Parsing ASP.NET Core Identity password hashes for Hashcat cracking on embedded Linux systems

Summary

This article discusses the discovery of ASP.NET Core Identity password hashes on an embedded Linux system, which is an unusual environment for such hashes. The author explains how to parse and crack these hashes using Hashcat, covering different versions of ASP.NET Core Identity (v2, v3, and .NET 7.0+) that use PBKDF2 with HMAC-SHA1, HMAC-SHA256, and HMAC-SHA512. The vulnerability exposed password hashes without authentication, leading to an investigation to demonstrate password cracking and identify weak passwords.