Search found 69 matches

Go to advanced search

by s3in!c
Wed 27. Jun 2018, 10:24
Forum: Technical
Topic: mdxfind install CLI only
Replies: 2
Views: 112

Re: mdxfind install CLI only

MDXfind is a command line tool and never needs a GUI.
There are just some libs required as dependencies (libjudy-dev, librhash, libmhash iirc) but these are easy installable on ubuntu.
by s3in!c
Fri 22. Jun 2018, 09:33
Forum: Technical
Topic: API + Lists Hashcat Code
Replies: 3
Views: 407

Re: API + Lists Hashcat Code

It's not that easily possible to get a list of all Algorithms which are in the Database (it would require a complete database scan). Also this will dynamically change as soon as a new algorithm/combinations gets added.
by s3in!c
Thu 21. Jun 2018, 15:29
Forum: Technical
Topic: API + Lists Hashcat Code
Replies: 3
Views: 407

Re: API + Lists Hashcat Code

No, because hashes.org supports much more combinations and hash algorithm variants than hashcat. So it's not possible to have a hashcat mode for many of the hashes.
by s3in!c
Thu 14. Jun 2018, 20:53
Forum: General
Topic: How to crack edmodo passwords with hashcat?
Replies: 5
Views: 583

Re: How to crack edmodo passwords with hashcat?

You just need the hashlist in the format as it is on hashes.org. So just the bcrypts (as the salt is included in the bcrypt hash).

Then you execute

Code: Select all

./mdxfind.osx -h ^bcryptmd5$ -f <hashlist> <wordlist> >> found.txt
by s3in!c
Wed 13. Jun 2018, 15:17
Forum: General
Topic: How to crack edmodo passwords with hashcat?
Replies: 5
Views: 583

Re: How to crack edmodo passwords with hashcat?

Hi,

Afaik there is no hashcat kernel available somewhere so far which does bcryptmd5. Someone who is well in hashcat kernel programming should be able to add this as it's just applying md5 before the bcrypt.
MDXfind is able to do it already, if you want to try with it.
by s3in!c
Sun 20. May 2018, 17:04
Forum: General
Topic: New user; need some help submitting founds.
Replies: 1
Views: 725

Re: New user; need some help submitting founds.

Hi, You got most of the stuff correctly. A hash is considered salted, as soon as it has a separate part which is the salt, e.g. the vBulletin hashes. On the other case for example a bcrypt hash is not "salted", as the hash is integrated into the hash and therefore no separate field is provided. Rega...
by s3in!c
Mon 26. Mar 2018, 08:52
Forum: Application Usage
Topic: MDXFind uploading founds
Replies: 1
Views: 3054

Re: MDXFind uploading founds

Hi, There is no general approach so far, I didn't had time to complete my MDXfind to Hashes.org conversion script. After you run your founds through mdsplit you have one file per algorithm which is good, as you have to upload separately anyway as only one algorithm per upload is accepted on hashes.o...
by s3in!c
Tue 6. Mar 2018, 12:16
Forum: General
Topic: Leaked password lists NOT uniq
Replies: 3
Views: 829

Re: Leaked password lists NOT uniq

Yeah good point with the hibp list. Just note that the list contains a large bunch of really bad parsed stuff, emails etc. so depending on what your use case is, it might be not the right thing.

But anyway, at some point the hibp v2 might be available on hashes.org ;)
by s3in!c
Fri 2. Mar 2018, 10:02
Forum: General
Topic: Leaked password lists NOT uniq
Replies: 3
Views: 829

Re: Leaked password lists NOT uniq

Hi On Hashes.org every hashlist available is made unique and I don't keep track how many times a hash was appearing in a leak. But if you would like to have this information, you can do this when you have the original leak lists (e.g. for Linkedin) and then just go through it with the founds of hash...
by s3in!c
Sat 27. Jan 2018, 13:56
Forum: Technical
Topic: Habbo Leak - pepper (salt) issue
Replies: 2
Views: 1702

Re: Habbo Leak - pepper (salt) issue

Hi, Sorry about a possible misunderstanding, I didn't update the algorithm description of the Habbo leak. I corrected it now, it's MD5(PLAINSALT) with the pepper as salt. When uploading the plains you need always to make sure that the algorithm will produce the correct hash when applied to the plain...

Go to advanced search

cron