unforum

ramiles

[Spec] On Logon.html again

**Posted:** Tue Sep 09, 2003 6:21 pm

_________________
The TRUTH lies beneath the LIES
The Consparicy Theorist

Now Playing: BodyMindChange & Extrasolar XRI

Caterpillar

**Posted:** Tue Sep 09, 2003 7:45 pm

Bryan · Boot Joined: 08 Sep 2003 Posts: 14

The password returned to you is simply whatever you typed into the password spot after it's had md5 run on it and converted to a 'linux' password.

**Posted:** Tue Sep 09, 2003 7:51 pm

MageSteff

**Posted:** Tue Sep 09, 2003 8:24 pm

_________________
Magesteff
A small group of thoughtful people could change the world. Indeed, it's the only thing that ever has. - Margaret Mead

Bryan · Boot Joined: 08 Sep 2003 Posts: 14

I don't know...maybe there is something else factored into the encoding when you shorten it down to 34 characters like that(real md5 is 128 chars).

Anyway, I tried logging in about 40 times, put all of those into a file, ran a cracker with a fairly large dictionary on it and it got the correct password for all of them(even when two login attempts with the same password generated different strings).

**Posted:** Tue Sep 09, 2003 8:31 pm

MageSteff

Hmmmm... shadow passwords

**Posted:** Wed Sep 10, 2003 12:07 am

_________________
Magesteff
A small group of thoughtful people could change the world. Indeed, it's the only thing that ever has. - Margaret Mead