|
Search Results
|
| Post |
Author |
Forum |
Replies
[desc]
|
Views |
Posted |
| |
|
Thread: PMKID question
Post: RE: PMKID question
| Thanks for the info. You have a very good understanding of how all of this works. |
|
slawson |
hashcat
|
4 |
1,698 |
09-25-2019, 02:40 PM |
| |
|
Thread: Decoding multiple PMKID SSIDs
Post: Decoding multiple PMKID SSIDs
| I would like to take my capture file that has several PMKIDs in it, and decode the SSIDs before cracking them.
This is what I have done so far:
cut -f4 -d'*' pmkidfile | xxd -r -p
xxd properl... |
|
slawson |
General Talk
|
4 |
2,070 |
10-11-2019, 04:16 PM |
| |
|
Thread: Decoding multiple PMKID SSIDs
Post: RE: Decoding multiple PMKID SSIDs
| Ok with some trial and error I have found a way to do this with a for loop. It seems a bit excessive so I would be interested in an easier way of doing this. Here is the command
for line in $(cut... |
|
slawson |
General Talk
|
4 |
2,070 |
10-11-2019, 04:57 PM |
| |
|
Thread: Decoding multiple PMKID SSIDs
Post: RE: Decoding multiple PMKID SSIDs
| When I run wlanhcxinfo -i file, I always get an error "file corrupt 0 records loaded"
The "file" is my original hcxdumptool capture that I have verified is good. I have tried multiple capture file... |
|
slawson |
General Talk
|
4 |
2,070 |
10-15-2019, 04:04 PM |
| |
|
Thread: Decoding multiple PMKID SSIDs
Post: RE: Decoding multiple PMKID SSIDs
| Sorry, nevermind. I just figured out that I have to output the capture to a hccapx file first. |
|
slawson |
General Talk
|
4 |
2,070 |
10-15-2019, 04:12 PM |
| |
|
Thread: Running hashcat on multiple hash files
Post: Running hashcat on multiple hash files
| Is there a way to do this? I tried this:
hashcat -m 16800 --show *.16800
This actually runs, but it only shows results for the first file in the directory. |
|
slawson |
General Talk
|
5 |
3,004 |
10-23-2019, 06:04 PM |
| |
|
Thread: Running hashcat on multiple hash files
Post: RE: Running hashcat on multiple hash files
| I did the Windows equivalent
copy /b *.16800 all.16800
That works, but I guess I was just curious if hashcat can handle multiple files at once. |
|
slawson |
General Talk
|
5 |
3,004 |
10-23-2019, 09:40 PM |
| |
|
Thread: cracking a domain cachedump
Post: cracking a domain cachedump
| I obtained a Domain Cache dump via cachedump SYSTEM SECURITY. I ran oclhashcat on the hash using the hash type 1000 for NTLM. Oclhashcat picked up the hash, but didn't match any passwords. Since th... |
|
slawson |
Old oclHashcat Support
|
6 |
16,224 |
11-07-2014, 07:21 PM |
| |
|
Thread: cracking a domain cachedump
Post: RE: cracking a domain cachedump
| When I processed the file using hash type 1000 I used the --username parameter and Oclhashcat recognized the hashes that were in the file, but it didn't crack it. I ran the same scan using hash type ... |
|
slawson |
Old oclHashcat Support
|
6 |
16,224 |
11-07-2014, 11:52 PM |
| |
|
Thread: cracking a domain cachedump
Post: RE: cracking a domain cachedump
| I guess I didn't make my question clear enough. I will rephrase it. If I have a hash from a Domain Credentials cache dump, can I crack it by using either hash type 1000 or 1100? My testing shows th... |
|
slawson |
Old oclHashcat Support
|
6 |
16,224 |
11-08-2014, 04:44 AM |
| |
|
Thread: fgdump layout
Post: fgdump layout
| I am needing some clarity on what I am looking at in a fgdump file. My hash dump shows me the usernames and hashes that I can successfully load and crack, but usually at the bottom of my hash file it... |
|
slawson |
General Help
|
6 |
9,869 |
11-12-2014, 07:09 PM |
| |
|
Thread: fgdump layout
Post: RE: fgdump layout
| So the AD assigns the random password? What would these hashes be useful for as far as penetration testing goes? |
|
slawson |
General Help
|
6 |
9,869 |
11-12-2014, 07:51 PM |
| |
|
Thread: fgdump layout
Post: RE: fgdump layout
| Thanks for the info. I guess one last question on this is:
Is there any way to tell fgdump to ignore the machine accounts, so that they don't crowd up my hash file? |
|
slawson |
General Help
|
6 |
9,869 |
11-12-2014, 08:26 PM |
| |
|
Thread: fgdump layout
Post: RE: fgdump layout
| Great information. Thanks for not using demeaning sarcasm on a newbie. |
|
slawson |
General Help
|
6 |
9,869 |
11-12-2014, 10:23 PM |
| |
|
Thread: Hashing NTLM with frequencies
Post: Hashing NTLM with frequencies
| I just downloaded the huge dump of NTLM hashes, but the file has a colon and the number of frequencies at the end of each line.
Sorry for such a basic question, but what parameter do I use to ignor... |
|
slawson |
hashcat
|
6 |
1,854 |
08-15-2019, 11:39 PM |
| |
|
Thread: Hashing NTLM with frequencies
Post: RE: Hashing NTLM with frequencies
| Thanks for the quick reply. Do you know of a Windows command to truncate the lines of text? |
|
slawson |
hashcat
|
6 |
1,854 |
08-16-2019, 02:54 PM |
| |
|
Thread: Hashing NTLM with frequencies
Post: RE: Hashing NTLM with frequencies
| I just went ahead and copied the 20GB text file to Linux and used the following command:
cut -c -32 filename.txt > hashes.txt
Surprisingly it only took about 1 minute for Linux to process the fi... |
|
slawson |
hashcat
|
6 |
1,854 |
08-16-2019, 03:29 PM |
| |
|
Thread: Hashing NTLM with frequencies
Post: RE: Hashing NTLM with frequencies
| Just curious, what is the maximum number of hashes that can be loaded in one process? I'm getting an error CL_INVALID_BUFFER_SIZE. |
|
slawson |
hashcat
|
6 |
1,854 |
08-16-2019, 04:51 PM |
| |
|
Thread: Creating Custom Password List
Post: RE: Creating Custom Password List
| Never done that before, I'll see what I can find online. Thanks. |
|
slawson |
General Talk
|
6 |
2,557 |
10-23-2019, 11:18 PM |
| |
|
Thread: Creating Custom Password List
Post: RE: Creating Custom Password List
| Awesome. That's exactly what I was looking for. Thank you.
Since I have the MACs in a file this was my command:
for WLAN_MAC in $(cat macs.txt); do ETH_MAC=`printf '%x' $(( 0x$WLAN_MAC - 1 ))`... |
|
slawson |
General Talk
|
6 |
2,557 |
10-24-2019, 03:08 PM |
