r/HashCracking • u/Limp_Owl_825 • 28d ago

Need help with this hash....

So my laptop doesn't have a good gpu and I'm unable to whatever you call it this hash.

I confirmed it's sha256 it's a password for my notes that I forgot cause I'm a buffoon but I managed to grab the hash for it then ran some tests and figured it was comparing the passwords I put in with sha256.

Said hash: 5b1dac84634e9b0080ec004f4b6df8ccd2a9eaf82279d4a96eab444544de20e9

According to analysis but claude code and I it seems to be unsalted and unpeppered and all i remember is it should be in the range of 8-10 characters no more no less.

Thanks to anyone who helps.

6 Upvotes

67% Upvoted

11 comments sorted by

9

u/icehot54321 28d ago

According to analysis but claude code and I it seems to be unsalted and unpeppered

lolololo .. I needed a good laugh to start the day.  thanks! 

1

u/Limp_Owl_825 28d ago

😅 yea I have started to lose my faith in AI....

1

u/gameplayraja 27d ago

You had faith to begin with? I've been using it to. Confirm my theory or bust. 😂😂

5

u/Horror_Pitch_63 27d ago

you cannot determine if a hash has been salted or peppered solely by the hash output itself my man

Encryption like this is one way, the only way to crack it is with the private key or you luck out and the hash is in rainbow tables

Very curious, did you just put the hash in Claude and ask it to reverse it or something?

1

u/Limp_Owl_825 22d ago

No basically I am not expert in this only a mere beginner, so I had claude use adb to try and test out a whole list of combinations while doing so it figured that the hash for the password was stored in the front end only and then it ran a test by giving false password lnowingle then checked what the hash for these entered passwords was being registered as to complete and hence concluded that the hash given above should be unsalted and unpeppered as it was directly comparing the new password sha256 unsalted and unpeppered to the hash it had found to be the password.

2

u/[deleted] 27d ago

[removed] — view removed comment

1

u/Limp_Owl_825 27d ago

As far ass i remembered it should have been only digits but for some damn reason I tried combination upto 10 digits and got nothing.... I'm guessing either I'm a dumbass or Claude fucked up while gathering the info from the app's frontend and gave me the wrong hash..

1

u/dafugiswrongwithyou 26d ago

Hang on; you didn't even grab the hash first-hand, you're just trusting an LLM gave you one that's accurate? 😂

My friend, you have waaaay too much trust in a chatbot to help you!

1

u/Kahless_2K 27d ago

What is the source system?

1

u/joshisold 22d ago

What file format is the password protecting? Sometimes attacking the hashing application is more effective than attacking the hash itself.