Please note, this is a STATIC archive of website hashcat.net from October 2020, cach3.com does not collect or store any user information, there is no "phishing" involved.

hashcat Forum

Full Version: Output with --show help.
You're currently viewing a stripped down version of our content. View the full version with proper formatting.
Basically, I have a file which looks like.

email:hash

And I have a file which looks like

hash:pass.

I've tried writing a script to match these up, but I fucking failed. I want the output to be like email:pass.

I've tried looking at replied on here from earlier threads, but It's not working for me.

This Is what I'm using.

Code:
oclHashcat-plus64.exe --show --outfile [output file] --outfile-format 2 [dicts]

But I'm getting this error.

Code:
Usage: oclHashcat-plus64.exe [options]... hash|hashfile|hccapfile [dictionary|mask|directory]...

Try --help for more help.

I've tried adding -m 3000 (it's plain md5 hashes), but it's not helping.

Any input is appreciated.
oclHashcat-plus's --show is too simple to do that.

Apparently, you're on Windows. So grab gawk (Google it) and run the following kinda-ugly one-liner:
Code:
gawk -F: "FNR==NR{a[$2]=$1;next} $1 in a{print a[$1] FS $2}" email.hash.txt hash.pass.txt > email.pass.txt
Note: Pwds with ':' in them will not get extracted correctly.
(10-28-2012, 12:14 AM)M@LIK Wrote: [ -> ]oclHashcat-plus's --show is too simple to do that.

Apparently, you're on Windows. So grab gawk (Google it) and run the following kinda-ugly one-liner:
Code:
gawk -F: "FNR==NR{a[$2]=$1;next} $1 in a{print a[$1] FS $2}" email.hash.txt hash.pass.txt > email.pass.txt
Note: Pwds with ':' in them will not get extracted correctly.

Worked like a charm bro.

Thanks so much Smile