hashcat Forum

Heya everyone.

I have a hash that is in the following format: md5(md5($username.$pass).$salt)

The username is the same for every single hash and it has no salt.

I've tried multiple methods with hashcat but I keep failing. I've tried with passwordsPro and it retrieved the password correctly (but I really hate passwordspro D.

Any suggestion?

Thanks.

Your commandline? How can we help you if you provide no details?

Hmm, you state the algorithm is "md5(md5($username.$pass).$salt)", but then state that the username is static and it has no salt. So it does not seem like you have the correct algorithm, and it seems like the algorithm is likely md5(md5($pepper.$pass)).

You can simulate this algorithm with -m 2600 and prepending the pepper on each attack.