+- Hack Forums (https://hackforums.net)
+-- Forum: Hacks, Exploits, and Various Discussions (https://hackforums.net/forumdisplay.php?fid=45)
+--- Forum: Grayhat • Purple Team • Hybrid Security (https://hackforums.net/forumdisplay.php?fid=449)
+---- Forum: Website Hacking (https://hackforums.net/forumdisplay.php?fid=43)
+---- Thread: What is left to do if you can't crack the hashes (/showthread.php?tid=4600017)
What is left to do if you can't crack the hashes - goodmix33 - Dec 24, 2014
Can anyone tell me what can I do ? I got the hashes through SQL injection but I can't crack them. What can I do ?
* - ProblemSolva - Dec 24, 2014
find other vulnerabilities in the server, which may also get you database access. what have you tryed to crack the hashes already ?
* - goodmix33 - Dec 24, 2014
(Dec 24, 2014 05:44 AM)ProblemSolva Wrote: find other vulnerabilities in the server, which may also get you database access. what have you tryed to crack the hashes already ?What other vulnerabilities for example ? I tried a couple of websites that I googled.
* - ProblemSolva - Dec 24, 2014
(Dec 24, 2014 05:54 AM)goodmix33 Wrote: What other vulnerabilities for example ? I tried a couple of websites that I googled.
i suggest you to look in this section, to read more about other vulnerabilities.
because there are alot, for example XSS - LFI - RFI - CSRF - SQLI
some vulnerabilities are more severe then the other, good luck reading :)
* - jamalis - Dec 24, 2014
Try looking for admin's session cookies in database, got lucky this way a few times.
* - Forezza - Dec 24, 2014
If you cant crack the hashes, just post them in the cryptography section and members that specialize in that will help ya.
* - TheWholeWorldExplodes - Dec 24, 2014
You should potentially be able to crack hashes used in a sub teir website as long as you have the processing power, if not someone in the cryptography section will be able to help you. Otherwise depending on what user they are running MySql under you may be able to create a file using OUTFILE or execute cmd commands if its MSSQL. See if you can update or add records to the database.
* - EIP - Dec 26, 2014
Don't try to crack strong hash with an old computer, heh. If you have powerful workstation with big GPU the hash cracking will be much faster. Google searched the hash?