Follow us on Twitter!
Don't judge the unknown - Grindordie
Thursday, April 24, 2014
Navigation
Home
HellBoundHackers Main:
HellBoundHackers Find:
HellBoundHackers Information:
Learn
Communicate
Submit
Shop
Challenges
HellBoundHackers Exploit:
HellBoundHackers Programming:
HellBoundHackers Think:
HellBoundHackers Track:
HellBoundHackers Patch:
HellBoundHackers Other:
HellBoundHackers Need Help?
Other
Members Online
Total Online: 16
Guests Online: 12
Members Online: 4

Registered Members: 82895
Newest Member: kevy90
Latest Articles
View Thread

HellBound Hackers | Computer General | Cryptography

Author

help with encryption


Member

Your avatar

Posts:
Location:
Joined: 01.01.70
Rank:
Guest
Posted on 28-04-07 01:21
hey,

i extracted this from a windows xp box, but im not sure what kind of encryption is is. Can someone tell me how to break it (im not saying do it for me, but how it can be reversed). i ran it through JTR without the commas (32 long), but it came out blank.

Thanks

Administrator:500:0,25,21,C4,1D,05,4B,A2,88,41,7E,AF,50,CF,AC,29,C3:
_8A,4B,D5,C4,36,B3,81,FB,41,CF,59,75,75,AC,68,CF,09009:::

Guest:501:0:0:::


Author

RE: help with encryption


Member

Your avatar

Posts:
Location:
Joined: 01.01.70
Rank:
Guest
Posted on 28-04-07 03:48
Since no one has replied yet, I'll throw in my guess,

Those look like password hashes for user accounts.

If I'm right, then you need to crack them to see what the password is.

You'll have to do a little googling, but there are a few ways to go about it.

Here are some words to search;

dictionary attack: uses a big wordlist and see if the password matches any of those words--fast
rainbow tables: Looks the hash up from a list of pre-computed hashes--fast
brute force: Computes all hashes in order until it finds a match--slow

Someone much more educated then I could tell you more
Author

RE: help with encryption

richohealey
Member



Posts: 1022
Location: #!/usr/local/bin/python
Joined: 01.05.06
Rank:
Monster
Posted on 28-04-07 03:56
it's the sam dump.

google sam cracker.


i think C&A has one too


bitchohealey at hotmail dot com skype:richohealey www.psych0tik.net
Author

RE: help with encryption


Member

Your avatar

Posts:
Location:
Joined: 01.01.70
Rank:
Guest
Posted on 28-04-07 04:00
VashTSPD wrote:
Since no one has replied yet, I'll throw in my guess,

Those look like password hashes for user accounts.


haha. talk about stating the obvious. Pfft


Author

RE: help with encryption

richohealey
Member



Posts: 1022
Location: #!/usr/local/bin/python
Joined: 01.05.06
Rank:
Monster
Posted on 28-04-07 04:15
ordinarily i would have flamed the shit out of him, but he was trying to be helpful. read up man!


bitchohealey at hotmail dot com skype:richohealey www.psych0tik.net
Author

RE: help with encryption


Member

Your avatar

Posts:
Location:
Joined: 01.01.70
Rank:
Guest
Posted on 28-04-07 05:49
Thanks for not flaming my first post.

I can only hide behind the excuse that it has been many moons since I last did anything related to hacking.
Author

RE: help with encryption

richohealey
Member



Posts: 1022
Location: #!/usr/local/bin/python
Joined: 01.05.06
Rank:
Monster
Posted on 28-04-07 08:24
it's all good man Smile

had you worded it as though the rest of us couldn't have worked that out i would have gone to town on you though XD

ha ha.

have fun!


bitchohealey at hotmail dot com skype:richohealey www.psych0tik.net
Author

RE: help with encryption

lukem_95
Member

Your avatar

Posts: 232
Location: 127.0.0.1:80
Joined: 05.07.06
Rank:
Apprentice
Warn Level: 5
Posted on 28-04-07 14:04
yeah Cain&Abel does have one.

Theyre LM hashes.


www.hellboundhackers.org/news.php?logout=yes
Author

RE: help with encryption


Member

Your avatar

Posts:
Location:
Joined: 01.01.70
Rank:
Guest
Posted on 28-04-07 15:03
thanks for your replys. i'll put them through cain and abel now.

EDIT:
somethings wrong. when i added it as a text file, but when the file is:
Administrator:500:0,25,21,C4,1D,05,4B,A2,88,41,7E,AF,50,CF,AC,29,C3:
_8A,4B,D5,C4,36,B3,81,FB,41,CF,59,75,75,AC,68,CF,09009:::

nothing gets imported. with:
Administrator:500:0,25,21,C4,1D,05,4B,A2,88,41,7E,AF,50,CF,AC,29,C3:::

it gets imported, but the hash is not recognized. here is a screen shot:
http://img183.ima. . .ainif6.jpg




Edited by on 28-04-07 15:41
Author

RE: help with encryption


Member

Your avatar

Posts:
Location:
Joined: 01.01.70
Rank:
Guest
Posted on 02-05-07 20:25
anything using a decent rainbow table should be able to get this in no time
ig:rainbowcrack,LOphtcrack, or the foremetioned cain & able.