AuthMe/XAuth Decrypter
Hey. I own a pretty big server.. And would like to know if there was a way to get the passwords from XAuth or AuthMe. Since some ppl use their real password.
AuthMe/XAuth Decrypter
I don't know what that is... 
Originally Posted by Ahmad
I don't know what that is...
Originally Posted by jyyt
Its both plugins that makes you do /register and /login for cracked servers.. But some premium users use their real password.. And it would be pretty cool to get these passwords :P Also if an Admin on another cracked server join, then he would probaly use the same password on both servers.. :P
I'm not a server owner. Originally Posted by Ahmad
I'm not a server owner.
Originally Posted by Ashurion
Would you make a hack if you had the plugin?
I use emYou cannot decrypt it. That's all there is to it. It uses an extremely secure custom hashing method which implements whirlpool into itself. It's completely one way. This is how the login/registration process works.
Registration
Client connects to server
Client types /register theirpassword
The phrase "theirpassword" is now converted into a secure hashed string and entered into the database with their username for safekeeping
Login
Client connects to server
Client typed /login theirpassword
The phrase "theirpassword" is converted to a secure hashed string again, and since their username is in the database already, it knows to check if their pass is real.
So is the hashed version of "theirpassword" in the database under their username?
If yes, it proceeds and lets them log in
If no, it stops them
It is literally 100% impossible to decrypt this algorithm unless you have hundreds and hundreds of years to spend.
However, if you were smart, you'd make a modified version of xAuth and put that up on your server instead. Get the source off of gitHub and remove the password hashing, then upload it to your server and run it on a new MySQL database.
Registration
Client connects to server
Client types /register theirpassword
The phrase "theirpassword" is now converted into a secure hashed string and entered into the database with their username for safekeeping
Login
Client connects to server
Client typed /login theirpassword
The phrase "theirpassword" is converted to a secure hashed string again, and since their username is in the database already, it knows to check if their pass is real.
So is the hashed version of "theirpassword" in the database under their username?
If yes, it proceeds and lets them log in
If no, it stops them
It is literally 100% impossible to decrypt this algorithm unless you have hundreds and hundreds of years to spend.
However, if you were smart, you'd make a modified version of xAuth and put that up on your server instead. Get the source off of gitHub and remove the password hashing, then upload it to your server and run it on a new MySQL database.
use cclogger.
This thread is closed for replies.
