Finding out the hashing algorithm and salt if you know the password and the resultant hash

Ask Question

Asked 3 months ago

Modified 3 months ago

Viewed 45 times

If I have the password and hash will I be able to find out the Hashing algorithm and salt used. What tools can I can use? Will hashcat work?

asked Dec 1, 2022 at 4:13

George Cherian

$\begingroup$ So you're brutal-forcing the salt from a pre-selected hashing algorithms? $\endgroup$
– DannyNiu
Dec 1, 2022 at 4:43
2

$\begingroup$ Hash strings often start with an identifier (e.g. $argon2id$ ). $\endgroup$
– samuel-lucas6
Dec 1, 2022 at 8:25
2

$\begingroup$ The hash string usually also includes the salt. It's usually $<ALGORITHM_ID>$<DIFFICULTY_PARAMETERS>$<BASE64_ENCODED_SALT><BASE64_ENCODED_HASH>$. $\endgroup$
– SAI Peregrinus
Dec 1, 2022 at 13:40
2

$\begingroup$ If your hash is just the binary output of a PBKDF and the salt is both secret and large enough (i.e. it's really a "pepper") then finding out the salt and even the algorithm used may be impossible. Generally you can rely on the (meta) information in the hash string as stated above. $\endgroup$
– Maarten Bodewes ♦
Dec 1, 2022 at 15:01

Add a comment |

0 Your Answer

Name

Required, but never shown

Post as a guest

Name

Required, but never shown

By clicking “Post Your Answer”, you agree to our terms of service, privacy policy and cookie policy