|
Search Results
|
| Post |
Author |
Forum |
Replies |
Views |
Posted
[asc]
|
| |
|
Thread: -m 18300 APFS
Post: -m 18300 APFS
| As you could read in this post (https://hashcat.net/forum/thread-7620-post-43185.html) I explained a walk-through for extracting the FileVault hash.
I also explained that this method wasn't working a... |
|
Karamba |
hashcat
|
9 |
3,940 |
05-01-2019, 05:47 PM |
| |
|
Thread: Help with Mask
Post: RE: Help with Mask
| https://hashcat.net/wiki/doku.php?id=mask_attack#hashcat_mask_files is a way to do it
(fifth thread that you open on this forum for your challenge) |
|
Karamba |
hashcat
|
1 |
1,302 |
01-11-2019, 04:51 PM |
| |
|
Thread: Running maskprocessor on Mac
Post: RE: Running maskprocessor on Mac
| As you can read here https://hashcat.net/wiki/, next to rule-based-attack, you'll see that rules only apply for attack 0, 6 an 7. |
|
Karamba |
hashcat
|
8 |
5,376 |
01-08-2019, 08:11 AM |
| |
|
Thread: Running maskprocessor on Mac
Post: RE: Running maskprocessor on Mac
| You have a wordlist to try and some rules. Easy.
Did you read the --help ?
At the bottom, you'll find 'Basic Examples'. Example 2 talks about wordlist + rules.
I am sure you can figure out now... |
|
Karamba |
hashcat
|
8 |
5,376 |
01-07-2019, 09:36 PM |
| |
|
Thread: nOOb help
Post: RE: nOOb help
| No.
You need to execute the script which is written in python. (you can simply download it from the link that I posted)
You can run the script in Windows, Win Subsystem for Linux or any other Linu... |
|
Karamba |
hashcat
|
12 |
8,104 |
01-07-2019, 12:32 PM |
| |
|
Thread: Help needed cracking a Mac password
Post: RE: Help needed cracking a Mac password
| The exact same problem and solution are explained here.
https://hashcat.net/forum/thread-7792.html
The plist2hashcat is a script, so you need to run it. Do some research how. You'll learn a lot. ;... |
|
Karamba |
hashcat
|
3 |
4,027 |
01-07-2019, 12:18 PM |
| |
|
Thread: nOOb help
Post: RE: nOOb help
| The hash you want to crack is stored in the [USER].plist file. You can find it in this path: /var/db/dslocal/nodes/Default/users/
Run this script (https://gist.github.com/nueh/8252572) to extract t... |
|
Karamba |
hashcat
|
12 |
8,104 |
01-04-2019, 04:34 PM |
| |
|
Thread: -m 16700 Filevault
Post: RE: -m 16700 Filevault
| mmls and others are part of the Sleuthkit; it can easily be installed on a mac via brew
if you have the drive physically attached, why not simply search with diskutil list for the RecoveryHD and mo... |
|
Karamba |
hashcat
|
8 |
7,670 |
12-26-2018, 07:14 PM |
| |
|
Thread: -m 16700 Filevault
Post: RE: -m 16700 Filevault
| Little update:
-m 16700 works also for Filevault on latest APFS filesystem, but only on macOS High Sierra (10.13)
Simply follow the guide of this fork (https://github.com/kholia/apfs2john) in orde... |
|
Karamba |
hashcat
|
8 |
7,670 |
12-21-2018, 02:54 PM |
| |
|
Thread: Ransomware
Post: RE: Ransomware
| It seems that JtR has it under construction.
https://github.com/magnumripper/JohnTheRipper/pull/3531 |
|
Karamba |
hashcat
|
13 |
7,570 |
12-21-2018, 08:42 AM |
| |
|
Thread: Ransomware
Post: RE: Ransomware
| Did you also check https://www.nomoreransom.org/ ; they have a couple of solutions; maybe you're lucky |
|
Karamba |
hashcat
|
13 |
7,570 |
12-14-2018, 11:38 AM |
| |
|
Thread: Can only find one hash of two - Office 2013
Post: RE: Can only find one hash of two - Office 2013
| The two xlsx were created by Office2007
xlsx A is related to xlsx B, because a identical template is used (invoice); B is created 6 months later;
the content inside that invoice template is ofco... |
|
Karamba |
hashcat
|
5 |
3,227 |
12-12-2018, 04:31 PM |
| |
|
Thread: Can only find one hash of two - Office 2013
Post: RE: Can only find one hash of two - Office 2013
| those two hashes are real-world hashes; I got them with the office2john.py script
I posted the hashes - with known pwd - for reproduction purposes |
|
Karamba |
hashcat
|
5 |
3,227 |
12-11-2018, 11:09 PM |
| |
|
Thread: Can only find one hash of two - Office 2013
Post: Can only find one hash of two - Office 2013
| I have a file containing two Office2013 hashes. The pwd for the two is 1920.
Code:
--
$ cat office2013.hash
$office$*2013*100000*256*16*e166509e5a4e05670dc5f3a57c4f30ff*636ae6f842a8f6b2939eb611... |
|
Karamba |
hashcat
|
5 |
3,227 |
12-11-2018, 10:43 PM |
| |
|
Thread: Problem with 11300
Post: RE: Problem with 11300
| (version 5?)
try version 3.6.0 |
|
Karamba |
hashcat
|
10 |
5,229 |
09-26-2018, 11:43 AM |
| |
|
Thread: issue Combinator+hashcat-legacy
Post: RE: issue Combinator+hashcat-legacy
| As we can read here https://hashcat.net/wiki/doku.php?id=rule_based_attack#rules_used_to_reject_plains ,the rejection rule is supported by hashcat.
Code:
--
$ cat w1
a
ab
abc
$ cat w2
1
12... |
|
Karamba |
hashcat
|
3 |
2,324 |
09-10-2018, 10:04 PM |
| |
|
Thread: I need help for 7z
Post: RE: I need help for 7z
| can you please reformulate your exact question?
as I understand the screenshot, everything is running as it's supposed to... |
|
Karamba |
hashcat
|
4 |
2,875 |
09-10-2018, 09:40 PM |
| |
|
Thread: OSX 10.11 Hash HELP!
Post: RE: OSX 10.11 Hash HELP!
| A byte is represented by two hexadecimal digits. So, when looking at your given entropy, the first byte is 0F.
As I mentioned higher, you need to take 64 bytes (= 128 hexadecimal digits) and not the ... |
|
Karamba |
hashcat
|
4 |
13,199 |
09-07-2018, 09:01 PM |
| |
|
Thread: OSX 10.11 Hash HELP!
Post: RE: OSX 10.11 Hash HELP!
| Look at https://hashcat.net/wiki/doku.php?id=example_hashes
You'll see that your entropy is too long. You only need 64 bytes there (and not 128)
Cut it off, and it will work. |
|
Karamba |
hashcat
|
4 |
13,199 |
09-07-2018, 02:58 PM |
| |
|
Thread: Large wordlist editor windows
Post: RE: Large wordlist editor windows
| Learn some command-line-fu. (awk, sed, sort, grep...) Google will be your friend here.
No worries, this all can be done on Linux subsystem on Windows.
Maybe, exercise on small files. Why not use 'sp... |
|
Karamba |
General Talk
|
4 |
3,254 |
08-24-2018, 09:38 AM |
