All language subtitles for 7. Password hashing and dehashing

In this video, we're going to take a look at on passwords now passwords are typically stored in what's

called a hash value or an encrypted value.

Now, these are typically either SHA one, 128 or SHA256 types of hashes.

And if you're dealing with data dumps, chances are you're going to find more hash passwords than you

are going to be plain text passwords.

And if you need to be, you know, if you need to be able to see what that password is.

You could actually use a program to rehash it, popular ones or things like John the Ripper, John the

Ripper will actually go in and try to de hash password.

You could you could try to use brute force techniques and whatnot.

Another method is we're going to take a look at a website called.

MD5 hash, inordinate forward slash hash.

Now this is pretty easy to to use, and we could take a look at how it works on both ends.

So I'm going to calculate a hash.

I'm going to type in a plain string, OK, so I'm going to type in password and we're going to just

hash this.

And this is what password looks like as a MD5.

OK, so I'm going to copy this here.

OK, and we're going to go back to hash on hash, so.

If we go to MD5, I know the MD5 password hash of paces in here, and we're tried to code it.

OK.

And.

We got through there, and let's take a look.

We could see the password is password right there.

And this is what was the actual MD5 password hash.

So if we go back in here, we could actually click down here to see all the different values here Mdm2

a.45 Sha one shot 224 256.

384 or 512 and so on and so forth, there's actually quite a number of different hash values in here.

And we also take a look at recently hash list here.

And these are typically the password hashes that were already uploaded here, and these are the cracked

hash value.

So if you have a hash value, you can also do a search and just see if that particular password came

up before.

Doesn't necessarily mean it's the user that you're looking for.

It just could mean, well, quite possibly that it's the same type of password that someone else to

use, which is probably going to be a common password.

However, the great thing is if you find a person with a unique password, and that's what we're always

hoping for a unique password because after all, unique passwords are going to be much more secure than

saying using password or admin.

Or any number of really terrible passwords that could be cracked pretty quick.

Having a unique password, finding that unique password or or even that unique password hash, we could

potentially find that password being used somewhere else because let's be honest, people are typically

really bad about passwords.

They tend to reuse the same password for several things and finding that password value, we could potentially

find that other accounts that person use that password at.

So again, this was about hashing passwords, hashing passwords, how it works and how to rehash it.

And again, we're using MD5 hash dot net for this.

Thanks for watching.

I'll see you next VIDEO.