I'm trying to figure out how an ARM-Based device running Busybox Linux is storing hashes for users in a configuration file. Basically, the system allows you to backup the entire configuration to a file. Within this file I can see the hashes for one of the default accounts - admin.If I configure the admin password to be test, I get this hash in the output file:3785a9c61b587f2ff0dd7132db844f14Being a 32 character hash, I suspect it's MD5. I know from testing that if I configure one of the other built-in accounts to have the same password, the hash is different. So it seems that whatever the hashing algorithm, it probably does something like concatenate the username and password together before hashing. I've tried a bunch of combinations, and am thinking I might just have to try brute force. Seeing as i know the username and password, I suppose I could do a custom dictionary attack or something.Any suggestions ?
Determine Hash Method - Busybox Linux
linux;hash functions