Search Results
|
Post |
Author |
Forum |
Replies |
Views |
Posted
[asc]
|
|
|
Thread: Hashcat 0.41 mode 1731 fails?
Post: RE: Hashcat 0.41 mode 1731 fails?
Finding blank passwords is indeed a feature, and a very important and welcome one!
Not finding any other hashes, however, is a bug :(. |
|
Incisive |
Old hashcat Support
|
5 |
8,976 |
09-27-2012, 05:05 PM |
|
|
Thread: Hashcat 0.41 mode 1731 fails?
Post: Hashcat 0.41 mode 1731 fails?
On hashcat 0.41 I'm not getting successful results (except with an apparent blank password) with -m 1731 on either your example hashes or even my own tests.
Intel Core i7-2600
Code:
--
hashca... |
|
Incisive |
Old hashcat Support
|
5 |
8,976 |
09-26-2012, 05:40 PM |
|
|
Thread: SIP (MD5)
Post: RE: SIP (MD5)
It looks like SIP has at least two places that use MD5 digest:
One of which is in the password storage on disk on the SIP server - that's the MD5(username:domain:password).
The other place is duri... |
|
Incisive |
Feature Requests
|
5 |
31,775 |
08-31-2012, 09:13 PM |
|
|
Thread: PBKDF2/RFC2898/PKCS#5 modes?
Post: RE: PBKDF2/RFC2898/PKCS#5 modes?
Aside from some applications following the OWASP Password Storage Cheat Sheet:
Django web framework
https://code.djangoproject.com/ticket/15367
https://www.levigross.com/post/18880148948/a-review-of... |
|
Incisive |
Feature Requests
|
3 |
12,255 |
08-27-2012, 10:45 PM |
|
|
Thread: PBKDF2/RFC2898/PKCS#5 modes?
Post: PBKDF2/RFC2898/PKCS#5 modes?
As a less immediate, longer term project, I'd like to request generic PBKDF2 (also known as RFC2898 and PKCS#5) support, in whichever applications can reasonably support it. For hash algorithms, I'd ... |
|
Incisive |
Feature Requests
|
3 |
12,255 |
08-22-2012, 06:28 PM |
|
|
Thread: SQL 2012 password hash
Post: RE: SQL 2012 password hash
radix Wrote: (08-21-2012, 11:22 AM)
--
I've added this even though SQL documentation advises against using pwencrypt to hash passwords (bad admins will bad admin). Should be available in the next re... |
|
Incisive |
Feature Requests
|
11 |
42,551 |
08-21-2012, 11:46 PM |
|
|
Thread: SQL 2012 password hash
Post: RE: SQL 2012 password hash
Here's SQL2012 results for the hashcat example file A0.M1300.word:
SELECT example, pwdencrypt(example)
FROM
(SELECT 'carlos' AS example
UNION ALL SELECT 'test'
UNION ALL SELECT 'test1'
UNION ALL... |
|
Incisive |
Feature Requests
|
11 |
42,551 |
08-20-2012, 05:05 PM |
|
|
Thread: SQL 2012 password hash
Post: SQL 2012 password hash
Please include the SQL 2012 password hash; it's identical to 2005, except
0x0200 as an ID instead of 0x0100
SHA-512 instead of SHA1
i.e. a sanitized test version run on SQL Server itself shows th... |
|
Incisive |
Feature Requests
|
11 |
42,551 |
08-17-2012, 11:45 PM |
|
|
Thread: How should I store my users passwords in my DB?
Post: RE: How should I store my users passwords in my DB...
1) Don't enforce a short maximum length - you're storing a hash, so if they want to use an epic passpoem, let them. The lower the number of scrypt or PBKDF2 iterations, the longer the minimum length ... |
|
Incisive |
General Help
|
4 |
10,281 |
07-19-2012, 08:57 PM |
|
|
Thread: restarting dictionary with rules
Post: RE: restarting dictionary with rules
atom Wrote: (06-11-2012, 09:31 AM)
--
No, only oclHashcat-lite can do this. oclHashcat-plus is designed for short runs.
