Change encrypted password on mysql

Question

I am trying to enter the admin panel of a web which I don't know the password of, the web has an older backup where I can enter the admin panel, from the old db I copied the field of the old encrypted password that works on the new db, but it does not work, I don't know that much about webs, so I don't really know if the password field is linked to something that decrypts the password, thanks for you help.

Answer 1

If you want to change the encrypted password, you should know the encrypt algorithm first then you make the another one from plain text password that you know.

Example: you know the algorithm using md5, then u should encrypt text "password" into md5 algorithm then change the password from the db admin, you can encrypt plain text into md5 from this site https://www.md5hashgenerator.com/

Answer 2

Probabily will not work. Why?

When you pressing "log/start/sign in,etc", all data form are urlencoded and your password will be transform to hash, or encrypted AND hash. encryption doesn't matter really (a priori)

If your password is "helloword$1234" it will throw: "a3eb447769293c93f56060b4994a4149" so it means your password will not be "text plain" between client and server for avoid hooks & leaks. Some attackers can get your request with your urencoded data but will not get the real password (encrypted or not) because in throry hash's can not be reversed

Your server will get "a3eb447769293c93f56060b4994a4149" then server-app will get HASHED password from db table (never the real password) to compare between password submited; "a3eb447769293c93f56060b4994a4149" == "a3eb447769293c93f56060b4994a4149".

If you put "a3eb447769293c93f56060b4994a4149" (what you're watching in db table), in login form, that client (front end) will take this "a3eb447769293c93f56060b4994a4149" and will HASH YOUR HASH. So "a3eb447769293c93f56060b4994a4149" will output "5d88b7458b31365dc9860007dfca5685".- Then your server-app will get "5d88b7458b31365dc9860007dfca5685" and compare "a3eb447769293c93f56060b4994a4149" == "5d88b7458b31365dc9860007dfca5685" (false). It will reject your because you sent a hash hashed what will never be equal.