Show Posts

This section allows you to view all posts made by this member. Note that you can only see posts made in areas you currently have access to.


Messages - sensor

Pages: [1]
2
Found it on the Webs / Re: Tools4noobs
« on: May 25, 2013, 05:35:44 pm »
It would be great if there was some sort of JSON API :)

3
Hacking and Security / Re: Wordpress passwords encryption ?
« on: July 15, 2011, 03:36:55 pm »
The reason for the slow cracking of these passwords is so called: key stretching incorporated in PHPASS.
Here is more info on key strengthening:
http://en.wikipedia.org/wiki/Key_strengthening,
http://www.schneier.com/paper-low-entropy.html


Basically the time to generate the hash is increased by hashing the password multiple times - making Bruteforce ineffective method or slowing it down enough.

4
Hacking and Security / Re: Wordpress passwords encryption ?
« on: July 15, 2011, 03:17:20 pm »
Thanks a lot!


I already started up Passwords Pro, but noticed big performance drop, cracking MD5(Wordpress), rather md5() from PasswordsPro.
 
The best was 600 p/s, on 2 cores probably 1000 p/s.


Found Extreme GPU Bruteforcer again from InsidePro using CUDA GPU.
The results from CUDA performance from their site:
MD5                 - 420 million p/s
MD5(Wordpress) - 0.05 p/s


Which is 8400x slower.
Thanks again, I'll further investigate & if I have valuable info i'll keep you posted ;) 

5
Hacking and Security / Wordpress passwords encryption ?
« on: July 15, 2011, 02:15:10 pm »
Does anyone here know what type of encryption Wordpress uses ?
It used to be plain MD5.

Here is one sample password: $P$BsaP.8zr.ZeT2ktfTfJkgOAhNm3RJB/
All of them starts with: $P$B
Does it use some sort of salt ? Is it possible to crack it, etc.
Can you give me a hint ?

Thanks in advance,
Alex

Pages: [1]