hashcat Forum

Hello,

I am unable to crack hash which includes letters from Latvian language, I am testing letter: Ä. In the link are more details, also I included hashes that I generated from websites, some of them are different. Maybe there is another way to run hashcat or I am just doing something wrong?

Thank you.

Code:
The word is: testÄ

SHA256: a048ff102912622f75e5c8543445764b94332c1144da7f18d9ffaf369b8c99c84

Code:
https://www.kreativekorp.com/charset/encoding.php?file=cp775.kte&char=83

cmd

Code:
hashcat-cli32.exe --hash-mode 1400 --attack-mode 3 --pw-min 5 --pw-max 5 --outfile crack.txt --custom-charset1 testÄ hash.txt ?1?1?1?1?1

hash.txt

Code:
https://www.insidepro.com/hashes.php

3cfe55fa45e09f07b800aaefc4aa2ca114fc52749dd4477e14c9594f93449626

8f7bfb9ce7e775ecdc51caced33faeebc6396dda38dfd0ef1843145475ae9093

https://quickhash.com/

0cae07af68af90dc6493a8acf700a2c4f9fa6d5f5aafbb2bd01e31f897c6935c

https://www.hashgenerator.de/

a048ff102912622f75e5c8543445764b94332c1144da7f18d9ffaf369b8c99c8

https://www.xorbin.com/tools/sha256-hash-calculator

a048ff102912622f75e5c8543445764b94332c1144da7f18d9ffaf369b8c99c8

this is most likely a charset problem.

Code:
> Desktop/hashcat-0.46/hashcat-cli64.bin -m 1400 /tmp/a -1 testÄ "?1?1?1?1?1?1" -a3 --pw-min 6

Initializing hashcat v0.46 by atom with 8 threads and 32mb segment-size...

Added hashes from file /tmp/a: 1 (1 salts)

Activating quick-digest mode for single-hash

NOTE: press enter for status-screen

a048ff102912622f75e5c8543445764b94332c1144da7f18d9ffaf369b8c99c8:testÄ

All hashes have been recovered

Input.Mode: Mask (?1?1?1?1?1?1)

Index.....: 0/1 (segment), 15625 (words), 0 (bytes)

Recovered.: 1/1 hashes, 1/1 salts

Speed/sec.: - plains, - words

Progress..: 14431/15625 (92.36%)

Running...: --:--:--:--

Estimated.: --:--:--:--

Started: Sun Aug 11 21:08:20 2013

Stopped: Sun Aug 11 21:08:20 2013

Code:
> echo -n Ä | hexdump

0000000 81c4                                   

0000002

Hello,

I have hash and I know there might be 2 of those special letters and its length is 5, so

Quote:hashcat-cli32.exe -m 1400 hash.txt -o crack.txt -1 char.txt "?1?1?1?1?1?1?1" -a3 --pw-min 5 --pw-max 7

char.txt (Encoded in UTF-8 without BOM)

Code:
teÄ“stÄa

hash.txt

Code:
0f508e3524bffea9ad417f945b6eb205d12767a8c8f0919c90797261cb4043a3

a048ff102912622f75e5c8543445764b94332c1144da7f18d9ffaf369b8c99c8

4f9f2c61e0e2151acd89e9a9bda89e0089de69cb3587b802427f5b79e14b89a1

59830ebc3a4184110566bf1a290d08473dfdcbd492ce498b14cd1a5e2fa2e441

crack.txt

Code:
59830ebc3a4184110566bf1a290d08473dfdcbd492ce498b14cd1a5e2fa2e441:tests

a048ff102912622f75e5c8543445764b94332c1144da7f18d9ffaf369b8c99c8:testÄ

4f9f2c61e0e2151acd89e9a9bda89e0089de69cb3587b802427f5b79e14b89a1:tÄ“sta

0f508e3524bffea9ad417f945b6eb205d12767a8c8f0919c90797261cb4043a3:tÄ“stÄ

Everything is working now, but I still haven't figured out something in my mind.

Thank you.

UTF8 needs two bytes (thus two chars) to encode the special chars.

It's correct what undeath said. To explain you need to understand how multichar bytes are used in your case.

The length for tests is 5, correct.
The length for testÄ and tÄ“sta is 6, not 5!
The length for tÄ“stÄ is 7.

By adding the special characters as charset hashcat splits them into 2 single byte characters. One of them indicates the utf8 mark, one the special character. Since its iteration through all of them because you do 7x?1 it brute-forces them, but not how you think it did it.

Also note that hash functions work blockwise, not charwise. They dont care about encoding.

Hello,

I wanted to know is there an option to use letters from charset only once. For example charset: testsÄÄ“s, so every letter is used only once except t is two and s three times.

Thank you.

you can use masks with letters.. for example

-1 ?d test?1

matches test0 - test9

read this please: https://hashcat.net/wiki/doku.php?id=mask_attack

wunuh

undeath

wunuh

undeath

atom

wunuh

atom