Skip to main content
Search type Search syntax
Tags [tag]
Exact "words here"
Author user:1234
user:me (yours)
Score score:3 (3+)
score:0 (none)
Answers answers:3 (3+)
answers:0 (none)
isaccepted:yes
hasaccepted:no
inquestion:1234
Views views:250
Code code:"if (foo != bar)"
Sections title:apples
body:"apples oranges"
URL url:"*.example.com"
Saves in:saves
Status closed:yes
duplicate:no
migrated:no
wiki:no
Types is:question
is:answer
Exclude -[tag]
-apples
For more details on advanced search visit our help page
Results tagged with
Search options answers only not deleted user 6203

a cryptographic hash function with a 128-bit (16-byte) output, now deprecated

2 votes

Advice to help crack MD5crypt hash

It sounds like you might need to tap one of the other major feature sets of hashcat: rules. Rules are ways to express common transformations that people make against base words to "complexify" them (c …
Royce Williams's user avatar
2 votes
Accepted

Can I crack a zip file using Hash Suite on Windows?

You've calculated the MD5 of the file itself, not of its password ('123'). … According to its download page, the only hashes supported by Hash Suite are as follows (and ZIP files are not included): LM, NTLM, Raw-MD5, Raw-SHA1, Raw-SHA256, Raw-SHA512, DCC, DCC2, SSHA, MD5CRYPT …
Royce Williams's user avatar
4 votes

Brute force MD5 with a prefix and suffix up to n characters/words

Hashcat lets you load a list of masks from a file - one mask per line. [Edited to expand my previous too-brief answer above]: Hashcat also lets you specify up to 4 custom character sets using the - …
Royce Williams's user avatar
92 votes
Accepted

Is bcrypt(strtolower(hex(md5(pass)))) ok for storing passwords?

Attack the same bcrypt-wrapped MD5, but this time pretend that you haven't cracked the MD5 yet, but instead use a "dictionary" of leaked MD5 that includes your MD5. … Once you've "discovered" that you have an MD5 in hand that is inside one of your bcrypts, attack the MD5, then pass the resulting plaintext to your bcrypt(md5($pass)) attack. …
Royce Williams's user avatar
1 vote

What exactly is 'single' mode in John the Ripper doing?

This is the most important part, which other answers (so far) are missing: Since the information is only used against passwords for the accounts it was taken from (and against password hashes which h …
Royce Williams's user avatar
4 votes
Accepted

Is it possible to crack Joomla hash password?

If it's older Joomla, it's MD5-ish (though I'm not sure of the details there, digging into the source code for older Joomla or John the Ripper or hashcat would probably tell you). …
Royce Williams's user avatar
9 votes
Accepted

Find salt from md5 hash if password is known

We'll be using hashcat's algorithm mode 20 (md5($salt.$pass)). … I haven't explicitly done this with John the Ripper, but since John supports md5($p.$s) and md5($s.$p) using dynamic formats, I believe that the same technique can be used with John. …
Royce Williams's user avatar