Author
Message
FractalP
Decorated
Joined: 10 Oct 2008 Posts: 258
Oddly enough, there are 14 separate hashes, and the 8th and 9th are identical. Hmm.
Posted: Fri Jul 23, 2010 12:18 am
Scratch
Veteran
Joined: 17 May 2010 Posts: 91
FractalP wrote:
Oddly enough, there are 14 separate hashes, and the 8th and 9th are identical. Hmm.
Maybe it's a sequence of numbers.
Posted: Fri Jul 23, 2010 12:26 am
FractalP
Decorated
Joined: 10 Oct 2008 Posts: 258
I only tested the first hash, but it's neither a single digit nor a letter.
Posted: Fri Jul 23, 2010 12:39 am
MrToasty
I Have 100 Cats and Smell of Wee
Joined: 03 Aug 2004 Posts: 4310 Location: Des Moines, IA
vapor wrote:
Good eye MrToasty.
D'oh! If this weren't a college town Thursday night I'd have had the sense of mind to try that!
Posted: Fri Jul 23, 2010 3:42 am
MrToasty
I Have 100 Cats and Smell of Wee
Joined: 03 Aug 2004 Posts: 4310 Location: Des Moines, IA
A thought - it looks like the hashes may be a set (with the one duplicate possibly being copy-paste mistake). We have all 5 possible haval bit-lengths represented. If we assume that each group of 5 represents one of the 3 numbers of rounds you can choose to generate a hash, then we may be looking at all of the possible hashes for one phrase. Again this assumes that the duplicate was unintentional. Further I would assume the phrase is related to the poem from Alice in Wonderland. Not quite sure how to proceed with this though.
Code:
3 Rounds?
128 c7d4995c871325f33e1a985fb910ad70
160 fab52e9388a457ce37afaab5236fc7256a8ae878
192 157e39c1f46f35cf122068b4b08f63a56368d5d908fc4777
224 aef371f425369ed47255e2255dae5f6008d1ddc13c5de60890ddbbba
256 a6d177a117d76e1b2495491b942744d82844c930a63ec1705a996b7c79270dfa
4 Rounds?
128 5ad07726ac35032a0f2cbdac1edac5a0
160 6fdf520e9ad1a1c94c4b7f1f0671bbed6ea90569
192 e2203ef8757721c968db929d1bc8bbf973c5e404eb509c6d
224 45d924b75d9421521aaffc0e59a3b7abef4705cb1ddf38f3eaa78d0c
45d924b75d9421521aaffc0e59a3b7abef4705cb1ddf38f3eaa78d0c
5 Rounds?
128 a6b26c3d2dc84b5c9f8531be2bc7fbc3
160 a0d172644ab548c91e4ea17124cfc6741c2531db
192 355e1e43b1d998c5c08c40a4b38c628254085ba82d07858f
224 8d803c5b6bda75ffdf55b96d105d2fd4d59459f4768223cd6a66815a
256 861ec953a3df91b9481b21b394ff11a339680951cc6db502179876d73e1e4d17
Posted: Sat Jul 24, 2010 1:38 am
vapor
Entrenched
Joined: 03 Jun 2008 Posts: 1188 Location: Dallas, TX ya'll
I've been messing with this too though I'm not all that accustomed to cracking hashes. If what MrToasty is describing is correct then it should make it much much easier. If we crack one then we convert the plaintext using other the other methods to try and find a match.
From what I can tell there are about five methods to cracking hashes; preliminary attacks, brute force attacks, mask attacks, dictionary attacks, rainbow tables attacks.
I did a preliminary attack and it isn't a common word or password. It is likely a phrase or an uncommon word.
I also tried converting a few possible phrases like "handshake cannot be trusted" and "wonderland" and "looking glass".
When it came to dictionary attacks and rainbow tables I got quickly lost and gave up. I'm hoping someone has more experience or knows of some software. I've founf a few programs but I'm not at all sure if I'm using them correctly.
http://fsumfe.sourceforge.net/
http://www.insidepro.com/eng/passwordspro.shtml#200
http://hashkiller.com
Posted: Sat Jul 24, 2010 3:28 am
The Barmaid
Decorated
Joined: 02 Apr 2009 Posts: 173 Location: Northern Arizona
How is this an ARG? Seems like it's shaping up to just be a puzzle mag.
