Quantcast
Channel: hashcat Forum - All Forums
Viewing all articles
Browse latest Browse all 8233

X-Cart Unknown Hashes

$
0
0
Hi, 

I have some hashes from X-Cart

They are blowfish with a salt which looks like this:
B-eedef5b7677a955879c7dbc820f4f577c40b5330f4af2e014c23a6b1d7cfd643e193912e92f9a54f
B-36bde1197ab9b3dd54d92779f9b622c20a715695b81f33c17b62705320e802261629e355cf47bab4
B-1a25ebfe1ed43580cc5a1063cbd56900766ba8f922c8746d05ed785e46e8309d0c2d14d3683cf38e
B-0ec7630004709c36ca196581bbe034087b86ce5bd0099fbedda87303858a040cf55d3e3ab524b2b3
B-ad298a3ba8abbe87ea9df1ef0eaf3d4e3dbe7d96a460948706f4e5e1f1bd4657f020a338d92862e9
B-a2719fc1c1fe799d56d42131ce61245791fb776cc45c3bd53a70e9101e64610b6d05f76bc7d05987
B-966928e6d9a08e36656055d2cb0b4a3a300d0458c9082082058e97719e43769fa8151bd3380d6551

I have done some digging and the B- just tells X-Cart it is using blowfish encryption. There is also a static key (for the hashes above it is 01555afb1cfaf0a9b9917d6d139e6d50).

I have attached the files which handle the encrypting of the plaintext password for checking (see func.user.php function func_is_password_correct).

If anyone could point me in the right direction on how to decrypt these hashes or get them into some sort of format that I can use to decrypt them, that would be amazing.

Thanks

.php   blowfish.php (Size: 34.78 KB / Downloads: 0)

.php   func.crypt.php (Size: 5.98 KB / Downloads: 0)

.php   func.user.php (Size: 90.65 KB / Downloads: 0)

Viewing all articles
Browse latest Browse all 8233

Trending Articles



<script src="https://jsc.adskeeper.com/r/s/rssing.com.1596347.js" async> </script>