PaulDotCom mailing list archives

question about password hash


From: security4at at gmail.com (Security)
Date: Wed, 22 Jul 2009 22:02:16 +0200

Thx for any commands
I found it in a configfile from saperion. Saperion is an archivsystem 
( client server app.)




Mit freundlichen Gr??en / with regards

Michael Meixner
ERS / Security & Privacy
Deloitte Audit Wirtschaftspr?fungs Ges.m.b.H.

Send from my mobile device

On 21.07.2009, at 14:08, christopher.riley at r-it.at wrote:

To be honest that could be a password for anything. It's not  
structured in
such a way that a normal hashed password would be.

For example it's 15 chars long, which isn't a normal length for a  
hashing
algorithm (i.e MD5 is 32bits, sha-1 is 160bits). It also uses  
characters
other than hexadecimal. At first glance I thought it could be a  
LTPAToken,
but although it has a slash in the password, the length is far too  
short.

Does the config file give anymore information like program names, port
numbers, or anything that could give a hint on what the service/ 
program is
?

http://en.wikipedia.org/wiki/Cryptographic_hash_function --> list of
output bit sizes

-- Chris --

pauldotcom-bounces at mail.pauldotcom.com@inet wrote on 21.07.2009  
11:36:49:

Hi all,

As a now business unit for us, I would like to check customer  
Notebooks
and I
would like to demonstrate who many Data are around and how many
passwords are
still on the machines.

Now I found in a config file a password like $SWRDspDrR\DZfw (I  
changed
two
char.) and now I would like to know which password type it is.

I searched in the Internet for same different password hash types  
and a
handful online sites as
http://www.insidepro.com/hashes.php?lang=eng
http://www.hashgenerator.de/

Question: Is there any way to find out which password hash type it  
is.

Regards
Michael


_______________________________________________
Pauldotcom mailing list
Pauldotcom at mail.pauldotcom.com
http://mail.pauldotcom.com/cgi-bin/mailman/listinfo/pauldotcom
Main Web Site: http://pauldotcom.com

----------------------------------------
Raiffeisen Informatik GmbH, Firmenbuchnr. 88239p, Handelsgericht  
Wien, DVR 0486809, UID ATU 16351908

Der Austausch von Nachrichten mit oben angefuehrtem Absender via E- 
Mail dient ausschliesslich Informationszwecken. Rechtsgeschaeftliche  
Erklaerungen duerfen ueber dieses Medium nicht ausgetauscht werden.
Correspondence with above mentioned sender via e-mail is only for  
information purposes. This medium may not be used for exchange of  
legally-binding communications.
----------------------------------------



Current thread: