Search Results
|
Post |
Author |
Forum |
Replies |
Views |
Posted
[asc]
|
|
|
Thread: Markov attack
Post: RE: Markov attack
It's not a special "kind of attack", instead it is "just" one of many optimisations.
It is on by default in hashcat (to disable it you need to use --markov-disable).
You can see the differences by u... |
|
philsmd |
hashcat-utils, maskprocessor, statsprocessor, md5stress, wikistrip
|
4 |
9,099 |
01-30-2017, 05:51 PM |
|
|
Thread: Noob Extracting VeraCrypt MBR
Post: RE: Noob Extracting VeraCrypt MBR
atom was not speaking about the output length but about the details of the algorithm, i.e. whenever you have to apply the same hashing function thousand or even millions of times, the speed will be dr... |
|
philsmd |
hashcat
|
20 |
24,729 |
01-28-2017, 01:50 PM |
|
|
Thread: Multiple hccap hashes?
Post: RE: Multiple hccap hashes?
It seems that you should try to improve your searching skills ;)
https://hashcat.net/faq#how_can_i_crack_multiple_wpa_handshakes_at_once
There are several forum posts and as you see it even made i... |
|
philsmd |
hashcat
|
2 |
3,958 |
01-28-2017, 01:45 PM |
|
|
Thread: Hashcat v3.30 and resume
Post: RE: Hashcat v3.30 and resume
It would be great if you could open a github issue (https://github.com/hashcat/hashcat/issues/) such that some dev can have a look at it.
Thanks for the report here and the steps to reproduce (but in ... |
|
philsmd |
hashcat
|
3 |
5,360 |
01-27-2017, 12:14 PM |
|
|
Thread: Noob Extracting VeraCrypt MBR
Post: RE: Noob Extracting VeraCrypt MBR
Why do you use mask processor? hashcat has inbuilt support for mask attack (--attack-mode 3 or short -a 3).
Your disk and transfer speed to the GPUs is probably the bottleneck (if you do not use -a 3 ... |
|
philsmd |
hashcat
|
20 |
24,729 |
01-27-2017, 10:55 AM |
|
|
Thread: Noob Extracting VeraCrypt MBR
Post: RE: Noob Extracting VeraCrypt MBR
Looks good. Good luck with the password recovery. |
|
philsmd |
hashcat
|
20 |
24,729 |
01-27-2017, 10:33 AM |
|
|
Thread: Noob Extracting VeraCrypt MBR
Post: RE: Noob Extracting VeraCrypt MBR
Well, that's very different, both the size of the binary data and they don't even use an offset (the skip parameter).
Of course if you skip 31744 from the start you won't find the "Truecrypt΅ header ... |
|
philsmd |
hashcat
|
20 |
24,729 |
01-27-2017, 09:36 AM |
|
|
Thread: TrueCrypt Help
Post: RE: TrueCrypt Help
Yeah, it seems that this is the perfect use case for a mask file (see https://hashcat.net/wiki/doku.php?id=mask_attack#hashcat_mask_files) in combination with a reduced set of characters per position ... |
|
philsmd |
General Talk
|
7 |
8,739 |
01-27-2017, 09:19 AM |
|
|
Thread: Itunes Backup
Post: RE: Itunes Backup
@keen, good to hear that it helped.
There is also an update to hashcat! It now supports both -m 14700 = iTunes Backup < 10 and -m 14800 = iTunes Backup >= 10 (use beta 3.30+50 or newer: https://hashc... |
|
philsmd |
General Talk
|
42 |
83,234 |
01-26-2017, 10:25 PM |
|
|
Thread: Extract PDF hash (edit passwd)
Post: RE: Extract PDF hash (edit passwd)
It seems that the differences between the algorithms used for checking the owner password (- editing - permissions) compared to the user password (password to open the file aka encrypted PDFs) at leas... |
|
philsmd |
hashcat
|
13 |
59,850 |
01-26-2017, 06:03 PM |
|
|
Thread: Noob Extracting VeraCrypt MBR
Post: RE: Noob Extracting VeraCrypt MBR
Where did you get the information from that it needs to have a "Veracrypt" string in it?
