Security Basics mailing list archives

Re: discover encryption method


From: Bipin Upadhyay <muxical.geek () gmail com>
Date: Mon, 07 Jan 2008 22:57:50 +0530

richard () tortoise demon co uk wrote:
Hi All,

An application I use stores user passwords in a database table, but in
some encrypted form. I know all the passwords both in plain text and
in their encrypted form. Is there any tool I could use that can take
two such lists and tell me what encryption method is being used?

RSnake's Hashmaster is just the right thing for you, provided the passwords aren't salt-ed (in which case you might want to right your own script.)
http://ha.ckers.org/hashmaster/

[SNIPPED]

--Bipin Upadhyay
http://projectbee.org


Current thread: