Howdy, Stranger!

It looks like you're new here. If you want to get involved, click one of these buttons!

Hash generator for IBM System i hashes (DES, SHA-1) updated

edited September 2016 in IBM i security
Our hash generator has been updated, see http://www.hackthelegacy.org/attachments/pwd400gen.py for new version.

Updates 2016-09-03
- the DES algorithm has been updated, credits to @5up3rUs3r for finding the bugs. In case of passwords > 8 chars, AS/400 stores apparently both PW_TOKENa and PW_TOKENb (ref. RFC2877, 5.2) instead of the PW_TOKEN value (PW_TOKENa XOR PW_TOKENb)
- some specific password/username combinations were causing overflow error in the DES algorithm. Fixed.
Sign In or Register to comment.