NOTE: When cracking WPA/WPA2 passwords, make sure you check gpuhash.me first incase it's already been processed.

Home - General Discussion - MySQL and MSSQL Get Password Hashes

WARNING!
Due to the number of SCAMS going on in the PAID forum, PLEASE ask an ADMIN or MODERATOR to verify ALL found passwords to ensure you are not being SCAMMED.
DO NOT PAY until an ADMIN or MOD has verified them for you!


1 Results - Page 1 of 1 -
1
Author Message
Avatar
blandyuk
Admin / Owner
Status: Trusted
Joined: Tue, 05 Jul 2011
Posts: 3036
Team: HashKiller
Reputation: 4061 Reputation
Offline
Wed, 12 Oct 2011 @ 10:24:53

SQL server 2005 and 2008:

SELECT name, password_hash FROM [master].sys.sql_logins;

0×0100993BF2315F36CC441485B35C4D84687DC02C78B0E680411F

0×0100- constant header
993BF231-salt
5F36CC441485B35C4D84687DC02C78B0E680411F - case sensitive hash

crack case sensitive hash in oclHashcat, PasswordsPro or Cain and Abel, try brute force and dictionary based attacks.

SQL Server 2000:

SELECT password from master.dbo.sysxlogins;

0×010034767D5C0CFA5FDCA28C4A56085E65E882E71CB0ED2503412FD54D6119FFF04129A1D72E7C3194F7284A7F3A

0×0100- constant header
34767D5C- salt
0CFA5FDCA28C4A56085E65E882E71CB0ED250341 - case senstive hash
2FD54D6119FFF04129A1D72E7C3194F7284A7F3A - upper case hash

crack the upper case hash in oclHashcat, PasswordsPro or Cain and Abel and then work the case sentive hash.

-
edited by blandyuk on 02/01/2013


Please read the forum rules | Please read the paid section rules
I accept private hash lists, with forum donations only.
BTC: 15qF9WUeFUD63ishxyAMiEgGqTcYzk4j9b
GPU Power: 9x GTX 1070 + 4x GTX 1080


1 Results - Page 1 of 1 -
1

We have a total of 163692 messages in 20542 topics.
We have a total of 19308 registered users.
Our newest registered member is WeeJobbieMilzo.