Search Results
|
Post |
Author |
Forum
[desc]
|
Replies |
Views |
Posted |
|
|
Thread: My practice attempt to decrypt a SHA-256 hash of an IP address
Post: RE: My practice attempt to decrypt a SHA-256 hash ...
Your example in crackitBruteForce.sh will only match three-digits-per-octet IPs (111.111.111.111) and miss other possibilities (111.111.111.1, 1.1.1.1, 11.11.11.11, etc.)
This is closer: https://pa... |
|
royce |
hashcat
|
13 |
9,515 |
02-26-2018, 02:10 AM |
|
|
Thread: My practice attempt to decrypt a SHA-256 hash of an IP address
Post: RE: My practice attempt to decrypt a SHA-256 hash ...
Couple of niggles:
- That larger file I linked to covers actual possible IP addresses. Many ?d?d?d (above 254) are invalid in an IP-address octet. So your masks will try many IPs that are not valid... |
|
royce |
hashcat
|
13 |
9,515 |
02-26-2018, 08:15 AM |
|
|
Thread: is hashcat still support VCL?
Post: RE: is hashcat still support VCL?
VCL is no longer supported. Intel GPUs are supported via OpenCL, though there are some known problems with Intel's GPU OpenCL implementation, so YMMV. |
|
royce |
hashcat
|
3 |
2,728 |
02-27-2018, 08:06 AM |
|
|
Thread: is hashcat still support VCL?
Post: RE: is hashcat still support VCL?
What's out there today divides the work up, using one of a few options:
* Natively, using hashcat's --keyspace, --skip, --limit commands, calculated by custom scripts and work distribution
* Fre... |
|
royce |
hashcat
|
3 |
2,728 |
02-27-2018, 09:39 AM |
|
|
Thread: Problem with Device #1? shuts down process
Post: RE: Problem with Device #1? shuts down process
https://hashcat.net/wiki/doku.php?id=frequently_asked_questions#why_does_hashcat_not_work_with_my_kali_operating_system |
|
royce |
hashcat
|
3 |
2,932 |
02-27-2018, 05:17 PM |
|
|
Thread: My practice attempt to decrypt a SHA-256 hash of an IP address
Post: RE: My practice attempt to decrypt a SHA-256 hash ...
I didn't write that paste, just grabbed it because it did the job. :)
Works for me:
Code:
--
# Get the masks file.
$ wget -O ip.masks https://pastebin.com/raw/4HQ6C8gG
[...]
# For effici... |
|
royce |
hashcat
|
13 |
9,515 |
02-27-2018, 05:25 PM |
|
|
Thread: Bcrypt Blowfish Unix Hash
Post: RE: Bcrypt Blowfish Unix Hash
This all looks like you're doing it right (may want to post commandline just in case, with hash masked if you're using it on the command line). |
|
royce |
hashcat
|
5 |
5,603 |
02-27-2018, 05:36 PM |
|
|
Thread: My practice attempt to decrypt a SHA-256 hash of an IP address
Post: RE: My practice attempt to decrypt a SHA-256 hash ...
undeath Wrote: (02-27-2018, 06:29 PM)
--
no, it doesn't. there are no instances of .?1 or .?2
--
That's what I get for not escaping my '?' in my egrep. :) Then I have no idea why the OP got that as... |
|
royce |
hashcat
|
13 |
9,515 |
02-27-2018, 07:03 PM |
|
|
Thread: Advantage with a big wordlist?
Post: RE: Advantage with a big wordlist?
Giant deduplicated wordlists are great for fast hashes, but not as helpful for slow ones.
And what's usually missing from most of them is *frequency data*.
A giant wordlist, sorted by how commo... |
|
royce |
hashcat
|
2 |
2,364 |
03-07-2018, 10:45 PM |
|
|
Thread: Variable mask in the middle of the password
Post: RE: Variable mask in the middle of the password
I'm not sure that I fully understand the use case. Can you provide a contrived example?
For at least some part of the attack, you can hard-code a prefix and suffix:
Code:
--
$ hashcat --stdou... |
|
royce |
hashcat
|
5 |
3,851 |
03-18-2018, 12:18 AM |
|
|
Thread: Status Exhausted???
Post: RE: Status Exhausted???
Probably a good idea not to post hashes that you care about.
Looking at the end, this looks like a normal run to me, in which all candidates were tried, but none were successful.
Code:
--
Ses... |
|
royce |
hashcat
|
1 |
2,013 |
03-01-2018, 05:32 PM |
|
|
Thread: I use the hashcat 4.0.1 version, why not load the dictionary?
Post: RE: I use the hashcat 4.0.1 version, why not load ...
Hmm - that's at around the 500 megabyte mark. Maybe some kind of memory limitation? |
|
royce |
hashcat
|
4 |
3,575 |
03-18-2018, 08:16 AM |
|
|
Thread: hash mode numbering logic
Post: RE: hash mode numbering logic
There is also a broad kind of namespace management that seems to have started later, where types are grouped. For example, most of the MS Office ones are near each other, etc. When someone adds a mode... |
|
royce |
hashcat
|
5 |
4,201 |
03-21-2018, 04:25 PM |
|
|
Thread: Need some tips
Post: RE: Need some tips
Take a pass through the FAQ first:
https://hashcat.net/wiki/doku.php?id=frequently_asked_questions |
|
royce |
hashcat
|
7 |
5,285 |
03-24-2018, 05:09 AM |
|
|
Thread: Need some tips
Post: RE: Need some tips
Read the advice that is provided in an alternate color in the output. :) You also probably want -O and -w 3 or higher (if you can stand the desktop lag). |
|
royce |
hashcat
|
7 |
5,285 |
03-24-2018, 04:07 PM |
|
|
Thread: Need some tips
Post: RE: Need some tips
GOD Wrote: (03-24-2018, 09:37 PM)
--
As far as I know, using '-O' has no effect on WPA.
--
Ah, yes - good catch (though I usually tell people to always add it regardless, because 99.9% of the time,... |
|
royce |
hashcat
|
7 |
5,285 |
03-24-2018, 09:47 PM |
|
|
Thread: Need help with NTLM password case
Post: RE: Need help with NTLM password case
You can create rules that toggle case.
https://blog.didierstevens.com/2016/07/18/practice-ntds-dit-file-part-5-password-cracking-with-hashcat-lm-ntlm/ |
|
royce |
hashcat
|
6 |
5,098 |
03-25-2018, 06:27 PM |
|
|
Thread: Known password construction
Post: RE: Known password construction
You'd need to generate multiple masks, using something like
https://thesprawl.org/projects/pack/#policygen |
|
royce |
hashcat
|
7 |
4,564 |
03-30-2018, 03:25 AM |
|
|
Thread: Known password construction
Post: RE: Known password construction
Ah, I misunderstood your question. Check out the 'req-include' and 'req-exclude' tools from hashcat-utils:
https://hashcat.net/wiki/doku.php?id=hashcat_utils#req |
|
royce |
hashcat
|
7 |
4,564 |
03-31-2018, 03:30 AM |
|
|
Thread: Pause Certain Devices
Post: RE: Pause Certain Devices
There's no interactive native way to do this today.
You could work around this by scripting something that does the following:
1. Stop the job.
2. Modify the restore file using https://github.c... |
|
royce |
hashcat
|
1 |
1,673 |
03-31-2018, 03:45 AM |