Thread Rating:
  • 0 Vote(s) - 0 Average
  • 1
  • 2
  • 3
  • 4
  • 5
Collecting passwords
#6
The whole point of it being encrypted is so that you can't just look in the database and decrypt it. This is how it's encrypted.

$salt = 8 random characters.
$hashed_salt = md5($salt)
$hashed_pass = md5($plaintext_password)
So now you have two md5 hashes.
Joins those together, so a 64 character hash, and then md5s that, and stores that in the password field.
So it's this:

$pass = md5(md5($salt).md5($plaintext_password))

Good luck trying to find the plaintext password with that password string and the salt. You'll need one hell of a rainbow table. If it needs resetting, apart from using the ACP, you can leave the salt blank and put a standard md5 into the password field, say the md5 of test, then login with test.
MyBB Support Team Lead


Messages In This Thread
Collecting passwords - by iGirls - 02-14-2010, 06:30 PM
RE: Collecting passwords - by DAMINK™ - 02-15-2010, 02:18 AM
RE: Collecting passwords - by iGirls - 02-15-2010, 05:07 AM
RE: Collecting passwords - by DAMINK™ - 02-15-2010, 05:15 AM
RE: Collecting passwords - by ELY_M - 02-15-2010, 08:06 AM
RE: Collecting passwords - by MattR - 02-15-2010, 10:55 AM
RE: Collecting passwords - by ELY_M - 02-20-2010, 06:48 AM
RE: Collecting passwords - by Tim - 02-25-2010, 04:56 AM

Forum Jump:


Users browsing this thread: 2 Guest(s)