john-users - Re: What format is used to crack a vBulletin hash with a fixed 30 byte salt?

Follow @Openwall on Twitter for new release announcements and other news

[<prev] [next>] [<thread-prev] [day] [month] [year] [list]

Message-ID: <20200312104954.GA2366@openwall.com>
Date: Thu, 12 Mar 2020 11:49:55 +0100
From: Solar Designer <solar@...nwall.com>
To: john-users@...ts.openwall.com
Subject: Re: What format is used to crack a vBulletin hash with a fixed 30 byte salt?

magnum,

On Thu, Mar 12, 2020 at 03:10:16AM +0100, magnum wrote:
> $ ./john -list=subformats | grep -i vbulletin
> UserFormat = dynamic_1007  type = dynamic_1007: md5(md5($p).$s) (vBulletin)

> $ ./john --list=subformats | grep -F 'md5(md5($p).$s)'
> Format = dynamic_6   type = dynamic_6: md5(md5($p).$s)
> Format = dynamic_16  type = dynamic_16: md5(md5(md5($p).$s).$s2)
> UserFormat = dynamic_1007  type = dynamic_1007: md5(md5($p).$s) (vBulletin)
> UserFormat = dynamic_2006  type = dynamic_2006: md5(md5($p).$s) (PW > 55 
> bytes)

We should probably change the comment for dynamic_2006 from "PW > 55
bytes" to "vBulletin, PW > 55 bytes or/and salt > 23 bytes)", so that it
would be caught by your first grep and so that its different salt size
limit would be clear from this brief description.

Will you commit that change, please?

Thanks,

Alexander

Confused about mailing lists and their use? Read about mailing lists on Wikipedia and check out these guidelines on proper formatting of your messages.