Need md5 hashes cracked, support appreciated

Need md5 hashes cracked, support appreciated - Printable Version

+- Hack Forums (https://hackforums.net)
+-- Forum: Hacks, Exploits, and Various Discussions (https://hackforums.net/forumdisplay.php?fid=45)
+--- Forum: Grayhat • Purple Team • Hybrid Security (https://hackforums.net/forumdisplay.php?fid=449)
+---- Forum: Website Hacking (https://hackforums.net/forumdisplay.php?fid=43)
+---- Thread: Need md5 hashes cracked, support appreciated (/showthread.php?tid=2389279)

Need md5 hashes cracked, support appreciated - bch195 - Apr 10, 2012

Hey guys, I managed to get hashes to a very important site and some hashes cracked would be very nice.

Here are the first 2 hashes, more are coming up, there are 19 possible admin accounts in all.

I think they are MD5 hashes.

Code 
e217968af5fd5f7037386687093f359f

4dce8605bb9c19692fdfde6d168ad598

Thanks alot my friends and il post the shell link if I am able to get into the admin area.

* - asatuz - Apr 10, 2012

Hey have you tried them against any online databases? If you have then you/our options are rainbow tables and bruteforcing, which less people will be willing to do (due to huge strain on resources) but I will see what I can do

* - bch195 - Apr 10, 2012

Thanks mate, Iv tried searching but dont have a powerful enough computer to decode it.

* - asatuz - Apr 10, 2012

Fuck.. sorry mate recently deleted my rainbow tables.... oh well might as well start bruteforcing them :p

* - bch195 - Apr 10, 2012

Thanks bro, any help would be greatly appreciated.

* - asatuz - Apr 10, 2012

I think its salted, not sure though

* - bch195 - Apr 10, 2012

Its not, this was one of the passwords.

Code 
5f4dcc3b5aa765d61d8327deb882cf99

but the account is locked out as a admin user.

All the accounts keep timing out for some reason...

Anyone know why?

* - Keeper - Apr 10, 2012

Idk if any online decrypter has these in its database but hashcat (CPU) + 3GB of wordlists worked for me.

e217968af5fd5f7037386687093f359f --> kanguru1360
4dce8605bb9c19692fdfde6d168ad598 --> Kanguru1360

Take care.

* - bch195 - Apr 10, 2012

Thanks alot, I tried uploading some shells, with a FCKEDITOR but it returns the jpg images as:

[Image: 6ocRj.png]

Anyone know why it does that?

* - zer0pwn - Apr 10, 2012

(Apr 10, 2012 03:27 PM)bch195 Wrote: Thanks alot, I tried uploading some shells, with a FCKEDITOR but it returns the jpg images as:

Anyone know why it does that?

Probably because it grabs the file name before you actually edit the HTTP Header. You'd be better off uploading as *.php and seeing if you can change it to *.jpg and see if it'll do anything.

* - bch195 - Apr 10, 2012

I tried doing it, but it didnt work, they dont have the official FCKEDITOR like link, would you like me to link to the one im using in a PM, maybe you can have better luck.

* - zer0pwn - Apr 10, 2012

(Apr 10, 2012 03:32 PM)bch195 Wrote: I tried doing it, but it didnt work, they dont have the official FCKEDITOR like link, would you like me to link to the one im using in a PM, maybe you can have better luck.

Yeah, I can take a look if you want :)

* - bch195 - Apr 10, 2012

One more hash if possible someone could crack for me.

Code 
40947165304a6d11f42cdfc25d35bd16:4J

e08fc485843af6d9fb32681c7ffcc790:m7

06a3debae1899e25803cc511b5cb4115:O5

Im not sure what the data after : is used for.

* - VipVince - Apr 10, 2012

FCKEDITOR is not the greatest for getting shells uploaded I have noticed.

* - bch195 - Apr 10, 2012

Yeah its very unreliable.

Anyways, Vip, you able to crash that hash I am having trouble with?