Apr 3, 2024 06:02 AM
(This post was last modified: Apr 3, 2024 06:11 AM by ansjdnfiqnuaskdnfa45.)
I was wondering whether someone could help me decrypt this bcrypt hash from edmodo.
original:
$826y4$31226$dObW2ZfmeO3TbFeh4Y0WcQc22O4T1c827Y7zfU6yaM2ucg9z0bbO77RBZsC9.v1GSJXZSwrby9dIvmK
de-obfuscated:
$2y$12$OWZmOTFhYWQ2OTc2YzUyMugzbO77RBZsC9.v1GSJXZSwrby9dIvmK
I've tried to use resources on this specific topic, although I've hit a wall with my understanding, and was wondering if I could receive some specific advice or help. Realistically how should one go about decrypting this hash? Thank you.
EDIT: the salt is 62481a9d9614a5d9798b74eaf6202c1b
Running it now, whats your offer if I crack it?
(Apr 3, 2024 06:19 AM)account_ Wrote: Running it now, whats your offer if I crack it?
I'm not sure on what is a fair price since I'm new, and I don't stand to gain any financial benefit from gaining the password.
Would 5 USD btc be a fair price? Happy to work. Thank you for the fast reply too.
(Apr 3, 2024 06:31 AM)ansjdnfiqnuaskdnfa45 Wrote: I'm not sure on what is a fair price since I'm new, and I don't stand to gain any financial benefit from gaining the password.
Would 5 USD btc be a fair price? Happy to work. Thank you for the fast reply too.
Ok, will let you know if I hit the bcrypt hash.
Apr 3, 2024 06:51 AM
(This post was last modified: Apr 3, 2024 06:55 AM by ansjdnfiqnuaskdnfa45.)
(Apr 3, 2024 06:39 AM)account_ Wrote: Ok, will let you know if I hit the bcrypt hash.
Additionally, I have an eatstreet.com bcrypt hash. I am even less sure about how these work, but if you would like some additional info to work from (i.e. full name, emails associated) I can help with that, preferably privately.
$2a$12$zZST.yUY.cecobzee3kx5OQP9dIU8ffDOdDBCh.R2zRykFCAUmpje
salt apparently is: 16
If you get both, then I'm more than happy to reimburse 5 USD for each.
EDIT: this eatstreet.com hash is concerning the same individual as the edmodo hash, but they have used a different email.
Apr 3, 2024 10:28 AM
(This post was last modified: Apr 3, 2024 10:29 AM by bitk1ng.)
(Apr 3, 2024 06:02 AM)ansjdnfiqnuaskdnfa45 Wrote: I was wondering whether someone could help me decrypt this bcrypt hash from edmodo.
original:
$826y4$31226$dObW2ZfmeO3TbFeh4Y0WcQc22O4T1c827Y7zfU6yaM2ucg9z0bbO77RBZsC9.v1GSJXZSwrby9dIvmK
de-obfuscated:
$2y$12$OWZmOTFhYWQ2OTc2YzUyMugzbO77RBZsC9.v1GSJXZSwrby9dIvmK
I've tried to use resources on this specific topic, although I've hit a wall with my understanding, and was wondering if I could receive some specific advice or help. Realistically how should one go about decrypting this hash? Thank you.
EDIT: the salt is 62481a9d9614a5d9798b74eaf6202c1b
(Apr 3, 2024 06:51 AM)ansjdnfiqnuaskdnfa45 Wrote: Additionally, I have an eatstreet.com bcrypt hash. I am even less sure about how these work, but if you would like some additional info to work from (i.e. full name, emails associated) I can help with that, preferably privately.
$2a$12$zZST.yUY.cecobzee3kx5OQP9dIU8ffDOdDBCh.R2zRykFCAUmpje
salt apparently is: 16
If you get both, then I'm more than happy to reimburse 5 USD for each.
EDIT: this eatstreet.com hash is concerning the same individual as the edmodo hash, but they have used a different email.
To make a few points clear:
This is your hash:
$2y$12$OWZmOTFhYWQ2OTc2YzUyMugzbO77RBZsC9.v1GSJXZSwrby9dIvmK
1. $2y$ indicates the bcrypt algorithm version.
