NOTE: When cracking WPA/WPA2 passwords, make sure you check gpuhash.me first incase it's already been processed.

Home - General Discussion - MySQL and MSSQL Get Password Hashes


1 Results - Page 1 of 1 -
1
Author Message
Avatar
blandyuk
Admin / Owner
Status: Trusted
Joined: Tue, 05 Jul 2011
Posts: 3033
Team: HashKiller
Reputation: 4060 Reputation
Offline
Wed, 12 Oct 2011 @ 10:24:53

SQL server 2005 and 2008:

SELECT name, password_hash FROM [master].sys.sql_logins;

0×0100993BF2315F36CC441485B35C4D84687DC02C78B0E680411F

0×0100- constant header
993BF231-salt
5F36CC441485B35C4D84687DC02C78B0E680411F - case sensitive hash

crack case sensitive hash in oclHashcat, PasswordsPro or Cain and Abel, try brute force and dictionary based attacks.

SQL Server 2000:

SELECT password from master.dbo.sysxlogins;

0×010034767D5C0CFA5FDCA28C4A56085E65E882E71CB0ED2503412FD54D6119FFF04129A1D72E7C3194F7284A7F3A

0×0100- constant header
34767D5C- salt
0CFA5FDCA28C4A56085E65E882E71CB0ED250341 - case senstive hash
2FD54D6119FFF04129A1D72E7C3194F7284A7F3A - upper case hash

crack the upper case hash in oclHashcat, PasswordsPro or Cain and Abel and then work the case sentive hash.

-
edited by blandyuk on 02/01/2013


Please read the forum rules | Please read the paid section rules
I accept private hash lists, with forum donations only.
BTC: 15qF9WUeFUD63ishxyAMiEgGqTcYzk4j9b
GPU Power: 9x GTX 1070 + 4x GTX 1080


1 Results - Page 1 of 1 -
1

We have a total of 163292 messages in 20499 topics.
We have a total of 19267 registered users.
Our newest registered member is johnbranches.