Author Topic: Hash Identifier  (Read 5623 times)

0 Members and 7 Guests are viewing this topic.

Offline ande

  • Owner
  • Titan
  • *
  • Posts: 2664
  • Cookies: 256
    • View Profile
Hash Identifier
« on: January 26, 2012, 07:03:54 pm »
Just saw it posted on facebook:

http://code.google.com/p/hash-identifier/

Seams like a interesting project :)


Software to identify the different types of hashes used to encrypt data and especially passwords.


Encryption formats supported:
  • ADLER-32
  • CRC-32
  • CRC-32B
  • CRC-16
  • CRC-16-CCITT
  • DES(Unix)
  • FCS-16
  • GHash-32-3
  • GHash-32-5
  • GOST R 34.11-94
  • Haval-160
  • Haval-192 110080 ,Haval-224 114080 ,Haval-256
  • Lineage II C4
  • Domain Cached Credentials
  • XOR-32
  • MD5(Half)
  • MD5(Middle)
  • MySQL
  • MD5(phpBB3)
  • MD5(Unix)
  • MD5(Wordpress)
  • MD5(APR)
  • Haval-128
  • MD2
  • MD4
  • MD5
  • MD5(HMAC(Wordpress))
  • NTLM
  • RAdmin v2.x
  • RipeMD-128
  • SNEFRU-128
  • Tiger-128 
  • MySQL5 - SHA-1(SHA-1($pass))
  • MySQL 160bit - SHA-1(SHA-1($pass))
  • RipeMD-160
  • SHA-1
  • SHA-1(MaNGOS)
  • Tiger-160
  • Tiger-192
  • md5($pass.$salt) - Joomla
  • SHA-1(Django)
  • SHA-224
  • RipeMD-256
  • SNEFRU-256
  • md5($pass.$salt) - Joomla
  • SAM - (LM_hash:NT_hash)
  • SHA-256(Django)
  • RipeMD-320
  • SHA-384
  • SHA-256
  • SHA-384(Django)
  • SHA-512
  • Whirlpool
  • And moreā€¦

Encryption algorithms that can not be differentiated unless they have been decrypted, so the efficiency of the software also depends on the user's criteria.
if($statement) { unless(!$statement) { // Very sure } }
https://evilzone.org/?hack=true

Offline petermlm

  • Knight
  • **
  • Posts: 226
  • Cookies: 7
  • Information is Power
    • View Profile
    • Security Check
Re: Hash Identifier
« Reply #1 on: January 26, 2012, 07:07:19 pm »
Brutal!! That not only returns what has been hashed but also witch function was used? That must take a few minutes, or hours to run if the hash is not in a dictionary or a database.

Offline ande

  • Owner
  • Titan
  • *
  • Posts: 2664
  • Cookies: 256
    • View Profile
Re: Hash Identifier
« Reply #2 on: January 26, 2012, 07:09:58 pm »
Brutal!! That not only returns what has been hashed but also witch function was used? That must take a few minutes, or hours to run if the hash is not in a dictionary or a database.

I believe it only identifies what sort of hash/algorithm it MIGHT be. There is no way telling if a MD5(example) hash has been made by md5() or md5(md5()) etc. I guess it checks for length and prefixes often used by some hashes/algorithms.
if($statement) { unless(!$statement) { // Very sure } }
https://evilzone.org/?hack=true

Offline petermlm

  • Knight
  • **
  • Posts: 226
  • Cookies: 7
  • Information is Power
    • View Profile
    • Security Check
Re: Hash Identifier
« Reply #3 on: January 26, 2012, 07:12:40 pm »
I believe it only identifies what sort of hash/algorithm it MIGHT be. There is no way telling if a MD5(example) hash has been made by md5() or md5(md5()) etc. I guess it checks for length and prefixes often used by some hashes/algorithms.

Interesting! It may be very useful!
« Last Edit: January 26, 2012, 07:12:53 pm by petermlm »

Offline Satan911

  • VIP
  • Knight
  • *
  • Posts: 289
  • Cookies: 25
  • Retired god/admin
    • View Profile
Re: Hash Identifier
« Reply #4 on: January 27, 2012, 07:08:02 am »
I'm not quite sure I understand how this works (properly). For most hashes it seems they are just comparing the length of the given hash with a typical hash for the encryption X. Then if the length matches and the hash is alphanumeric it adds a string / number to an array. For some hashes they are checking for some special pattern like $1$ for unix hashes. Finally they sort the array? It's kind of the late so I might not see it but at the moment I don't get how this can be reliable (I know how it works.. I just don't see how it can be reliable).

The source code for the lazies: http://code.google.com/p/hash-identifier/source/browse/trunk/Hash_ID_v1.1/Hash_ID.py
« Last Edit: January 27, 2012, 07:09:24 am by Satan911 »
Satan911
Evilzone Network Administrator


Offline wootang

  • NULL
  • Posts: 1
  • Cookies: 0
    • View Profile
Re: Hash Identifier
« Reply #6 on: October 10, 2013, 05:10:50 am »
This is pretty old..  Any ways, someone has developer an online hash identifier that doesn't require a user to download code or python.

The site is located at: http://www.dfcode.org/onlinehashidentifier.php

Kindest Regards,

Offline lucid

  • #Underground
  • Titan
  • **
  • Posts: 2683
  • Cookies: 243
  • psychonaut
    • View Profile
Re: Hash Identifier
« Reply #7 on: October 10, 2013, 05:37:46 am »
« Last Edit: October 10, 2013, 05:38:06 am by lucid »
"Hacking is at least as much about ideas as about computers and technology. We use our skills to open doors that should never have been shut. We open these doors not only for our own benefit but for the benefit of others, too." - Brian the Hacker

Quote
15:04  @Phage : I'm bored of Python

Offline proxx

  • Avatarception
  • Global Moderator
  • Titan
  • *
  • Posts: 2803
  • Cookies: 256
  • ФФФ
    • View Profile
Re: Hash Identifier
« Reply #8 on: October 10, 2013, 05:53:32 am »
Thanks for posting this , been looking for such a tool for a long time +1
haha, facebook.
Wtf where you thinking with that signature? - Phage.
This was another little experiment *evillaughter - Proxx.
Evilception... - Phage

Offline Deque

  • P.I.N.N.
  • Global Moderator
  • Overlord
  • *
  • Posts: 1203
  • Cookies: 518
  • Programmer, Malware Analyst
    • View Profile
Re: Hash Identifier
« Reply #9 on: October 10, 2013, 01:44:38 pm »
that code made me sad. :'(

Me too. It is horrible to say the least.

Offline vezzy

  • Royal Highness
  • ****
  • Posts: 771
  • Cookies: 172
    • View Profile
Re: Hash Identifier
« Reply #10 on: October 10, 2013, 08:22:46 pm »
It is aesthetically horrible, but since it uses basic constructs, it's probably more efficient, too.

Real programmers can write FORTRAN in any language. That's the old proverb.
Quote from: Dippy hippy
Just brushing though. I will be semi active mainly came to find a HQ botnet, like THOR or just any p2p botnet

Offline Deque

  • P.I.N.N.
  • Global Moderator
  • Overlord
  • *
  • Posts: 1203
  • Cookies: 518
  • Programmer, Malware Analyst
    • View Profile
Re: Hash Identifier
« Reply #11 on: October 12, 2013, 07:42:21 pm »
It is aesthetically horrible, but since it uses basic constructs, it's probably more efficient, too.

Real programmers can write FORTRAN in any language. That's the old proverb.

Who cares about efficiency in a hash identifier?