Collaborate Disseminate
I’m using incremental mode (brute force) mode in John the Ripper to crack Linux MD5 passwords. I’m trying to calculate the time it will take to run through all combinations of 12 passwords (with 12 different salts for each password).
Usi… Continue reading John the Ripper – Calculating brute force time to crack password
I have installed the “md5sum” utility on my Mac and there was also a “md5” binary pre-installed in /sbin.
My problem and question is this: “Isn’t MD5 a standard algorithm?”
Because I get different hashes for a string using these utilities
… Continue reading Difference between OS X md5 and gnu md5sum [closed]
Is there any reversible hash function?
The hash function like SHA and MD5 are not reversible. I would like to know if there exist some reversible hash functions?
I’m trying test password strength in one of our e-commerce sites. I’m using john the ripper to brute-force a password file. The algorithm used by PHP is:
$hash = md5($salt . $pass)
No other transformation is performed nor in the $salt o… Continue reading John the ripper passwd file format with salt not working
I’ve often read that MD5 (among other hashing algorithms) is vulnerable to collisions attacks. I understand the collision part: there exist two (or more) inputs such that MD5 will generate the same output from these distinct and different … Continue reading How exactly is MD5 vulnerable to collision attacks?
I have read some times that hashing is a one way function, that is you can make the hash of a message, but you can’t recover the original message from the hash, just check its integrity.
However, if this were true, why can w… Continue reading If hashing is one way, why can we decrypt MD5 hashes?
I’m testing out John the Ripper (1.7.9 Jumbo 7) on a file containing MD5 hashes without any usernames. I’ve been experimenting with different rules and configurations – I am currently using a wordlist and I am applying the –rules=single c… Continue reading What exactly is ‘single’ mode in John the Ripper doing?
Suppose we need/prefer 128 bit hash output, for example to generate a 128 bit encryption key or, in other applications (e.g. file integrity verification), to consume less storage space.
I don’t know of any new/standard/unbro… Continue reading Truncating the output of SHA256 to 128 bits
General
Always check the MD5 hashes of the .NET Framework assemblies to prevent the possibility of rootkits in the framework. Altered assemblies are possible and simple to produce. Checking the MD5 hashes will prevent… Continue reading Using MD5 for file integrity checks?
I’m trying to understand the use of GUID and what has always left me wondering is what’s so special about them that I should consider using them instead of rolling my own type of unique ID. In other words, why can’t I use a W… Continue reading What does GUID have, that a Whirlpool, MD5 or SHA-2 hash don’t?