john-users - Trying to port user accounts to a web site

Follow @Openwall on Twitter for new release announcements and other news

[<prev] [next>] [thread-next>] [day] [month] [year] [list]

Message-ID: <341310.2364.qm@web113213.mail.gq1.yahoo.com>
Date: Thu, 23 Sep 2010 11:51:57 -0700 (PDT)
From: Scott Hamilton <shamil614@...oo.com>
To: john-users@...ts.openwall.com
Subject: Trying to port user accounts to a web site

Here's the short version:
1. My company has created a new ecommerce site to replace an outdated AspDotNet 
Storefront Website
2. We want to give the users a seamless transition to the new site by porting 
over user names and passwords
3. I have access to the password hashes but no way of decrypting the passwords 
through  AspDotNet Storefront .Net code
4. I tested John on a Windows and Mac machine with sample hashes from a link I 
found on the John site: 

    http://academic2.bellevue.edu/~ssampson/406/sampass.txt    
    sampson:Ow06fqHB6ysaA
  karloff:uQ06RXChrzXbY
  lugosi:kFhgmH8fTvSSk
  dracula:stSPW.KvG4wRI
  franken:cmtq8/a9gPY0g
    As expected John decrypted the hashes like a champ.    
5.  I tried running a few our the  AspDotNet Storefron's hashes through and 
received the following error: No password hashes loaded.
6. Here's a sample that I used:

user1@...plepc.com:Pz8/Excycz8YMWY1P0U6P0A/egJKPz8/BW5mP3gPXT8PfhVhdz8mPzM/Pz8/CmoX

user2@...il.com:D2o/Pz96Tj8/Pz90Aw13Dm0/ST8/CSM/Pz9lOz9nPz8/Pyo/cz9iaDQ/Nz91PD8F

user3@...oo.com:PyA/eRpdPzYNEgtPP2NzAT8zPyE/PxQgPxA/Pz8/Pz8ZPz8/ID93PxxyPz8/Pz8/
7. I'm afraid that I don't know encryption algorithm used in the AspDotNet 
Storefront site.

I did my best to read through the FAQ / Documentation, but I'm very new to 
cracking.  Any help would be greatly appreciated.  Thanks.

Confused about mailing lists and their use? Read about mailing lists on Wikipedia and check out these guidelines on proper formatting of your messages.