Follow @Openwall on Twitter for new release announcements and other news
[<prev] [next>] [<thread-prev] [thread-next>] [day] [month] [year] [list]
Date: Wed, 29 Aug 2012 20:25:21 +0530
From: Dhiru Kholia <dhiru.kholia@...il.com>
To: john-users@...ts.openwall.com
Subject: Re: Is there any patch to crack MySQL Network auth?

On Wed, Aug 29, 2012 at 8:12 PM, Richard Miles
<richard.k.miles@...glemail.com> wrote:
> I'm not sure if I understood the input format, can you please give a
> practical example? Should I replace this example  with : ?
> $mysqlna$challenge*hash
>
> Such as:
>
> user:challange:hash ?

Hi Richard,

> Below is a example of MySQL Network Authentication, I hope this helps.
>root:620C2F98A2DED848A2065FEBC08ABAB85AB4813D:3D2D6743576B3460696D6639285C7867794D5541

This above hash needs to be written as,

root:$mysqlna$3D2D6743576B3460696D6639285C7867794D5541*620C2F98A2DED848A2065FEBC08ABAB85AB4813D

JtR (magnum-jumbo version from git) cracks it just fine.

-- 
Cheers,
Dhiru

Powered by blists - more mailing lists

Confused about mailing lists and their use? Read about mailing lists on Wikipedia and check out these guidelines on proper formatting of your messages.