Login LOGIN WITH FACEBOOK Register LOGIN TO REMOVE THE ADS


Scroll me back to the top !



Tutorial Cryptography : Identify Hash types
Author Message
Psycho_Coder Offline
programmer
Posts: 1,649

Reputation: 104
Thanks received: 451
Thanks given: 639
HackCommunity Coins: 1,703
Post: #1
Eye Cryptography : Identify Hash types
Cryptography : Identify Different types of Hashes

Hello Guest,

First of all I am very sorry my sweet dear HC that I posted a tutorial after a very long period, I was preoccupied with many things in my real life, I am still very busy with my project but I have time to make some tutorials on Cryptography.

If you are a hacker or a computer geek or programmer or a general enthusiast regarding computing then you might have come across the term hash or cryptographic hash functions. Many a times even people call hashes as encryption :lol: which is absolutely wrong. This is going to be a short tutorial and we will be dealing with how to identify the various types of hashes that we come across. I hope after reading this tutorial you will have some idea that how to identify hashes.

Recently, I have seen a lot of posts on HC regarding the types of hashes and how to identify and what are the characteristics of a particular hash. I wish that this tutorial will be beneficial to many users on HC who have trouble in identifying hashes.

Reader's Note:-

I assume the following while making this tutorial:-

1. You know basics of cryptography. If you don't then read :- http://www.hackcommunity.com/Thread-Tuto...ic-Attacks

2. You have some experience with programming (though not required much in this tutorial bit its good to know as they will help you understand better).

3. You know basics of PHP [optional].

4. You have some idea about the terminologies of cryptography. If you don't then read this :- http://www.hackcommunity.com/Thread-Tuto...tant-Terms


Let's Begin


Identifying MD5

MD5 hash : It is one of the most common type of hash function and it is used in many sites and is applied in different fields. Used in phpBB v2.x, Joomla version below 1.0.13 and many other forums and CMS.

Reasons for a hash to be MD5

Length: 32 characters.
Description: They are always 32 characters in length (16 Bytes).They are always hexadecimal (Only use characters 0-9 and A-F)
Algorithm: Same as the md5() function in PHP.

Quote:Example :- f5d1278e8109edd94e1e4197e04873b9

MD5 (UNIX) : Used in Linux and other similar OS.

Length: 34 characters.
Description: The hash begins with the $1$ signature, then there goes the salt (up to 8 random characters; in our example the salt is the string "12345678"), then there goes one more $ character, followed by the actual hash.
Algorithm: Actually that is a loop calling the MD5 algorithm 2000 times.

Quote:Example: $1$12345678$XM4P3PrKBgKNnTaqG9P0T/


MD5 (APR) : Used in Linux and other similar OS.

Length: 37 characters.
Description: The hash begins with the $apr1$ signature, then there goes the salt (up to 8 random characters; in our example the salt is the string "12345678"), then there goes one more $ character, followed by the actual hash.
Algorithm: Actually that is a loop calling the MD5 algorithm 2000 times.

Quote:Example: $apr1$12345678$auQSX8Mvzt.tdBi4y6Xgj.


MD5 (phpBB3) : Used in phpBB 3.x.x.

Length: 34 characters.
Description: The hash begins with the $H$ signature, then there goes one character (most often the number '9'), then there goes the salt (8 random characters; in our example the salt is the string "12345678"), followed by the actual hash.
Algorithm: Actually that is a loop calling the MD5 algorithm 2048 times.

Quote:Example: $H$9123456785DAERgALpsri.D9z3ht120


MD5(Wordpress) : Used in Wordpress sites.

Length: 34 characters.
Description: The hash begins with the $P$ signature, then there goes one character (most often the number 'B'), then there goes the salt (8 random characters; in our example the salt is the string "12345678"), followed by the actual hash.
Algorithm: Actually that is a loop calling the MD5 algorithm 8192 times.

Quote:Example: $P$B123456780BhGFYSlUqGyE6ErKErL01


Identifying Salted MD5

Salted MD5 - Used in a large amount of applications to increase hash parity and to increase the time it takes to crack.

