How to decode secret_key?

alexmisaila

Legend member

Trusted Uploader

May 9, 2020

1,140

922

133

⭐⭐⭐⭐⭐

• Nov 16, 2022

• #1

Hi,
I have a database and I have a row "secret_key"... It's possible to decode it?... Or how I can use it to login with the username?

I don't know to much about secret_key, that's why I'm curious

 

phpCore

ReLOADED

Trusted Uploader

Banned User

Jun 6, 2020

1,511

1,657

120

127.0.0.1/::1

• Nov 16, 2022

• #2

alexmisaila said:

Hi,
I have a database and I have a row "secret_key"... It's possible to decode it?... Or how I can use it to login with the username?

I don't know to much about secret_key, that's why I'm curious

Click to expand...

Need more details, what is the db and what is the script

 

alexmisaila

Legend member

Trusted Uploader

May 9, 2020

1,140

922

133

⭐⭐⭐⭐⭐

• Nov 16, 2022

• #3

phpcore said:

Need more details, what is the db and what is the script

Click to expand...

It's from a forum built with xenforo.
That are all the rows I have

 

Custom B

Active member

Feb 29, 2020

137

123

43

• Nov 16, 2022

• #4

alexmisaila said:

Hi,
I have a database and I have a row "secret_key"... It's possible to decode it?... Or how I can use it to login with the username?

I don't know to much about secret_key, that's why I'm curious

Click to expand...

it seems to be MD5 hash keys.. if it is, a md5 decrypt rainbow table would be an option

 

alexmisaila

Legend member

Trusted Uploader

May 9, 2020

1,140

922

133

⭐⭐⭐⭐⭐

• Nov 16, 2022

• #5

Tried some MD5 decrypters but didn't work

 

phpCore

ReLOADED

Trusted Uploader

Banned User

Jun 6, 2020

1,511

1,657

120

127.0.0.1/::1

• Nov 16, 2022

• #6

Custom B said:

it seems to be MD5 hash keys.. if it is, a md5 decrypt rainbow table would be an option

Click to expand...

No not a md5 hash: look there is a "-" and "_" chars

 

phpCore

ReLOADED

Trusted Uploader

Banned User

Jun 6, 2020

1,511

1,657

120

127.0.0.1/::1

• Nov 16, 2022

• #7

To know how to decode it, you need to investigate where this field is used and how the script is making the test to match user input if this one is really a password

 

Custom B

Active member

Feb 29, 2020

137

123

43

• Nov 16, 2022

• #8

phpcore said:

No not a md5 hash: look there is a "-" and "_" chars

Click to expand...

yes, you are right

 

alexmisaila

Legend member

Trusted Uploader

May 9, 2020

1,140

922

133

⭐⭐⭐⭐⭐

• Nov 16, 2022

• #9

phpcore said:

To know how to decode it, you need to investigate where this field is used and how the script is making the test to match user input if this one is really a password

Click to expand...

Being a xenforo database, I thought that maybe there is someone who knows what that row refers to and how it could be decrypted
I've found this website https://emn178.github.io/online-tools/index.html, I'm going to try all the possibilities and if I don't get anything, I leave it

 

Custom B

Active member

Feb 29, 2020

137

123

43

• Nov 16, 2022

• #10

alexmisaila said:

Being a xenforo database, I thought that maybe there is someone who knows what that row refers to and how it could be decrypted
I've found this website https://emn178.github.io/online-tools/index.html, I'm going to try all the possibilities and if I don't get anything, I leave it

Click to expand...

Password formula

How does XenForo hash passwords. sha1(username) . sh512(password) I'm wanting to update the following, an include xenforo in the mix.

xenforo.com