1) The format you save or JTR needs the data in likely depends on the type of DB (MS, My, Oracle, etc)
2) It can never hurt to RTFM: http://www.openwall.com/john/doc/
3) You may also want to checkout: http://sqlhack.com/
sqlmap & john the ripper
Hi boyz, i tried to solve the De-ICE 1.120-1.0a from HackingDojo but now i hold on crack password. I would to crack the hashes password found with sqlmap. Commands are:
sqlmap -u "url...id=1" --users
sqlmap -u "url...id=1" --passwords
I save the usersassword in this format:
but john don't find password hashes... Where i wrong?Code:aadams:C5FEAC8A32D4FAFF1EF681447DA706634352AFF8 aallen:FCAAF3F0BD94C027B2769A95903C355CE6294660 aard:00A51F3F48415C7D4E8908980D443C29C69B60C9 aharp:446525BB82B5E22BD9E525261D37C494F623C52B aheflin:E56A114692FE0DE073F9A1DD68A00EEB9703F3F1 amaynard:24B8599BAF46DD4B4D8DB50A3B10136457492622 aspears:FD571203974BA9AFE270FE62151AE967ECA5E0AA aweiland:2A032F7C5BA932872F0F045E0CF6B53CF702F2C5 bbanter:6BB4837EB74329105EE4568DDA7DC67ED2CA2AD9 bphillips:51AA306E66303073DBA15D2750E23C90C7A7F947 bwatkins:8D6A637F37955DBFCE1229204DDBED1CE11E6F41 cchisholm:A5892368AE83685440A1E27D012306B073BDF5B7 ccoffee:A4B6157319038724E3560894F7F932C8886EBFCF dcooper:AA1420F182E88B9E5F874F6FBE7459291E8F4601 dgilfillan:B021918A5DCA54916CF724573179571DFC37AC88 dgrant:D183105443FBDE597607B8BC5475A9E1B7847F3E djohnson:46CFC7938B60837F46B610A2D10C248874555C14 dstevens:3B477BC23EA39BFF66D64BFB68DB5EC5F5E31C91 dtraylor:74B1C21ACE0C2D6B0678A5E503D2A60E8F9651A3 dwestling:797420C584EBF42750EB523104268BA0FD87FBC8 hlovell:81101DED975D54BD76A3C8EAD293597AE9BB143F jalcantar:4DC6D98E4CF6200B9F5529AFDE2E3B909F41E4D0 jalvarez:44FFB04331ADAECB1FAB104F634E9B066BF8C6DC jayala:94F3DC3F398B76269CAAD51627279D4233A6C89A jbresnahan:3EEB06BE54EABF909DC8F6107110777F1DE43186 jdavenport:61305383748FBEAB119F9A8BC35EBBADB4889A9D jduff:626AC8265C7D53693CB7478376CE1B4825DFF286 jfranklin:7FD9F123C9FC025372A5AAD19D107783CD19CCF7 kclemons:84AAC12F54AB666ECFC2A83C676908C8BBC381B1 krenfro:B12289EEF8752AD620294A64A37CD586223AB454 ktso:79BF466BCC601BD91A0897BB162421F9BA8C29CA kwebber:90837F291B744BBE86DF95A37D2B2524185DBBF5 lmartinez:DF216F57F1F2066124E1AA5491D995C3CB57E4C2 lmorales:AE9F960F8FA0994C9878D2245DA640EAFF09BA0E mbryan:D37C49F9CBEFBF8B6F4B165AC703AA271E079004 mholland:FBA7C2D27C9D05F3FD4C469A1BBAF557114E5594 mnader:D6B63C1953E7F096DB307F8AC48C4AD703E57001 mrodriguez:6691484EA6B50DDDE1926A220DA01FA9E575C18A myajima:6A7A490FB9DC8C33C2B025A91737077A7E9CC5E5 qpowers:2470C0C06DEE42FD1618BB99005ADCA2EC9D1E19 rdominguez:A7D31514D37A55CE91C6C5DF97299CBC1B1937EC rjacobson:DB1B792EC6DAE393BAE7AD832D3AF207C12E9A00 rpatel:F491287896471CB21030790BF46865C4A39DE651 sgains:B2B366CA5C4697F31D4C55D61F0B17E70E5664EC sjohnson:7B2F14D9BB629E334CD49A1028BD85750F7D3530 strammel:22AC3D548EB2C2A2F4E609ADA63251D0AF795AD9 swarren:F8E113FD51D520075836A4B815568BA2B96F7C30 tdeleon:CFBF459D9D6057BC2A85477A38327B96F06B1597 tgoodchap:ED043A01F4583450BC8EB1E83C00C372CA49C4E4 webapp:0DCC22A95EEBFF4984DF6A7B7F2D7D28DBB5F36F
Thank you.
Re: sqlmap & john the ripper
1) The format you save or JTR needs the data in likely depends on the type of DB (MS, My, Oracle, etc)
2) It can never hurt to RTFM: http://www.openwall.com/john/doc/
3) You may also want to checkout: http://sqlhack.com/
Last edited by thorin; 04-04-2011 at 01:00 PM.
I'm a compulsive post editor, you might wanna wait until my post has been online for 5-10 mins before quoting it as it will likely change.
I know I seem harsh in some of my replies. SORRY! But if you're doing something illegal or posting something that seems to be obvious BS I'm going to call you on it.
Posting Permissions