Search Results
|
Post |
Author |
Forum |
Replies |
Views |
Posted
[asc]
|
|
|
Thread: -m 18300 APFS
Post: RE: -m 18300 APFS
Sure, just read the first post of this thread... |
|
Karamba |
hashcat
|
9 |
3,940 |
09-11-2020, 02:43 PM |
|
|
Thread: macOS firmware password hash mode ?
Post: RE: macOS firmware password hash mode ?
A macOS firmware password can be "undone" by official Apple Support.
See: https://support.apple.com/en-au/HT204455#forgot |
|
Karamba |
hashcat
|
3 |
388 |
08-26-2020, 10:32 AM |
|
|
Thread: cant decrypt ecryptfs hashstring
Post: RE: cant decrypt ecryptfs hashstring
The tool you used is the right one, the output seems also correct.
Your command seems ok, under the condition that the right password is in your wordlist.
You ran the wordlist, but you got the resul... |
|
Karamba |
hashcat
|
2 |
635 |
06-24-2020, 10:35 PM |
|
|
Thread: Bitlocker Error(s)
Post: RE: Bitlocker Error(s)
The Bitlocker-hash begins with what number? $bitlocker$0$... or $bitlocker$1$... or 2 or 3 ?
Hashcat supports only 0 and 1.
Please note that the mode for Bitlocker is -m 22100 (and not 2210), and ... |
|
Karamba |
hashcat
|
4 |
819 |
06-22-2020, 08:01 AM |
|
|
Thread: Hashcat - APFS – FileVault 2 - Looking for assurances!
Post: RE: Hashcat - APFS – FileVault 2 - Looking for ...
If I understand it correctly, you have an APFS which is encrypted with Filevault2.
In order to extract the hash, you used apfs2hashcat, which gave you $fvde$1$...
Note that the hash mentions $1$, ... |
|
Karamba |
General Talk
|
1 |
645 |
06-17-2020, 09:55 AM |
|
|
Thread: Apple Secure Notes Help
Post: RE: Apple Secure Notes Help
Use this script (https://github.com/magnumripper/JohnTheRipper/blob/bleeding-jumbo/run/applenotes2john.py) to extract the hash from NoteStore.sqlite
Clean the output till it has the same format as yo... |
|
Karamba |
hashcat
|
1 |
828 |
02-07-2020, 10:20 AM |
|
|
Thread: MS Word read-only docx hash extract
Post: RE: MS Word read-only docx hash extract
Simply delete the lines in the XML and you should be fine. |
|
Karamba |
hashcat
|
4 |
1,631 |
12-20-2019, 02:58 PM |
|
|
Thread: Help with 3 word combination
Post: RE: Help with 3 word combination
As explained here (https://gist.github.com/roycewilliams/18e3fb14b97cc05eb95a5645692bccc2) by Royce, I should also consider using PRINCE.
Put all your possible candidates in one wordlist and put a ... |
|
Karamba |
hashcat-utils, maskprocessor, statsprocessor, md5stress, wikistrip
|
2 |
2,055 |
12-14-2019, 02:34 PM |
|
|
Thread: I need an explanation
Post: RE: I need an explanation
Can you explain how you got those two values? What steps did you take?
(they seem not to have the correct format, when comparing to https://hashcat.net/wiki/doku.php?id=example_hashes) |
|
Karamba |
hashcat
|
2 |
1,064 |
12-14-2019, 11:01 AM |
|
|
Thread: How to use rules.
Post: RE: How to use rules.
Rdgeno Wrote: (08-28-2019, 12:12 AM)
--
[...] I'm typing in -m 2500 -r rules/best.64.rule [...] I keep getting in red rules/best64.rule: No such file or directory. [...]
--
Typo maybe?
Be sure that ... |
|
Karamba |
hashcat
|
2 |
1,190 |
08-28-2019, 07:18 AM |
|
|
Thread: Hashtopussy Mask Attack
Post: RE: Hashtopussy Mask Attack
It's Hastopolis now.
