NameSilo

Md5 encrypted passwords

Namecheap AuctionsNamecheap Auctions
Namecheap AuctionsNamecheap Auctions
SpaceshipSpaceship
Watch

klavixs

Account Closed
Impact
6
Warning to novices in php this is a pretty advanced script and should be used by a person who is very knowledge in php if you insist on useing it on a novice stage it's at your own risk.

This scrypt checks a user inputed password and then encrypts it and checks the db's version of the md5 enc to see it is correct
PHP:
//str is the inputed password the user gave
Function Encpass($str)

{

//this now encrypts the inputed password
md5($str);

//this checks the encrypted version of the inputed password
//to the databases stored version to see if it's correct
//change usrpass to whatever variable you use for the retrieved pass from db your checking
if (md5($str) == $usrpass)
 
 {
  //in your script check, if Cvalue equals 2 and it's a correct pass
  $Cvalue = "2";
 
  }
 
  else
  {
  //but if its a 1 it's incorrect password
  $Cvalue = "1";
  }

}
//you should next check Cvalue to make sure it equals 2
//if you use this and like it a link to my website is appreciated but not required
// my website is http://onfiretechnologies.com and it's an arcade of flash games 
// and has lots of cheat codes so use what ever relateing text you wish

this next part is for user registration

PHP:
//this part is for user registration to encrypt password in md5
//stpass is the inputed password to encrypt
Function CMd5Pass($stpass)
{
//npass is the new encrypted version of the orignal inputed pass
$Npass = md5($stpass)
}

//now to enter it in db. save the Npass variable to the db for password
//if you use this and like it a link to my website is appreciated but not required
// my website is http://onfiretechnologies.com and it's an arcade of flash games 
// and has lots of cheat codes so use what ever relateing text you wish
 
0
•••
The views expressed on this page by users and staff are their own, not those of NamePros.
GoDaddyGoDaddy
tm said:
//edit oh and lee101 the string you provided isn't even an md5.
Oops, was meant to be the checksum of ubuntu server, obviously not then, take 2:
5ad76d8b380ab5be713e5daa9ea84475
 
0
•••
rmwebs said:
Firstly, theres no way in a million years i would share how to do it...if more people know how to do it, more people loose passwords to script kiddies.

Secondly, I am not going to do this...why?

Well firstly I don't like being spoken to like something that came out of your rear end.
Secondly it would take around 2 days as the script is VERY slow (as nick_mayhem has already stated).
And finally, i don't need to prove myself to some ignorant person who wont accept reality...remember when MD4 was cracked...
Boy, why do you have to make such a fool out of yourself? You have been multiple times told that it is not possible to "decrypt" MD5, you can only use brute force methods - which is apparently what you "would like" to use, but thats no cracking.

You were even offered money to crack such an - according to you - easy hash and failed nonetheless to come up with the "decrypted" data. You werent even asked to show a how-to but only the decrypted data in reasonable time.

Furthermore you try now to be cool cracker guy from the streets who doesnt need to share his magic - actually this seems very much like the script kiddies you were referring to - and becomes offensive when he is shown that his statements are obviously wrong.

For the last time, MD5 has its weaknesses (especially about collisions) but nonetheless cannot be "decrypted". All you can do is using brute force methods, and these can be used on any hash and encryption method.
 
0
•••
tm said:
You can't decrypt md5.. only brute force it.

Make it safer by md5'ing it twice, or maybe adding another encryption method like salt/sha1.

//edit oh and lee101 the string you provided isn't even an md5.
Applying md5 on a md5 hash is not safer, it may actually increase the likelyhood of a collision.
The best defense is enforcing strong passwords that will resist brute force attack or at least make them time-consuming/computationally intensive (more than 8 chars and using special characters).
For example if you have a password like 4321 the corresponding md5 hash can be brute-forced in one second... on the other hand if the password is something like n4f5#p-u!ja_8 then it's going to take much longer ;)

Many people use numbers only (like DOB) and short words, these passwords are very quick to find. It also means that if your phpbb/vbb db is compromised a hacker can get the weak passwords in very little time.

