Hack Forums
decrypt edmodo bcrypt hash - Printable Version

+- Hack Forums (https://hackforums.net)
+-- Forum: Hacks, Exploits, and Various Discussions (https://hackforums.net/forumdisplay.php?fid=45)
+--- Forum: Blackhat • Red Team • Offensive Security (https://hackforums.net/forumdisplay.php?fid=447)
+---- Forum: Cryptography, Encryption, and Decryption (https://hackforums.net/forumdisplay.php?fid=126)
+---- Thread: decrypt edmodo bcrypt hash (/showthread.php?tid=6267534)

Pages: Pages 1 2


decrypt edmodo bcrypt hash - ansjdnfiqnuaskdnfa45 - Apr 3, 2024

I was wondering whether someone could help me decrypt this bcrypt hash from edmodo.

original:
$826y4$31226$dObW2ZfmeO3TbFeh4Y0WcQc22O4T1c827Y7zfU6yaM2ucg9z0bbO77RBZsC9.v1GSJXZSwrby9dIvmK

de-obfuscated:
$2y$12$OWZmOTFhYWQ2OTc2YzUyMugzbO77RBZsC9.v1GSJXZSwrby9dIvmK

I've tried to use resources on this specific topic, although I've hit a wall with my understanding, and was wondering if I could receive some specific advice or help. Realistically how should one go about decrypting this hash? Thank you.

EDIT: the salt is 62481a9d9614a5d9798b74eaf6202c1b


RE: decrypt edmodo bcrypt hash - account_ - Apr 3, 2024

Running it now, whats your offer if I crack it?


RE: decrypt edmodo bcrypt hash - ansjdnfiqnuaskdnfa45 - Apr 3, 2024

(Apr 3, 2024 06:19 AM)account_ Wrote:  Running it now, whats your offer if I crack it?

I'm not sure on what is a fair price since I'm new, and I don't stand to gain any financial benefit from gaining the password.

Would 5 USD btc be a fair price? Happy to work. Thank you for the fast reply too.


RE: decrypt edmodo bcrypt hash - account_ - Apr 3, 2024

(Apr 3, 2024 06:31 AM)ansjdnfiqnuaskdnfa45 Wrote:  I'm not sure on what is a fair price since I'm new, and I don't stand to gain any financial benefit from gaining the password.

Would 5 USD btc be a fair price? Happy to work. Thank you for the fast reply too.

Ok, will let you know if I hit the bcrypt hash.


RE: decrypt edmodo bcrypt hash - ansjdnfiqnuaskdnfa45 - Apr 3, 2024

(Apr 3, 2024 06:39 AM)account_ Wrote:  Ok, will let you know if I hit the bcrypt hash.

Additionally, I have an eatstreet.com bcrypt hash. I am even less sure about how these work, but if you would like some additional info to work from (i.e. full name, emails associated) I can help with that, preferably privately.

$2a$12$zZST.yUY.cecobzee3kx5OQP9dIU8ffDOdDBCh.R2zRykFCAUmpje

salt apparently is: 16

If you get both, then I'm more than happy to reimburse 5 USD for each.

EDIT: this eatstreet.com hash is concerning the same individual as the edmodo hash, but they have used a different email.


RE: decrypt edmodo bcrypt hash - bitk1ng - Apr 3, 2024

(Apr 3, 2024 06:02 AM)ansjdnfiqnuaskdnfa45 Wrote:  I was wondering whether someone could help me decrypt this bcrypt hash from edmodo.

original:
$826y4$31226$dObW2ZfmeO3TbFeh4Y0WcQc22O4T1c827Y7zfU6yaM2ucg9z0bbO77RBZsC9.v1GSJXZSwrby9dIvmK

de-obfuscated:
$2y$12$OWZmOTFhYWQ2OTc2YzUyMugzbO77RBZsC9.v1GSJXZSwrby9dIvmK

I've tried to use resources on this specific topic, although I've hit a wall with my understanding, and was wondering if I could receive some specific advice or help. Realistically how should one go about decrypting this hash? Thank you.

EDIT: the salt is 62481a9d9614a5d9798b74eaf6202c1b

(Apr 3, 2024 06:51 AM)ansjdnfiqnuaskdnfa45 Wrote:  Additionally, I have an eatstreet.com bcrypt hash. I am even less sure about how these work, but if you would like some additional info to work from (i.e. full name, emails associated) I can help with that, preferably privately.

$2a$12$zZST.yUY.cecobzee3kx5OQP9dIU8ffDOdDBCh.R2zRykFCAUmpje

salt apparently is: 16

If you get both, then I'm more than happy to reimburse 5 USD for each.

EDIT: this eatstreet.com hash is concerning the same individual as the edmodo hash, but they have used a different email.

