This forum is in archive mode. You will not be able to post new content.

Show Posts

This section allows you to view all posts made by this member. Note that you can only see posts made in areas you currently have access to.


Messages - sensor

Pages: [1]
2
Found it on the Webs / Re: Tools4noobs
« on: May 25, 2013, 05:35:44 PM »
It would be great if there was some sort of JSON API :)

3
Hacking and Security / Re: Wordpress passwords encryption ?
« on: July 15, 2011, 03:36:55 PM »
The reason for the slow cracking of these passwords is so called: key stretching incorporated in PHPASS.
Here is more info on key strengthening:
http://en.wikipedia.org/wiki/Key_strengthening,
http://www.schneier.com/paper-low-entropy.html


Basically the time to generate the hash is increased by hashing the password multiple times - making Bruteforce ineffective method or slowing it down enough.

4
Hacking and Security / Re: Wordpress passwords encryption ?
« on: July 15, 2011, 03:17:20 PM »
Thanks a lot!


I already started up Passwords Pro, but noticed big performance drop, cracking MD5(Wordpress), rather md5() from PasswordsPro.
 
The best was 600 p/s, on 2 cores probably 1000 p/s.


Found Extreme GPU Bruteforcer again from InsidePro using CUDA GPU.
The results from CUDA performance from their site:
MD5                 - 420 million p/s
MD5(Wordpress) - 0.05 p/s


Which is 8400x slower.
Thanks again, I'll further investigate & if I have valuable info i'll keep you posted ;) 

5
Hacking and Security / Wordpress passwords encryption ?
« on: July 15, 2011, 02:15:10 PM »
Does anyone here know what type of encryption Wordpress uses ?
It used to be plain MD5.

Here is one sample password: $P$BsaP.8zr.ZeT2ktfTfJkgOAhNm3RJB/
All of them starts with: $P$B
Does it use some sort of salt ? Is it possible to crack it, etc.
Can you give me a hint ?

Thanks in advance,
Alex

Pages: [1]


Want to be here? Contact Ande, Factionwars or Kulverstukas on the forum or at IRC.