Go Back   vb.org Archive > vBulletin 3 Discussion > vB3 General Discussions
FAQ Community Calendar Today's Posts Search

Reply
 
Thread Tools Display Modes
  #1  
Old 02-12-2003, 10:51 PM
gsnetworks gsnetworks is offline
 
Join Date: Feb 2002
Posts: 17
Благодарил(а): 0 раз(а)
Поблагодарили: 0 раз(а) в 0 сообщениях
Default How can I retreive a PW through phpMyAdmin?

Well, I lost the password to my admin account, and I logged in to find it, but all it gave me was a bunch of characters, not the actual password.

How can I find it again in the phpMyAdmin function?
Reply With Quote
  #2  
Old 02-13-2003, 12:34 AM
DrkFusion's Avatar
DrkFusion DrkFusion is offline
 
Join Date: Nov 2001
Posts: 1,926
Благодарил(а): 0 раз(а)
Поблагодарили: 0 раз(а) в 0 сообщениях
Default

I have actually suceeded to crack md5, and have developed a program in vB that will decrypt all md5 code into normal text. As you know all vB passwords are stored encrypted as md5, now it is possible to decrypt them with my program. One of a kind, first of its kind, very rare, and I doubt anyone will ever make one like this.

It is not a freeware program, and it requires that the user purchase a 250$ liscense that will allow you access to the program for 6 months.

If you are interested please PM me.
Reply With Quote
  #3  
Old 02-13-2003, 03:27 AM
mr e's Avatar
mr e mr e is offline
 
Join Date: Dec 2001
Posts: 461
Благодарил(а): 0 раз(а)
Поблагодарили: 0 раз(а) в 0 сообщениях
Default

i thought you couldn't decript md5, only brute force it...
Reply With Quote
  #4  
Old 02-13-2003, 03:53 AM
Erwin's Avatar
Erwin Erwin is offline
 
Join Date: Jan 2002
Posts: 7,604
Благодарил(а): 0 раз(а)
Поблагодарили: 0 раз(а) в 0 сообщениях
Default

Me too, but obviously it can be cracked.
Reply With Quote
  #5  
Old 02-13-2003, 10:40 AM
okrogius okrogius is offline
 
Join Date: Dec 2001
Location: USA
Posts: 264
Благодарил(а): 0 раз(а)
Поблагодарили: 0 раз(а) в 0 сообщениях
Default

MD5 is mathematically proven to be a one way hash. You may brute force it, but that will take a big amount of time if the original string was any good. And that is NOT called decryption.

Jesus christ! $250 for a brute force program! And I thought my fees were bad enough, but heh - Bill Gates could learn from you how to rip people off.
Reply With Quote
  #6  
Old 02-13-2003, 11:25 AM
Xenon's Avatar
Xenon Xenon is offline
 
Join Date: Oct 2001
Location: Bavaria
Posts: 12,878
Благодарил(а): 0 раз(а)
Поблагодарили: 0 раз(а) в 0 сообщениях
Default

well, it's not fully correct what you say Codename49 and Erwin.

True is, that MD5 is a one way encryption, because a string of 10k chars could be convertet into the same as for example an 'a'.
But it can be decrypted into a text-string which is in the same aequivalent-class as the true password is (and could also be with luck the true password also...)
drks program might do something like:
Quote:
that will decrypt all md5 code into normal text
he didn't say it will decrypt it into the true password, just in a normal text which CAN be used as password...

in vb3 there is a new way of encryption used, so his way won't help you out much then without the exact key an admin would use for encryption..
Reply With Quote
  #7  
Old 02-13-2003, 06:46 PM
Dominick Dominick is offline
 
Join Date: Jan 2003
Posts: 80
Благодарил(а): 0 раз(а)
Поблагодарили: 0 раз(а) в 0 сообщениях
Default

to echo what was said, md5 is a one way hash
meaning that the algorithm used can only be computed that way,. it cannot be computed any other way. plus it cannot be computed in reverse.
Reply With Quote
  #8  
Old 02-13-2003, 07:05 PM
Xenon's Avatar
Xenon Xenon is offline
 
Join Date: Oct 2001
Location: Bavaria
Posts: 12,878
Благодарил(а): 0 раз(а)
Поблагодарили: 0 раз(а) в 0 сообщениях
Default

well it a non idetical function

it's like the square function:

x² is also an undecryptable function, because you can never say for sure what x was (except x²=0)
but you can always give a synonym for it (squareroot of x² or negative squareroot of x²)
it's kind the sam for md5, but finding a synonym for md5 passwords is way harder than finding one for ²
Reply With Quote
  #9  
Old 02-13-2003, 11:01 PM
Dominick Dominick is offline
 
Join Date: Jan 2003
Posts: 80
Благодарил(а): 0 раз(а)
Поблагодарили: 0 раз(а) в 0 сообщениях
Default

