I have some Array Load Balance device that the user password hash like:
user "array" "XXXXXXXXXVkjTX9a1kYtNo".
How can I crack the password or find out the algorithm of the hash?
|show 2 more comments|
This question is unlikely to help any future visitors; it is only relevant to a small geographic area, a specific moment in time, or an extraordinarily narrow situation that is not generally applicable to the worldwide audience of the internet. For help making this question more broadly applicable, visit the help center.If this question can be reworded to fit the rules in the help center, please edit the question.
Hashing is one-way by design.
According to the documentation for Array Networks switches page 45 the only public information I found in regard to hashing indicates the following methods are supported for keys:
If you're talking about the initial user account on the box, it will depend on the distro / base OS they made their build from, the original settings of the build (for instance RedHat uses Message-Digest Algorithm (MD5) and shadow passwords), and if they altered those settings. Additionally they could add a salt.
Here's a thread on determining the distro. You might try to telnet to the box and that could give you and indication of what they're running (on the login screen) as long as it's not a custom distro.
Even then based on the directory structures and device naming conventions you might be able to tell what they're running (I'm assuming a flavor of *nix).
Then you might try to add another user (if possible) with a known password and try to replicate the hash that way. Some of the standalone appliances are tricky.
Note: Sorry, I misread the original question. I thought this was more of a question about how to go about pulling your own password from a hash, at which point you could use a dictionary attack.