VS Project and SQL

Question

Hi all!

I created the project in VS MVC with standard template. register several users.

Then, I take away the database and run some query in the SQL Management.

I'm running a query on users, and get all data of the users who have registered, but only the names, without passwords.

Question:

How can I see and passwords of registered accounts?

What query I can need to run that view password of registered users?

Thank you In Advance.

Wim Sturkenboom · Answer

[quote] base64 not work [/quote]Can you elaborate? Did you write some code? Show it!

Sumit Jolly · Answer

i believe the password stored in standard template is encrypted format using any MD5 algorithm. now you want to read that or decode that? is this correct understanding?

Wim Sturkenboom · Answer

When I decode the first password in your screen shot (I hope I typed it in correctly) I get 32+1 bytes; the one byte might be a check in some way. Can you paste one or two passwords from the database as text so I can eliminate typing mistakes? You're talking about symbols; I guess two symbols is one byte? If so you have 34 bytes. This might imply 32 bytes hash and 2 bytes of something else (e.g. check). Can you paste the 68 symbol 'string' as text as well as the resulting password in the database as text? Be aware that password hashes can be complex and password cracking software can take ages to crack a well implemented algorithm for hashing of a strong password. I suggest that you read up on password hashing; one article that might explain a little why it might take a long time to crack a password (and the difficulties that password cracking software face) is www.codeproject.com/Articles/704865/Salted-Password-Hashing-Doing-it-Right and there are probably plenty more. If you want to protect your passwords you want strong algorithms and force users to use strong passwords; it looks like you have succeeded there ;) As a cracker you basically want weak algorithms and weak passwords.

Morris Elkanaev · Answer

I want to correct myself. Maybe it base64 but my hash code from MVC project it 68 of length it very long. I find some simple codes that encrypt and decrypt pass and they can't decrypt my generated hash code with 68 symbols. What can I do ? Thank you.

Morris Elkanaev · Answer

base64 not work

Wim Sturkenboom · Answer

That password is BASE64 encoded. You can write a small routine to reverse it (look up base64decode) but I'm not sure if it's useful. You will probably end with a pile of binary data being the hashed value of the password.

Morris Elkanaev · Answer

rarfile is there

Morris Elkanaev · Answer

Maybe you're right because I don't understand if it's encrypted md5 algorithm the print screen file pic it's enclosed Thank you Sumit!