First of all i'm not asking what is a hash, or something else. I will try to explain what i'm searching clearly:
Let's say I have a dump of a database, all the passwords of this database are hashed, the passwords are 40 bytes long, so the used algorithm is based on sha-1. However, I also know that there is a salt (sha1($pass.$salt))
or sha1($salt.$pass)
. I'm able to register on the targeted website with a username and a password of my choice. Once it's done, I'm able to see what is my hashed password, and its plain text value (for example, if I register on the website with the password "123") and if I then dump the database to check the hash of my password (so in my case 123) I will have its hashed value. But I don't have the salt. Based on what I have, can I guess/brute force the salt used, which is fixed in the targeted application code (I can't see it).