[teddae]

Hi,

Just question. What is mean exactly that an hash is: "missing SALT"? For example, type hash and missing SALT.

Thanks for reading.

[Addka72424]

Hi,

Just question. What is mean exactly that an hash is: "missing SALT"? For example, type hash and missing SALT.

Thanks for reading.

This means that the password salt will be removed.
Example
MD5 (normal without salt)
8743b52063cd84097a65d1633f5c74f5
and
md5($pass.$salt)
01dfae6e5d4d90d9892622325959afbe:7050461
We see that the second hash after the hash has a salt.It is she who is missing from you.The salt can be static (one for all passwords) or different for each.In any case, if you don't have salt in the hash file, then you just have to pick up the salt by brute force.

[teddae]

Hi,

Thanks for answer. Check this that say and will make feedback.

[Sneed]

What database are you taking the hashes from? Maybe I can find the salt for you.

[the_one_who_phishes]

some stuff for you to read:

https://security.stackexchange.com/quest...word-durin
https://www.freecodecamp.org/news/hackin...cal-guide/

to identify a hash and, sometimes, if it is salted or not: https://www.kali.org/tools/hashid/

[teddae]

At moment, only discover this.

According to the tunnelsup dot com hash-analyzer website, the analyzed hashes are of type SHA1 (or SHA 128) without salt (not found). On the other hand, the document with the hashes states that the hashes contain salt (they do not say which one).

In any case, in all the online hashes services, it was impossible for them to solve the hash.

[Bookworm]

mmm when a hash is said to be "missing SALT," it means that the hash was generated without the use of a salt value. A salt is a random string of data that is added to the input of a hash function to create a unique output. What is it for?...makes it more difficult to use precomputed hash tables or rainbow tables to crack passwords. Without a salt, can use a precomputed hash table to quickly determine the original password that corresponds to a given hash value.

There is also the same definition according to wikipedia....
https://en.wikipedia.org/wiki/Salt_(cryptography)

[masedan]

Adding a little bit to the conversation, a Salt is very important, but in some cases it's important to have Pepper too.
The difference between salt and pepper is that usually the salt is stored with the hash, and the pepper is stored in a different location. Which add an extra level of security if data are getting leaked, and making it more difficult to find the "salt".

https://en.wikipedia.org/wiki/Pepper_(cryptography)

[teddae]

Thanks the last answer.

The theory was know, but there is no way to achieve it in practice. Thus it is difficult to contribute to the common good of the community.

[Wanderlust]

At moment, only discover this.

According to the tunnelsup dot com hash-analyzer website, the analyzed hashes are of type SHA1 (or SHA 128) without salt (not found). On the other hand, the document with the hashes states that the hashes contain salt (they do not say which one).

In any case, in all the online hashes services, it was impossible for them to solve the hash.

It could be that it has a salt or shadow password (as I understand), that is why it is more complicated to decipher it, it becomes more tedious. You have to know the salt, otherwise I doubt very much that you will be able to decipher it. Maybe you can try a brute force or dictionary attack (it will take time).