Password stored as what?

[tech_guy]

We've got a config file that unbelievably stores the admin password for a particular program.

 

We know the password is actually 'password' and in the file it is stored as VHfZKXg0cfthMCwTA

 

What is this and how do we covert it to confirm?

 

Many thanks.

[webman]

It looks encrypted. Without knowing certain pieces of information, I doubt you'll have much luck cracking it. But it's definitely not rot13, md5 or sha1

[X-13]

Brute force it.

[tech_guy]

Using?

[jamesb]

If it's hashed through a one-way algorithm, then there's not really a practical way for you to convert it back. What you could do is try and find out the hashing algorithm and run 'password' through it. If they match, it's confirmed.

[X-13]

Using?

 

There's various brute force programs around the internet. [All blocked here though...]

 

TBH, @jamesb has it right. Usually these things can't be decrypted, they just encrypt the input and check it against the encrypted file.

[CHR1S]

Change the password to individual letters and not the hash?

[Steve21]

We know the password is actually 'password' and in the file it is stored as VHfZKXg0cfthMCwTA

 

What do you get if you put password as say: passwor

etc etc

 

Steve

[tech_guy]

So, for each letter, it converts to two characters - interesting....