RE: SHA Encryption

[Dean Saxe <Dean.Saxe () DigitalInsight com>]

Joel,

This doesn't decrypt a hash, that is mathematically impossible since a hash
is a one-way function.  This site recomputes a hash based on a dictionary
and looks for a match.

-dhs

-----Original Message-----
From: Joel Tyson [mailto:jtyson () pa eplus com]
Sent: Tuesday, March 02, 2004 4:05 PM
To: Ramsinghani, Aashish (EM, GECIS); security-basics () securityfocus com
Subject: RE: SHA Encryption


HI Aashish,

You can decrypt SHA along with several other hashes at this site:
http://www.securitystats.com/tools/hashcrack.php .  

Joel

-----Original Message-----
From: Ramsinghani, Aashish (EM, GECIS)
[mailto:Aashish.Ramsinghani () geind ge com] 
Sent: Tuesday, March 02, 2004 9:15 AM
To: security-basics () securityfocus com
Subject: SHA Encryption

Hi,
I don't have the password for my Netscape Directory Server 4.2 admin
logon. I checked up the local.conf file which stores the password and
found out that it is encrypted with SHA. Is there any way I can decrypt
this to get the password in plain text?
I also tried to paste the SHA password from another server and pasted it
in the local.conf and admpw file but it doesn't work, I think it also
authenticates from the namespace within the server.
If anyone has any information on this it will be really helpful.

Regards,
Aashish Ram Singhani
BI Dept, GE CIS ITServices

------------------------------------------------------------------------
---
Free 30-day trial: firewall with virus/spam protection, URL filtering,
VPN,
wireless security

Protect your network against hackers, viruses, spam and other risks with
Astaro
Security Linux, the comprehensive security solution that combines six
applications in one software solution for ease of use and lower total
cost of
ownership.

Download your free trial at
http://www.securityfocus.com/sponsor/Astaro_security-basics_040301
------------------------------------------------------------------------
----


---------------------------------------------------------------------------
Free 30-day trial: firewall with virus/spam protection, URL filtering, VPN,
wireless security

Protect your network against hackers, viruses, spam and other risks with
Astaro
Security Linux, the comprehensive security solution that combines six
applications in one software solution for ease of use and lower total cost
of
ownership.

Download your free trial at
http://www.securityfocus.com/sponsor/Astaro_security-basics_040301
----------------------------------------------------------------------------

---------------------------------------------------------------------------
Ethical Hacking at the InfoSec Institute. Mention this ad and get $545 off 
any course! All of our class sizes are guaranteed to be 10 students or less 
to facilitate one-on-one interaction with one of our expert instructors. 
Attend a course taught by an expert instructor with years of in-the-field 
pen testing experience in our state of the art hacking lab. Master the skills 
of an Ethical Hacker to better assess the security of your organization. 
Visit us at: 
http://www.infosecinstitute.com/courses/ethical_hacking_training.htm
----------------------------------------------------------------------------