Also it is better to use sha1 instead of md5 if possible.
 
0
•••
neroux said:
Boy, why do you have to make such a fool out of yourself? You have been multiple times told that it is not possible to "decrypt" MD5, you can only use brute force methods - which is apparently what you "would like" to use, but thats no cracking.

You were even offered money to crack such an - according to you - easy hash and failed nonetheless to come up with the "decrypted" data. You werent even asked to show a how-to but only the decrypted data in reasonable time.

Furthermore you try now to be cool cracker guy from the streets who doesnt need to share his magic - actually this seems very much like the script kiddies you were referring to - and becomes offensive when he is shown that his statements are obviously wrong.

For the last time, MD5 has its weaknesses (especially about collisions) but nonetheless cannot be "decrypted". All you can do is using brute force methods, and these can be used on any hash and encryption method.

Me making a fool out of myself? Thats rich.

I'm not trying "to be cool cracker guy from the streets", the fact is it can be cracked and I'm not willing to share how...if you had half a brain cell you would Google it. I'm not being offensive by refusing to do as you asked...I'm just not willing to go to such a level.

I really couldn't give a monkeys back side if you believe me or not, thats not my problem.
 
0
•••
rmwebs, you are making a fool of yourself. MD5 cannot be cracked at it is not encryption! It is a hash, and there is no such thing as "unhashing". The only thing you can do is brute force it.
 
0
•••
rmwebs said:
Me making a fool out of myself? Thats rich.

I'm not trying "to be cool cracker guy from the streets", the fact is it can be cracked and I'm not willing to share how...if you had half a brain cell you would Google it. I'm not being offensive by refusing to do as you asked...I'm just not willing to go to such a level.

I really couldn't give a monkeys back side if you believe me or not, thats not my problem.
Continuing making statements which dont stand a second doesnt make them truer.

As I said you have been numerously times told by several people that it is impossible to reverse an MD5 hash. What you are probably talking about all the time is brute force, but this is no cracking and can be applied on any encryption and hashing method (how many times do I have to repeat this?).

And yes you are actually making a fool out of yourself by continuing to make such ridiculous statements without delivering any proof for it - your rude and offensive behaviour is just backing up that.
 
0
•••
To be fair, there are applications out there that claim to be MD5 crackers and in theory, from the user's point of view at least, it is quite fast. The only reason for this, though, is that essentially all of the hard work is done already (see Project RainbowCrack).

The hashes are already stored in a huge table: when the user wants to crack an MD5, they do a look up.

rmwebs: two final questions from me, then.
1) Does your 'MD5 cracking' work still when the original hashing was salted?
2) How do you know that the result is not something that just has the same hash as what you were looking for originally?
 
0
•••
What would happen if I didn't hash passwords in my database?
 
Last edited:
0
•••
sote said:
What would happen if I didn't hash passwords in my database?

If someone guessed your database password, they would be able to see all passwords.
 
0
•••
Why someone is not just giving me a 10 character MD5.

With a-z 0-9 in it. So that I can see if my code is working or not. :D
 
0
•••
nick_mayhem said:
Why someone is not just giving me a 10 character MD5.

With a-z 0-9 in it. So that I can see if my code is working or not. :D
Well, I gave you an MD5 hash matching your requirements.
 
0
•••
okay got it. That. "8a9e4a2e5c862322789d22f9d4ced72c" one. right.

It is MD5? right. :D
 
0
•••
Folks - Can't you discuss things without attacking each other ??

This started out as a portion of code offered by a fellow member ... and turned into "You're a script kiddie - NO , You're a script kiddie NO - You're more of a script kiddie"

I think several of you need to grow up personally ....
 
0
•••
Appraise.net

We're social

Escrow.com
Spaceship
Rexus Domain
CryptoExchange.com
Domain Recover
DomDB
NameFit
  • The sidebar remains visible by scrolling at a speed relative to the page’s height.
Back