General Description : They consist of two blocks connected by a colon, the first is the hash the second is the salt. The first part of the salted hash is hexadecimal, the second is variable case alphanumeric. They first part will always be 32 characters long. The second part can be any length.

md5($pass.$salt) :Used in WB News, Joomla version 1.0.13 and higher.
Length: 16 bytes.

Quote:Example: 6f04f0d75f6870858bae14ac0b6d9f73:1234

md5($salt.$pass) : Used in osCommerce, AEF, Gallery and other CMS.
Length: 16 bytes.

Quote:Example: f190ce9ac8445d249747cab7be43f7d5:12

md5(md5($pass)) : Used in e107, DLE , AVE, Diferior, Koobi and other CMS.
Length: 16 bytes.

Quote:Example: 28c8edde3d61a0411511d3b1866f0636

md5(md5($pass).$salt) :Used in vBulletin, IceBB.
Length: 16 bytes.

Quote:Example: 6011527690eddca23580955c216b1fd2:wQ6

md5(md5($salt).md5($pass)) : Used in IPB.
Length: 16 bytes.

Quote:Example: 81f87275dd805aa018df8befe09fe9f8:wH6_S

md5(md5($salt).$pass) : Used in MyBB.
Length: 16 bytes.

Quote:Example: 816a14db44578f516cbaef25bd8d8296:1234

md5($salt.$pass.$salt) : Used in TBDev.
Length: 16 bytes.

Quote:Example: a3bc9e11fddf4fef4deea11e33668eab:1234

md5($salt.md5($salt.$pass)) : Used in DLP (More info. :- Here).
Length: 16 bytes.

Quote:Example: 1d715e52285e5a6b546e442792652c8a:1234


Identifying SHA

SHA-1 : Used frequently on the internet and is one of a large family of Secure Hash Algorithms.Used in many forums and CMS.
Length: 20 bytes.
Description :They are always 40 Characters in length (160 bits).They are always hexadecimal (Only use characters 0-9 and A-F).
Algorithm: Same as the sha1() function in PHP.

Quote:Example: 356a192b7913b04c54574d18c28d46e6395428ab

sha1(strtolower($username).$pass) : Used in SMF.
Length: 20 bytes.

Quote:Example: Admin:6c7ca345f63f835cb353ff15bd6c5e052ec08e7a

SHA-256(Unix) : Used in Linux and other similar OS.
Length: 55 characters.
Description: The hash begins with the $5$ signature, then there goes the salt (up to 8 random characters; in our example the salt is the string "12345678"), then there goes one more $ character, followed by the actual hash.
Algorithm: Actually that is a loop calling the SHA-256 algorithm 5000 times.

Quote:Example: $5$12345678$jBWLgeYZbSvREnuBr5s3gp13vqiKSNK1rkTk9zYE1v0


SHA-512(Unix) :Used in Linux and other similar OS.
Length: 98 characters.
Description: The hash begins with the $6$ signature, then there goes the salt (up to 8 random characters; in our example the salt is the string "12345678"), then there goes one more $ character, followed by the actual hash.
Algorithm: Actually that is a loop calling the SHA-512 algorithm 5000 times.

Quote:Example: $6$12345678$U6Yv5E1lWn6mEESzKen42o6rbEmFNLlq6Ik9X3reMXY3doKEuxrcDohKUx0Oxf44aeTI​xGEjssvtT1aKyZHjs


Identifying Salted SHA

sha1($salt.sha1($salt.sha1($pass))) : Used in Woltlab BB.
Length: 20 bytes.

Quote:Example: cd37bfbf68d198d11d39a67158c0c9cddf34573b:1234


Identifying Other hash types

MySQL < 4.1 : These aren't used very often but still come up on very often because people have no idea what to do with them, they are used in older versions of MySQL.

Length : 16 characters(8 bytes)
Description :They are always hexadecimal (Only use characters 0-9 and A-F).

Quote:Example - 606727496645bcba

MYSQL5 : Used in newer versions of MYSQL to store database user passwords.
Length: 41 characters
Description :They are always capitalized. They always begin with an asterisk .

