Hello,
I am trying to crack an old-office hash following the steps given at https://hashcat.net/forum/thread-3665-post-20935.html#pid20935 :
Thanks to mode 9710 I found : 'deebd8f416' as output.
Then I'm lost :
Could you please provide deeper explanation ?
I am trying to crack an old-office hash following the steps given at https://hashcat.net/forum/thread-3665-post-20935.html#pid20935 :
Thanks to mode 9710 I found : 'deebd8f416' as output.
Quote:Append 4 byte zeros to result-> deebd8f41600000000
Quote:MD5 the 9 bytesmd5("deebd8f41600000000") = CF205B696DC9CB05FB008C2B90BFD2AC
Then I'm lost :
Quote:Use 16 byte result as 128 bit RC4 Key
Decrypt encryptedVerifier with RC4 to decryptedVerifier
Decrypt encryptedVerifierHash with RC4 to decryptedVerifierHash
MD5 the decrypted encryptedVerifier
Compare 16 byte result with decrypted encryptedVerifierHash
Could you please provide deeper explanation ?