Security Basics mailing list archives
Re: Cracking simple password encryption
From: "S.A.B.R.O. Net Security" <sabronet () indy rr com>
Date: Thu, 22 Dec 2005 21:32:17 -0500
It almost appears to be or very close to a simple Base64 scheme with maybe a shift or substitution somewhere.
For example, your patterns : a aQ== b cg== c ew== Now heres the results of a true Base64 encrypt : a YQ== b Yg== c Yw== As you see the results are very close. Hope this helps some. -- Sincerely, William E. Hoover S.A.B.R.O. Net Security Admin www.sabronet.com irc.sabronet.com sabronet () indy rr com admin () sabronet com David Hogue wrote:
Hi All, I am trying to figure out the password encryption scheme used by some software and haven't had much luck yet. I was wondering if anyone on here might be able to give me some pointers. A little while ago I remember some discussion on this list (I think it was this list anyway) about decrypting passwords that were XOR encrypted. I can't seem to find that discussion though. I have a few example passwords and I can see a pattern emerging: password crypted a aQ== b cg== c ew== aa aWo= ab aXE= cc e3g= aaa aWpq aab aWpx abb aXFx bbb cnFx Thanks, David --------------------------------------------------------------------------- EARN A MASTER OF SCIENCE IN INFORMATION ASSURANCE - ONLINEThe Norwich University program offers unparalleled Infosec management education and the case study affords you unmatched consulting experience. Tailor your education to your own professional goals with degree customizations including Emergency Management, Business Continuity Planning, Computer Emergency Response Teams, and Digital Investigations.http://www.msia.norwich.edu/secfocus ----------------------------------------------------------------------------
-- Sincerely, William E. Hoover S.A.B.R.O. Net Security Admin www.sabronet.com irc.sabronet.com sabronet () indy rr com admin () sabronet com --------------------------------------------------------------------------- EARN A MASTER OF SCIENCE IN INFORMATION ASSURANCE - ONLINEThe Norwich University program offers unparalleled Infosec management education and the case study affords you unmatched consulting experience. Tailor your education to your own professional goals with degree customizations including Emergency Management, Business Continuity Planning, Computer Emergency Response Teams, and Digital Investigations.
http://www.msia.norwich.edu/secfocus ----------------------------------------------------------------------------
Current thread:
- Cracking simple password encryption David Hogue (Dec 21)
- Re: Cracking simple password encryption Kaushik (Dec 26)
- Re: Cracking simple password encryption Gilles DEMARTY (Dec 26)
- Re: Cracking simple password encryption Alexander Klimov (Dec 26)
- Re: Cracking simple password encryption David Hogue (Dec 26)
- Re: Cracking simple password encryption S.A.B.R.O. Net Security (Dec 26)
- Re: Cracking simple password encryption David Hogue (Dec 26)
- Re: Cracking simple password encryption jim (Dec 26)
- Re: Cracking simple password encryption Chris Largret (Dec 26)
- Re: Cracking simple password encryption Thomas Muders (Dec 26)
- <Possible follow-ups>
- Re: Cracking simple password encryption securityfocus (Dec 26)
- Re: Cracking simple password encryption warl0ck (Dec 26)