# Hashcat — Final Results
# Date: 2026-09-22

## Summary

| Hash type | Source | Total hashes | Cracked | % |
|-----------|--------|-------------|---------|---|
| MD5 | sayasehat admin_tb | 4 | 3 | 75% |
| bcrypt $2a$08 | great-wall m_member | 5 | 3 | 60% |
| bcrypt $2a/b/y $08/$10/$12 | golden-gate authentication | 5,467 | 48 | 0.9% |
| bcrypt $2b/$2y | new (sql-migrate) | 9 | 2 | 22% |
| SHA-512 | apps_master m_user1 | 73 | 0 | 0% |
| phpass $P$B | WordPress admin | 1 | 0 | 0% |
| **TOTAL** | | **5,559** | **56** | **1%** |

## All unique cracked passwords

| Password | Hash type | Context |
|----------|-----------|---------|
| 123456 | MD5 + bcrypt (40+ hashes) | sayasehat mis, many golden-gate users |
| admin | bcrypt (10 hashes) | great-wall admin, golden-gate users |
| 654321 | bcrypt (1 hash) | golden-gate user |
| pharospharos | MD5 (1 hash) | sayasehat pharos admin |
| sayasehat333 | MD5 (1 hash) | sayasehat agency_external |

## Not cracked

| Hash type | Count | Notes |
|-----------|-------|-------|
| SHA-512 (apps_master) | 73 | Custom wordlist insufficient, d3v3l0p8015 already known from binary analysis |
| phpass (WordPress) | 1 | admin@vitropic.co.id — vitropic.co.id is dead anyway |
| bcrypt (golden-gate) | 5,419 | Mostly $2a$12 (cost 12 — very slow to crack) |

## Actionable credentials for testing

| Email/Username | Password | Source |
|----------------|----------|--------|
| pharos (sayasehat) | pharospharos | MD5 cracked |
| agency_external (sayasehat) | sayasehat333 | MD5 cracked |
| mis (sayasehat) | 123456 | MD5 cracked |
| admin (great-wall) | admin | bcrypt cracked |
| sa (great-wall) | admin | bcrypt cracked (same hash) |
| Multiple golden-gate users | 123456 | bcrypt cracked |
| admin (vitropic WordPress) | NOT cracked | phpass |

## Note on SHA-512

The 73 SHA-512 hashes from apps_master.m_user1 include users whose passwords
were already recovered from binary analysis (d3v3l0p8015 = 17 users).
These were NOT cracked by hashcat but are known from plaintext sources.
The remaining 63+ SHA-512 hashes need a larger wordlist (rockyou.txt not
available on this host).