Got a vbulletin password crypted, help please.

I got this password for a admin on a forum, now I wonder how I can get the password from it.

31a66130086a85b39692f0e3da701c09

Took from the database.

Thanks
🤝

need the salt can you say Derp

/..//

(Oct 22, 2012 02:33 PM)HackedAccounts Wrote:  need the salt can you say Derp

/..//

How do I get this "Salt" ?

Thanks by advance.

(Oct 22, 2012 02:36 PM)Exzib Wrote:  How do I get this "Salt" ?

Thanks by advance.

Its in the db same way as you got it which im guessing SQL injection simply find the table or column that says salt and get the salt with that hash

(Oct 22, 2012 02:38 PM)AnonFreeworld Wrote:  Its in the db same way as you got it which im guessing SQL injection simply find the table or column that says salt and get the salt with that hash

Okay I got the salt, how do I do it now?

Post it and you can also use John The Ripper to crack hashes which have salts. Google tutorials for that.

(Oct 22, 2012 02:49 PM)AnonFreeworld Wrote:  Post it and you can also use John The Ripper to crack hashes which have salts. Google tutorials for that.

Password: 31a66130086a85b39692f0e3da701c09
Salt: lJy"4bV,qh%*J_4Ghdt0BD5jMgfBYP

Thanks

(Oct 22, 2012 02:57 PM)Exzib Wrote:  Password: 31a66130086a85b39692f0e3da701c09
Salt: lJy"4bV,qh%*J_4Ghdt0BD5jMgfBYP

Thanks

No problem I might try cracking it after I crack this other dudes hash

(Oct 22, 2012 03:00 PM)AnonFreeworld Wrote:  No problem I might try cracking it after I crack this other dudes hash

Thank you so much, is it hard? I have no idea how to do it :s

They just run the hashcat or jtr, and leave there pc so that the password is cracked by brute force or dictionary attacks.

Hashcat took aprox 0.01 of a second to crack that ;).

31a66130086a85b39692f0e3da701c092301498:lJy"4bV,qh%*J_4Ghdt0BD5jMgfBYP = 2301498

(Oct 22, 2012 09:51 PM)Jαmes Wrote:  Hashcat took aprox 0.01 of a second to crack that ;).

31a66130086a85b39692f0e3da701c092301498:lJy"4bV,qh%*J_4Ghdt0BD5jMgfBYP = 2301498

What settings...?

TELL ME WHAT SETTINGS YOU ARE USING AND ILL +REPZ

i think you should decrypt it and carry on to your work

(Oct 23, 2012 01:54 AM)Real-Hackers Wrote:  i think you should decrypt it and carry on to your work

It was already cracked for him. 31a66130086a85b39692f0e3da701c092301498:lJy"4bV,qh%*J_4Ghdt0BD5jMgfBYP = 2301498
and it's not decrypting. It is cracking. Decrypting and cracking are two completely different things :o and no it should be better for him to learn.

(Oct 23, 2012 01:28 AM)Exzib Wrote:  What settings...?

TELL ME WHAT SETTINGS YOU ARE USING AND ILL +REPZ

My wordlist with numbers is at the top of my wordslist folder :P. Anyway, I generally would just bruteforce using the masks afterwards:
?d?d?d?d?d?d?d?d?d
?u?l?l?l?l?l?d?d?d
?l?l?l?l?l?l?l?l
?l?l?l?l?l?l?l?d?d

=].