Follow @Openwall on Twitter for new release announcements and other news
[<prev] [next>] [thread-next>] [day] [month] [year] [list]
Date: Sat, 7 Sep 2019 23:05:13 +1000
From: Marcin Gębarowski <>
Subject: SHA256(XOR(salt+pass, key))

Hi all,

Looking for help with using john to crack the hashes I got, the 
application creates them as follows:

SHA256(XOR(salt + pass, key))

Salt and key are both 32 bytes long. I have the key. Hashes are stored 
in format:
base64(salt + hash)
but I can easily change that to anything else.

The main problem I'm having is the XOR function, which I was unable to 
find in dynamic scripts library. Having something like:
sha256(xor($s.$p, $key))
as dynamic script would definitely solve this...


Powered by blists - more mailing lists

Confused about mailing lists and their use? Read about mailing lists on Wikipedia and check out these guidelines on proper formatting of your messages.