Search Results
|
Post |
Author |
Forum
[desc]
|
Replies |
Views |
Posted |
|
|
Thread: how can i crack hexmd5 hash ?
Post: RE: how can i crack hexmd5 hash ?
you must be doing something wrong.
If I put the javascript code into my browser and run
hexMD5 ('\115' + "22222222" + '\017\226\132\264\231\243\072\025\142\343\313\006\131\010\106\311')
I get this ... |
|
philsmd |
General Talk
|
27 |
14,953 |
02-19-2019, 12:35 PM |
|
|
Thread: how can i crack hexmd5 hash ?
Post: RE: how can i crack hexmd5 hash ?
in the capture test.pcap
if first packet javascript with salt then hash packet after javascript is VERY GOOD
if first packet hash then javascript is VERY BAD
if last packet javascript and NO ... |
|
philsmd |
General Talk
|
27 |
14,953 |
02-22-2019, 01:29 PM |
|
|
Thread: how can i crack hexmd5 hash ?
Post: RE: how can i crack hexmd5 hash ?
https://i.postimg.cc/MpF52GFn/verygoodverybad.png |
|
philsmd |
General Talk
|
27 |
14,953 |
02-22-2019, 07:25 PM |
|
|
Thread: how can i crack hexmd5 hash ?
Post: RE: how can i crack hexmd5 hash ?
I think you are just heavily misinterpreting the tcp dump.
Just think about it a moment. The javascript code must be sent before the hexMD5 () password is sent, because the client needs to know wha... |
|
philsmd |
General Talk
|
27 |
14,953 |
02-21-2019, 10:45 AM |
|
|
Thread: how can i crack hexmd5 hash ?
Post: RE: how can i crack hexmd5 hash ?
1. about the javascript string to hexadecimal conversion: it's just the octal code point (see https://mathiasbynens.be/notes/javascript-escapes#octal) converted to hexadecimal
something like this in ... |
|
philsmd |
General Talk
|
27 |
14,953 |
02-21-2019, 04:38 PM |
|
|
Thread: how can i crack hexmd5 hash ?
Post: RE: how can i crack hexmd5 hash ?
the only problem is that your capture starts in the middle and ends in the middle and therefore only one complete exchange is captured.
Let's make it very clear.
The javascript + salt is the que... |
|
philsmd |
General Talk
|
27 |
14,953 |
02-23-2019, 01:08 AM |
|
|
Thread: how can i crack hexmd5 hash ?
Post: RE: how can i crack hexmd5 hash ?
Q3 is a new question.
A1 was a very old answer.
we do NOT have any answer for question 3 (Q3). We have no question Q1 for answer A1.
This is because you started and stopped the capture in the mid... |
|
philsmd |
General Talk
|
27 |
14,953 |
02-23-2019, 04:28 PM |
|
|
Thread: how can i crack hexmd5 hash ?
Post: RE: how can i crack hexmd5 hash ?
https://i.postimg.cc/zfwB1t82/a.png
the wireshark filter used in this image:
frame contains " = hexMD5" || frame contains "password="
answer 1: A1 (response (POST) from client with "password=",... |
|
philsmd |
General Talk
|
27 |
14,953 |
02-24-2019, 06:57 PM |
|
|
Thread: Not found hash Removing
Post: RE: Not found hash Removing
you are searching for this command line option:
Code:
--
--left | Compare hashlist with potfile; show uncracked hashes
--
and of course the opposite of --left is --show
btw: you are not all... |
|
philsmd |
General Talk
|
1 |
1,528 |
03-24-2019, 02:53 PM |
|
|
Thread: mask processor
Post: RE: mask processor
use .hcmask file for several different masks https://hashcat.net/wiki/doku.php?id=mask_attack#hashcat_mask_files
my.hcmask
Code:
--
?l?l?l?l?l?l?l?l
?l?l?l?l?l?l?l?d
?l?l?l?l?l?l?d?l
?l?l?l?... |
|
philsmd |
General Talk
|
3 |
2,104 |
04-02-2019, 01:04 PM |
|
|
Thread: length & Mask problem with PMK (-m 2501/16801)
Post: RE: length & Mask
not possible. math must be understood and respected. things that are infeasible, are and will remain infeasible (at least for our lifetime).
