SMF 1.1.8 pass cracking

[hacker@sr.gov.yu]

Ok, does somebody know now SMF 1.1.8 stores passwords? I have the pass hash and the salt. What is the easiest way to crack it?

[ande]

SMF 2.0++ uses: sha1(strtolower($username).$pass)

Anything under 2.0 and above 1.0 or 1.5 uses either md5(md5(pass).salt) or md5(pass.salt). Cant remember

[hacker@sr.gov.yu]

Will see... Anyways example is this:

hash:salt

Code: [Select]

151c4e17ea3cc3d5f48bc464826412a797d20db6:f11e

[ande]

Just checked a 1.1.13 board, it also uses sha1(strtolower(username).pass). But im pretty sure 1.1.8 uses another one

[hacker@sr.gov.yu]

www.md5decrypter.co.uk gives me a error:

Code: [Select]

151c4e17ea3cc3d5f48bc464826412a797d20db6 [Invalid]
bump...

[ande]

www.md5decrypter.co.uk gives me a error:

Code: [Select]

151c4e17ea3cc3d5f48bc464826412a797d20db6 [Invalid]
bump...

That would be a SHA1. Maybe they use the new password algorithm. Got a username?

[I_Learning_I]

SMF 1.1.x encryption algorithm:

sha1($username.$pass);

Here's something that might be handy.

[Crimson]

Use PasswordPRO from http://www.insidepro.com/

Probably best way for dictionary attacks

[I_Learning_I]

I wouldn't advice you to use it, I've been looking for Extreme GPU Bruteforcer for months, because of the advertise, and to be honest, it was... a shit when I tried it out, of course this was months ago.

When you compare to oclHashCat it's really bad, the performance of both programs is similar, but Extreme GPU Bruterforcer won't give you the possibility to run at lower performance it will always run at maximum speed, while oclhashCat can run at lower speeds so your computer can crack and not be useless for hours, I've cracked at 200M/s (if I recall correctly) and the computer was running smoothly.

Of course there have been new versions for Extreme GPU Bruteforcer, so it might be better, I noticed they have a lot of new algorithms, might as well try it out.

And never mind CPU cracking, that's history, we're on GPU time.
All you need is a ATI HD or a nVidia 8000+. ( To support CUDA)

In case you're interested in GPU cracking here's the link for Extreme GPU Bruteforcer (Not Tested.):

CHiLi Cracked version:

Code: [Select]

http://hotfile.com/dl/102019933/dbc1a2c/InsidePro.Extreme.GPU.Bruteforcer.v1.8.1.Cracked.zip.html

http://www.filesonic.com/file/75386086/InsidePro.Extreme.GPU.Bruteforcer.v1.8.1.Cracked.zip

OR
iOTA version

Code: [Select]

http://hotfile.com/dl/102019766/a916fa4/Extreme.GPU.Bruteforcer.v1.8.1.incl.keyfile.zip.html

http://www.filesonic.com/file/75387521/Extreme.GPU.Bruteforcer.v1.8.1.incl.keyfile.zip


Source:

Code: [Select]

http://tehparadox.com/forum/f51/insidepro-extreme-gpu-bruteforcer-1-8-1-a-1773499/

Good luck with your cracking

[hacker@sr.gov.yu]

Tnanks guys, I have the username
Another question, what type of hash are these two?

Code: [Select]

atFWhLk.Pb7jo

Code: [Select]

at72cF3lATjTQ

[ande]

Tnanks guys, I have the username
Another question, what type of hash are these two?

Code: [Select]

atFWhLk.Pb7jo

Code: [Select]

at72cF3lATjTQ

DES maybe

http://www.insidepro.com/hashes.php?lang=eng

[I_Learning_I]

It can also be NT SAM has for what I've found, although that's highly unlikely.

[hacker@sr.gov.yu]

Thanks again guys ;-)