Search Results
|
Post |
Author
[desc]
|
Forum |
Replies |
Views |
Posted |
|
|
Thread: WPA crack not working in Windows Environment
Post: WPA crack not working in Windows Environment
I captured a cap file with airodump-ng. I then performed the wpaclean and aircrack-ng -J on the cap file. Hashcat successfully loads the hccap file in the The-Distribution-Which-Does-Not-Handle-Open... |
|
slawson |
Old oclHashcat Support
|
10 |
25,132 |
10-29-2014, 04:28 AM |
|
|
Thread: WPA crack not working in Windows Environment
Post: RE: WPA crack not working in Windows Environment
A little more info. I copied the hccap file my Windows 7 HE laptop and using hashcat-0.47 it returns the same error as my Desktop (Invalid EAPOL size). For troubleshooting purposes I copied the enti... |
|
slawson |
Old oclHashcat Support
|
10 |
25,132 |
10-29-2014, 05:37 AM |
|
|
Thread: WPA crack not working in Windows Environment
Post: RE: WPA crack not working in Windows Environment
Unfortunately I have already tried that. I'm really stumped why the hccap file will work in Linux but not Windows. |
|
slawson |
Old oclHashcat Support
|
10 |
25,132 |
10-29-2014, 03:18 PM |
|
|
Thread: WPA crack not working in Windows Environment
Post: RE: WPA crack not working in Windows Environment
Strangely, I tried cracking an old hccap file that I had previously prepared and it works within Windows. There seems to be something in the new hccap file that is preventing it to work in Windows. |
|
slawson |
Old oclHashcat Support
|
10 |
25,132 |
10-29-2014, 09:54 PM |
|
|
Thread: WPA crack not working in Windows Environment
Post: RE: WPA crack not working in Windows Environment
**SOLVED**
This may be a duh to you guys, but I found my problem. I was creating the hccap file in Linux and then transferring the file via FTP to my Windows machine. The FTP transfer is doing so... |
|
slawson |
Old oclHashcat Support
|
10 |
25,132 |
10-29-2014, 10:57 PM |
|
|
Thread: WPA crack not working in Windows Environment
Post: RE: WPA crack not working in Windows Environment
Sorry to keep replying to my own posts, but I changed my FTP transfer to binary and it does not seem to corrupt the files. |
|
slawson |
Old oclHashcat Support
|
10 |
25,132 |
10-29-2014, 11:11 PM |
|
|
Thread: cracking a domain cachedump
Post: cracking a domain cachedump
I obtained a Domain Cache dump via cachedump SYSTEM SECURITY. I ran oclhashcat on the hash using the hash type 1000 for NTLM. Oclhashcat picked up the hash, but didn't match any passwords. Since th... |
|
slawson |
Old oclHashcat Support
|
6 |
16,224 |
11-07-2014, 07:21 PM |
|
|
Thread: cracking a domain cachedump
Post: RE: cracking a domain cachedump
When I processed the file using hash type 1000 I used the --username parameter and Oclhashcat recognized the hashes that were in the file, but it didn't crack it. I ran the same scan using hash type ... |
|
slawson |
Old oclHashcat Support
|
6 |
16,224 |
11-07-2014, 11:52 PM |
|
|
Thread: cracking a domain cachedump
Post: RE: cracking a domain cachedump
I guess I didn't make my question clear enough. I will rephrase it. If I have a hash from a Domain Credentials cache dump, can I crack it by using either hash type 1000 or 1100? My testing shows th... |
|
slawson |
Old oclHashcat Support
|
6 |
16,224 |
11-08-2014, 04:44 AM |
|
|
Thread: Cannot remove a hash
Post: Cannot remove a hash
When I attempt to use the --remove parameter against a fgdump hash file, I get the message: Remove not supported in native hashfile-format mode.
Do I have to modify the file to only show Username:H... |
|
slawson |
Old oclHashcat Support
|
4 |
9,953 |
11-12-2014, 06:32 AM |
|
|
Thread: Cannot remove a hash
Post: RE: Cannot remove a hash
Sry. I didn't mention I am using Oclhashcat in Windows. |
|
slawson |
Old oclHashcat Support
|
4 |
9,953 |
11-12-2014, 09:07 AM |
|
|
Thread: Cannot remove a hash
Post: RE: Cannot remove a hash
Awesome, I didn't know that existed. Thanks. |
|
slawson |
Old oclHashcat Support
|
4 |
9,953 |
11-12-2014, 07:05 PM |
|
|
Thread: fgdump layout
Post: fgdump layout
I am needing some clarity on what I am looking at in a fgdump file. My hash dump shows me the usernames and hashes that I can successfully load and crack, but usually at the bottom of my hash file it... |
|
slawson |
General Help
|
6 |
9,869 |
11-12-2014, 07:09 PM |
|
|
Thread: fgdump layout
Post: RE: fgdump layout
So the AD assigns the random password? What would these hashes be useful for as far as penetration testing goes? |
|
slawson |
General Help
|
6 |
9,869 |
11-12-2014, 07:51 PM |
|
|
Thread: Removing duplicate lines in dictionary file
Post: Removing duplicate lines in dictionary file
I tried using
sort filename | uniq -u
but of course if a line was duplicated it was removing all the same lines and not keeping a unique line. |
|
slawson |
General Help
|
3 |
5,936 |
11-12-2014, 08:07 PM |
|
|
Thread: Removing duplicate lines in dictionary file
Post: RE: Removing duplicate lines in dictionary file
Wow. That was too easy. Although it seems to be fluky on a large file. |
|
slawson |
General Help
|
3 |
5,936 |
11-12-2014, 08:25 PM |
|
|
Thread: fgdump layout
Post: RE: fgdump layout
Thanks for the info. I guess one last question on this is:
Is there any way to tell fgdump to ignore the machine accounts, so that they don't crowd up my hash file? |
|
slawson |
General Help
|
6 |
9,869 |
11-12-2014, 08:26 PM |
|
|
Thread: fgdump layout
Post: RE: fgdump layout
Great information. Thanks for not using demeaning sarcasm on a newbie. |
|
slawson |
General Help
|
6 |
9,869 |
11-12-2014, 10:23 PM |
|
|
Thread: What am I missing?
Post: RE: What am I missing?
Wow, I knew it had to be something simple. I created a simple text file in UTF-8 format and it worked. Do all ANSI and UNICODE text files have a BOM?
Thanks. |
|
slawson |
hashcat
|
3 |
2,800 |
04-15-2018, 05:56 AM |
|
|
Thread: What am I missing?
Post: What am I missing?
I have used hashcat quite a bit in the past, but it's been a while so I might be missing something simple.
I am using hashcat 4.1.0. I used fgdump to dump a list of hashes. Just to get my f... |
|
slawson |
hashcat
|
3 |
2,800 |
04-13-2018, 07:58 PM |