War2.ru Slogan
News: If your graphics are broken you can fix with the new ddraw version.
** Read how to install it here **


Welcome, Guest. Please login or register.
Did you miss your activation email?

Login with username, password and session length
Welcome to the forums! We're glad to have you here! :) You can register your account here, then feel free to introduce yourself in the Server.War2.ru board & let us know who you are on the server.

Prevent password reversing. 910  3

Death Knight Posts: 2553 Karma: +82/-4 *********

tupac

  • Death Knight
  • *********
  • *
  • Posts: 2553
    • View Profile
Prevent password reversing.
« on: June 15, 2015, 03:43:12 PM »
I'm testing this now I'm going to setup my pvpgn and see how it's takes this password.
<?php passwordhere(); ?>

It's broke the output on the reversing sites and also didn't return results for 13 billion possible.
Death Knight Posts: 2553 Karma: +82/-4 *********

tupac

  • Death Knight
  • *********
  • *
  • Posts: 2553
    • View Profile
Re: Prevent password reversing.
« Reply #1 on: June 15, 2015, 04:40:50 PM »
There you go that's how you contribute instead of take.
Grunt Posts: 80 Karma: +7/-0 ***

xboi209

  • Grunt
  • ***
  • Posts: 80
    • View Profile
Re: Prevent password reversing.
« Reply #2 on: June 15, 2015, 10:41:23 PM »
Please don't confuse the two terms encryption and hash. I know that StarCraft uses a broken version of SHA-1, which is known as XSHA-1, but I don't know about WarCraft 2 so I'll assume that they both use XSHA-1 for the rest of this post.
XSHA-1 hashes can be reversed and based on the allowed characters for passwords, the original password can be deduced. After deducing the original password, just handle it as any other modern server would.
You can also just use some combination of multiple rounds of SHA-2 and salt on the XSHA-1 hashes themselves.
Global Moderator Axe Thrower Posts: 415 Karma: +28/-2 *****

Warchief Lightbringer-

  • Global Moderator
  • Axe Thrower
  • *****
  • *
  • Posts: 415
    • View Profile
Re: Prevent password reversing.
« Reply #3 on: June 16, 2015, 01:10:34 AM »
Removed 3 posts from archer in this sub forum.