0

I have a password that has been stored and I'd like to figure out how it's been 'transformed' to be stored in my database.

The plaintext password is:

k4oK203$

And the password as it is stored 'crypted' in my database is:

6xqmRr0QNUrc0uvwGchWqA==

How would I go about figuring out what transformation (base64? sha1? md5? etc.) that were used in order to get the plain text password in to the database value?

Improve this question
4
  • 1
    The crypted string does not occur in the output of md5, sha1, sha2, sha3 functions. Does your database contain a salt for your password?
    – Egor Skriptunoff
    Commented Apr 29, 2021 at 14:36
  • 2
    It might also be not hashing, but encrypting (zero-padding and applying a symmetric cypher with some unknown key).
    – Egor Skriptunoff
    Commented Apr 29, 2021 at 14:42
  • Hi and welcome to RE.SE. My first hunch for such a case would be to visit the CyberChef (or install it locally) and see if I can make sense of the data with it.
    – 0xC0000022L ♦
    Commented Apr 30, 2021 at 9:23
  • @0xC0000022L that is really cool, thank you! Is there a way to specify a known output in that tool? It seems you can only enter in the input and it can guess/brute-force the output. How might you go about doing the above on there?
    – carl.hiass
    Commented Apr 30, 2021 at 17:12

0

Reset to default

Your Answer

By clicking “Post Your Answer”, you agree to our terms of service and acknowledge you have read our privacy policy.

Browse other questions tagged or ask your own question.