fkie-cad / FACT_core

Firmware Analysis and Comparison Tool
https://fkie-cad.github.io/FACT_core
GNU General Public License v3.0
1.24k stars 224 forks source link

hash type not supported #705

Closed frakman1 closed 2 years ago

frakman1 commented 2 years ago

If my understanding is correct, then the format for the /etc/passwd entry is: $id$salt$encrypted where id is the encryption method, right?

So how come it was able to accept the hash type for the second entry and decrypt it, but not the first one?

image

jstucke commented 2 years ago

"hash type is not supported" is more like a general error message when cracking the password failed. It sure looks like a normal MD5 entry. I can't tell what exactly went wrong, though. You could try it manually by copying the hash into a text file and running john (at least this could tell us what went wrong):

src/plugins/analysis/users_and_passwords/bin/john hash.txt