_________________When cryptography is outlawed, bayl bhgynjf jvyy unir cevinpl.
There is no "I" in team. But there are three "u"s in shut the fuck up.
Posted: Sat Jul 24, 2010 10:51 am
VeritasK
Veteran
Joined: 19 Feb 2010 Posts: 98
when we see a domino and then a - U
If the U means to convert to unicode then...
127047 U+1F047
For You makes more sense though.
Posted: Sat Jul 24, 2010 11:29 am
Ghadhean
Boot
Joined: 16 May 2007 Posts: 28 Location: OlyWa
http://twitter.com/handshakemag
I keep getting an error message trying to view the pdf...
Posted: Sat Jul 24, 2010 4:20 pm
emato
Unfettered
Joined: 06 Aug 2007 Posts: 333 Location: Florida
Hash - MD2 Two messages:
Quote:
c7d4995c871325f33e1a985fb910ad70 fab52e9388a457ce37afaab5236fc7256a8ae878 157e39c1f46f35cf122068b4b08f63a56368d5d908fc4777 aef371f425369ed47255e2255dae5f6008d1ddc13c5de60890ddbbba a6d177a117d76e1b2495491b942744d82844c930a63ec1705a996b7c79270dfa 5ad07726ac35032a0f2cbdac1edac5a0 6fdf520e9ad1a1c94c4b7f1f0671bbed6ea90569 e2203ef8757721c968db929d1bc8bbf973c5e404eb509c6d 45d924b75d9421521aaffc0e59a3b7abef4705cb1ddf38f3eaa78d0c 45d924b75d9421521aaffc0e59a3b7abef4705cb1ddf38f3eaa78d0c a6b26c3d2dc84b5c9f8531be2bc7fbc3 a0d172644ab548c91e4ea17124cfc6741c2531db 355e1e43b1d998c5c08c40a4b38c628254085ba82d07858f 8d803c5b6bda75ffdf55b96d105d2fd4d59459f4768223cd6a66815a 861ec953a3df91b9481b21b394ff11a339680951cc6db502179876d73e1e4d17
*EDIT: My bad! Disregard. I used the wrong input file while running my analysis. This is from a totally different file. Sorry.
Is two messages:
Dear Mr Shopaholic,
please order a typewriter.
Regards
Honest John
AND
Dear Mr Shopaholic,
please order a Porsche and a prepaid insurance scheme for Mr. Dodgy.
Regards
Honest John
It was MD2 <74>
Posted: Sat Jul 24, 2010 8:28 pm
Last edited by emato on Sun Jul 25, 2010 10:37 am; edited 1 time in total
MrToasty
I Have 100 Cats and Smell of Wee
Joined: 03 Aug 2004 Posts: 4310 Location: Des Moines, IA
Re: Hash - MD2 Two messages:
emato wrote:
It was MD2 <74>
Can you elaborate a bit on the solution?
Posted: Sat Jul 24, 2010 9:16 pm
emato
Unfettered
Joined: 06 Aug 2007 Posts: 333 Location: Florida
Re: Hash - MD2 Two messages:
MrToasty wrote:
emato wrote:
It was MD2 <74>
Can you elaborate a bit on the solution?
Duh!
I ran the wrong file for my analysis (totally different hashed file) which resulted in the message and hash method I reported. Very sorry.
Need to make sure I wipe my clip board next time.
/bows head in shame ...
Posted: Sun Jul 25, 2010 10:40 am
MrToasty
I Have 100 Cats and Smell of Wee
Joined: 03 Aug 2004 Posts: 4310 Location: Des Moines, IA
No worries, just thought I was going crazy for a minute.
Posted: Sun Jul 25, 2010 11:52 am
Display posts from previous: All Posts 1 Day 1 Week 2 Weeks 1 Month 3 Months 6 Months 1 Year Sort by: Post Time Post Subject Author Ascending Descending