To make a few points clear:

This is your hash:
$2y$12$OWZmOTFhYWQ2OTc2YzUyMugzbO77RBZsC9.v1GSJXZSwrby9dIvmK


1. $2y$ indicates the bcrypt algorithm version.
2. $12$ is the cost factor, and 12 within bcrypt is very good.
3. "OWZmOTFhYWQ2OTc2YzUyM" - this is the salt
4. "ugzbO77RBZsC9.v1GSJXZSwrby9dIvmK" - this is the hashed password.

Cracking this without any clues as to who owns this password is going to take minimum several weeks even with good hardware. Don't waste your time and energy on this unless you're willing to pay several thousands. The fact you didn't even know that the salt was included should tell you that what you are doing (or trying to do) is far beyond your capabilities.


RE: decrypt edmodo bcrypt hash - ansjdnfiqnuaskdnfa45 - Apr 3, 2024

(Apr 3, 2024 10:28 AM)bitk1ng Wrote:  To make a few points clear:

This is your hash:
$2y$12$OWZmOTFhYWQ2OTc2YzUyMugzbO77RBZsC9.v1GSJXZSwrby9dIvmK


1. $2y$ indicates the bcrypt algorithm version.
2. $12$ is the cost factor, and 12 within bcrypt is very good.
3. "OWZmOTFhYWQ2OTc2YzUyM" - this is the salt
4. "ugzbO77RBZsC9.v1GSJXZSwrby9dIvmK" - this is the hashed password.

Cracking this without any clues as to who owns this password is going to take minimum several weeks even with good hardware. Don't waste your time and energy on this unless you're willing to pay several thousands. The fact you didn't even know that the salt was included should tell you that what you are doing (or trying to do) is far beyond your capabilities.

Thank you for your thorough explanation. I acknowledge it is far beyond my capabilities which is why I made a post asking if someone could help me familiarize myself. I've seen posts in the past determine the salt the way I did it, a bit like the blind leading the blind. Regardless though I apologise if for flooding the board with another low quality post, I guess I was quite desperate and should've done more due diligence.


RE: decrypt edmodo bcrypt hash - account_ - Apr 4, 2024

https://hashes.com/en/tools/verified?accessKey=b59dfb6f94
Found $2y$12$OWZmOTFhYWQ2OTc2YzUyMugzbO77RBZsC9.v1GSJXZSwrby9dIvmK


RE: decrypt edmodo bcrypt hash - DramaKing - Apr 4, 2024

Must have been a pretty weak password as I believe bcrypt is GPU-resistant or just very complex. I wouldn't consider cost 12 to be good, seems pretty common.


RE: decrypt edmodo bcrypt hash - account_ - Apr 4, 2024

(Apr 4, 2024 08:10 AM)DramaKing Wrote:  Must have been a pretty weak password as I believe bcrypt is GPU-resistant or just very complex. I wouldn't consider cost 12 to be good, seems pretty common.

The length of the pw is MD5 length.


Sent contract for the hash OP, just letting you know.


RE: decrypt edmodo bcrypt hash - ansjdnfiqnuaskdnfa45 - Apr 5, 2024

(Apr 4, 2024 08:31 AM)account_ Wrote:  The length of the pw is MD5 length.


Sent contract for the hash OP, just letting you know.

Thank you sir, I will accept the contract and send through the bitcoin as soon as I get the currency. My bank has recently slowed down transactions to exchanges so it may take me 24 hours to get back to you which is when I'll accept the contract and send through the amount straight after (if that is general etiquette).

Also if you want to keep running that other hash, the offer is still on the table for the other 5 USD.


RE: decrypt edmodo bcrypt hash - account_ - Apr 5, 2024

(Apr 5, 2024 01:13 AM)ansjdnfiqnuaskdnfa45 Wrote:  Thank you sir, I will accept the contract and send through the bitcoin as soon as I get the currency. My bank has recently slowed down transactions to exchanges so it may take me 24 hours to get back to you which is when I'll accept the contract and send through the amount straight after (if that is general etiquette).

Also if you want to keep running that other hash, the offer is still on the table for the other 5 USD.

Thanks for letting me know.


RE: decrypt edmodo bcrypt hash - bitk1ng - Apr 13, 2024

(Apr 4, 2024 07:39 AM)account_ Wrote:  Found $2y$12$OWZmOTFhYWQ2OTc2YzUyMugzbO77RBZsC9.v1GSJXZSwrby9dIvmK

Very good.

How many hashes did you check?


RE: decrypt edmodo bcrypt hash - account_ - Apr 13, 2024

(Apr 13, 2024 07:16 AM)bitk1ng Wrote:  Very good.

How many hashes did you check?

Cracked the one you quoted.


RE: decrypt edmodo bcrypt hash - bitk1ng - Apr 13, 2024

(Apr 13, 2024 07:27 AM)account_ Wrote:  Cracked the one you quoted.

Yes i know.

Seems my belief of how hard bcrypt is was inorrect or outdated. I Think you misunderstood the question. How many attempts did you need to find it? I know bcrypt is pretty strong against bruteforce so thats why i am asking.