Replies

• DNB1 Posts: 6,391

  March 2012

  ^^^interesting.......

  Flag

  • Spam
  • Abuse
  • Troll

  0 • Wack Feelings Nosign Cosign Ether GOAT LOL •
• IcyLiquid Posts: 297

  March 2012

  lioness15 wrote: »

  IcyLiquid wrote: »

  Its more work to crack hashes than to phish, trust me.

  
  hypothetically speaking if you have say a large Rainbow Table and you have the hashes, it wouldn't be very hard or time consuming to crack those hashes using PasswordPro for example.
  
  This is all hypothetical, not that any of this was actually applied on the IC.

  
  How would you account for the salt in this case though? I still feel like hash cracking would be the long way round when compared to phising.
  
  Again though, I'm also only speculating because I was not around, but I have a hard time believing that a Rainbow Table would work as easily as you're saying with salted hashes.
  
  vB's hash algorithm is:
  

  HASH_PASS = MD5 ( CONCAT(md5(PLAIN_PASS), SALT) )
  

  
  The salt is random per user, so a rainbow table would ... well it just wouldn't work really.

  

  Flag

  • Spam
  • Abuse
  • Troll

  1 • Wack Feelings Nosign 1Cosign Ether GOAT LOL •
• ChasinBenjamins Posts: 784

  March 2012

  This geek talk ruined the thread smh

  Flag

  • Spam
  • Abuse
  • Troll

  0 • Wack Feelings Nosign Cosign Ether GOAT LOL •
• IcyLiquid Posts: 297

  March 2012

  lioness15 wrote: »

  IcyLiquid wrote: »

  lioness15 wrote: »

  IcyLiquid wrote: »

  Its more work to crack hashes than to phish, trust me.

  
  hypothetically speaking if you have say a large Rainbow Table and you have the hashes, it wouldn't be very hard or time consuming to crack those hashes using PasswordPro for example.
  
  This is all hypothetical, not that any of this was actually applied on the IC.

  
  How would you account for the salt in this case though? I still feel like hash cracking would be the long way round when compared to phising.
  
  Again though, I'm also only speculating because I was not around, but I have a hard time believing that a Rainbow Table would work as easily as you're saying with salted hashes.
  
  vB's hash algorithm is:
  

  HASH_PASS = MD5 ( CONCAT(md5(PLAIN_PASS), SALT) )
  

  
  The salt is random per user, so a rainbow table would ... well it just wouldn't work really.

  
  In vbulletin you could get the hash and salt. The salt is random per user, but if you know the value of the salt would be accounted for in the PasswordPro program, thus allowing you to utilize a rainbow table, instead of a dictionary attack or bruteforcing which would have been very time consuming.
  
  Hypothetically speaking one would have been able to gather the hash+salt combos on vbulletin through sql injection.
  

  
  That does make sense. Was the previous iteration of vB running on this site susceptible to SQL injection attacks? I don't know what version it was.

  Flag

  • Spam
  • Abuse
  • Troll

  0 • Wack Feelings Nosign Cosign Ether GOAT LOL •
• Pico Roscoe Posts: 18,377

  March 2012

  Icy out here phishing you niggas smh

  

  Flag

  • Spam
  • Abuse
  • Troll

  2 • Wack Feelings Nosign 1Cosign Ether 1GOAT LOL •
• ChasinBenjamins Posts: 784

  March 2012

  Awww, would u look at that, the IC made a love connection.
  
  JG, Icy, when's the wedding so that I could come through and shoot it up.
  
  Gay nerds.. the fuck is the IC coming to yo?

  

  Flag

  • Spam
  • Abuse
  • Troll

  2 • 1Wack 2Feelings Nosign Cosign 3Ether GOAT LOL •
• Du_Du Posts: 32,188

  March 2012

  damn son....
  
  there's like......an art to this shit.....

  Flag

  • Spam
  • Abuse
  • Troll

  0 • Wack Feelings Nosign Cosign Ether GOAT LOL •
• FieldTripsToTheHood Posts: 6,026

  March 2012

  this thread is a perfect example of why this site is vulnerable...there is a very frank discussion on how this may have happened and people are ignoring it like its jibberish. It might be... but some quick research into what is being talked about can open a flood of information about this topic.
  
  Nevermind though, your passwords are safe lol.

  

  Flag

  • Spam
  • Abuse
  • Troll

  0 • 1Wack Feelings 1Nosign 1Cosign Ether GOAT LOL •
• Elzo69Revolutions Posts: 13,087

  March 2012

  * Takes notes*

  Flag

  • Spam
  • Abuse
  • Troll

  0 • Wack Feelings Nosign Cosign Ether GOAT LOL •
• bankrupt baller Posts: 12,855

  March 2012

  if you giving birds bread then let it be in the park

  Flag

  • Spam
  • Abuse
  • Troll

  0 • Wack Feelings Nosign Cosign Ether GOAT LOL •
• DNB1 Posts: 6,391

  March 2012

  smh @ not taking all this shit to PMs.....
  
  thanks....tho...

