Penetration Testing mailing list archives

Re: Does anybody know about encrypting algorithm of Everest Icode?


From: christopher.riley () r-it at
Date: Thu, 22 Jan 2009 08:59:53 +0100

Can you expand a little on your thinking here. It's easy to say what it 
is/isn't but the reasoning behind that conclusion is what's really helpful 
to people.

Chris John Riley

listbounce () securityfocus com@inet wrote on 21.01.2009 19:30:58:

No. It's not a hash.

On Wed, Jan 21, 2009 at 02:08:00PM +0530, Shreyas Zare wrote:
Hi,

It looks like a md5 hash of some related parameters.

Regards,

On Mon, Jan 19, 2009 at 4:29 PM, Волк <v0l4arrr () gmail com> wrote:
I'm pentesting some servers for my clients. There is encrypted field 
in
msssql database.
REF_NO -> 1E682975FA1988662A742C830720946F

In asp script the line is vData =

objShoppingCartUpd.CreateOrderFromCart(sConnectionString,sCartId,vChoice,
sCCresult,rsOrder,iResult)
where rsOrder("REF_NO") is a normal string.
Does anybody know about encrypting algorithm of Everest Icode system? 
Or
where can i get it?


-----BEGIN PGP SIGNATURE-----
Version: GnuPG v1.4.6 (GNU/Linux)

iD8DBQFJdFz18yGpcDYh0swRAnySAJ9FCWigoQ0+QfIdQMRxoVVmuXn5dACggWHc
mMAflrD0qqqjr1Xbr6tZol4=
=WJXq
-----END PGP SIGNATURE-----





-- 
("Computers have a strange habit of doing what you say, not what you
mean." - SANS Top 25 Most Dangerous Programming Errors)

Shreyas Zare
Co-Founder, Technitium
eMail: shreyas () technitium com

..::< The Technitium Team >::..
Visit us at www.technitium.com
Contact us at theteam () technitium com

Join Sci-Tech News group and get the latest science & technology news
in your inbox. Visit http://tech.groups.yahoo.com/group/sci-tech-news
to join.
[attachment "signature.asc" deleted by Christopher RILEY/R-IT/RAIVIE/AT] 


----------------------------------------
Raiffeisen Informatik GmbH, Firmenbuchnr. 88239p, Handelsgericht Wien, DVR 0486809, UID ATU 16351908

Der Austausch von Nachrichten mit oben angefuehrtem Absender via E-Mail dient ausschliesslich Informationszwecken. 
Rechtsgeschaeftliche Erklaerungen duerfen ueber dieses Medium nicht ausgetauscht werden. 
Correspondence with above mentioned sender via e-mail is only for information purposes. This medium may not be used for 
exchange of legally-binding communications.
----------------------------------------


Current thread: