How would you decrpyt an md5 salted but know the salt

Apr 20, 2010 07:22 PM

Hey, I was wondering since I need a salted one decrypted but I know the salt how would I go about decrypting it? Would I still need to brute force it or is there an easier online way?

Anyway here is the hash and salt.. if anyone wants to take a try at it

Spoiler (Click to View)

Apr 20, 2010 07:36 PM

i dont know how it i am sorry

Apr 21, 2010 11:31 AM

(Apr 20, 2010 07:36 PM)romey007 Wrote: i dont know how it i am sorry

then why do you need to respond if you don't respond then I know that you don't know how...

Apr 21, 2010 12:35 PM

You'll still have to brute force, as it's still a hash. A salt is simply a way to make the hash harder to attack.

You simply append the salt to the hash, depending on how vBulletin does it.

Commonly, it's: salt+password
i.e., if the password was "panda", the password, salted, would look like:
mx-panda

vBulletin may do it differently, I've personally seen:
salt+password
password+salt
(salt+password)+salt

etc. Mainly possible ways.

To brute force it, write out a program in similar vein to this (although I can use this following code, you'll have to find a wordlist for yourself, and also... Python is slow.)

Code 
#! /usr/bin/env python

from hashlib import md5

def bruteForce(hashedWord, wordList, hashSalt, saltStyle):

    for word in wordList:

        hashed = md5(saltStyle.replace("salt", hashSalt).replace("hash", word))

        if hashed.hexdigest() == hashedWord:

            print "The word is %s." % word

            quit()

wordList = [word.rstrip() for word in open(raw_input("Absolute Path To Wordlist: "))

hashedWord = raw_input("Hash: ")

hashSalt = raw_input("Salt: ")

saltStyle = raw_input("\nExample of Salt Style: salthash OR salthashsalt OR hashsalt, etc.\nSalt Style: ")

bruteForce(hashedWord, wordList, hashSalt, saltStyle)

hashedWord is the hash, of course.
wordList is the path to your word list.
hash salt is the salt used.
salt style is the style in which the salt is used (let's just say it's salt+password, for this example)

When run:

Code 
symetrik$ python bruteForce.py

Absolute Path To Wordlist: /Users/rawr/Documents/wordlists/massive.txt

Hash: 93a8bbd88ecb986818af17831e86a62b

Salt: mx-

Example of Salt Style: salthash OR salthashsalt OR hashsalt, etc.

Salt Style: salthash

Apr 24, 2010 03:27 PM

Anyone else wanna give light on this?

Login
Username/Email:
Password:	Lost Password?
	Remember me

Possibly Related Threads...
Thread / Author	Replies	Views	Last Post
Decryption md5 : salt by nikus1166May 7, 2024 11:35 PM	2	152	May 7, 2024 11:35 PM Last Post: Primate
SHA1 Non Salted Hashes by FlaaffyOct 24, 2023 04:07 PM	2	162	Oct 24, 2023 04:07 PM Last Post: account_
How to exploit a website vulnerability hash disclosure - mac osx salted sha-1? by ArassSep 9, 2023 04:55 AM	1	139	Sep 9, 2023 04:55 AM Last Post: DramaKing