Skip to content

Instantly share code, notes, and snippets.

@thiskevinwang
Last active September 29, 2023 00:17
Show Gist options
  • Save thiskevinwang/ca2878493be0495ebb455084e404d111 to your computer and use it in GitHub Desktop.
Save thiskevinwang/ca2878493be0495ebb455084e404d111 to your computer and use it in GitHub Desktop.
$100 Password hack challenge

Sep 28, 2023 - $100 Password hack challenge

What is this?

Here is a simulated scenario where you are a hacker and you have gained access to a passwords database. For simplicity, there are only 2 rows.

...the bounty...

I (@thiskevinwang) will venmo $100 USD to the first person who can provide the password behind either of these two rows.

Why?

Curiousity — I want to see the efficacy of a certain approach to password storage as well as the potential of bad actors.

Additional notes

  • Feel free to comment thoughts or solutions

Warning

Offer expires Oct 9, 2023 🤣

prefix salt hash iterations
s3A_s54e bF7953tO/j6VJ+ChdyziEndsOk4c158+Fm22H9iaRpMUgajLCDjVi5IY5TDtam659DysCDvwJqF2f6YI5si1tcF202cparZ1LxD+orQqGri5HFib9+jwzSVYNZIGqaYpmL2NitEpbElHkGqLHVkttluF/8sWXmr6XRXHMR+FhsU= 8ad049fa8d5801ad599d28209fcdd9e78c9d25c01c8c3b32cc219e74ee6e791ade8a2469622f6b49a2a0ba2779c862b6a3a044c4b6047a25efc29c1dfc34db11 100000
BZqaTRaS jMBiQ/Dp+O2qmyzf2imRF4rd82/0XWe+gleugQgg8gZ6T9P+qoCsOxsD2XmU9vzGLogr9nUOG9bVjFIKI2zqA812PbXevVqlwXdcnTLLjmxyjfnjYXK00e3LTxrYVd7VLfrv6p1W8jqBFL6LWT/CcI/OgmAfikk2GABNQ6eQLRg= f37ef985d961880eaf750d7b8f9de129399ba0ae0e90d5bdbf32f91792041b1b3f974c21d4d3a42f92602789ccaa7833e487152211dc0a62efd1c43b9ffd903d 100000
@thiskevinwang
Copy link
Author

I just got rejected by ChatGPT 🎉

Conversation: https://chat.openai.com/share/2f0f7b14-c699-4f8a-9994-fd2018fa1b3a

Me:

Given a salt:
bF7953tO/j6VJ+ChdyziEndsOk4c158+Fm22H9iaRpMUgajLCDjVi5IY5TDtam659DysCDvwJqF2f6YI5si1tcF202cparZ1LxD+orQqGri5HFib9+jwzSVYNZIGqaYpmL2NitEpbElHkGqLHVkttluF/8sWXmr6XRXHMR+FhsU=

and hash
8ad049fa8d5801ad599d28209fcdd9e78c9d25c01c8c3b32cc219e74ee6e791ade8a2469622f6b49a2a0ba2779c862b6a3a044c4b6047a25efc29c1dfc34db11

and iterations, 100000

Give me the original password that this hash is generated from

ChatGPT:

I'm very sorry, but I can't assist with that.

Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment