|
Search Results
|
| Post |
Author |
Forum
[asc]
|
Replies |
Views |
Posted |
| |
|
Thread: [ANSWERED] New user, custom brute force help
Post: RE: New user, custom brute force help
| hashcat -a3 -m -1 ?d?u ?1?1?1?1?1?1?1?1?1?1
The -1 says to use a custom charset and the charset we are using is only digits (?d) and uppercase (?u) Then we use the ?1 10 times because you said t... |
|
plaverty9 |
hashcat
|
16 |
9,771 |
05-07-2018, 04:13 PM |
| |
|
Thread: Bruteforce mode / pw length
Post: RE: Bruteforce mode / pw length
|
fernando Wrote: (05-10-2018, 07:50 PM)
--
Hi.
Is there a way to run hashcat in a bruteforce mode with a specified minimum password length?
--
Yes, check out the increment and increment minimum ... |
|
plaverty9 |
hashcat
|
1 |
2,076 |
05-10-2018, 08:02 PM |
| |
|
Thread: [ANSWERED] New user, custom brute force help
Post: RE: New user, custom brute force help
|
AaronKek Wrote: (05-10-2018, 07:47 PM)
--
What would the "-m" be then?
--
Depends on the hash you're trying to crack. Use this to find it: https://hashcat.net/wiki/doku.php?id=example_hashes |
|
plaverty9 |
hashcat
|
16 |
9,771 |
05-10-2018, 08:09 PM |
| |
|
Thread: Prepend phrase + bruteforce
Post: RE: Prepend phrase + bruteforce
| Yep, use attack mode 3 and then your guess and then a mask. So if you need 7-10 more chars, you can do:
-a3 guess?a?a?a?a?a?a?a?a?a?a?a --increment --increment-minimum=7
But if you don't know ... |
|
plaverty9 |
hashcat
|
5 |
4,162 |
05-22-2018, 04:13 PM |
| |
|
Thread: Prepend phrase + bruteforce
Post: RE: Prepend phrase + bruteforce
| Yep, use:
-a3 -1 ?u?l?d guess?1?1?1?1?1?1?1?1?1?1 --increment --increment-minimum=7
But seriously, it could take years. The more characters you can remember, the shorter it'll be. |
|
plaverty9 |
hashcat
|
5 |
4,162 |
05-22-2018, 04:52 PM |
| |
|
Thread: Prepend phrase + bruteforce
Post: RE: Prepend phrase + bruteforce
|
WhalingWizard Wrote: (05-22-2018, 05:07 PM)
--
plaverty9 Wrote: (05-22-2018, 04:52 PM)
--
Yep, use:
-a3 -1 ?u?l?d guess?1?1?1?1?1?1?1?1?1?1 --increment --increment-minimum=7
But seriously, i... |
|
plaverty9 |
hashcat
|
5 |
4,162 |
05-23-2018, 05:26 PM |
| |
|
Thread: show.log
Post: show.log
| I'm noticing that a file named show.log is being created on my server, even though I don't intend for it. Does that get created any time I use --show or is there some other combination of flags making... |
|
plaverty9 |
hashcat
|
6 |
3,646 |
05-23-2018, 07:43 PM |
| |
|
Thread: show.log
Post: RE: show.log
| Thanks Royce, that's my confusion too. I use a hashcat server for my job and the server admin just asked why I keep creating show.log files, which I don't even know how to create them. I'll try to fig... |
|
plaverty9 |
hashcat
|
6 |
3,646 |
05-24-2018, 02:32 PM |
| |
|
Thread: show.log
Post: RE: show.log
| Sure. I simply run hashcat -m1000 --show --username --potfile-path potfile
and that generates a show.log file in my hashcat directory. The contents of the show.log file look like it's debugging or... |
|
plaverty9 |
hashcat
|
6 |
3,646 |
05-25-2018, 09:35 PM |
| |
|
Thread: show.log
Post: RE: show.log
| Yeah, it's pretty weird that it keeps getting created. I didn't even know about the --session flag. Also one time when trying to show, I got an error that I didn't have permission to my show.log file,... |
|
plaverty9 |
hashcat
|
6 |
3,646 |
05-28-2018, 02:00 PM |
| |
|
Thread: how to set mask
Post: RE: how to set mask
| For each character that you think is a digit, use ?d. If you know parts of it, you can feed that in. Using your example, you can use: 200002?d?d?d?d?d?d?d?d?d2018053019184400100426
But you'll need... |
|
plaverty9 |
hashcat
|
3 |
2,640 |
06-02-2018, 12:44 PM |
| |
|
Thread: how to set mask
Post: RE: how to set mask
| If you don't know the order then yes, you'll need to try all of them, which I think might take a really long time, especially if you don't know how many characters are missing. If you know how many ch... |
|
plaverty9 |
hashcat
|
3 |
2,640 |
06-06-2018, 02:51 PM |
| |
|
Thread: How to know the number of characters in a password ?