Quote:Example - *C8EB599B8E8EE7BE9F1A5691B7BC9ECCB8DE1C75

DES(Unix) : Used in Linux and other similar OS.
Length: 13 characters.
Description: The first two characters are the salt (random characters; in our example the salt is the string "Iv"), then there follows the actual hash.

Quote:Example: IvS7aeT4NzQPM

Domain Cached Credentials :Used for caching passwords of Windows domain.
Length: 16 bytes.
Algorithm: MD4(MD4(Unicode($pass)).Unicode(strtolower($username)))

Quote:Example: Admin:b474d48cdfc4974d86ef4d24904cdd91

End of Tutorial.


Conclusion
I hope this information is useful to you and I belief that this post will help many others. Keep loving HC. Stay tuned for my next tutorial :smoke:

References : Here

The HashIdentifier v1.0 Tool has been released. Visit the link below.

http://www.hackcommunity.com/Thread-Reso...ifier-v1-0


Thank you,
Sincerely,
Psycho_Coder
[Image: QxRmM6f.gif]
(This post was last modified: 02-18-2014 06:18 AM by Psycho_Coder.)
06-06-2013 08:21 PM
SEARCH QUOTE
The following 7 user(s) thanked this post:
Deque , soh_cah_toa , The Alchemist , hackarchives , Geoff , Ex094 , Legolas
Deque Offline
programmer
Posts: 2,239

Reputation: 166
Thanks received: 940
Thanks given: 649
HackCommunity Coins: 1,190
Post: #2
RE: Cryptography : Identify Hash types
Great collection. Now someone could write up a hash identifier based on that information.
[Image: 2YpkRjy.png]
06-06-2013 08:51 PM
SEARCH QUOTE
Psycho_Coder Offline
programmer
Posts: 1,649

Reputation: 104
Thanks received: 451
Thanks given: 639
HackCommunity Coins: 1,703
Post: #3
RE: Cryptography : Identify Hash types
(06-06-2013 08:51 PM)Deque Wrote:  Great collection. Now someone could write up a hash identifier based on that information.

I am working on it. This paper was saved in my drafts from last two days and I was waiting for my hash identifier to get completed. But I thought I would just post it now.
[Image: QxRmM6f.gif]
06-07-2013 04:03 AM
SEARCH QUOTE
soh_cah_toa Offline
Member
Posts: 28

Reputation: 0
Thanks received: 6
Thanks given: 9
HackCommunity Coins: 32
Post: #4
RE: Cryptography : Identify Hash types
Wow. This is some genuinely good material. I had never considered identifying different hashes by eye before but now that I think about it, it would be a good trait to have.

(06-06-2013 08:51 PM)Deque Wrote:  Great collection. Now someone could write up a hash identifier based on that information.

I got my hopes up for a second thinking that it was a great idea for a pet project until I found that its already been done (https://code.google.com/p/hash-identifier). Frown
(This post was last modified: 06-07-2013 04:05 AM by soh_cah_toa.)
06-07-2013 04:04 AM
SEARCH QUOTE
Deque Offline
programmer
Posts: 2,239

Reputation: 166
Thanks received: 940
Thanks given: 649
HackCommunity Coins: 1,190
Post: #5
RE: Cryptography : Identify Hash types
(06-07-2013 04:04 AM)soh_cah_toa Wrote:  I got my hopes up for a second thinking that it was a great idea for a pet project until I found that its already been done (https://code.google.com/p/hash-identifier). Frown

The code is bad, it is mixing data and logic, which makes it unnecessarily long and repetitive.
I think someone should write a better one than "Hash ID".

