MD5 and Salt Help

[ipwnzphp]

Retrieve the clients password in MD5 hash format. The hash uses the format "md5(salt.pw):salt" and so the salt can be obtained from the 5 characters after the colon ( for you to be able to generate your own hash to compare. I am using WHMCS 4.0

 

$md5this =  $sd[1] . "." . "123456";

Outputs: voc)N.123456

 

$md5this =  $sd[1] . "." . "123456";

echo md5($md5this).":".$sd[1];

Outputs: ff9c65abaa070404a3274d4aaad6224a:voc)N

 

Now what's in the database is this: 58a9eeb60f1f6500a93a1bf494dec24c:voc)N

 

But what I need to get is this [upw] => 4d75fa2015aabf5620c050a85321bf27

 

I don't fully understand the salt and stuff. but does anyone see whats going on here?

[ignace]

$password = 'somepassword';
$salt = md5(time());//32 characters long
$hash = md5($salt . $password) . $salt;//64 characters long

 

Salt: 58a9eeb60f1f6500a93a1bf494dec24c

Hash: 58a9eeb60f1f6500a93a1bf494dec24c58a9eeb60f1f6500a93a1bf494dec24c

[ipwnzphp]

thanks, ok but now they are some how getting 4d75fa2015aabf5620c050a85321bf27 from md5("voc)N"."58a9eeb60f1f6500a93a1bf494dec24c");

 

when i login using the username test@test.com with the password 123456 i get the password hash of the 4d75fa2015aabf5620c050a85321bf27 stored in a session.

[ignace]

Post your code.

 

P.S. It seems PHP is pwning you more then you PHP

[ipwnzphp]

Post your code.

 

P.S. It seems PHP is pwning you more then you PHP

 

  $sds =  $results["password"];

  $sd = explode(":", $sds);

  $hash =  $sd[1];

  $pass = "123456";

  echo md5($hash.$pass);

[ignace]

Post your code.

 

P.S. It seems PHP is pwning you more then you PHP

 

  $sds =  $results["password"];

  $sd = explode(":", $sds);

  $hash =  $sd[1];

  $pass = "123456";

  echo md5($hash.$pass);

 

In order to authenticate someone you need to take the same steps you took when he signed up so if during signup you used:

 

md5($salt . $password) . $salt

 

Then that is the same code you need to use during authentication

[ipwnzphp]

is how it is stored in the database 58a9eeb60f1f6500a93a1bf494dec24c:voc)N

 

So how are they getting 4d75fa2015aabf5620c050a85321bf27 for the users password when logging?

[ignace]

is how it is stored in the database 58a9eeb60f1f6500a93a1bf494dec24c:voc)N

 

So how are they getting 4d75fa2015aabf5620c050a85321bf27 for the users password when logging?

 

58a9eeb60f1f6500a93a1bf494dec24c:voc)N in the database is wrong and completly defeats the purpose of hashing.

[ipwnzphp]

well i know this but WHMCS are idots.

[ignace]

well i know this but WHMCS are idots.

 

What is WHMCS?

[ipwnzphp]

billing system