  Flag

  • Spam
  • Abuse
  • Troll

  0 • Wack Feelings Nosign Cosign Ether GOAT LOL •
• Cain1 Posts: 16,184

  March 2012

  Elzo69Reloaded wrote: »

  * Takes notes*

  
  Make sure you check over your notes.
  
  "Even if you have the keys doesn't mean you can drive the car"

  Flag

  • Spam
  • Abuse
  • Troll

  0 • Wack Feelings Nosign Cosign Ether GOAT LOL •
• Elzo69Revolutions Posts: 13,087

  March 2012

  Cain Marko wrote: »

  Elzo69Reloaded wrote: »

  * Takes notes*

  
  Make sure you check over your notes.
  
  "Even if you have the keys doesn't mean you can drive the car"

  "Why would I need keys, if i got autostart...."
  
  

  

  Flag

  • Spam
  • Abuse
  • Troll

  -1 • 1Wack Feelings Nosign Cosign Ether GOAT LOL •
• Cain1 Posts: 16,184

  March 2012

  Word............lol

  Flag

  • Spam
  • Abuse
  • Troll

  0 • Wack Feelings Nosign Cosign Ether GOAT LOL •
• Du_Du Posts: 32,188

  March 2012

  shit was mad educational...
  
  even though i have no idea what the fuck i just learned.....
  
  other than a nigga needa change that password daily...

  Flag

  • Spam
  • Abuse
  • Troll

  0 • Wack Feelings Nosign Cosign Ether GOAT LOL •
• Cain1 Posts: 16,184

  March 2012

  dusouljah wrote: »

  shit was mad educational...
  
  even though i have no idea what the fuck i just learned.....
  
  other than a nigga needa change that password daily...

  
  Especially you......smh

  Flag

  • Spam
  • Abuse
  • Troll

  0 • Wack Feelings Nosign Cosign Ether GOAT LOL •
• IcyLiquid Posts: 297

  March 2012

  dusouljah wrote: »

  other than a nigga needa change that password daily...

  
  No, just don't use a retarded password, and don't get phished, and don't use the same password for a forum as you use for your email.

  

  Flag

  • Spam
  • Abuse
  • Troll

  1 • Wack Feelings Nosign 1Cosign Ether GOAT LOL •
• Du_Du Posts: 32,188

  March 2012

  what about Chinese characters???
  
  or is that taking it too far??

  

  Flag

  • Spam
  • Abuse
  • Troll

  5 • Wack 2Feelings Nosign Cosign Ether 5GOAT LOL •
• DNB1 Posts: 6,391

  March 2012

  I'm sorry, but lmao @ Du......hahahahaa
  
  I'm clicking emotion buttons now......smh

  Flag

  • Spam
  • Abuse
  • Troll

  0 • Wack Feelings Nosign Cosign Ether GOAT LOL •
• riddlerap Posts: 11,379

  March 2012

  yeah buddy

  

  Flag

  • Spam
  • Abuse
  • Troll

  -1 • 2Wack Feelings Nosign 1Cosign Ether GOAT LOL •
• Du_Du Posts: 32,188

  March 2012

  Dirty Sanchez wrote: »

  I gave du a feelings cause he's fat

  and i gave you a feelings because that dog is not a natural.......wait what color is that wig??
  

  Flag

  • Spam
  • Abuse
  • Troll

  0 • Wack Feelings Nosign Cosign Ether GOAT LOL •
• Du_Du Posts: 32,188

  March 2012

  what color is the fucking wig??

  Flag

  • Spam
  • Abuse
  • Troll

  0 • Wack Feelings Nosign Cosign Ether GOAT LOL •
• Du_Du Posts: 32,188

  March 2012

  no bitch he's running....and his adrenaline is up....
  
  he's definitely doing it right......
  
  go play fetch with a stick of dynamite....

  

  Flag

  • Spam
  • Abuse
  • Troll

  -4 • 4Wack Feelings Nosign Cosign Ether GOAT LOL •
• Mr. Whatchasay Posts: 2,288

  March 2012

  after reading this thread, I'd say hacking is more lame than I thought....what a waste of a life

  

  Flag

  • Spam
  • Abuse
  • Troll

  6 • Wack Feelings Nosign Cosign 6Ether GOAT LOL •
• DNB1 Posts: 6,391

  March 2012

  lmao......I dont like c/s'ing retarded niggas like you but this the realest shit you ever wrote.......

  Flag

  • Spam
  • Abuse
  • Troll

  0 • Wack Feelings Nosign Cosign Ether GOAT LOL •