hashcat Forum

I just wanted to crack every possible hash, so i mkade my self a charset, which contains all chars in hex, and used it in bruteforce mode in oclHashcat. I was surprised, because it looks like ther would be after many hashes a double [LF] or in hex 0x0A. So in the pot file, there are many blank lines, because double [LF] is just like ENTER.

I don't know, how to handle this.

I just had a few thoughts how that could be happen, and then i discovered, that when you log into a website, you often use ENTER to log in, instead of pressing the login button.

extract of the pot file:

with odd plains like this it's good to use one of the outfile formats that include hex_plain

hitting enter on an html form won't actually append a line feed, unless it's a multiline text box. it's more likely that the algorithm used is md5(pass . "\n") or something

ok, nice to know.
I tried that already, i still get blank lines.

you will still get the blank lines, yes. there is no avoiding that...

Yes, this is a common technique. Some websites use CR as salt which leads to all kind of confusing results.

You can use

instead; then at least hash and password will be in hex, except the :'s of your separator character. I don't know if the salt's in hex in this mode or not, though.

Is it possible to append ($) a linefeed (hex 0a) to a dictionary attack using rules?

of course it is possible to write a rule for this.

^[tab]+0{

Insert a tab character at the start of the word. Increment it (0x9 -> 0xa). Rotate it into position.

nice