vb.org Archive

vb.org Archive (https://vborg.vbsupport.ru/index.php)
-   vB3 General Discussions (https://vborg.vbsupport.ru/forumdisplay.php?f=111)
-   -   How can I retreive a PW through phpMyAdmin? (https://vborg.vbsupport.ru/showthread.php?t=48850)

gsnetworks 02-12-2003 10:51 PM

How can I retreive a PW through phpMyAdmin?
 
Well, I lost the password to my admin account, and I logged in to find it, but all it gave me was a bunch of characters, not the actual password.

How can I find it again in the phpMyAdmin function?

DrkFusion 02-13-2003 12:34 AM

I have actually suceeded to crack md5, and have developed a program in vB that will decrypt all md5 code into normal text. As you know all vB passwords are stored encrypted as md5, now it is possible to decrypt them with my program. One of a kind, first of its kind, very rare, and I doubt anyone will ever make one like this.

It is not a freeware program, and it requires that the user purchase a 250$ liscense that will allow you access to the program for 6 months.

If you are interested please PM me.

mr e 02-13-2003 03:27 AM

i thought you couldn't decript md5, only brute force it...

Erwin 02-13-2003 03:53 AM

Me too, but obviously it can be cracked. :)

okrogius 02-13-2003 10:40 AM

MD5 is mathematically proven to be a one way hash. You may brute force it, but that will take a big amount of time if the original string was any good. And that is NOT called decryption.

Jesus christ! $250 for a brute force program! And I thought my fees were bad enough, but heh - Bill Gates could learn from you how to rip people off.

Xenon 02-13-2003 11:25 AM

well, it's not fully correct what you say Codename49 and Erwin.

True is, that MD5 is a one way encryption, because a string of 10k chars could be convertet into the same as for example an 'a'.
But it can be decrypted into a text-string which is in the same aequivalent-class as the true password is (and could also be with luck the true password also...)
drks program might do something like:
Quote:

that will decrypt all md5 code into normal text
he didn't say it will decrypt it into the true password, just in a normal text which CAN be used as password...

in vb3 there is a new way of encryption used, so his way won't help you out much then without the exact key an admin would use for encryption..

Dominick 02-13-2003 06:46 PM

to echo what was said, md5 is a one way hash
meaning that the algorithm used can only be computed that way,. it cannot be computed any other way. plus it cannot be computed in reverse.

Xenon 02-13-2003 07:05 PM

well it a non idetical function

it's like the square function:

x² is also an undecryptable function, because you can never say for sure what x was (except x²=0)
but you can always give a synonym for it (squareroot of x² or negative squareroot of x²)
it's kind the sam for md5, but finding a synonym for md5 passwords is way harder than finding one for ²

Dominick 02-13-2003 11:01 PM

/* Round 1. */
/* Let [abcd k s i] denote the operation
a = b + ((a + F(b,c,d) + X[k] + T[i]) <<< s). */
/* Do the following 16 operations. */
[ABCD 0 7 1] [DABC 1 12 2] [CDAB 2 17 3] [BCDA 3 22 4]
[ABCD 4 7 5] [DABC 5 12 6] [CDAB 6 17 7] [BCDA 7 22 8]
[ABCD 8 7 9] [DABC 9 12 10] [CDAB 10 17 11] [BCDA 11 22 12]
[ABCD 12 7 13] [DABC 13 12 14] [CDAB 14 17 15] [BCDA 15 22 16]

here is a bit of what md5 looks like

basically the process is something like this

first the plain text is padded to be a multiple of 448 or 512
then it is broken down into 16 bit pieces

then those 16 bits are broken up into 4 word buffers
or
a
b
c
d

then a b c and d are plugged into the algorithm and the hash is produced


MD5 doesnt use a key. which leads me to this...

if you are using a key that means public or private key encrypted files.
wont that slow down the process

pke is a bit risky as there are built in back doors
http://groups.google.com/groups?q=ba...olumbia&rnum=1
encryption witha secret key is iffy as well...

in order to achieve a good level of security you need a big key. IE 128bit or more

thats blowfish or 3des... that is computationaly huge and a strain on processors.
but anything less and its crackable...

unless Im missing something obvious...

-Dom

edit

linky to rfc 1321 http://www.ietf.org/rfc/rfc1321.txt?number=1321

okrogius 02-13-2003 11:19 PM

Here's an md5 hash. If you believe you have found a way to decrypt md5 I would be severely surprised. Numerrous experts have looked at the algorithm and labeled it as one way.

