“Nothing is more permanent than a temporary solution.“

– Russian Proverb

Introduction:

This is a continuation of my write-up about this year’s Crack Me If You Can challenge. You can view the previous entry focusing on the StripHash challenge [here]. Like the last write-up, this one is going to focus on one specific hash format (RAdmin3), details about that hash format, and how to load those hashes into a cracking session. I’m going to defer most of the actual cracking of these passwords to a later writeup though since running a successful cracking session relies on solving other challenges found throughout the contest.

Important Links, Tools, and References for this Post:

• Synactiv’s blog post: Cracking Radmin Server 3 Passwords
• Link: https://www.synacktiv.com/en/publications/cracking-radmin-server-3-passwords
• Reason: This is really an amazing blog post going into dumping Radmin password hashes, reverse engineering their hashing algorithm, and then cracking them. I can’t recommend this write-up enough if you want to crack Radmin password hashes.
• radmin3_to_hashcat.pl
• Link: https://github.com/hashcat/hashcat/blob/master/tools/radmin3_to_hashcat.pl
• Note: This tool is part of the base Hashcat install
• Reason:
  
  […]
  Content was cut in order to protect the source.Please visit the source for the rest of the article.
  This article has been indexed from Security Boulevard

  Read the original article:

  CMIYC 2024: RAdmin3 Challenge