--
I don't know if it's possible, and I understand there are some technical i... |
|
Incisive |
Very old oclHashcat-plus Support
|
4 |
8,426 |
06-11-2012, 09:56 PM |
|
|
Thread: Operating Systems used by hashcat users
Post: RE: Operating Systems used by hashcat users
forumhero Wrote: (06-08-2012, 02:30 AM)
--
i use both windows and linux
--
+1 - I use Windows (7 Home Premium, 7 Pro)/ATI, Linux (Debian Squeeze, Backtrack 5R2)/ATI, Windows/NVIDIA, and Linux/NVIDI... |
|
Incisive |
Organisation and Events
|
10 |
28,231 |
06-08-2012, 04:37 AM |
|
|
Thread: Support recovery of passwords of length 16 and above
Post: RE: Support recovery of passwords of length 16 and...
Hash-IT Wrote: (06-07-2012, 02:47 PM)
--
Your ideas about reducing download size are good, but it would mean atom having to make many builds.
--
Agreed; that's why I suggested automated build scrip... |
|
Incisive |
Feature Requests
|
22 |
50,733 |
06-08-2012, 04:33 AM |
|
|
Thread: Support recovery of passwords of length 16 and above
Post: RE: Support recovery of passwords of length 16 and...
atom Wrote: (05-21-2012, 06:35 PM)
--
In theory yes, but then we would require special Kernels for each Hash-lenght (in steps of 4). If you take a look at the kernels directory, it would cause the pr... |
|
Incisive |
Feature Requests
|
22 |
50,733 |
06-07-2012, 07:17 AM |
|
|
Thread: AES/Rijndael expert needed
Post: RE: AES/Rijndael expert needed
gat3way Wrote: (06-04-2012, 03:06 PM)
--
Much better idea would be to use a key derivation function like PBKDF2 with ïnitial symmetric key as salt with some good iterations count. Applying the pas... |
|
Incisive |
Feature Requests
|
5 |
14,067 |
06-07-2012, 07:10 AM |
|
|
Thread: Support recovery of passwords of length 16 and above
Post: RE: Support recovery of passwords of length 16 and...
Thank you for looking into this, Atom. The speed drop is pretty significant, but the larger host memory requirement is just a budget issue for those that need to do that level of auditing.
Would i... |
|
Incisive |
Feature Requests
|
22 |
50,733 |
05-21-2012, 06:25 PM |
|
|
Thread: mp64: generate total random words
Post: RE: mp64: generate total random words
A couple other random number generators that may be good sources for those that need them:
gpg --gen-random 2
openssl rand |
|
Incisive |
hashcat-utils, maskprocessor, statsprocessor, md5stress, wikistrip
|
20 |
42,453 |
05-21-2012, 06:09 PM |
|
|
Thread: oclHashcat-plus v0.08
Post: RE: oclHashcat-plus v0.08
Thank you very much for the new release; in particular, the new EULA is very generous on your part, given how much time you put into hashcat. I'll be passing the information on the new EULA along to ... |
|
Incisive |
Very old oclHashcat-plus Announcements
|
15 |
58,064 |
05-04-2012, 05:51 AM |
|
|
Thread: 0.07(1?) MSSQL 2000/5 dictionary attack failure (even with A0.M1300.* examples)?
Post: RE: 0.07(1?) MSSQL 2000/5 dictionary attack failur...
I just tested 0.08 with the hashcat 0.39 examples, and got fully correct results on a 6950; I'll test the 6450 out soon and report back. |
|
Incisive |
Very old oclHashcat-plus Support
|
7 |
15,712 |
05-04-2012, 05:41 AM |
|
|
Thread: 0.07(1?) MSSQL 2000/5 dictionary attack failure (even with A0.M1300.* examples)?
Post: RE: 0.07(1?) MSSQL 2000/5 dictionary attack failur...
atom Wrote: (03-29-2012, 10:03 AM)
--
you have to reformat the hashes, see my example above
--
Given that there are several SQL 2000 hashes, and two SQL 2005 hashes, and you can see the line length... |
|
Incisive |
Very old oclHashcat-plus Support
|
7 |
15,712 |
03-29-2012, 04:17 PM |
|
|
Thread: 0.07(1?) MSSQL 2000/5 dictionary attack failure (even with A0.M1300.* examples)?
Post: RE: 0.07(1?) MSSQL 2000/5 dictionary attack failur...
I just pulled out 0.06, dropped it into the hashcat-gui-0.5.1 directory, and that doesn't work for me either.
Could it be the AMD 6450 512MB card, and/or Catalyst 12.2 (I reinstalled Catalyst with ... |
|
Incisive |
Very old oclHashcat-plus Support
|
7 |
15,712 |
03-28-2012, 09:50 PM |