john-users - SHA256(XOR(salt+pass, key))

Follow @Openwall on Twitter for new release announcements and other news

[<prev] [next>] [thread-next>] [day] [month] [year] [list]

Message-ID: <4b8b7942-2fbb-46dc-88d2-effa4b2267a0@gmail.com>
Date: Sat, 7 Sep 2019 23:05:13 +1000
From: Marcin Gębarowski <marcing.dev@...il.com>
To: john-users@...ts.openwall.com
Subject: SHA256(XOR(salt+pass, key))

Hi all,

Looking for help with using john to crack the hashes I got, the 
application creates them as follows:

SHA256(XOR(salt + pass, key))

Salt and key are both 32 bytes long. I have the key. Hashes are stored 
in format:
base64(salt + hash)
but I can easily change that to anything else.

The main problem I'm having is the XOR function, which I was unable to 
find in dynamic scripts library. Having something like:
sha256(xor($s.$p, $key))
as dynamic script would definitely solve this...

Thanks!

Confused about mailing lists and their use? Read about mailing lists on Wikipedia and check out these guidelines on proper formatting of your messages.