search

psypanda / hashID

Software to identify the different types of hashes -
http://psypanda.github.io/hashID
1.33k stars 180 forks source link

command line: pasted hash cropped #52

Open Sammeeey opened 2 years ago

Sammeeey commented 2 years ago

approach 1

After installing hashID via pip and running it using hashid, I can insert hashes from the clipboard (using CRTL+V). However if I try this with the following hash, the hash gets cropped (to the first 510 characters) on the command line:

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

hashID then returns

Analyzing 'W1t7ImlkIjoiUHJheGlzRELCpygwOjAtMzMwODI0IzAsIDI3NSlfUHJheGlzRELCpygwOjAtMzAwMzk4IzAsIDQyMSkiLCJleElkIjoiUHJheGlzRELCpygwOjAtMzMwODI0IzAsIDI3NSkiLCJuYW1lIjoiVGVybWluZSBmw7xyIE5ldXBhdGllbnRlbiBEci4gUGlvY2giLCJ2aWRlb0FwcG9pbnRtZW50IjpmYWxzZSwiaW5zdGl0dXRpb25JZCI6IjZhMzQwODgwLTU4OGEtNGZlMC1hMDY0LWM5NjIyMmJmOTM5NiIsInBoeXNpY2lhbklkIjoiUHJheGlzRELCpygwOjAtMzAwMzk4IzAsIDQyMSkiLCJwaHlzaWNpYW5FeElkIjoiUHJheGlzRELCpygwOjAtMzAwMzk4IzAsIDQyMSkiLCJwaHlzaWNpYW5OYW1lIjoiRHIuIFBpb2NoIiwicHJvcG9zYWxzUGVySG91ciI6MCwicHJvcG'
[+] Unknown hash

https://user-images.githubusercontent.com/49591562/173335334-e7ff1445-87ec-4e6f-80f6-9fddcf3feb3b.mp4

With the hashes from the readme everything works fine.

reason for cropping

I found that the string limit for pasted clipboard content seems to be a windows restriction.

approach 2

Thanks to hashes.com I found that the encryption method seems to be base64.

However using hashID like this, also doesn't find the correct encryption type:

hashid W1t7ImlkIjoiUHJheGlzRELCpygwOjAtMzMwODI0IzAsIDI3NSlfUHJheGlzRELCpygwOjAtMzAwMzk4IzAsIDQyMSkiLCJleElkIjoiUHJheGlzRELCpygwOjAtMzMwODI0IzAsIDI3NSkiLCJuYW1lIjoiVGVybWluZSBmw7xyIE5ldXBhdGllbnRlbiBEci4gUGlvY2giLCJ2aWRlb0FwcG9pbnRtZW50IjpmYWxzZSwiaW5zdGl0dXRpb25JZCI6IjZhMzQwODgwLTU4OGEtNGZlMC1hMDY0LWM5NjIyMmJmOTM5NiIsInBoeXNpY2lhbklkIjoiUHJheGlzRELCpygwOjAtMzAwMzk4IzAsIDQyMSkiLCJwaHlzaWNpYW5FeElkIjoiUHJheGlzRELCpygwOjAtMzAwMzk4IzAsIDQyMSkiLCJwaHlzaWNpYW5OYW1lIjoiRHIuIFBpb2NoIiwicHJvcG9zYWxzUGVySG91ciI6MCwicHJvcGVydGllcyI6e319XSwiMjAyMi0wOC0xMyIsMjkse30sIjIwMjItMDktMTEiLG51bGwsbnVsbCxudWxsXQ==

It seems to look up the correct hash but doesn't find a fitting encryption type:

Analyzing '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'
[+] Unknown hash