|
Search Results
|
| Post |
Author
[asc]
|
Forum |
Replies |
Views |
Posted |
| |
|
Thread: Decrypting usenet headers
Post: Decrypting usenet headers
| I am trying to decode some of the headers from some posters on usenet, to determine if they post from the same host. One is using individual.net as provider and the other is using eternal-september.... |
|
Somnambulist |
hashcat
|
11 |
20,396 |
09-23-2016, 10:19 PM |
| |
|
Thread: Decrypting usenet headers
Post: RE: Decrypting usenet headers
|
radix Wrote: (09-25-2016, 12:34 AM)
--
If we pull out the Salted__ bit then you get a len consistent with a number of hash types (32). However that means the salt is hiding elsewhere. Without see... |
|
Somnambulist |
hashcat
|
11 |
20,396 |
09-26-2016, 07:14 AM |
| |
|
Thread: Decrypting usenet headers
Post: RE: Decrypting usenet headers
|
pragmatic Wrote: (09-30-2016, 12:12 AM)
--
TL;DR version of your original question: it's very doubtful you're going to be able to make this correlation, at least not without more information.
--
Th... |
|
Somnambulist |
hashcat
|
11 |
20,396 |
09-30-2016, 11:30 AM |
| |
|
Thread: Decrypting usenet headers
Post: RE: Decrypting usenet headers
|
rico Wrote: (09-30-2016, 11:05 PM)
--
Somnambulist Wrote: (09-30-2016, 11:30 AM)
--
Yes, it's just a md5 IP, so that cracks in under a second with hashcat.
--
I'm intrigued. Do tell.
--
Using ha... |
|
Somnambulist |
hashcat
|
11 |
20,396 |
10-02-2016, 09:59 AM |
| |
|
Thread: Decrypting usenet headers
Post: RE: Decrypting usenet headers
|
pragmatic Wrote: (10-03-2016, 07:04 PM)
--
Thanks for the samples, Somnambulist. I'm not seeing any obvious patterns, but it's strange though, it seems like every one of them is missing at least one ... |
|
Somnambulist |
hashcat
|
11 |
20,396 |
10-08-2016, 06:14 PM |
| |
|
Thread: Decrypting usenet headers
Post: RE: Decrypting usenet headers
|
Somnambulist Wrote: (10-08-2016, 06:14 PM)
--
pragmatic Wrote: (10-03-2016, 07:04 PM)
--
Thanks for the samples, Somnambulist. I'm not seeing any obvious patterns, but it's strange though, it seems ... |
|
Somnambulist |
hashcat
|
11 |
20,396 |
10-09-2016, 11:29 AM |
| |
|
Thread: Decrypting usenet headers, part 2
Post: Decrypting usenet headers, part 2
| So the troll/spammer has changed to Google Groups and is using a VPN for the IP, but all posts have a "posting-account" header, which is encoded, and I was wondering if anyone of you guys could see wh... |
|
Somnambulist |
hashcat
|
1 |
2,138 |
02-08-2017, 06:26 PM |
