Welcome to HBH! If you had an account on hellboundhacker.org you will need to reset your password using the Lost Password system before you will be able to login.

DES cracking Question


ghost's Avatar
0 0

After a session of Google Hacking, I came upon a treasure trove known as passwd on a website. I took it upon myself as a cracking challenge. I compiled a wordlist from many different smaller wordlists, and fired up John the Ripper. I've now cracked most of the passwords, but I was wondering, why are they all 8 digit numbers. I attempted to log in with them, but they don't work, and they aren't base64 or hex, so what are they encoded in? I would give you the url of the passwd file, but I want to be the first to hack it :) Thanks for your help in advance.


starofale's Avatar
Member
0 0

Are you sure you're logging in to the right place and that the password file you found is the one being used to validate logins?

I can't think what the 8 digit numbers could be other than the passwords.


ghost's Avatar
0 0

The file's name is passwd, and it's in cgi-bin, so idk what it could possibly be besides encrypted passwords.


starofale's Avatar
Member
0 0

But that doesn't mean those encrypted passwords are for whatever login form you are entering them in.