converting password hashes

Wojciech Puchar wojtek at puchar.net
Tue Oct 29 14:48:26 UTC 2019


>>> that doesn't
>>>
>>>
>>> is there a way to make it work without contacting over hundred people and telling them what new password they have?
>>
>> If it is just MD5 with no salt, I suspect substituting “$1$$” for the “{PLAIN_MD5}” would be sufficient.
>
> I have not checked the code, this might even work (if there is no check
> for a non-empty hash).
>
> But the plain MD5 hashes have to be converted from hex to base64, too,
> since that is the expected encoding for $1$ password entries ...

tried:

$ echo -n blah|md5|xxd -r -p|base64
bx7QAqtVlYWQFOvwlRUi2Q==

then i put $1$$bx7QAqtVlYWQFOvwlRUi2Q by vipw in password field

tried to log in with blah password. doesn't work

any more ideas?


More information about the freebsd-hackers mailing list