as we told you already hundreds of times (at least that ... |
|
philsmd |
General Talk
|
4 |
3,139 |
05-05-2019, 05:03 PM |
|
|
Thread: length & Mask problem with PMK (-m 2501/16801)
Post: RE: length & Mask
yeah, -a 0 (dictionary attack) makes most sense with -m 2501 and -m 16801
the general approach is to use wlangenpmk (or wlangenpmkocl for OpenCL support) from https://github.com/ZerBea/hcxkeys
... |
|
philsmd |
General Talk
|
4 |
3,139 |
05-06-2019, 09:03 AM |
|
|
Thread: Hash Mode 7100 Hashes
Post: RE: Hash Mode 7100 Hashes
sorry to hear about your loss.
I think something like this explains the format pretty well: https://apple.stackexchange.com/questions/220729/what-type-of-hash-are-a-macs-password-stored-in/220863#2... |
|
philsmd |
General Talk
|
8 |
3,915 |
05-22-2019, 08:11 AM |
|
|
Thread: Hash Mode 7100 Hashes
Post: RE: Hash Mode 7100 Hashes
yeah, it's very likely that you messed something up in converting (base64 to hex) or truncating the entropy part.
I would suggest that you also try with the example hash from https://hashcat.net/wi... |
|
philsmd |
General Talk
|
8 |
3,915 |
05-29-2019, 09:38 AM |
|
|
Thread: Hash Mode 7100 Hashes
Post: RE: Hash Mode 7100 Hashes
yeah, never ignore self-test errors. They are warning you that there is something wrong.
You could also test beta from https://hashcat.net/beta/ or release versions (even try with older ones) from ... |
|
philsmd |
General Talk
|
8 |
3,915 |
05-31-2019, 07:35 PM |
|
|
Thread: Guidance for creation of custom kernels
Post: RE: Guidance for creation of custom kernels
I would say that the best thing for now is to just have a look at the github commit history and check for the addition of (already added) new hash types, like this one: https://github.com/hashcat/hash... |
|
philsmd |
General Talk
|
2 |
1,858 |
06-15-2019, 09:33 AM |
|
|
Thread: Newbie Wallet
Post: RE: Newbie Wallet
What is the thread you are referring at ?
What are the files that you have ? wallet.dat ?
Which software (and which version of that software) did generate this wallet ?
hashcat support bitcoi... |
|
philsmd |
General Talk
|
9 |
3,605 |
07-10-2019, 11:41 AM |
|
|
Thread: Newbie Wallet
Post: RE: Newbie Wallet
you use bitcoin2john.py to convert the wallet.dat file into a hash:
https://raw.githubusercontent.com/magnumripper/JohnTheRipper/bleeding-jumbo/run/bitcoin2john.py
install and use python 2.7 to ... |
|
philsmd |
General Talk
|
9 |
3,605 |
07-11-2019, 09:55 AM |
|
|
Thread: Newbie Wallet
Post: RE: Newbie Wallet
see --help
-a 0 is dictionary attack and you need to provide a dictionary
-a 3 is mask attack (or "brute-force") and you need to provide a mask
upper = 26 chars, lower = 26 chars, digits = 10 c... |
|
philsmd |
General Talk
|
9 |
3,605 |
07-11-2019, 12:21 PM |
|
|
Thread: Newbie Wallet
Post: RE: Newbie Wallet
I don't know about that. If you say it's a "complex password system" maybe it's not random at all. I don't know about the specifics of your password system, it could be flawed and not that difficult t... |
|
philsmd |
General Talk
|
9 |
3,605 |
07-11-2019, 01:22 PM |