|
Search Results
|
| Post |
Author |
Forum |
Replies |
Views |
Posted
[asc]
|
| |
|
Thread: Reversing MSCHAPv2 to NTLM
Post: RE: Reversing MSCHAPv2 to NTLM
| I'm trying to replicate this with some NetNTLMv1 hashes I captured during a pentest. I used moxie's chapcrack to generate the base64 encoded string:
Code:
--
./chapcrack.py radius -C 7cf8afb4c3b35... |
|
fuzztester |
User Contributions
|
18 |
36,629 |
11-01-2016, 04:21 PM |
| |
|
Thread: NetNTLMv1 Hashes not parsing
Post: RE: NetNTLMv1 Hashes not parsing
| Hashcat 2.0 this did work:
Code:
--
./hashcat-cli64.app -m 5500 netntlmv1.txt -a 3 ?a?a?a
Initializing hashcat v2.00 with 8 threads and 32mb segment-size...
Added hashes from file netntlmv1.t... |
|
fuzztester |
hashcat
|
2 |
4,967 |
11-01-2016, 02:53 PM |
| |
|
Thread: NetNTLMv1 Hashes not parsing
Post: NetNTLMv1 Hashes not parsing
| Good morning!
I recently captured netntlmv1 hashes from an engagement I'm on and they are not being parsed by hashcat. I remember doing this in the past, so i'm not sure what happened.
I also tried ... |
|
fuzztester |
hashcat
|
2 |
4,967 |
11-01-2016, 02:21 PM |
| |
|
Thread: Hashes from freeradius-wpe
Post: RE: Hashes from freeradius-wpe
|
rajak Wrote: (08-28-2013, 04:15 PM)
--
fuzztester Wrote: (08-28-2013, 03:59 PM)
--
bob:$NETNTLM$a415001cd5900a32$632e803415162e36652263799f8e8a1c05a6bc4d0ecf5d72
--
I was just looking at this myse... |
|
fuzztester |
User Contributions
|
5 |
17,528 |
08-28-2013, 06:28 PM |
| |
|
Thread: Hashes from freeradius-wpe
Post: Hashes from freeradius-wpe
| Hello everyone!
I have been experimenting with using freeradius-wpe to collect credentials from WPA enterprise wireless set ups.
the patched radius server is giving me the hashes in the followin... |
|
fuzztester |
User Contributions
|
5 |
17,528 |
08-28-2013, 03:59 PM |
| |
|
Thread: HMAC for oclHashcat-*
Post: HMAC for oclHashcat-*
| I noticed that hashcat has support for HMAC-SHA1 / HMAC-MD5 but oclHashcat-plus nor oclHashcat-lite do not.
Just wondering if its in the plan to get these working so we can use GPUs to crack them. |
|
fuzztester |
Feature Requests
|
3 |
12,565 |
01-08-2013, 07:28 PM |
| |
|
Thread: Cisco ASA
Post: RE: Cisco ASA
|
M@LIK Wrote: (10-18-2012, 09:06 PM)
--
Yes, I will be lying if I said I didn't think about that.
Indeed, maskprocessor's performance is nowhere around GPU's performance.
You can also make a file ... |
|
fuzztester |
Very old oclHashcat-plus Support
|
15 |
45,241 |
10-19-2012, 04:05 PM |
| |
|
Thread: Cisco ASA
Post: RE: Cisco ASA
| I checked out using the maskprocess and piping it in. It does work but I must say, the performance was no where near as fast as a straight brute force mode.
I was noticing that the GPU utilization... |
|
fuzztester |
Very old oclHashcat-plus Support
|
15 |
45,241 |
10-18-2012, 08:25 PM |
| |
|
Thread: Cisco ASA
Post: RE: Cisco ASA
|
M@LIK Wrote: (10-18-2012, 06:21 PM)
--
Pipe maskprocessor (https://hashcat.net/wiki/doku.php?id=maskprocessor) to -plus, and you can use rules.
Code:
--
mp64 -i ?d?d?d?d | -plus -m2400 -r usernames... |
|
fuzztester |
Very old oclHashcat-plus Support
|
15 |
45,241 |
10-18-2012, 07:47 PM |
| |
|
Thread: Cisco ASA
Post: RE: Cisco ASA
|
M@LIK Wrote: (10-18-2012, 05:34 PM)
--
That's what I was exactly writing you, see below.
It's not very professional, but you can get away with rules or multi-rules.
Make a rule-file with all fi... |
|
fuzztester |
Very old oclHashcat-plus Support
|
15 |
45,241 |
10-18-2012, 05:37 PM |
| |
|
Thread: Cisco ASA
Post: RE: Cisco ASA
| So instead of using a salt file, i just created a wordlist rule file that looks like this:
$c$i$s$c
That will append the first four characters to the end of the password if the username was 'cisco'.... |
|
fuzztester |
Very old oclHashcat-plus Support
|
15 |
45,241 |
10-18-2012, 05:03 PM |
| |
|
Thread: Cisco ASA
Post: RE: Cisco ASA
|
M@LIK Wrote: (10-18-2012, 04:36 PM)
--
As far as I know, Cisco-PIX MD5 hashing doesn't involve any salting.
--
When I try to crack known ASA hashes it fails...until i append the first four characte... |
|
fuzztester |
Very old oclHashcat-plus Support
|
15 |
45,241 |
10-18-2012, 04:50 PM |
| |
|
Thread: Cisco ASA
Post: RE: Cisco ASA
|
unix-ninja Wrote: (10-18-2012, 04:15 PM)
--
The ASA does use the same hashing mechanism as PIX. They are NOT different.
You should just be specifying hash and salt on the command-line. Username is i... |
|
fuzztester |
Very old oclHashcat-plus Support
|
15 |
45,241 |
10-18-2012, 04:43 PM |
| |
|
Thread: Cisco ASA
Post: Cisco ASA
| I had read elsewhere that the ASA hashing was the same as the pix md5 so I decide to give it a shot with oclHashcat-plus.
The file format I used was username:hash. hashcat complained that the hash... |
|
fuzztester |
Very old oclHashcat-plus Support
|
15 |
45,241 |
10-18-2012, 03:48 PM |
| |
|
Thread: Drupal 7 hashes
Post: RE: Drupal 7 hashes
|
gat3way Wrote: (07-13-2012, 11:04 PM)
--
Generic sha512 won't work.
--
Is there a tool that will? I've looked in the usual places and have come up with nothing. |
|
fuzztester |
General Help
|
4 |
13,282 |
07-17-2012, 05:00 PM |
| |
|
Thread: Drupal 7 hashes
Post: Drupal 7 hashes
| Hello everyone!
I'm performing a pentest and was able to compromise a web application via SQLi. This database server was also being used for Drupal.
The latest version, 7 changed their hashing ... |
|
fuzztester |
General Help
|
4 |
13,282 |
07-13-2012, 07:57 PM |
