|
Search Results
|
| Post |
Author |
Forum |
Replies |
Views |
Posted
[desc]
|
| |
|
Thread: TrueCrypt Help
Post: RE: TrueCrypt Help
| wait, didn't you say it is a TrueCrypt boot volume ?
If so, the command you should be using is:
Code:
--
dd if=...DR2 of=boot_loader.tc bs=1 skip=31744 count=512
--
at least this is what ... |
|
philsmd |
General Talk
|
7 |
8,739 |
01-25-2017, 12:22 AM |
| |
|
Thread: Hash-encoding exception ?
Post: RE: Hash-encoding exception ?
| These hashes are md5crypt hashes.
See https://hashcat.net/wiki/doku.php?id=example_hashes and the help (it's the hash mode -m 500 = md5crypt, MD5(Unix), FreeBSD MD5, Cisco-IOS MD5 ).
You sohuldn't... |
|
philsmd |
hashcat
|
2 |
5,756 |
01-25-2017, 10:55 PM |
| |
|
Thread: Noob Extracting VeraCrypt MBR
Post: RE: Noob Extracting VeraCrypt MBR
| Where did you get the information from that it needs to have a "Veracrypt" string in it?
This is not true as far as I can tell.
You are basically searching for something (the "Veracrypt" thing) that s... |
|
philsmd |
hashcat
|
20 |
24,729 |
01-26-2017, 09:34 AM |
| |
|
Thread: Extract PDF hash (edit passwd)
Post: RE: Extract PDF hash (edit passwd)
| It seems that the differences between the algorithms used for checking the owner password (- editing - permissions) compared to the user password (password to open the file aka encrypted PDFs) at leas... |
|
philsmd |
hashcat
|
13 |
59,850 |
01-26-2017, 06:03 PM |
| |
|
Thread: Itunes Backup
Post: RE: Itunes Backup
| @keen, good to hear that it helped.
There is also an update to hashcat! It now supports both -m 14700 = iTunes Backup < 10 and -m 14800 = iTunes Backup >= 10 (use beta 3.30+50 or newer: https://hashc... |
|
philsmd |
General Talk
|
42 |
83,234 |
01-26-2017, 10:25 PM |
| |
|
Thread: TrueCrypt Help
Post: RE: TrueCrypt Help
| Yeah, it seems that this is the perfect use case for a mask file (see https://hashcat.net/wiki/doku.php?id=mask_attack#hashcat_mask_files) in combination with a reduced set of characters per position ... |
|
philsmd |
General Talk
|
7 |
8,739 |
01-27-2017, 09:19 AM |
| |
|
Thread: Noob Extracting VeraCrypt MBR
Post: RE: Noob Extracting VeraCrypt MBR
| Well, that's very different, both the size of the binary data and they don't even use an offset (the skip parameter).
Of course if you skip 31744 from the start you won't find the "Truecrypt΅ header ... |
|
philsmd |
hashcat
|
20 |
24,729 |
01-27-2017, 09:36 AM |
| |
|
Thread: Noob Extracting VeraCrypt MBR
Post: RE: Noob Extracting VeraCrypt MBR
| Looks good. Good luck with the password recovery. |
|
philsmd |
hashcat
|
20 |
24,729 |
01-27-2017, 10:33 AM |
| |
|
Thread: Noob Extracting VeraCrypt MBR
Post: RE: Noob Extracting VeraCrypt MBR
| Why do you use mask processor? hashcat has inbuilt support for mask attack (--attack-mode 3 or short -a 3).
Your disk and transfer speed to the GPUs is probably the bottleneck (if you do not use -a 3 ... |
|
philsmd |
hashcat
|
20 |
24,729 |
01-27-2017, 10:55 AM |
| |
|
Thread: Hashcat v3.30 and resume
Post: RE: Hashcat v3.30 and resume
| It would be great if you could open a github issue (https://github.com/hashcat/hashcat/issues/) such that some dev can have a look at it.
Thanks for the report here and the steps to reproduce (but in ... |
|
philsmd |
hashcat
|
3 |
5,360 |
01-27-2017, 12:14 PM |
| |
|
Thread: Multiple hccap hashes?
