hashcat Forum

Hi guys,

I have a question (I'm new to Hashcat btw). I have a SHA-1 hash which I want to recover using brute-force. The password starts with 3807744839 (which is the salt) . So the hash mode would be SHA1(salt.pass). I'm using the Hashcat GUI om Windows, and for some reason I get the Hashcat usage CLI prompt, as if it's missing something.

The command it generates is:

Code:
hashcat-cli32.exe --hash-mode 120 --attack-mode 3 --output-file C:\users\roy\hash.txt.out C:\users\royhochstenbach\hash.txt hashcat-cli32.exe --hash-mode 120 --attack-mode 3 --output-file C:\users\roy\hash.txt.out C:\users\roy\hash.txt

Am I missing something?

And what is the correct mask format for passwords starting with 3807744839 ?

You have 2 choices. Either you use --hash-mode 100 and put the 3807744839 in your mask (which is missing from your command line) or you put Hash:3807744839 and use --hash-mode 120 (still you need a mask).

(03-07-2013, 08:30 PM)mastercracker Wrote: [ -> ]You have 2 choices. Either you use --hash-mode 100 and put the 3807744839 in your mask (which is missing from your command line) or you put Hash:3807744839 and use --hash-mode 120 (still you need a mask).

Thanks for your reply.

I'm using the following command:

Code:
hashcat-cli32.exe --hash-mode 100 --attack-mode 3 --output-file C:\users\roy\hash.txt.out C:\users\royhochstenbach\hash.txt 3807744839

But then it quickly outputs the following lines:

Code:
Initializing hashcat v0.43 by atom with 8 threads and 32mb segment-size...

Added hashes from file C:\users\roy\hash.txt: 1 (1 salts)

Activating quick-digest mode for single-hash

NOTE: press enter for status-screen

Input.Mode: Mask (3)

Index.....: 0/1 (segment), 1 (words), 0 (bytes)

Recovered.: 0/1 hashes, 0/1 salts

Speed/sec.: - plains, - words

Progress..: 1/1 (100.00%)

Running...: --:--:--:--

Estimated.: --:--:--:--

Input.Mode: Mask (38)

Index.....: 0/1 (segment), 1 (words), 0 (bytes)

Recovered.: 0/1 hashes, 0/1 salts

Speed/sec.: - plains, - words

Progress..: 1/1 (100.00%)

Running...: --:--:--:--

Estimated.: --:--:--:--

Input.Mode: Mask (380)

Index.....: 0/1 (segment), 1 (words), 0 (bytes)

Recovered.: 0/1 hashes, 0/1 salts

Speed/sec.: - plains, - words

Progress..: 1/1 (100.00%)

Running...: --:--:--:--

Estimated.: --:--:--:--

Input.Mode: Mask (3807)

Index.....: 0/1 (segment), 1 (words), 0 (bytes)

Recovered.: 0/1 hashes, 0/1 salts

Speed/sec.: - plains, - words

Progress..: 1/1 (100.00%)

Running...: --:--:--:--

Estimated.: --:--:--:--

Input.Mode: Mask (38077)

Index.....: 0/1 (segment), 1 (words), 0 (bytes)

Recovered.: 0/1 hashes, 0/1 salts

Speed/sec.: - plains, - words

Progress..: 1/1 (100.00%)

Running...: --:--:--:--

Estimated.: --:--:--:--

Input.Mode: Mask (380774)

Index.....: 0/1 (segment), 1 (words), 0 (bytes)

Recovered.: 0/1 hashes, 0/1 salts

Speed/sec.: - plains, - words

Progress..: 1/1 (100.00%)

Running...: --:--:--:--

Estimated.: --:--:--:--

Input.Mode: Mask (3807744)

Index.....: 0/1 (segment), 1 (words), 0 (bytes)

Recovered.: 0/1 hashes, 0/1 salts

Speed/sec.: - plains, - words

Progress..: 1/1 (100.00%)

Running...: --:--:--:--

Estimated.: --:--:--:--

Input.Mode: Mask (38077448)

Index.....: 0/1 (segment), 1 (words), 0 (bytes)

Recovered.: 0/1 hashes, 0/1 salts

Speed/sec.: - plains, - words

Progress..: 1/1 (100.00%)

Running...: --:--:--:--

Estimated.: --:--:--:--

Input.Mode: Mask (380774483)

Index.....: 0/1 (segment), 1 (words), 0 (bytes)

Recovered.: 0/1 hashes, 0/1 salts

Speed/sec.: - plains, - words

Progress..: 1/1 (100.00%)

Running...: --:--:--:--

Estimated.: --:--:--:--

Input.Mode: Mask (3807744839)

Index.....: 0/1 (segment), 1 (words), 0 (bytes)

Recovered.: 0/1 hashes, 0/1 salts

Speed/sec.: - plains, - words

Progress..: 1/1 (100.00%)

Running...: --:--:--:--

Estimated.: --:--:--:--

Started: Thu Mar 07 20:00:28 2013

Stopped: Thu Mar 07 20:00:28 2013

Is my syntax incorrect?

No it is as mastercracker said. You need to add your salt to the hash in the stated format and then add a mask. See here how to configure it: https://hashcat.net/wiki/doku.php?id=mask_attack

(03-08-2013, 11:43 AM)atom Wrote: [ -> ]No it is as mastercracker said. You need to add your salt to the hash in the stated format and then add a mask. See here how to configure it: https://hashcat.net/wiki/doku.php?id=mask_attack

It's working, thanks! Smile

RHochstenbach

mastercracker

RHochstenbach

atom

RHochstenbach