Ethical Hacking

Learn to find vulnerabilities before the bad guys do! Gain real world hands on hacking experience in our state of the art hacking lab. Course designed and taught by expert instructors with years of penetration testing experience. 12 student maximum in every class. Certification attempt included in every package.
Computer Forensics Training at InfoSec Institute

Gain the in-demand skills of a certified computer examiner, learn to recover trace data left behind by fraud, theft, and cybercrime perpetrators. Discover the source of computer crime and abuse at your organization so that it never happens again. All of our class sizes are guaranteed to be 12 students or less to facilitate one-on-one interaction with one of our expert instructors.




Network Security Security-Basics
[Top] [All Lists]

Re: Cracking simple password encryption

Subject: Re: Cracking simple password encryption
Date: Thu, 22 Dec 2005 21:32:17 -0500
It almost appears to be or very close to a simple Base64 scheme with maybe a shift or substitution somewhere.

For example, your patterns :

a        aQ==
b        cg==
c        ew==

Now heres the results of a true Base64 encrypt :

a       YQ==
b       Yg==
c       Yw==


As you see the results are very close. Hope this helps some.


-- Sincerely,


William E. Hoover S.A.B.R.O. Net Security Admin www.sabronet.com irc.sabronet.com sabronet@indy.rr.com admin@sabronet.com




David Hogue wrote:

Hi All,

I am trying to figure out the password encryption scheme used by some
software and haven't had much luck yet.  I was wondering if anyone on
here might be able to give me some pointers.

A little while ago I remember some discussion on this list (I think it
was this list anyway) about decrypting passwords that were XOR
encrypted.  I can't seem to find that discussion though.

I have a few example passwords and I can see a pattern emerging:

password        crypted
a               aQ==
b               cg==
c               ew==
aa              aWo=
ab              aXE=
cc              e3g=
aaa             aWpq
aab             aWpx
abb             aXFx
bbb             cnFx

Thanks,
David

---------------------------------------------------------------------------
EARN A MASTER OF SCIENCE IN INFORMATION ASSURANCE - ONLINE
The Norwich University program offers unparalleled Infosec management education and the case study affords you unmatched consulting experience. Tailor your education to your own professional goals with degree customizations including Emergency Management, Business Continuity Planning, Computer Emergency Response Teams, and Digital Investigations.


http://www.msia.norwich.edu/secfocus
----------------------------------------------------------------------------






--
Sincerely,


William E. Hoover S.A.B.R.O. Net Security Admin www.sabronet.com irc.sabronet.com sabronet@indy.rr.com admin@sabronet.com





---------------------------------------------------------------------------
EARN A MASTER OF SCIENCE IN INFORMATION ASSURANCE - ONLINE
The Norwich University program offers unparalleled Infosec management education and the case study affords you unmatched consulting experience. Tailor your education to your own professional goals with degree customizations including Emergency Management, Business Continuity Planning, Computer Emergency Response Teams, and Digital Investigations.


http://www.msia.norwich.edu/secfocus
----------------------------------------------------------------------------

<Prev in Thread] Current Thread [Next in Thread>