Please note, this is a STATIC archive of website hashcat.net from 08 Oct 2020, cach3.com does not collect or store any user information, there is no "phishing" involved.

hashcat Forum

hashcat Forum > Misc > General Talk > Process in HashCat $mskrb5$
Full Version: Process in HashCat $mskrb5$
You're currently viewing a stripped down version of our content. View the full version with proper formatting.

catice

02-24-2017, 12:14 PM
There hash intercepted via Intercepter-ng:
Code:
Kerberos Auth 10:44:53/24/02/17 192.168.5.194/192.168.1.101:88 BRUTE WITH JTR rc4-hmac DOMAIN.COM\tester:$mskrb5$$$A643483079D9E3CC6F14D3C1CB6CCC4E$601841F258521CD7A97A0032DC61E1050EC45FFFAF14A68851C91C4B925036C1864525DE
John Ripper with it normally works.
How to process it in HashCat?
If the format string as:

Code:
$krb5pa$23$tester$DOMAIN.COM$salt$A643483079D9E3CC6F14D3C1CB6CCC4E$601841F258521CD7A97A0032DC61E1050EC45FFFAF14A68851C91C4B925036C1864525DE

it is necessary to remove the symbol                              ^

and password, which I know is not suitable (((

Tell me, where did I go wrong?

atom

02-25-2017, 12:12 PM
You need to move the salt after the hash:

Quote:$krb5pa$23$tester$DOMAIN.COM$salt$601841F258521CD7A97A0032DC61E1050EC45FFFAF14A68851C91C4B925036C1864525DEA643483079D9E3CC6F14D3C1CB6CCC4E

catice

02-27-2017, 12:44 PM
Yes, its work!!!!!
Very thans!
hashcat Forum > Misc > General Talk > Process in HashCat $mskrb5$