Post: RE: Multiple hccap hashes?
| It seems that you should try to improve your searching skills ;)
https://hashcat.net/faq#how_can_i_crack_multiple_wpa_handshakes_at_once
There are several forum posts and as you see it even made i... |
|
philsmd |
hashcat
|
2 |
3,958 |
01-28-2017, 01:45 PM |
| |
|
Thread: Noob Extracting VeraCrypt MBR
Post: RE: Noob Extracting VeraCrypt MBR
| atom was not speaking about the output length but about the details of the algorithm, i.e. whenever you have to apply the same hashing function thousand or even millions of times, the speed will be dr... |
|
philsmd |
hashcat
|
20 |
24,729 |
01-28-2017, 01:50 PM |
| |
|
Thread: Markov attack
Post: RE: Markov attack
| It's not a special "kind of attack", instead it is "just" one of many optimisations.
It is on by default in hashcat (to disable it you need to use --markov-disable).
You can see the differences by u... |
|
philsmd |
hashcat-utils, maskprocessor, statsprocessor, md5stress, wikistrip
|
4 |
9,099 |
01-30-2017, 05:51 PM |
| |
|
Thread: run LUKS on windows
Post: RE: run LUKS on windows
| Yeah, you can use any hash type that hashcat supports on both unix and windows (actually you can even use OSX too). Hashcat doesn't has a limitation that forbids you to run LUKS on windows.
Well, you... |
|
philsmd |
hashcat
|
1 |
2,909 |
01-31-2017, 09:26 AM |
| |
|
Thread: v3.30-49-g2f81532 segfault
Post: RE: v3.30-49-g2f81532 segfault
| If you use the git version you need to always do all of these steps:
Code:
--
$ make clean
$ git pull
$ make
--
I also think that reports like this should be directly addressed on github, not here... |
|
philsmd |
hashcat
|
5 |
6,153 |
02-01-2017, 12:40 PM |
| |
|
Thread: What's wrong with AMD & RAR3-HP
Post: RE: What's wrong with AMD & RAR3-HP
| I tested this with win 10 and GnuWin32's wc command.
The differences between linux and windows are the following.
Linux:
Code:
--
./hashcat -a 3 --stdout -i --increment-min 5 --increment-max 5 -1 ?d... |
|
philsmd |
hashcat
|
9 |
9,372 |
02-01-2017, 03:51 PM |
| |
|
Thread: --show doesn't print duplicates when using --username
Post: RE: --show doesn't print duplicates when using --u...
| Recently, a new feature was implemented to support exactly this.
See https://github.com/hashcat/hashcat/issues/963 and test the beta at https://hashcat.net/beta/ |
|
philsmd |
hashcat
|
2 |
6,417 |
02-02-2017, 04:12 PM |
| |
|
Thread: Hex ch and small problem
Post: RE: Hex ch and small problem
| It seems that you are mixing up custom charsets (-1 xxx) with the mask itself.
This makes no sense: -a 3 -1 ?b?b?b?b?b?b?b?b
-1 is the same as --custom-charset1 and it is used to define a custom c... |
|
philsmd |
hashcat
|
14 |
12,596 |
02-03-2017, 01:27 AM |
| |
|
Thread: Hex ch and small problem
Post: RE: Hex ch and small problem
| The problem here might be that the keyspace is way too huge and therefore a "integer overflow" is reached. 255^8 = 17878103347812890625 (yeah, a huge number!).
Try with a smaller mask instead...
BTW... |
|
philsmd |
hashcat
|
14 |
12,596 |
02-03-2017, 10:53 AM |
| |
|
Thread: Issue with RAR3-hp hash type
Post: RE: Issue with RAR3-hp hash type
| This type of rar archives are currently not supported (see https://hashcat.net/wiki/doku.php?id=example_hashes , the supported type is RAR-hp aka rar files with header encryption).
$RAR3$*1* means ... |
|
philsmd |
hashcat
|
2 |
4,309 |
02-03-2017, 02:08 PM |
