[C0ldplay]

Alright I ain't stupid. I know that the hashes are HASH:SALT. And I also know that the leak ONLY contains the HASH part of it. But here's an idea, why can't we brute force the hash? I mean, let's assume that the SALT is only up to 5 characters. Theoretically, we could "brute force" the salt. How oculd this be done? simple.
Using "Cruch" to generate a 5 character list, (also includes 1,2,3,4) to get every possible salt. Then use a "combo" maker to use one or two test hashes, and use the two hashes with every single salt then use hashcat to attempt to crack them. If done, we could figure out how long the salts are and possibly bring us closer to cracking the hashes.

should i attempt this or is it retarded

[TheTwitchTerror]

I don't know about this but yea attempt pls

[Jоey]

sounds like it would take way more resources than what its worth...

[C0ldplay]

sounds like it would take way more resources than what its worth...

It wouldn't take too long, on my set up I get around 60mil per second. Not too bad, wouldn't take too long.

[Ooze]

Talk with Chick3man about this, it would be very difficult but you could make a good amount of money by selling the hashes.
I know I would pay

[Evanescence]

Are these just Tumblr passwords? I don't see how they would be worth much.

[Cryptography]

Are these just Tumblr passwords? I don't see how they would be worth much.

Combo list for all social media accs, useful combos for cracking into OGs.

[Evanescence]

Combo list for all social media accs, useful combos for cracking into OGs.

Oh cool, sounds great. I think cracking these without the salt would take a really long time though.

[C0ldplay]

Oh cool, sounds great. I think cracking these without the salt would take a really long time though.

Yeah, which is why I decided to make this thread...
We can try to brute force the salts and see if we can figure out a formula for it.

[joepvand]

Oh cool, sounds great. I think cracking these without the salt would take a really long time though.

Thats why he is bruteforcing the salts right?

[Evanescence]

Yeah, which is why I decided to make this thread...
We can try to brute force the salts and see if we can figure out a formula for it.

Wouldn't you have to try each salt guess with each hash guess? I'm sorry if I'm asking stupid questions. I don't know exactly how this works and I'm tired as fuck.

[Mr. Robot]

Your best bet is to look up an email for a user you know uses only one password, then go from there. Maybe examine a few that you can definitely say that's so and so's password then onwards march

---

Wouldn't you have to try each salt guess with each hash guess? I'm sorry if I'm asking stupid questions. I don't know exactly how this works and I'm tired as fuck.

Different salts for different hashes love.

[Evanescence]

Your best bet is to look up an email for a user you know uses only one password, then go from there. Maybe examine a few that you can definitely say that's so and so's password then onwards march

---

Different salts for different hashes love.

Fuck, I wanna give you another rep so you can be at 1700 but I already gave you 3. 😭

[wpacracknet]

Different salts for different hashes love.

I did a part analysis on it and there are multiple matches with the same hashes. So it does seem like a static salt.

[Sheeple]

Your best bet is to look up an email for a user you know uses only one password, then go from there. Maybe examine a few that you can definitely say that's so and so's password then onwards march

---

Different salts for different hashes love.

You cannot 100% say that the salts are different.
Many databases use static salts.
And I've seen sha's get salted with 15 digit salts so