hashcat Forum

Hi all, I've done a ton of reading and watched videos but I cant figure this out, So I joined the forums for some pobbile help! 
Right this is where im at...

I've got a Musicoin wallet .json file I cannot remember the password to.

I ran the file through the ethereum2john.py script and it spat out my hash. 

I shows the first part as $ethereum$s*262144*8*1* so I think this is a SCRYPT v3 which is gpu resistant.

I think I roughly know the password so was hoping to use a mask to help solve it.

I wanted to start out buy running a standard dictionary attack at it to see if hashcat worked and I got this....

C:\hashcat>hashcat64 -m 15700 -a 0 -w 3 .\hashes\music.txt .\wordlists\john.txt
hashcat (v4.0.1) starting...

* Device #2: Not a native Intel OpenCL runtime. Expect massive speed loss.
             You can use --force to override, but do not report related errors.
OpenCL Platform #1: Advanced Micro Devices, Inc.
================================================
* Device #1: Ellesmere, 3840/4096 MB allocatable, 32MCU
* Device #2: Intel(R) Core(TM) i7 CPU         920  @ 2.67GHz, skipped.

Hashfile '.\hashes\music.txt' on line 1 ( ■$): Line-length exception
Hashfile '.\hashes\music.txt' on line 2 (): Line-length exception
Hashfile '.\hashes\music.txt' on line 3 (): Line-length exception
Hashfile '.\hashes\music.txt' on line 4 (): Line-length exception
No hashes loaded.

Started: Mon Jan 15 19:23:57 2018
Stopped: Mon Jan 15 19:23:57 2018


any pointer would be great.

onis

You need to make sure that the hash file (the first file that you specified, e.g. .\hashes\music.txt) does contain the hash that you extracted by ethereum2john.py.

I think you didn't store the output of ethereum2john.py to the file. The content of the hash file must look similar to the hashes that you can find here: https://hashcat.net/wiki/example_hashes (search for 15700)

(01-15-2018, 11:57 PM)philsmd Wrote: [ -> ]You need to make sure that the hash file (the first file that you specified, e.g. .\hashes\music.txt) does contain the hash that you extracted by ethereum2john.py.

I think you didn't store the output of ethereum2john.py to the file. The content of the hash file must look similar to the hashes that you can find here: https://hashcat.net/wiki/example_hashes (search for 15700)

yep its exactly the same format...... as the text shown next to 15700..?

maybe a BOM problem? Or even a totally weird encoding like UTF16?

Exactly. As undeath already pointed out there is a problem with the format or encoding of your hash file, it could be one of these:
1. wrong path to the actual "hash" (you point to the original wallet file instead of the extracted hash?)
2. you extracted the "hash" with powershell or manually set the default character encoding of your shell to something different than ascii/utf8 (maybe utf16 is used)
3. for some reason extra BOM characters were added to the file
etc

It's very clear from your output above:
that hashcat discovered 4 lines within the file .\hashes\music.txt . This shouldn't be the case with a correctly formatted "hash" file extracted by ethereum2john.py by using python 2.7 on the cmd (not powershell with special character encoding).

I would suggest that you open the file .\hashes\music.txt in a text editor.
Copy-paste everything starting from the $ethereum$ signature to the end of the line.
Insert it into a new file and make sure that you safe it with ASCII character encoding.

Ok so things to double check......... should the hash be on a single line in the .text document?
I have a hash that is 1 line 215 char long.
I had originally set it out like is seen on the example hashes page?!

I cannot see an ASCII option in notepad++ or ven just normal notepad.
just ANSI, UTF8, UTF8 BOM etc....

Hi there!
I also have Musicoin wallet file with 62 char ciphertext


mb its something like here ? https://github.com/paritytech/parity/issues/2263

Yes if i open my key file it has that exact same format.

Did you get it to run?

(01-16-2018, 08:24 PM)onis_uk Wrote: [ -> ]Yes if i open my key file it has that exact same format.

Did you get it to run?

for 62 char ciphertext i get



if ciphertext 64 char - all is OK (except speed :p)

still says no hashes loaded tho?