|
Search Results
|
| Post |
Author
[asc]
|
Forum |
Replies |
Views |
Posted |
| |
|
Thread: TC password found, wrong?
Post: TC password found, wrong?
| Hi,
This is the situation:
I was attacking a TC system disk (boot mode) with hashcat.
After som days hashcat actually found a password that made sense to previous passwords that I had seen.
... |
|
bigblacknose |
Old oclHashcat Support
|
10 |
15,452 |
03-27-2016, 11:53 AM |
| |
|
Thread: TC password found, wrong?
Post: RE: TC password found, wrong?
| According to the technical team at Passware, hashcat checks the ASCII string "TRUE" field during the decryption process. Passware and TC itself checks the CRC-32 checksum. In this case it seems like t... |
|
bigblacknose |
Old oclHashcat Support
|
10 |
15,452 |
03-28-2016, 08:45 PM |
| |
|
Thread: TC password found, wrong?
Post: RE: TC password found, wrong?
|
mkcon Wrote: (03-29-2016, 08:09 AM)
--
Send me the first 32256 bytes of the disk (63 sectors) together with the password and i will try to check what's going on here.
Additionally, tell me the keybo... |
|
bigblacknose |
Old oclHashcat Support
|
10 |
15,452 |
03-29-2016, 07:42 PM |
| |
|
Thread: Poll for new algorithm
Post: Poll for new algorithm
| Hi,
Are you always launching a forum poll before deciding which new algorithms to implement to the next version?
I remember seeing this a couple of times.
A good initiative anyway.
Regard... |
|
bigblacknose |
Old oclHashcat Support
|
1 |
3,455 |
04-14-2016, 07:57 PM |
| |
|
Thread: TC password found, wrong?
Post: RE: TC password found, wrong?
| I have been getting help from mkcon regarding this issue, and we have agreed that this is a false positive.
The password is wrong, that is.
Recovered......: 1/1 (100.00%)
// BigBlackNose - st... |
|
bigblacknose |
Old oclHashcat Support
|
10 |
15,452 |
04-14-2016, 08:14 PM |
| |
|
Thread: TC password found, wrong?
Post: RE: TC password found, wrong?
|
bigblacknose |
Old oclHashcat Support
|
10 |
15,452 |
04-18-2016, 09:41 PM |
| |
|
Thread: TC password found, wrong?
Post: RE: TC password found, wrong?
| Thanks for you analysis.
It was only oclHashcat and Passware that I have been given a try (except trying to mount the image in different ways).
Not JtR.
// BBN |
|
bigblacknose |
Old oclHashcat Support
|
10 |
15,452 |
04-22-2016, 07:03 AM |
| |
|
Thread: Need Help to find out hash type
Post: RE: Need Help to find out hash type
| Try to find out what type of framework that is used. See if you can figure out something that way.
Otherwise it just guessing. 16 bytes, md5? |
|
bigblacknose |
General Help
|
6 |
7,704 |
05-17-2016, 07:45 PM |
| |
|
Thread: New algorithm
Post: New algorithm
| Which of the following would you most like to see in the future to be implemented into hashcat?
The list was quite long from the beginning (doing a search at GitHub/oclHashcat for is:issue is:open la... |
|
bigblacknose |
General Talk
|
2 |
4,571 |
05-17-2016, 08:09 PM |
| |
|
Thread: New algorithm
Post: RE: New algorithm
| This poll was just to get an indication.
I'm sure it could have been made better in a lot of ways.
Last day to vote. |
|
bigblacknose |
General Talk
|
2 |
4,571 |
05-23-2016, 10:51 AM |
| |
|
Thread: Do the tools all still apply to hashcat3?
Post: RE: Do the tools all still apply to hashcat3?
| I would suggest you go for a hybrid instead. -6 (dict + mask).
And then specify the mask ?d?d in your first case, and then 19?d?d in your second case.
If you use the combinator and redirect stdou... |
|
bigblacknose |
hashcat
|
3 |
4,688 |
07-11-2016, 11:01 PM |
| |
|
Thread: false positive in 7z possible?
Post: false positive in 7z possible?
| Hi,
in the same way you might encounter a false positive in TC. Is it possible to encounter a false positive with 7z (7z2hashcat/-m 11600)?
// BBN |
|
bigblacknose |
hashcat
|
2 |
4,377 |
09-16-2016, 09:49 AM |
| |
|
Thread: false positive in 7z possible?
Post: RE: false positive in 7z possible?
|
kiara Wrote: (09-16-2016, 10:04 AM)
--
when u write TC u ment truecrypt?
--
Yes. I have en encountered that three times now with TC preboot.
I can't get JtR to crack the 7z hash (generated by 7z2jo... |
|
bigblacknose |
hashcat
|
2 |
4,377 |
09-16-2016, 10:21 AM |
| |
|
Thread: Candidates
Post: Candidates
| Hi,
Running 3.10+620
Looking at the candidates that are generated in status message.
In my case HC is reading from stdin (mp64 is generating) and is applying a rule file that contains somewher... |
|
bigblacknose |
Beta Tester
|
1 |
4,789 |
11-02-2016, 12:34 AM |
| |
|
Thread: how to make this mask?
Post: RE: how to make this mask?
| Yes, look at the link kiara provided and learn how to use that tool.
You need to generate all combinations of the masks and feed that mask file to HC.
I'm not that good at combinatorics, but I get... |
|
bigblacknose |
hashcat
|
3 |
4,504 |
11-06-2016, 11:53 PM |
| |
|
Thread: Runs 4-ever?
Post: Runs 4-ever?
| Running 3.10+620
When running with the increment switch it seems like HC never stops.
Like this:
HC -m 1000 hash -a 3 -i ?a?a?a
Same goes for hybrid attacks when using -i
// BBN |
|
bigblacknose |
Beta Tester
|
2 |
4,990 |
11-07-2016, 08:59 AM |
| |
|
Thread: Runs 4-ever?
Post: RE: Runs 4-ever?
| Fixed. Works like a charm. |
|
bigblacknose |
Beta Tester
|
2 |
4,990 |
11-07-2016, 12:32 PM |
| |
|
Thread: Is this possible?
Post: RE: Is this possible?
| Can't you just try to write a poc i Perl or something to see how fast that is? Often these small problem can be solved without GPU support. Or have you already given up on CPU? |
|
bigblacknose |
General Talk
|
4 |
5,280 |
11-12-2016, 11:25 PM |
| |
|
Thread: Veracrypt question
Post: RE: Veracrypt question
|
kiara Wrote: (07-25-2016, 05:56 PM)
--
im running linux, their is dd to watch the sectors.
the question is which sector should i look for to find it
--
Isn't it just like something like this:
... |
|
bigblacknose |
General Talk
|
6 |
16,075 |
12-13-2016, 07:21 PM |
| |
|
Thread: GPG PassPhrase recovery
Post: RE: GPG PassPhrase recovery
| Both JtR and Passware have GPU support for GPG. JtR is somewhat slower than Passware. That's my experience.
And I almost forgot, ElcomSoft Distributed Password Recovery also has support for this. |
|
bigblacknose |
hashcat
|
2 |
4,728 |
01-06-2017, 01:02 AM |
