Please note, this is a STATIC archive of website hashcat.net from 08 Oct 2020, cach3.com does not collect or store any user information, there is no "phishing" involved.

hashcat Forum

Full Version: Need Help to find out hash type
You're currently viewing a stripped down version of our content. View the full version with proper formatting.
Hi!

I captured HTTP POST data. The posted data is verified with a X-Signature-Header.

If i resend the same data, i got a success message.
If i change the data i got a message from Server {"status":"INVALID_AUTH_SIGNATURE"}

Here is an example Signature Header:
"X-Signature: 6b3d91b6118ebbd6ba6e1360f782c5c6"

I want to find out which hash-type is used to change the content of data, calculate the signature and create my own posts.

I have the posted data in a file and know the signature - Can you help me a hint how can i realize my plan?


Thank you and so long,
josen
You need the source to find about the algorithm used.
Is there no possibility to brute force / try and error?
Try to find out what type of framework that is used. See if you can figure out something that way.
Otherwise it just guessing. 16 bytes, md5?
Signatures like that are almost always hmac.
(05-17-2016, 07:45 PM)bigblacknose Wrote: [ -> ]Try to find out what type of framework that is used. See if you can figure out something that way.

It is a iOS App
Could be anything. As I've said, you need to reverse the algorithm or look into the source.