4

I have the 2 encrypted passwords in my MSSQL database and I'm trying to decrypt it. Here's one of the encrypted password:

E4-68-3F-BE-91-CC-BE-B9-27-4B-18-B1-5F-1B-39-66

The password to the above encryption is maintenance2 but I don't have access to the below encrypted password which I badly need:

4E-EF-1E-1E-A3-48-79-A2-AE-60-C6-08-15-92-7E-D9

Any idea where can I even begin searching so I may decrypt this password? Any lead would be really helpful.

1 Answer 1

6

It looks like the passwords are not actually encrypted; they are hashed. Both of the values that you posted are 16 bytes in length, which is the length of an MD5 hash.

On a whim, I took the MD5 hash of 'maintenance2', and lo and behold, the result is: E4683FBE91CCBEB9274B18B15F1B3966

echo -n 'maintenance2' | md5sum

produces

e4683fbe91ccbeb9274b18b15f1b3966

So, the passwords are stored using a single round of unsalted MD5 hashing. Whatever application this is will certainly not win any awards for outstanding security!

In any case, your problem boils down to finding the password whose MD5 hash is 4EEF1E1EA34879A2AE60C60815927ED9.

I tried entering this hash in a few of the reverse hash calculators online, but none of them produced paydirt. But, you might have luck with a program like John The Ripper or Hashcat.


Edit Apr 24, 2024

I'm adding this bit to the answer in response to the suggestion by kelalaka in the comments below. As can be seen in the comments, after a bit more noodling, it was found that the password whose MD5 hash is 4EEF1E1EA34879A2AE60C60815927ED9 is: admin001

echo -n 'admin001' | md5sum

produces:

4eef1e1ea34879a2ae60c60815927ed9

Epilogue

By design, hash functions are intended to be difficult to reverse. However, programs like John the Ripper and Hashcat are often able to reverse hashes of lower-entropy passwords (like 'admin001') using rainbow tables, lists of commonly used passwords, and brute force. Being that this system hashes passwords using only one round of unsalted MD5 (as was readily determined by the password/hash pair that the OP posted), and that the password is a simple derivation of a commonly used password, it was possible to crack this password in fairly short order.

7
  • Thank You. So 4EEF1E1EA34879A2AE60C60815927ED9 is the MD5 hash and upon decrypting it, I will get the password I'm looking for? When I use a tool like smallseotools.com/password-encryption-utility and I entered 4E-EF-1E-1E-A3-48-79-A2-AE-60-C6-08-15-92-7E-D9, the md5 hash is different. Which one is the correct MD5 hash? Apr 22 at 18:04
  • Thank you. I got the password decrypted. Yes, Its not the best system and it was built about 15 years ago. Apr 22 at 18:12
  • YW. Yes, 4EEF1E1EA34879A2AE60C60815927ED9 is the MD5 hash. Upon reversing this hash, you will get the password you are looking for. The tool that you posted, does forward hashing, not reverse hashing. For example, if you enter maintenance2 in this tool, it will produce E4683FBE91CCBEB9274B18B15F1B3966. So, you are looking for the password that, when entered in this tool, produces 4E...D9. In other words, you are trying to 'reverse hash' 4E...D9. Tools like John The Ripper and Hashcat attempt to use brute force and lists of known passwords to do this.
    – mti2935
    Apr 22 at 18:13
  • 11
    MD5('admin001') -> 4EEF1E1EA34879A2AE60C60815927ED9
    – mti2935
    Apr 22 at 18:37
  • 2
    The last comment must be in the answer to be seen better and make the answer, better.
    – kelalaka
    Apr 23 at 10:43

You must log in to answer this question.

Not the answer you're looking for? Browse other questions tagged .