Take the 2-minute tour ×
Information Security Stack Exchange is a question and answer site for Information security professionals. It's 100% free, no registration required.

I have some Array Load Balance device that the user password hash like:

user "array"       "XXXXXXXXXVkjTX9a1kYtNo".

How can I crack the password or find out the algorithm of the hash?

share|improve this question

closed as too localized by Terry Chia, Adnan, lynks, Rory Alsop May 17 '13 at 10:14

This question is unlikely to help any future visitors; it is only relevant to a small geographic area, a specific moment in time, or an extraordinarily narrow situation that is not generally applicable to the worldwide audience of the internet. For help making this question more broadly applicable, visit the help center.If this question can be reworded to fit the rules in the help center, please edit the question.

    
What have you tried? –  AbsoluteƵERØ May 17 '13 at 7:37
    
sha-256,sha-512. –  zirong May 17 '13 at 8:42
    
How can I find the hash algorithm of ArrayOS? –  zirong May 17 '13 at 8:48
    
If it's salted you'll not find a match due to collisions. According to the documentation, these are the types of hashes they allow. (see page 45) rharrison8.com/AG%20User%20Manual/AG%209.0.1.pdf –  AbsoluteƵERØ May 17 '13 at 8:59
    
thank you very much!Because of the weak password check I should find the algorithm of the hash. –  zirong May 17 '13 at 9:31

1 Answer 1

Hashing is one-way by design.

According to the documentation for Array Networks switches page 45 the only public information I found in regard to hashing indicates the following methods are supported for keys:

supported hashes

If you're talking about the initial user account on the box, it will depend on the distro / base OS they made their build from, the original settings of the build (for instance RedHat uses Message-Digest Algorithm (MD5) and shadow passwords), and if they altered those settings. Additionally they could add a salt.

Here's a thread on determining the distro. You might try to telnet to the box and that could give you and indication of what they're running (on the login screen) as long as it's not a custom distro.

Even then based on the directory structures and device naming conventions you might be able to tell what they're running (I'm assuming a flavor of *nix).

Then you might try to add another user (if possible) with a known password and try to replicate the hash that way. Some of the standalone appliances are tricky.

Note: Sorry, I misread the original question. I thought this was more of a question about how to go about pulling your own password from a hash, at which point you could use a dictionary attack.

share|improve this answer

Not the answer you're looking for? Browse other questions tagged or ask your own question.