|
Search Results
|
| Post
[asc]
|
Author |
Forum |
Replies |
Views |
Posted |
| |
|
Thread: Is sha1($s.md5($p)) possible to crack?
Post: RE: Is sha1($s.md5($p)) possible to crack?
| Possible to crack? Yes. Does hashcat support it? No. |
|
epixoip |
General Help
|
5 |
7,302 |
05-21-2015, 07:50 AM |
| |
|
Thread: Is sha1($s.md5($p)) possible to crack?
Post: RE: Is sha1($s.md5($p)) possible to crack?
| Hmm, well I suppose you could pre-hash your wordlist with MD5, then run it as -m 120, or -m 100 with -a 7.
Personally I'd probably just look into using dynamic formats in JTR. |
|
epixoip |
General Help
|
5 |
7,302 |
05-21-2015, 08:00 AM |
| |
|
Thread: Is oclHashcat support $RAR3$*1*?
Post: RE: Is oclHashcat support $RAR3$*1*?
| Holy shit you guys love to use the quote button, makes this thread very difficult to read. Like looking into two mirrors facing each other.
Anyway it's pretty simple, $RAR3$*1* isn't supported by h... |
|
epixoip |
Old oclHashcat Support
|
4 |
13,806 |
03-18-2016, 10:05 AM |
| |
|
Thread: Is my plan a good idea?
Post: RE: Is my plan a good idea?
| It's a really bad idea, all you're doing is wasting disk space. And if you have a 100 GB wordlist, you're doing something very, very wrong. |
|
epixoip |
General Talk
|
23 |
40,657 |
12-28-2014, 09:29 PM |
| |
|
Thread: Is my plan a good idea?
Post: RE: Is my plan a good idea?
| First, GPU is irrelevant for what you are talking about doing. CPU is faster than GPU for the algorithms you would be able to generate tables for, since it's impossible to gain any acceleration perfor... |
|
epixoip |
General Talk
|
23 |
40,657 |
12-28-2014, 11:48 PM |
| |
|
Thread: Is my plan a good idea?
Post: RE: Is my plan a good idea?
| GPU makes sense -- as I said, you should not be running straight wordlist attacks against fast hashes on GPU. However, there shouldn't be that much of a drop between single hash and multihash on CPU. ... |
|
epixoip |
General Talk
|
23 |
40,657 |
12-29-2014, 12:19 AM |
| |
|
Thread: Is my plan a good idea?
Post: RE: Is my plan a good idea?
| Rainbow tables don't actually store the hash value, they store hash chains using a reduction function. So you still have to do quite a bit of calculation and false-alarm checking to look up a hash in ... |
|
epixoip |
General Talk
|
23 |
40,657 |
12-29-2014, 09:29 AM |
| |
|
Thread: Is my plan a good idea?
Post: RE: Is my plan a good idea?
| Hard drive and RAM can both be a bottleneck, yes.
You also have to take into consideration startup & shutdown time, there is overhead there where you are not doing any cracking.
I had never rea... |
|
epixoip |
General Talk
|
23 |
40,657 |
12-29-2014, 10:28 PM |
| |
|
Thread: Is my plan a good idea?
Post: RE: Is my plan a good idea?
| 65 MB/s is pretty slow, but not atypical of a laptop with a spinny disk.
For this task RAM quantity is not quite as important as RAM speed, and perhaps even more important than that is NUMA-aware s... |
|
epixoip |
General Talk
|
23 |
40,657 |
12-29-2014, 10:55 PM |
| |
|
Thread: Is my plan a good idea?
Post: RE: Is my plan a good idea?
| That's not quite what I meant, though that is one approach. I imagine this doesn't scale very well though, and that's likely why most "hash cracking websites" limit you to 10-15 hashes. |
|
epixoip |
General Talk
|
23 |
40,657 |
01-02-2015, 01:26 AM |
| |
|
Thread: Is my plan a good idea?
Post: RE: Is my plan a good idea?
| They're bad because straight wordlist attacks aren't usually high yield, which has been my point through this whole thread. |
|
epixoip |
General Talk
|
23 |
40,657 |
01-02-2015, 01:41 PM |
| |
|
Thread: Is it possible to get a hash and salt from a PowerPoint file?
Post: RE: Is it possible to get a hash and salt from a P...
| yes, but it is currently not supported by hashcat.
you can use john the ripper, and extract the hash with office2john. |
|
epixoip |
General Help
|
4 |
8,581 |
01-18-2014, 08:33 PM |
| |
|
Thread: Is it possible to get a hash and salt from a PowerPoint file?
Post: RE: Is it possible to get a hash and salt from a P...
| it is part of john the ripper. |
|
epixoip |
General Help
|
4 |
8,581 |
01-18-2014, 08:53 PM |
| |
|
Thread: Is it possible to find the salt for a known password?
Post: RE: Is it possible to find the salt for a known pa...
| Easiest way would be to treat it as sha256(pass.salt), use the plaintext password as the salt, and crack the salt as the password.
But this begs the question -- if you already have the password, wh... |
|
epixoip |
Old hashcat Support
|
6 |
10,996 |
01-17-2015, 06:48 PM |
| |
|
Thread: Is it possible to find the salt for a known password?
Post: RE: Is it possible to find the salt for a known pa...
| If it's static across all users then it's not a salt, it's a shared secret -- AKA, "pepper."
But my advice still stands. Use -m 1410 and supply the hash in "hash:salt" format. Or in this case, "has... |
|
epixoip |
Old hashcat Support
|
6 |
10,996 |
01-17-2015, 11:54 PM |
| |
|
Thread: Is it possible to find the salt for a known password?
Post: RE: Is it possible to find the salt for a known pa...
| Cool, glad you got it sorted. |
|
epixoip |
Old hashcat Support
|
6 |
10,996 |
01-18-2015, 07:13 AM |
| |
|
Thread: Is it possible to crack a salt from hash with or without cleartext?
Post: RE: Is it possible to crack a salt from hash with ...
| For simple salt+pass concatenation, -a 1, -a 6, -a 7 can all be leveraged. |
|
epixoip |
General Talk
|
8 |
10,101 |
03-25-2017, 01:23 AM |
| |
|
Thread: Is it 'safe' to upgrade Ubuntu Server with hashcat?
Post: RE: Is it 'safe' to upgrade Ubuntu Server with has...
| You're welcome.
The advantage of using an OS that has an SDLC and thus has long-term stable releases is that the software versions do not change. Even if you update the OS, the versions will all stay... |
|
epixoip |
General Help
|
9 |
18,435 |
01-23-2013, 07:52 AM |
| |
|
Thread: Is it 'safe' to upgrade Ubuntu Server with hashcat?
Post: RE: Is it 'safe' to upgrade Ubuntu Server with has...
| hashcat only recognizes cards that the opencl platform tells it about. the opencl platform gets its information from the driver. the driver depends on x11. so you will need to generate a new xorg.conf... |
|
epixoip |
General Help
|
9 |
18,435 |
01-24-2013, 04:02 PM |
| |
|
Thread: Is it 'safe' to upgrade Ubuntu Server with hashcat?
Post: RE: Is it 'safe' to upgrade Ubuntu Server with has...
| i'm confused.. you say you're using LTS, but then say a new version was available. with LTS releases, the versions are frozen -- there are no new versions of any packages. all that you receive are bug... |
|
epixoip |
General Help
|
9 |
18,435 |
02-10-2013, 09:37 AM |