You can find more information here : https://github.com/s3inlc/hashtopolis/wiki/Task-Creation-Guidelines |
|
Karamba |
General Talk
|
2 |
1,700 |
08-27-2019, 09:25 AM |
|
|
Thread: how to crack a windows 10 local user password hash(Netnlm capture)
Post: RE: how to crack a windows 10 local user password ...
hashcat.exe --help
or literally the first result:
https://www.google.com/search?q=hashcat+help
please try harder 🤨 |
|
Karamba |
hashcat
|
14 |
4,710 |
08-12-2019, 09:39 PM |
|
|
Thread: How to find the password for a hidden partition of a single TrueCrypt file?
Post: RE: How to find the password for a hidden partitio...
mkcon Wrote: (07-17-2019, 12:39 PM)
--
as mentioned in your quoted URL you need the sector following the first 65536 bytes of the file, i.e. you need the 128th sector. Thus skip sector 0 to 127 and ... |
|
Karamba |
hashcat
|
6 |
2,674 |
07-19-2019, 11:33 AM |
|
|
Thread: Veracrypt password help
Post: RE: Veracrypt password help
emmalove Wrote: (07-18-2019, 09:25 PM)
--
- Did you make an encrypted container (just a file), or an encrypted partition/drive? An encrypted partition/drive.
- Did you make it standard or hidden? ... |
|
Karamba |
hashcat
|
4 |
2,291 |
07-19-2019, 11:24 AM |
|
|
Thread: Veracrypt password help
Post: RE: Veracrypt password help
- Did you make an encrypted container (just a file), or an encrypted partition/drive?
- Did you make it standard or hidden?
- What encryption algorithms did you use? (default = AES) What hash algori... |
|
Karamba |
hashcat
|
4 |
2,291 |
07-18-2019, 04:41 PM |
|
|
Thread: Mac OSX Mojave .plist format conversion
Post: RE: Mac OSX Mojave .plist format conversion
laxstor Wrote: (06-25-2019, 08:29 PM)
--
culdesac I was just wondering this myself.. no way for me to get the plist via /var/db/... as that returns not permitted or permission denied.
--
Work with s... |
|
Karamba |
hashcat
|
9 |
4,500 |
06-25-2019, 09:28 PM |
|
|
Thread: Mac OSX Mojave .plist format conversion
Post: RE: Mac OSX Mojave .plist format conversion
I think I understand what you mean know.
You need to crack the Filevault2 encryption first. See this post. (https://hashcat.net/forum/thread-8338.html)
Once you got it, you can mount the Macintosh... |
|
Karamba |
hashcat
|
9 |
4,500 |
06-18-2019, 09:22 AM |
|
|
Thread: Guidance for creation of custom kernels
Post: RE: Guidance for creation of custom kernels
In this blog post, (https://www.synopsys.com/blogs/software-security/cracking-xenforo-corpuses/) you'll find a practical example on how it's done the "dirty" way. |
|
Karamba |
General Talk
|
2 |
1,858 |
06-15-2019, 10:14 AM |
|
|
Thread: Mac OSX Mojave .plist format conversion
Post: RE: Mac OSX Mojave .plist format conversion
I am confused by your explanation, culdesac. Would it be possible that you are mixing things up?
I have macOS 10.14.5 installed and the known technique to recover the user-hash is perfectly working. Y... |
|
Karamba |
hashcat
|
9 |
4,500 |
06-14-2019, 11:30 PM |
|
|
Thread: Mac OSX Mojave .plist format conversion
Post: RE: Mac OSX Mojave .plist format conversion
Can you elaborate on what you are trying to do?
The file AdminUserRecoveryInfo.plist is found in /Volumes/Preboot/[UUID]/var/db, and it's not the correct file in order to extract the login-hash.
T... |
|
Karamba |
hashcat
|
9 |
4,500 |
06-03-2019, 04:27 PM |