pratik
Feb 11 2004, 05:19 AM
Hi guys can...
can someone help me with this..
ok i put the normal pass in servu.ini rite now when i try to connect it thru fxp
it doesnt....so is it like do i have to put the encrypted pass in the servu.ini file?
IF yes..then is there any way to crack my normal pass in servu.ini that i have put...so that i can login thru fxp...like i want to login thru fxp...but it doesnt accept the pas..anyone have suggestion plz reply me...thankz
thankz
FiNaLBeTa
Feb 11 2004, 07:33 AM
| QUOTE (mr.anderson @ Feb 2 2004, 05:20 PM) |
OK here is a method you can use but it can take time!!!
1)Download the daemon.ini with password you want to crack.
2)Setup Servu on your own box with the INI with to-be-cracked pass.
3)Get any FTP pass cracking program and good dictionary and bruteforce it :-) |
that is absolutly the dummest thing i have ever heared.
realy. Lmao.
read the thread.
to the guy saying make the salt 8 chars.
read the thread.
making the salt larger has no effect on cracking the password the way we said here...
Onely when sniffing a password it would greatly help.
Wesley
May 10 2005, 01:01 PM
so, whats the best and quickest way to crack servu passwords??
i really need to know this one
Cracked this one for you...guess what the password was?
"NO HASH CRACK REQUESTS"...never would've guessedhopefully someone can help me out because MDcrack aint really working on this one
was testing rootkits and modded servu's and forgot the passw
PM me if ya have any idea's
Jumpi
May 12 2005, 02:11 AM
... so cracking serv-u passwords with rainbow is completely impossible cause of the salt? it is not possible to "unsalt" the hash? (i don't know much about crypt)
FiNaLBeTa
May 13 2005, 08:00 AM
QUOTE(Jumpi @ May 12 2005, 02:11 AM)
... so cracking serv-u passwords with rainbow is completely impossible cause of the salt? it is not possible to "unsalt" the hash? (i don't know much about crypt)
-Arthy-
May 24 2005, 09:10 AM
Ok, correct me if I'm wrong
But when you have this password:
Password=cb644FB1F31184F8D3D169B54B3D46AB1A
You crack the MD5 hash "644FB1F31184F8D3D169B54B3D46AB1A"
The crack result will give you something like: cb******
The result from the cracking method will be the password with "cb" stored in front of it.
Simply it will be the password without the "cb"
This way there won't be any difficulty cracking the password or any thing other then cracking a normal MD5 hash?
Then my next question is, why do they use it?
I don't see anything, storing the password this way, giving you more security?
It's just a useless add-on it seems to me...
FiNaLBeTa
May 24 2005, 11:35 AM
Not useless. For example, you can't really use rainbowtables on it anymore.
Further more this once was state of the art salting. mdcrack adapted to it making it obsolete.
But it's possible to make harder saltings, pass = testtest , salt = khkdlq , hashed = ktehksthte...
This would once again ask for a special tool.
If you don't have the tool, a normal brute force would take a hell of a long time.
tibbar
May 24 2005, 12:13 PM
enough serv-u discussions! Closed.
This is a "lo-fi" version of our main content. To view the full version with more information, formatting and images, please
click here.
