character lower case hex values, then again you can target that. If you find the salt is 32 bytes of random binary data, then you might as well give up finding the salt. I tested all binary data, from 1 to 4 bytes for md5($s.$p) and md5($p.$s) and the salt was not found.
Powered by blists - more mailing lists
Confused about mailing lists and their use? Read about mailing lists on Wikipedia and check out these guidelines on proper formatting of your messages.