/* Round 1. */
/* Let [abcd k s i] denote the operation
a = b + ((a + F(b,c,d) + X[k] + T[i]) <<< s). */
/* Do the following 16 operations. */
[ABCD 0 7 1] [DABC 1 12 2] [CDAB 2 17 3] [BCDA 3 22 4]
[ABCD 4 7 5] [DABC 5 12 6] [CDAB 6 17 7] [BCDA 7 22 8]
[ABCD 8 7 9] [DABC 9 12 10] [CDAB 10 17 11] [BCDA 11 22 12]
[ABCD 12 7 13] [DABC 13 12 14] [CDAB 14 17 15] [BCDA 15 22 16]

here is a bit of what md5 looks like

basically the process is something like this

first the plain text is padded to be a multiple of 448 or 512
then it is broken down into 16 bit pieces

then those 16 bits are broken up into 4 word buffers
or
a
b
c
d

then a b c and d are plugged into the algorithm and the hash is produced


MD5 doesnt use a key. which leads me to this...

if you are using a key that means public or private key encrypted files.
wont that slow down the process

pke is a bit risky as there are built in back doors
http://groups.google.com/groups?q=ba...olumbia&rnum=1
encryption witha secret key is iffy as well...

in order to achieve a good level of security you need a big key. IE 128bit or more

thats blowfish or 3des... that is computationaly huge and a strain on processors.
but anything less and its crackable...

unless Im missing something obvious...

-Dom

edit

linky to rfc 1321 http://www.ietf.org/rfc/rfc1321.txt?number=1321
Reply With Quote
  #10  
Old 02-13-2003, 11:19 PM
okrogius okrogius is offline
 
Join Date: Dec 2001
Location: USA
Posts: 264
Благодарил(а): 0 раз(а)
Поблагодарили: 0 раз(а) в 0 сообщениях
Default

Here's an md5 hash. If you believe you have found a way to decrypt md5 I would be severely surprised. Numerrous experts have looked at the algorithm and labeled it as one way.

So here you go: 74320e1ebed147cca6cd245980a0551a
Reply With Quote
Reply


Posting Rules
You may not post new threads
You may not post replies
You may not post attachments
You may not edit your posts

BB code is On
Smilies are On
[IMG] code is On
HTML code is Off

Forum Jump


All times are GMT. The time now is 09:09 PM.


Powered by vBulletin® Version 3.8.12 by vBS
Copyright ©2000 - 2025, vBulletin Solutions Inc.
X vBulletin 3.8.12 by vBS Debug Information
  • Page Generation 0.04520 seconds
  • Memory Usage 2,253KB
  • Queries Executed 13 (?)
More Information
Template Usage:
  • (1)SHOWTHREAD
  • (1)ad_footer_end
  • (1)ad_footer_start
  • (1)ad_header_end
  • (1)ad_header_logo
  • (1)ad_navbar_below
  • (1)ad_showthread_beforeqr
  • (1)ad_showthread_firstpost
  • (1)ad_showthread_firstpost_sig
  • (1)ad_showthread_firstpost_start
  • (1)bbcode_quote
  • (1)footer
  • (1)forumjump
  • (1)forumrules
  • (1)gobutton
  • (1)header
  • (1)headinclude
  • (1)navbar
  • (3)navbar_link
  • (120)option
  • (1)pagenav
  • (1)pagenav_curpage
  • (1)pagenav_pagelink
  • (10)post_thanks_box
  • (10)post_thanks_button
  • (1)post_thanks_javascript
  • (1)post_thanks_navbar_search
  • (10)post_thanks_postbit_info
  • (10)postbit
  • (10)postbit_onlinestatus
  • (10)postbit_wrapper
  • (1)spacer_close
  • (1)spacer_open
  • (1)tagbit_wrapper 

Phrase Groups Available:
  • global
  • inlinemod
  • postbit
  • posting
  • reputationlevel
  • showthread
Included Files:
  • ./showthread.php
  • ./global.php
  • ./includes/init.php
  • ./includes/class_core.php
  • ./includes/config.php
  • ./includes/functions.php
  • ./includes/class_hook.php
  • ./includes/modsystem_functions.php
  • ./includes/functions_bigthree.php
  • ./includes/class_postbit.php
  • ./includes/class_bbcode.php
  • ./includes/functions_reputation.php
  • ./includes/functions_post_thanks.php 

Hooks Called:
  • init_startup
  • init_startup_session_setup_start
  • init_startup_session_setup_complete
  • cache_permissions
  • fetch_postinfo_query
  • fetch_postinfo
  • fetch_threadinfo_query
  • fetch_threadinfo
  • fetch_foruminfo
  • style_fetch
  • cache_templates
  • global_start
  • parse_templates
  • global_setup_complete
  • showthread_start
  • showthread_getinfo
  • forumjump
  • showthread_post_start
  • showthread_query_postids
  • showthread_query
  • bbcode_fetch_tags
  • bbcode_create
  • showthread_postbit_create
  • postbit_factory
  • postbit_display_start
  • post_thanks_function_post_thanks_off_start
  • post_thanks_function_post_thanks_off_end
  • post_thanks_function_fetch_thanks_start
  • post_thanks_function_fetch_thanks_end
  • post_thanks_function_thanked_already_start
  • post_thanks_function_thanked_already_end
  • fetch_musername
  • postbit_imicons
  • bbcode_parse_start
  • bbcode_parse_complete_precache
  • bbcode_parse_complete
  • postbit_display_complete
  • post_thanks_function_can_thank_this_post_start
  • pagenav_page
  • pagenav_complete
  • tag_fetchbit_complete
  • forumrules
  • navbits
  • navbits_complete
  • showthread_complete