MD5 Hash Database

S

socrtwo

http://gdataonline.com/ - This is a webware candidate...maybe.

I'm interested in recovering unknown passwords, not for illicit
reasons, but for helping people legitamately recover their data which
would otherwise be inaccessible through accidental loss of password.
Apparently passwords for Palm 4 OS and up are stored in an MD5 Hash
that is easy to access even without the password.

An MD5 hash is a popular complex processing method of passwords, and
files where the entity is made into a fixed length 128 bit string of
characters which can't be reversed engineered back to the original item
(or nobody has done this yet, though they are working on it I think).
The same word or file, always produces the same hash. The MD5 hash is
used by some antivirus checkers to see if a file has changed, as even
one bit change, changes the MD5 has.

At any rate because of the limitation of input devices, most Palm users
choose simple passwords. If they lose their password, they are not out
of luck, because the online database above has a dictionary of 12
million words and their associated MD5 hashes.

If the unfortunate user gets his MD5 password hash, which again I think
is easily accessible, then he can enter it into this database, and if
his password was simple enough, he can find that hash is in the
database with its associated word.

This database contains common variations of words and numbers that are
used for passwords, like password123. It also contains names, common
last names (I found my last name for instance - pruitt), whole foreign
dictionaries like Japanese etc.

Paul Pruitt
www.s2services.com - a freeware data recvovery tools list
 
A

Aaron

http://gdataonline.com/ - This is a webware candidate...maybe.

Interesting, I didn't know webware could be in pricelessware.
I looked it up and found this

http://www.pricelesswarehome.org/acf/Webware.php#SECURITY

I noticed that leak tests for firewalls were in the list.

Or here's one of the newer ones to try.

http://hackingspirits.com/vuln-rnd/vuln-rnd.html

I believe it should bypass the latest ZA free versions (perversely some of
the older versions are not affected), and most other personal firewalls.

If you have some software that alerts you whenever your browser (or any
other process) is started, it might provide some protection, since you will
see the leak test starting the browser up.

But if the browser is already running, you won't get any warning.
 

Ask a Question

Want to reply to this thread or ask your own question?

You'll need to choose a username for the site, which only take a couple of moments. After that, you can post your question and our members will help you out.

Ask a Question

Similar Threads


Top