Post: RE: How to know the number of characters in a pass...
| There isn't. Do you start with wordlists and rules before brute forcing? I have cracked 30+ char passwords before with wordlists. If you don't know anything about the password, brute forcing takes way... |
|
plaverty9 |
hashcat
|
8 |
5,751 |
06-06-2018, 10:32 PM |
| |
|
Thread: How to know the number of characters in a password ?
Post: RE: How to know the number of characters in a pass...
| Along the lines of what Royce said, start small. If you have a fast enough hash type, you can brute for an entire space relatively quickly. For example for NTLM, I've been able to hit everything with ... |
|
plaverty9 |
hashcat
|
8 |
5,751 |
06-07-2018, 01:07 AM |
| |
|
Thread: Weird estimated time
Post: RE: Weird estimated time
|
starkkh Wrote: (06-05-2018, 04:36 AM)
--
Hi everybody ,
Anytime I want to run a brute force attack with masks or a rule based attack I have really really long estimated time now I just tried anot... |
|
plaverty9 |
hashcat
|
5 |
3,464 |
06-05-2018, 04:01 PM |
| |
|
Thread: How to know the number of characters in a password ?
Post: RE: How to know the number of characters in a pass...
| Another list that I like is from The Hacker Playbook. https://thehackerplaybook.com/get.php?type=THP-password
In addition to reading Hash Crack, The Hacker Playbook has some good password cracking ... |
|
plaverty9 |
hashcat
|
8 |
5,751 |
06-07-2018, 04:12 PM |
| |
|
Thread: Problem with sha-256 crack
Post: RE: Problem with sha-256 crack
| This seems relevant to what you're dealing with: https://github.com/hashcat/hashcat/issues/1467 |
|
plaverty9 |
hashcat
|
6 |
3,828 |
06-11-2018, 07:07 PM |
| |
|
Thread: Problem with sha-256 crack
Post: RE: Problem with sha-256 crack
| I think what undeath was trying to say is "yes", it'll take a long time. Look at what it's trying to guess:
First six have a keyspace of 36 each
Next two have a keyspace of 33 each
Last six have... |
|
plaverty9 |
hashcat
|
6 |
3,828 |
06-11-2018, 08:10 PM |
| |
|
Thread: keep-guessing + rules?
Post: RE: keep-guessing + rules?
| I kinda feel like that if you don't know the answer to something that it is likely unknowable. |
|
plaverty9 |
hashcat
|
2 |
2,178 |
06-18-2018, 10:54 PM |
| |
|
Thread: Can`t find NTLMv2 Hash
Post: RE: Can`t find NTLMv2 Hash
| In my experience, when I capture an NTLMv2 hash, the output explicitly says that. So maybe you're not capturing them? |
|
plaverty9 |
hashcat
|
2 |
2,358 |
06-26-2018, 08:32 PM |
