Hashes.org Forum
Habbo Leak - pepper (salt) issue - Printable Version

+- Hashes.org Forum (https://hashes.org/forum)
+-- Forum: Hashes.org (https://hashes.org/forum/forumdisplay.php?fid=4)
+--- Forum: Technical (https://hashes.org/forum/forumdisplay.php?fid=5)
+--- Thread: Habbo Leak - pepper (salt) issue (/showthread.php?tid=47)



Habbo Leak - pepper (salt) issue - destructo - 01-25-2018

Hello,

The Habbo leak has some problems with correctly annotating the hash corpus with its' fixed pepper (xCg532%@%gdvf^5DGaa6&*rFTfg^FD4$OIFThrR_gh(ugf*/)

I locally cleaned up the remaining list and cracked some percentage of remaining hashes - however these wont validate because the platform has a messy copy.

In addition - a number of 'plains' end up including this salt, which pollutes the found lists.

To see the problem for yourself, grep thru the 'founds';
Code:
grep -a  'xCg532' combofound.txt



Re: Habbo Leak - pepper (salt) issue - s3in!c - 01-27-2018

Sorry about a possible misunderstanding, I didn't update the algorithm description of the Habbo leak. I corrected it now, it's MD5(PLAINSALT) with the pepper as salt.
When uploading the plains you need always to make sure that the algorithm will produce the correct hash when applied to the plain and salt. That's why it didn't validate when you uploaded it as MD5.
About the incomplete copy, basically hashes.org does not care if the salt which is saved is correct or not. It tries to reproduce the hash with the uploaded salt/plain and if these are correct they will replace the old salt information of the hash.


Re: Habbo Leak - pepper (salt) issue - destructo - 01-29-2018

Cool! Thanks s3in!c.