0

I have the task to crack a bunch of passwords like:

  • $1$V5l3qvml$Q.fDn30gGhjcEIZH8utah/
  • $1$DcuX.dRK$bR4utyGQ4ET4sobpMMtfo0
  • $1$WbXWIqFu$Qu1fT/MmTIvSUz4xw4mlI0
  • $1$8Y7TfkZ5$LnuF99mgFbV1wvQ61dMZB1

I was only told that these were Linux-like encrypted (I have removed the username: from the front, e.g. sBerhhard: and ::1:0:1:1::: from the end). I have read here that these are shadow style password hashes. Furthermore, I have tried to use hashcat 0.49 to crack these passwords. However, when trying the following command I got the following result and I cannot figure out why:

hashcat-cli64 -m 10 -o found.txt ..\..\1 dictionaries\Top10000.dic

enter image description here

I have also tried the example from here, and it worked, so I probably have an error in the command.

enter image description here

I am using the dictionary of InsidePro. Am I using the right m parameter (md5($pass.$salt))? If not, what would be the proper one?

0

I believe those hashes are MD5(Unix) format, so -m500. You can compare your hashes to the ones here: hashcat.net/wiki/doku.php?id=example_hashes.

By the way, $1$DcuX.dRK$bR4utyGQ4ET4sobpMMtfo0:bb

  • Thank you for the link. However, I don't quite understand why :bb at the end. I have stated in my post that I have removed ::1:0:1:1::: from the end of each of the passwords. – Eszter Mar 11 '15 at 17:17
  • When I tested to make sure I had the right format I put the hashes into hashcat and it cracked one with a password of bb, so I posted it in the hash:plain format. – Daniel Mar 12 '15 at 20:49

Your Answer

By clicking “Post Your Answer”, you agree to our terms of service, privacy policy and cookie policy

Not the answer you're looking for? Browse other questions tagged or ask your own question.