This is not true as far as I can tell.
You are basically searching for something (the "Veracrypt" thing) that s... |
|
philsmd |
hashcat
|
20 |
24,729 |
01-26-2017, 09:34 AM |
|
|
Thread: Hash-encoding exception ?
Post: RE: Hash-encoding exception ?
These hashes are md5crypt hashes.
See https://hashcat.net/wiki/doku.php?id=example_hashes and the help (it's the hash mode -m 500 = md5crypt, MD5(Unix), FreeBSD MD5, Cisco-IOS MD5 ).
You sohuldn't... |
|
philsmd |
hashcat
|
2 |
5,756 |
01-25-2017, 10:55 PM |
|
|
Thread: TrueCrypt Help
Post: RE: TrueCrypt Help
wait, didn't you say it is a TrueCrypt boot volume ?
If so, the command you should be using is:
Code:
--
dd if=...DR2 of=boot_loader.tc bs=1 skip=31744 count=512
--
at least this is what ... |
|
philsmd |
General Talk
|
7 |
8,739 |
01-25-2017, 12:22 AM |
|
|
Thread: TrueCrypt Help
Post: RE: TrueCrypt Help
I'm very sorry to hear that.
Please try with the method explained here: https://hashcat.net/faq#how_do_i_extract_the_hashes_from_truecrypt_volumes
Hope that it helps (and that the password is not to... |
|
philsmd |
General Talk
|
7 |
8,739 |
01-24-2017, 10:33 PM |
|
|
Thread: Formatting a salted SHA 512 hash
Post: RE: Formatting a salted SHA 512 hash
You can "truncate"/cut the hash itself @ the same length used by the example hash :) |
|
philsmd |
hashcat
|
5 |
8,048 |
01-24-2017, 09:56 PM |
|
|
Thread: Formatting a salted SHA 512 hash
Post: RE: Formatting a salted SHA 512 hash
it's hash mode -m 7100 | OSX v10.8, OSX v10.9, OSX v10.10 | Operating-Systems
also see https://hashcat.net/wiki/example_hashes for example hashes (search for OS X v10.8 / v10.9) |
|
philsmd |
hashcat
|
5 |
8,048 |
01-24-2017, 09:30 PM |
|
|
Thread: where did hashcat get the hashtype?
Post: RE: where did hashcat get the hashtype?
No, hashcat doesn't guess the hash type.
As many "hash identification" projects show, there is no such think as 100% knowing which hash type the input is from a random set of some (hex) bytes.
It on... |
|
philsmd |
hashcat
|
3 |
3,661 |
01-24-2017, 06:09 PM |
|
|
Thread: 7z2hashcat
Post: RE: 7z2hashcat
Maybe you didn't notice it yet, but we have updated both 7z2hashcat.pl (please use version 0.9 or higher) and hashcat itself (please use the newest beta (https://hashcat.net/beta/)).
In addition to... |
|
philsmd |
User Contributions
|
28 |
70,369 |
01-24-2017, 01:32 PM |
|
|
Thread: Itunes Backup
Post: RE: Itunes Backup
@Tuxel don't worry the language is not the problem... but there might be other things that need to be double-checked first (we need to gather more information such that we are almost perfectly sure ab... |
|
philsmd |
General Talk
|
42 |
83,234 |
01-20-2017, 04:09 PM |
|
|
Thread: Itunes Backup
Post: RE: Itunes Backup
Are you sure that the password of the first one (IOS 10.2.0) is "test123" (without quotes)?
It doesn't seem to crack and also the stackoverflow code (our reference for the algorithm) isn't able to op... |
|
philsmd |
General Talk
|
42 |
83,234 |
01-20-2017, 01:13 PM |