Follow @Openwall on Twitter for new release announcements and other news
[<prev] [next>] [<thread-prev] [thread-next>] [day] [month] [year] [list]
Date: Sun, 07 Jun 2015 15:19:49 +0300
From: Ivan Novikov <in@...larm.com>
To: john-users@...ts.openwall.com
Subject: ColdFusion 11 hash type dynamic config

Hi!

It may be useful for cracking ColdFusion 11 hashes.
Hash is password variable from ./lib/password.properties
Salt is admin.userid.root.salt variable from ./lib/neo-security.xml

[List.Generic:dynamic_1588]
Expression=sha256($salt.sha1($pass)) (ColdFusion 11)
Flag=MGF_INPUT_32_BYTE
Flag=MGF_SALTED
Flag=MGF_FLAT_BUFFERS
Flag=MGF_BASE_16_OUTPUT_UPCASE
Func=DynamicFunc__clean_input_kwik
Func=DynamicFunc__clean_input2_kwik
Func=DynamicFunc__append_salt
Func=DynamicFunc__append_keys2
Func=DynamicFunc__SHA1_crypt_input2_append_input1
Func=DynamicFunc__SHA256_crypt_input1_to_output1_FINAL
Test=$dynamic_1503$37F816D599BFD69C5A0D750198AB6E46E26CEB120C9AF3B1E5306515058CBAE8$D7B6D57262290BC0A634D2D1A0DFE59F1FBE47885DBC9BB1CEBA8EA9D09D9839:test1234

Enjoy!


Download attachment "signature.asc" of type "application/pgp-signature" (869 bytes)

Powered by blists - more mailing lists

Confused about mailing lists and their use? Read about mailing lists on Wikipedia and check out these guidelines on proper formatting of your messages.