Reputation
Top tag
Next privilege 200 Rep.
See reduced ads
Badges
1 2
Newest
 Nice Answer
Impact
~2k people reached

  • 0 posts edited
  • 0 helpful flags
  • 0 votes cast
Dec
5
awarded  Nice Answer
Feb
17
awarded  Necromancer
Feb
16
comment Does prepending a salt to the password instead of inserting it in the middle decrease security?
@MainMa: Basically, you are right and there are certainly cases where you can't extract the hashing algorithm from the website. However, if a website is prone to SQL injection, in reality it often also has other flaws. Furthermore, you could use the SQL injection to extract parts of the file system via SELECT LOAD_FILE(), which on the other hand might require additional information about the file structure of the website. Or, you use the bruteforce approach I suggested. But thanks for clarification :)
Feb
15
awarded  Teacher
Feb
15
answered Does prepending a salt to the password instead of inserting it in the middle decrease security?