Search Results
|
Post |
Author |
Forum |
Replies |
Views |
Posted
[asc]
|
|
|
Thread: Hashing NTLM with frequencies
Post: RE: Hashing NTLM with frequencies
Just curious, what is the maximum number of hashes that can be loaded in one process? I'm getting an error CL_INVALID_BUFFER_SIZE. |
|
slawson |
hashcat
|
6 |
1,848 |
08-16-2019, 04:51 PM |
|
|
Thread: Hashing NTLM with frequencies
Post: RE: Hashing NTLM with frequencies
I just went ahead and copied the 20GB text file to Linux and used the following command:
cut -c -32 filename.txt > hashes.txt
Surprisingly it only took about 1 minute for Linux to process the fi... |
|
slawson |
hashcat
|
6 |
1,848 |
08-16-2019, 03:29 PM |
|
|
Thread: Hashing NTLM with frequencies
Post: RE: Hashing NTLM with frequencies
Thanks for the quick reply. Do you know of a Windows command to truncate the lines of text? |
|
slawson |
hashcat
|
6 |
1,848 |
08-16-2019, 02:54 PM |
|
|
Thread: Hashing NTLM with frequencies
Post: Hashing NTLM with frequencies
I just downloaded the huge dump of NTLM hashes, but the file has a colon and the number of frequencies at the end of each line.
Sorry for such a basic question, but what parameter do I use to ignor... |
|
slawson |
hashcat
|
6 |
1,848 |
08-15-2019, 11:39 PM |
|
|
Thread: What am I missing?
Post: RE: What am I missing?
Wow, I knew it had to be something simple. I created a simple text file in UTF-8 format and it worked. Do all ANSI and UNICODE text files have a BOM?
Thanks. |
|
slawson |
hashcat
|
3 |
2,796 |
04-15-2018, 05:56 AM |
|
|
Thread: What am I missing?
Post: What am I missing?
I have used hashcat quite a bit in the past, but it's been a while so I might be missing something simple.
I am using hashcat 4.1.0. I used fgdump to dump a list of hashes. Just to get my f... |
|
slawson |
hashcat
|
3 |
2,796 |
04-13-2018, 07:58 PM |
|
|
Thread: fgdump layout
Post: RE: fgdump layout
Great information. Thanks for not using demeaning sarcasm on a newbie. |
|
slawson |
General Help
|
6 |
9,860 |
11-12-2014, 10:23 PM |
|
|
Thread: fgdump layout
Post: RE: fgdump layout
Thanks for the info. I guess one last question on this is:
Is there any way to tell fgdump to ignore the machine accounts, so that they don't crowd up my hash file? |
|
slawson |
General Help
|
6 |
9,860 |
11-12-2014, 08:26 PM |
|
|
Thread: Removing duplicate lines in dictionary file
Post: RE: Removing duplicate lines in dictionary file
Wow. That was too easy. Although it seems to be fluky on a large file. |
|
slawson |
General Help
|
3 |
5,932 |
11-12-2014, 08:25 PM |
|
|
Thread: Removing duplicate lines in dictionary file
Post: Removing duplicate lines in dictionary file
I tried using
sort filename | uniq -u
but of course if a line was duplicated it was removing all the same lines and not keeping a unique line. |
|
slawson |
General Help
|
3 |
5,932 |
11-12-2014, 08:07 PM |
|
|
Thread: fgdump layout
Post: RE: fgdump layout
So the AD assigns the random password? What would these hashes be useful for as far as penetration testing goes? |
|
slawson |
General Help
|
6 |
9,860 |
11-12-2014, 07:51 PM |
|
|
Thread: fgdump layout
Post: fgdump layout
I am needing some clarity on what I am looking at in a fgdump file. My hash dump shows me the usernames and hashes that I can successfully load and crack, but usually at the bottom of my hash file it... |
|
slawson |
General Help
|
6 |
9,860 |
11-12-2014, 07:09 PM |
|
|
Thread: Cannot remove a hash
Post: RE: Cannot remove a hash
Awesome, I didn't know that existed. Thanks. |
|
slawson |
Old oclHashcat Support
|
4 |
9,948 |
11-12-2014, 07:05 PM |
|
|
Thread: Cannot remove a hash
Post: RE: Cannot remove a hash
Sry. I didn't mention I am using Oclhashcat in Windows. |
|
slawson |
Old oclHashcat Support
|
4 |
9,948 |
11-12-2014, 09:07 AM |
|
|
Thread: Cannot remove a hash
Post: Cannot remove a hash
When I attempt to use the --remove parameter against a fgdump hash file, I get the message: Remove not supported in native hashfile-format mode.
Do I have to modify the file to only show Username:H... |
|
slawson |
Old oclHashcat Support
|
4 |
9,948 |
11-12-2014, 06:32 AM |
|
|
Thread: cracking a domain cachedump
Post: RE: cracking a domain cachedump
I guess I didn't make my question clear enough. I will rephrase it. If I have a hash from a Domain Credentials cache dump, can I crack it by using either hash type 1000 or 1100? My testing shows th... |
|
slawson |
Old oclHashcat Support
|
6 |
16,216 |
11-08-2014, 04:44 AM |
|
|
Thread: cracking a domain cachedump
Post: RE: cracking a domain cachedump
When I processed the file using hash type 1000 I used the --username parameter and Oclhashcat recognized the hashes that were in the file, but it didn't crack it. I ran the same scan using hash type ... |
|
slawson |
Old oclHashcat Support
|
6 |
16,216 |
11-07-2014, 11:52 PM |
|
|
Thread: cracking a domain cachedump
Post: cracking a domain cachedump
I obtained a Domain Cache dump via cachedump SYSTEM SECURITY. I ran oclhashcat on the hash using the hash type 1000 for NTLM. Oclhashcat picked up the hash, but didn't match any passwords. Since th... |
|
slawson |
Old oclHashcat Support
|
6 |
16,216 |
11-07-2014, 07:21 PM |
|
|
Thread: WPA crack not working in Windows Environment
Post: RE: WPA crack not working in Windows Environment
Sorry to keep replying to my own posts, but I changed my FTP transfer to binary and it does not seem to corrupt the files. |
|
slawson |
Old oclHashcat Support
|
10 |
25,118 |
10-29-2014, 11:11 PM |
|
|
Thread: WPA crack not working in Windows Environment
Post: RE: WPA crack not working in Windows Environment
**SOLVED**
This may be a duh to you guys, but I found my problem. I was creating the hccap file in Linux and then transferring the file via FTP to my Windows machine. The FTP transfer is doing so... |
|
slawson |
Old oclHashcat Support
|
10 |
25,118 |
10-29-2014, 10:57 PM |