|
Search Results
|
| Post
[desc]
|
Author |
Forum |
Replies |
Views |
Posted |
| |
|
Thread: Is it possible to crack a salt from hash with or without cleartext?
Post: RE: Is it possible to crack a salt from hash with ...
| For simple salt+pass concatenation, -a 1, -a 6, -a 7 can all be leveraged. |
|
epixoip |
General Talk
|
8 |
10,101 |
03-25-2017, 01:23 AM |
| |
|
Thread: Is it possible to find the salt for a known password?
Post: RE: Is it possible to find the salt for a known pa...
| Easiest way would be to treat it as sha256(pass.salt), use the plaintext password as the salt, and crack the salt as the password.
But this begs the question -- if you already have the password, wh... |
|
epixoip |
Old hashcat Support
|
6 |
10,996 |
01-17-2015, 06:48 PM |
| |
|
Thread: Is it possible to find the salt for a known password?
Post: RE: Is it possible to find the salt for a known pa...
| If it's static across all users then it's not a salt, it's a shared secret -- AKA, "pepper."
But my advice still stands. Use -m 1410 and supply the hash in "hash:salt" format. Or in this case, "has... |
|
epixoip |
Old hashcat Support
|
6 |
10,996 |
01-17-2015, 11:54 PM |
| |
|
Thread: Is it possible to find the salt for a known password?
Post: RE: Is it possible to find the salt for a known pa...
| Cool, glad you got it sorted. |
|
epixoip |
Old hashcat Support
|
6 |
10,996 |
01-18-2015, 07:13 AM |
| |
|
Thread: Is it possible to get a hash and salt from a PowerPoint file?
Post: RE: Is it possible to get a hash and salt from a P...
| yes, but it is currently not supported by hashcat.
you can use john the ripper, and extract the hash with office2john. |
|
epixoip |
General Help
|
4 |
8,581 |
01-18-2014, 08:33 PM |
| |
|
Thread: Is it possible to get a hash and salt from a PowerPoint file?
Post: RE: Is it possible to get a hash and salt from a P...
| it is part of john the ripper. |
|
epixoip |
General Help
|
4 |
8,581 |
01-18-2014, 08:53 PM |
| |
|
Thread: Is my plan a good idea?
Post: RE: Is my plan a good idea?
| It's a really bad idea, all you're doing is wasting disk space. And if you have a 100 GB wordlist, you're doing something very, very wrong. |
|
epixoip |
General Talk
|
23 |
40,657 |
12-28-2014, 09:29 PM |
| |
|
Thread: Is my plan a good idea?
Post: RE: Is my plan a good idea?
| First, GPU is irrelevant for what you are talking about doing. CPU is faster than GPU for the algorithms you would be able to generate tables for, since it's impossible to gain any acceleration perfor... |
|
epixoip |
General Talk
|
23 |
40,657 |
12-28-2014, 11:48 PM |
| |
|
Thread: Is my plan a good idea?
Post: RE: Is my plan a good idea?
| GPU makes sense -- as I said, you should not be running straight wordlist attacks against fast hashes on GPU. However, there shouldn't be that much of a drop between single hash and multihash on CPU. ... |
|
epixoip |
General Talk
|
23 |
40,657 |
12-29-2014, 12:19 AM |
| |
|
Thread: Is my plan a good idea?
Post: RE: Is my plan a good idea?
| Rainbow tables don't actually store the hash value, they store hash chains using a reduction function. So you still have to do quite a bit of calculation and false-alarm checking to look up a hash in ... |
|
epixoip |
General Talk
|
23 |
40,657 |
12-29-2014, 09:29 AM |
| |
|
Thread: Is my plan a good idea?
Post: RE: Is my plan a good idea?
| Hard drive and RAM can both be a bottleneck, yes.
You also have to take into consideration startup & shutdown time, there is overhead there where you are not doing any cracking.
I had never rea... |
|
epixoip |
General Talk
|
23 |
40,657 |
12-29-2014, 10:28 PM |
| |
|
Thread: Is my plan a good idea?
Post: RE: Is my plan a good idea?
| 65 MB/s is pretty slow, but not atypical of a laptop with a spinny disk.
For this task RAM quantity is not quite as important as RAM speed, and perhaps even more important than that is NUMA-aware s... |
|
epixoip |
General Talk
|
23 |
40,657 |
12-29-2014, 10:55 PM |
| |
|
Thread: Is my plan a good idea?
Post: RE: Is my plan a good idea?
| That's not quite what I meant, though that is one approach. I imagine this doesn't scale very well though, and that's likely why most "hash cracking websites" limit you to 10-15 hashes. |
|
epixoip |
General Talk
|
23 |
40,657 |
01-02-2015, 01:26 AM |
| |
|
Thread: Is my plan a good idea?
Post: RE: Is my plan a good idea?
| They're bad because straight wordlist attacks aren't usually high yield, which has been my point through this whole thread. |
|
epixoip |
General Talk
|
23 |
40,657 |
01-02-2015, 01:41 PM |
| |
|
Thread: Is oclHashcat support $RAR3$*1*?
Post: RE: Is oclHashcat support $RAR3$*1*?
| Holy shit you guys love to use the quote button, makes this thread very difficult to read. Like looking into two mirrors facing each other.
Anyway it's pretty simple, $RAR3$*1* isn't supported by h... |
|
epixoip |
Old oclHashcat Support
|
4 |
13,806 |
03-18-2016, 10:05 AM |
| |
|
Thread: Is sha1($s.md5($p)) possible to crack?
Post: RE: Is sha1($s.md5($p)) possible to crack?
| Possible to crack? Yes. Does hashcat support it? No. |
|
epixoip |
General Help
|
5 |
7,302 |
05-21-2015, 07:50 AM |
| |
|
Thread: Is sha1($s.md5($p)) possible to crack?
Post: RE: Is sha1($s.md5($p)) possible to crack?
| Hmm, well I suppose you could pre-hash your wordlist with MD5, then run it as -m 120, or -m 100 with -a 7.
Personally I'd probably just look into using dynamic formats in JTR. |
|
epixoip |
General Help
|
5 |
7,302 |
05-21-2015, 08:00 AM |
| |
|
Thread: is site down ?
Post: RE: is site down ?
| What does this have to do with hashcat? |
|
epixoip |
General Talk
|
1 |
4,145 |
10-27-2015, 08:50 AM |
| |
|
Thread: Is there any "getting started" threads or videos?
Post: RE: Is there any "getting started" threads or vide...
|
epixoip |
General Help
|
2 |
4,400 |
12-11-2015, 12:54 AM |
| |
|
Thread: Is there any way to pause and resume automatically?
Post: RE: Is there any way to pause and resume automatic...
| stop buying non-reference design cards. |
|
epixoip |
General Help
|
6 |
10,444 |
10-18-2014, 07:40 PM |