2. $12$ is the cost factor, and 12 within bcrypt is very good.
3. "OWZmOTFhYWQ2OTc2YzUyM" - this is the salt
4. "ugzbO77RBZsC9.v1GSJXZSwrby9dIvmK" - this is the hashed password.
Cracking this without any clues as to who owns this password is going to take minimum several weeks even with good hardware. Don't waste your time and energy on this unless you're willing to pay several thousands. The fact you didn't even know that the salt was included should tell you that what you are doing (or trying to do) is far beyond your capabilities.
(Apr 3, 2024 10:28 AM)bitk1ng Wrote: To make a few points clear:
This is your hash:
$2y$12$OWZmOTFhYWQ2OTc2YzUyMugzbO77RBZsC9.v1GSJXZSwrby9dIvmK
1. $2y$ indicates the bcrypt algorithm version.
2. $12$ is the cost factor, and 12 within bcrypt is very good.
3. "OWZmOTFhYWQ2OTc2YzUyM" - this is the salt
4. "ugzbO77RBZsC9.v1GSJXZSwrby9dIvmK" - this is the hashed password.
Cracking this without any clues as to who owns this password is going to take minimum several weeks even with good hardware. Don't waste your time and energy on this unless you're willing to pay several thousands. The fact you didn't even know that the salt was included should tell you that what you are doing (or trying to do) is far beyond your capabilities.
Thank you for your thorough explanation. I acknowledge it is far beyond my capabilities which is why I made a post asking if someone could help me familiarize myself. I've seen posts in the past determine the salt the way I did it, a bit like the blind leading the blind. Regardless though I apologise if for flooding the board with another low quality post, I guess I was quite desperate and should've done more due diligence.
https://hashes.com/en/tools/verified?acc...b59dfb6f94
Found $2y$12$OWZmOTFhYWQ2OTc2YzUyMugzbO77RBZsC9.v1GSJXZSwrby9dIvmK
Must have been a pretty weak password as I believe bcrypt is GPU-resistant or just very complex. I wouldn't consider cost 12 to be good, seems pretty common.
(Apr 4, 2024 08:10 AM)DramaKing Wrote: Must have been a pretty weak password as I believe bcrypt is GPU-resistant or just very complex. I wouldn't consider cost 12 to be good, seems pretty common.
The length of the pw is MD5 length.
Sent contract for the hash OP, just letting you know.
(Apr 4, 2024 08:31 AM)account_ Wrote: The length of the pw is MD5 length.
Sent contract for the hash OP, just letting you know.
Thank you sir, I will accept the contract and send through the bitcoin as soon as I get the currency. My bank has recently slowed down transactions to exchanges so it may take me 24 hours to get back to you which is when I'll accept the contract and send through the amount straight after (if that is general etiquette).
Also if you want to keep running that other hash, the offer is still on the table for the other 5 USD.
(Apr 5, 2024 01:13 AM)ansjdnfiqnuaskdnfa45 Wrote: Thank you sir, I will accept the contract and send through the bitcoin as soon as I get the currency. My bank has recently slowed down transactions to exchanges so it may take me 24 hours to get back to you which is when I'll accept the contract and send through the amount straight after (if that is general etiquette).
Also if you want to keep running that other hash, the offer is still on the table for the other 5 USD.
Thanks for letting me know.
(Apr 4, 2024 07:39 AM)account_ Wrote: Found $2y$12$OWZmOTFhYWQ2OTc2YzUyMugzbO77RBZsC9.v1GSJXZSwrby9dIvmK
Very good.
How many hashes did you check?
(Apr 13, 2024 07:16 AM)bitk1ng Wrote: Very good.
How many hashes did you check?
Cracked the one you quoted.
(Apr 13, 2024 07:27 AM)account_ Wrote: Cracked the one you quoted.
Yes i know.
Seems my belief of how hard bcrypt is was inorrect or outdated. I Think you misunderstood the question. How many attempts did you need to find it? I know bcrypt is pretty strong against bruteforce so thats why i am asking.
|