So here you go: 74320e1ebed147cca6cd245980a0551a

Xenon 02-14-2003 10:30 AM

yeah, Drk show what you can here on this example.

@Codename49: As i said, MD5 is a one way encryption, but the theoretical existence of an algorithm to find working synonyms is there!
Ok finding such a algorithm isn't easy, but it is possible, it's a partial backway function.

@Dominik:
the new encryption of vb3 will use a pseudo key, not a real key for decryption:
http://www.vbulletin.com/forum/showt...threadid=64134
Codename should know that thread very well ;)

Dominick 02-14-2003 11:36 AM

Quote:

Originally posted by Codename49
Here's an md5 hash. If you believe you have found a way to decrypt md5 I would be severely surprised. Numerrous experts have looked at the algorithm and labeled it as one way.

So here you go: 74320e1ebed147cca6cd245980a0551a

the password is
1
2
3
4
5

nuno 02-17-2003 06:19 PM

DrkFusion was joking guys.
There's no way to get the original password.

Xenon 02-17-2003 07:21 PM

Quote:

There's no way to get the [high]original[/high] password.
that's the jumping point :)

Link14716 02-17-2003 07:58 PM

Why don't you just create a new password, MD5 it, and insert it into phpMyAdmin?

Or you know, there is a lost password finction for vB. ;)

SharronH 07-27-2003 01:35 AM

Quote:

02-13-03 at 03:34 AM Keptic said this in Post #2
I have actually suceeded to crack md5, and have developed a program in vB that will decrypt all md5 code into normal text. As you know all vB passwords are stored encrypted as md5, now it is possible to decrypt them with my program. One of a kind, first of its kind, very rare, and I doubt anyone will ever make one like this.

It is not a freeware program, and it requires that the user purchase a 250$ liscense that will allow you access to the program for 6 months.

If you are interested please PM me.

Crack this MD5 hash. It's a 4-letter word. If you can, then I'll buy it. LOL

99754106633f94d350db34d548d6091a

NTLDR 07-27-2003 04:51 PM

I did find a Brute Force md5 executable once before, it took absolutly for ever processing a string of more than 3 characters and that was at 100% CPU time constantly, it would lock up the entire PC while it was going through random sequences to find a match.

GameWizard 04-23-2006 09:54 PM

Quote:

Originally Posted by SharronH
Crack this MD5 hash. It's a 4-letter word. If you can, then I'll buy it. LOL

99754106633f94d350db34d548d6091a

99754106633f94d350db34d548d6091a = f*ck

Took me 2 seconds to figure it out.

Paul M 04-23-2006 10:07 PM

Shame your almost three years too late then .......

zephy 04-24-2006 07:50 AM

LoL Pem :)


All times are GMT. The time now is 04:47 PM.

Powered by vBulletin® Version 3.8.12 by vBS
Copyright ©2000 - 2025, vBulletin Solutions Inc.

X vBulletin 3.8.12 by vBS Debug Information
  • Page Generation 0.01140 seconds
  • Memory Usage 1,759KB
  • Queries Executed 10 (?)
More Information
Template Usage:
  • (1)ad_footer_end
  • (1)ad_footer_start
  • (1)ad_header_end
  • (1)ad_header_logo
  • (1)ad_navbar_below
  • (5)bbcode_quote_printable
  • (1)footer
  • (1)gobutton
  • (1)header
  • (1)headinclude
  • (6)option
  • (1)post_thanks_navbar_search
  • (1)printthread
  • (20)printthreadbit
  • (1)spacer_close
  • (1)spacer_open 

Phrase Groups Available:
  • global
  • postbit
  • showthread
Included Files:
  • ./printthread.php
  • ./global.php
  • ./includes/init.php
  • ./includes/class_core.php
  • ./includes/config.php
  • ./includes/functions.php
  • ./includes/class_hook.php
  • ./includes/modsystem_functions.php
  • ./includes/class_bbcode_alt.php
  • ./includes/class_bbcode.php
  • ./includes/functions_bigthree.php 

Hooks Called:
  • init_startup
  • init_startup_session_setup_start
  • init_startup_session_setup_complete
  • cache_permissions
  • fetch_threadinfo_query
  • fetch_threadinfo
  • fetch_foruminfo
  • style_fetch
  • cache_templates
  • global_start
  • parse_templates
  • global_setup_complete
  • printthread_start
  • bbcode_fetch_tags
  • bbcode_create
  • bbcode_parse_start
  • bbcode_parse_complete_precache
  • bbcode_parse_complete
  • printthread_post
  • printthread_complete