+- Sinisterly (https://sinister.ly)
+-- Forum: Hacking (https://sinister.ly/Forum-Hacking)
+--- Forum: Website & Server Hacking (https://sinister.ly/Forum-Website-Server-Hacking)
+--- Thread: Own Login:Pass from a SQL DB - What now? (/Thread-Own-Login-Pass-from-a-SQL-DB-What-now)
Own Login:Pass from a SQL DB - What now? - PicoMan - 07-10-2021
Hi,
i need some help.
I own the DB_HOST, DB_NAME, DB_USER, DB_PASS & the Blowfish Key of a DB (Online shop)
What have i to do next?
Ahh...I own also the FTP
THX!
RE: Own Login:Pass from a SQL DB - What now? - tschaikowsky - 07-10-2021
try to crack that hash, and login to the sql database and make a full dump of it
RE: Own Login:Pass from a SQL DB - What now? - PicoMan - 07-10-2021
(07-10-2021, 06:31 PM)tschaikowsky Wrote: try to crack that hash, and login to the sql database and make a full dump of itI have backuped now the whole DB. Is it possible to crack the passwords of the users & admin of the page?
Ok, I have the Hash. It's a bcrypt $2*$, Blowfish (Unix) hash. I there any solution?
RE: Own Login:Pass from a SQL DB - What now? - tschaikowsky - 07-11-2021
(07-10-2021, 06:45 PM)PicoMan Wrote:(07-10-2021, 06:31 PM)tschaikowsky Wrote: try to crack that hash, and login to the sql database and make a full dump of itI have backuped now the whole DB. Is it possible to crack the passwords of the users & admin of the page?
Ok, I have the Hash. It's a bcrypt $2*$, Blowfish (Unix) hash. I there any solution?
great!
but for cracking bcrypt you need fucking big ressources to crack
RE: Own Login:Pass from a SQL DB - What now? - PicoMan - 07-11-2021
(07-11-2021, 09:06 AM)tschaikowsky Wrote:(07-10-2021, 06:45 PM)PicoMan Wrote:(07-10-2021, 06:31 PM)tschaikowsky Wrote: try to crack that hash, and login to the sql database and make a full dump of itI have backuped now the whole DB. Is it possible to crack the passwords of the users & admin of the page?
Ok, I have the Hash. It's a bcrypt $2*$, Blowfish (Unix) hash. I there any solution?
great!
but for cracking bcrypt you need fucking big ressources to crack
Ok, fuck...thank you for the info!! I find out, that it is possible to generate a new MD5 Hash and change it with the bcrypt hash. I have access to all data now.
Can you describe me, how to export all the data in a .txt file from the shop DB? Or do you have a nice shopr tutorial for me to learn it?
RE: Own Login:Pass from a SQL DB - What now? - PicoMan - 07-12-2021
Ok,
i've found a MySQL database backup and import it to the same program, that the shop use.
Here i've the possibility to export all the data (excl. the passwords).
Thank you for your help my friend!