Btw: Welcome to HC.
[Image: 2YpkRjy.png]
(This post was last modified: 06-07-2013 06:07 AM by Deque.)
06-07-2013 06:06 AM
SEARCH QUOTE
The Alchemist Offline
Cult Of Personality
Posts: 989

Reputation: 119
Thanks received: 209
Thanks given: 307
HackCommunity Coins: 825
Post: #6
RE: Cryptography : Identify Hash types
(06-06-2013 08:51 PM)Deque Wrote:  Great collection. Now someone could write up a hash identifier based on that information.
Had been planning to make this from quite sometime... Waiting for some free time...
[Image: 2YpkRjy.png]
PM me if you need help.
My pastebin HERE. My URL Shortener HERE.
06-07-2013 07:14 AM
WEBSITE SEARCH QUOTE
Ex094 Online
F3aR M3
Posts: 1,851

Reputation: 85
Thanks received: 578
Thanks given: 523
HackCommunity Coins: 330
Post: #7
RE: Cryptography : Identify Hash types
Good job, I'll try to make a Hash Identifier too Smile
My Site is:http://www.procurity.wordpress.com
Earn Free BitCoins Every Hour upto .2BTC
Bitcoin Bank: 1HLjiSbnWMpeQU46eUVCrYdbkrtduX7snG\
06-08-2013 06:26 AM
WEBSITE SEARCH QUOTE
Psycho_Coder Offline
programmer
Posts: 1,649

Reputation: 104
Thanks received: 451
Thanks given: 639
HackCommunity Coins: 1,703
Post: #8
RE: Cryptography : Identify Hash types
Hash Identifier is ready to go. Followed the suggestion given by @Deque
[Image: QxRmM6f.gif]
02-17-2014 07:48 PM
SEARCH QUOTE
Psycho_Coder Offline
programmer
Posts: 1,649

Reputation: 104
Thanks received: 451
Thanks given: 639
HackCommunity Coins: 1,703
Post: #9
RE: Cryptography : Identify Hash types
Thread edited. More Updates on the way.
[Image: QxRmM6f.gif]
02-18-2014 06:19 AM
SEARCH QUOTE
Dionaea Offline
Member
Posts: 14

Reputation: 0
Thanks received: 0
Thanks given: 6
HackCommunity Coins: 16
Post: #10
RE: Cryptography : Identify Hash types
Informative read, thank you.
02-20-2014 12:31 AM
SEARCH QUOTE
Psycho_Coder Offline
programmer
Posts: 1,649

Reputation: 104
Thanks received: 451
Thanks given: 639
HackCommunity Coins: 1,703
Post: #11
RE: Cryptography : Identify Hash types
Hash Algorithm Identifier v2.0 Released. Read here :- http://www.hackcommunity.com/Thread-Reso...ifier-v1-0
[Image: QxRmM6f.gif]
02-20-2014 09:22 AM
SEARCH QUOTE
The following 1 user(s) thanked this post:
Deque
Amity Offline
Member
Posts: 27

Reputation: 0
Thanks received: 0
Thanks given: 1
HackCommunity Coins: 31
Post: #12
RE: Cryptography : Identify Hash types
Great and very helpful read, thanks for posting this! Smile
03-11-2014 02:00 PM
SEARCH QUOTE




Possibly Related Threads...
Thread: Author Replies: Views: Last Post
Could you crack a SHA-1 hash for me using rainbow tables? Jamie Gaffney 2 42 Yesterday 12:19 AM
Last Post: Maxx
TUTORIAL Cryptography : Terminology , Security Goals and Cryptographic Attacks Psycho_Coder 28 1,658 03-12-2014 12:05 PM
Last Post: Psycho_Coder
Test your hash cracking skills 1llusion 4 410 01-27-2014 05:33 AM
Last Post: hacked13
TUTORIAL Cryptography Basics and Algorithmic Attacks Keeper 6 550 12-22-2013 02:35 PM
Last Post: Ammly
Hash Types & its Descriptions Mr.Phoenix 7 555 12-10-2013 05:35 PM
Last Post: C0d3_5NiP3R
QUESTION Hash hubba 9 513 11-01-2013 04:52 PM
Last Post: DarkZone
QUESTION [BT5] Finding hash strings Wolfgang Milliken 0 194 10-26-2013 06:43 AM
Last Post: Wolfgang Milliken
Help for cracking hash arslen 6 355 09-23-2013 04:31 PM
Last Post: Geoff
TUTORIAL Cryptography : Glossary Of Important Terms Psycho_Coder 14 787 07-15-2013 06:31 PM
Last Post: Psycho_Coder
kind of hash??? toanqri 14 492 06-12-2013 09:07 PM
Last Post: noize