Mappery.com 208,000 Email:HMAC_SHA1
by trikky - December 11, 2018 at 05:49 AM
#1
Mappery.com 208,000 email:hmac_sha1

Dumped December of 2018

Sample:
[email protected]:298848cef6105aa6f508440cb670a20bf3c2032b
[email protected]:1279748fe7d638cacc257b0a2b3f057d2e3c183d
[email protected]:04049c5436a9a47eda06f00d3358e959ea7bb433
[email protected]:80fc8b2ccfe6eafdd38231ce92486ced07594d8b
[email protected]:bb03d811fbd644225f9b23e841f525efa3ae1162
[email protected]:f61b5e6ea0900b433979b11ed8fae4599c4761f1
[email protected]:ea7259702ea8e3112319e3fec136829e8f24d365
[email protected]:c3b7a935d5600eeaa42f15af11e402dbe96db358
[email protected]:314f52a39763d2f9cfc3f3cdbe8828a5cf042363
[email protected]:d395e228141ccd4b53ec2aa42961a30b2dc0da20
[email protected]:17fe4a82a4ad1efdd2517310b4fa4ad094a85514
[email protected]:bb03d811fbd644225f9b23e841f525efa3ae1162
[email protected]:12f61125db9ddcfdb0de68d2a27edd0a5e9cd6ce

Download :
Hidden Content
You must register or login to view this content.


The hashing algorithm is hmac_sha1(key,data) where both key and data is the user's password
Reply
#2
yessss!!!! good work!
Reply
#3
hash dont decoding, Im think forgot about salt, or sha1 was modified
dont spend credits
Reply
#4
thanks ur aweome i will try it
Reply
#5
(December 11, 2018 at 07:50 AM)Bobr Wrote: hash dont decoding, Im think forgot about salt, or sha1 was modified
dont spend credits

I hadn't gotten around to taking a look at dehashing this dump yet so thanks for checking that out. I've messaged the source I got this from asking them to provide any salt that may be part of the leak. Will update thread when I hear back
Reply
#6
[Image: Pevl7NX.jpeg]


this dump has no salt.
Reply
#7
Start your own thread don't hijack this one. Also your proof link is dead soz..
Reply
#8
(December 11, 2018 at 01:08 PM)irakliss Wrote: [Image: Pevl7NX.jpeg]


this dump has no salt.

comrade from screenshot you must have real data? may you link
Reply
#9
yessss!!!! good work!
Reply
#10
The password is also the key, so you have to bruteforce that aswell.

eg.. HMAC-SHA1

8fcb68e3a75891b9b22f76afca44e3d32075a6a4:Calliope:Calliope
a78064eefaaed42841c4124f8982b073b886b62a:Lottery:Lottery
3782f4090ac6c8a172b7b93e2b380f9e024b6aa5:Bermuda:Bermuda
f7608ae495598e81932d242983a9831b09d70825TonguearisTonguearis
54daaed590890ad613b7ba178240ca72aae530c9:Galapagos:Galapagos
315f01a9e184415e68c74aed462cae5bf33c5a6e:Sally:Sally
f5f7bd3bdd84f784cdd7ecaf288213454c55a2ffTonguealmettoTonguealmetto
f615897db26efac8eccb56ee37b9b2e8b0388166:Intelligent:Intelligent
Reply
#11
wtf the salt is the same as the pw?
Reply
#12
(December 16, 2018 at 05:47 PM)rwkregime Wrote: wtf the salt is the same as the pw?

It's an hmac generated sha1 hash so there really isn't a "salt" but yes the hmac is generated using the password for both key and data which is.... well stupid.
Reply

Possibly Related Threads…
Thread Author Replies Views Last Post
Dropbox 1.000.000 decrypted dataforcontact 73 16,033 January 22, 2020 at 10:24 PM
Last Post: marffa
Edmodo.com 1,000,000 Cracked dizzy2020 37 5,223 January 16, 2020 at 03:15 PM
Last Post: samyepitsme
build email lists for Email Marketing to Grow Your Email List aisdata 4 579 November 19, 2019 at 11:07 PM
Last Post: aisdata

 Users browsing this thread: 1 Guest(s)