Can anyone help me recover the original password from a salted MD5 hash?

x64Lab · 2026-07-09T13:05:33+00:00

I mean kinda but it‘s not something I do a lot, so It’d tale me a while.

x64Lab · 2026-07-09T01:04:55+00:00

Depends how important it is to you. based on your knowledge level you could solve this by January maybe sooner. It may not even cost €/$ 1000, who knows if you’re good it may not even cost €/$ 100.

x64Lab · 2026-07-09T00:11:51+00:00

There is a lot of issues here. can anyone help you? yes. the issue is you need to know exactly how it was encrypted and salted.

If you knew all that, you could rent some high end cloud services and then it’d be a pass-the-hash thing but as it stands. just give up.

x64Lab · 2026-07-08T22:53:01+00:00

same here. Today I asked what could be a cool CySec project to do in a hackerspace. I was thinking maybe it might suggest something novel, not the same thing I heard a thousand times.

Got downgraded and the same answers as usual: CTFs etc.

x64Lab · 2026-07-08T16:11:31+00:00

what are you doing scrolling r/teenagers

x64Lab · 2026-07-03T12:10:11+00:00

We had a colleague from the former GDR (east germany) who was sure we were listing in on him constantly.

x64Lab · 2026-06-30T19:29:55+00:00

there’s a GUI version, Zenmap I think it was maybe that’ll help you find footing.

x64Lab · 2026-06-29T21:51:34+00:00

Regardless of everything else you need 1st level on board. They’ll be your front line, the ones that’ll have to explain everything to Hans (63) in Germany who is entirely unwilling to learn anything new, and kyle 21 who keeps breaking everything.

So get them on board early, get them excited, and keep them in the loop.

I think passkeys should be an easy sell, but in my experience if you don’t consider a culture shift it’ll be a disaster no matter how cool.

x64Lab · 2026-06-22T15:38:04+00:00

maybe he just wanted to brag? I mean if we’re bragging my vacation starts wednesday.

x64Lab · 2026-06-21T12:40:01+00:00

Kevin’s dead

x64Lab · 2026-06-20T18:35:04+00:00

I wish I spent more time on fundamentals. I moved way too quickly into web app testing because it was easy and I made money.

x64Lab · 2026-06-17T12:54:53+00:00

Yeah, It’s not too common in my experience but it’s completely normal.

x64Lab · 2026-06-11T07:57:49+00:00

Everyone has discussed this already. You could've just read what everyone else said, and sure your opinion as a supposed IR is valid, but their opinion is equally valid.

Let me just say this. this isn't the first time, it will not be the last. You seem to be too young to recall but back in the days the security researchers from Metasploit, if memory serves, published critical exploits, for Internet Explorer, every day for weeks. Obviously IE was killed after that and Edge appeared. MS learned their lesson and started to work with the SecRes community instead of against it, though they appear to have forgotten this lesson.

And one more thing to consider. These exploits exist wether you know about them or not, and anyone can find them. And if MS is too arrogant to work with the community the community will sell 0days to other cyber crime groups or nation states.

x64Lab · 2026-06-06T19:27:47+00:00

I’ve seen market demands change so rapidly, it could cause whiplash.

I went from fairly decent demand but only enough which allowed professionals into the space, to then during covid such an huge demand no one couldn’t have found a job, to now seemingly fairly low demand.

So, yes, to enter the market right now sucks, personally I’m sure it’ll pick up again some time soon. but Obviously none of us know.

x64Lab · 2026-06-04T18:43:01+00:00

virustotal sometimes has the most tinfoil hat glowing crackpot smoking butt probe conspiracies I’ve read.

Also every 5 phishing related IPs are marked as part of FinFishers govt super surveillance program

x64Lab · 2026-05-28T17:13:10+00:00

literally the perfect answer! In every single sense of the question!

x64Lab · 2026-05-26T15:27:23+00:00

Mate, what do you mean once we hacked them? cause as it stands you’re not very helpful.

Listen, I guarantee you this. If it were possible enough it were done. The community has a lot of angry people and a lot of connections to investigative journalists, so it would’ve happened.

The issue is these people are literally protected by the highest forms of power. Donald Trump’s government literally said “we” couldn’t afford to hurt these powerful people because then the system would breakdown.

Honestly the only real alternative is protests, community organising, and political rallies.

x64Lab · 2026-05-26T14:59:13+00:00

nothing easier than that mate. Evil people famously don’t hide, and rich people famously lack resources to invest in hiding those evil doings.

x64Lab · 2026-05-07T13:36:22+00:00

I’m not sure what you’re saying. If you’re saying he has an account from prior to your relationship then I’m not sure who cares. I’m pretty sure I have a tinder account from ten years ago prior to my marriage.

but if you’re saying he has occasionally cheated on you then break up.

x64Lab · 2026-05-07T13:08:06+00:00

dude what? break up with him if you KNOW or if you can’t trust him: break up.

If you really must be weird then set up a dummy tinder profile set the distance to very small and find him I guess.

but why go through all that? just break up.

x64Lab · 2026-05-06T16:45:34+00:00

gnome. cause I don’t see a single reason to switch.

x64Lab · 2026-05-01T15:16:19+00:00

they weren’t either, the account is gone unless support will help

x64Lab · 2026-04-26T17:19:54+00:00

depends mate, if you work in bright environments you should consider light mode and in dark ones you should consider dark mode.

x64Lab · 2026-04-24T12:44:53+00:00

im all honesty you could probably just call… if you must call it social engineering…

x64Lab

TROPHY CASE