|
Search Results
|
| Post |
Author |
Forum
[desc]
|
Replies |
Views |
Posted |
| |
|
Thread: VeraCrypt cracking always Exhausted
Post: RE: VeraCrypt cracking always Exhausted
| You should have already noticed by now (after we discussed and explained it here: https://hashcat.net/forum/thread-6908.html and also by looking at the example hashes here: https://hashcat.net/wiki/ex... |
|
philsmd |
hashcat
|
7 |
10,898 |
09-29-2017, 04:35 PM |
| |
|
Thread: VeraCrypt cracking always Exhausted
Post: RE: VeraCrypt cracking always Exhausted
| 512 bytes is correct. (every other size is wrong, the details are explained here: https://hashcat.net/faq#how_do_i_extract_the_hashes_from_veracrypt_volumes)
(but note: hashcat doesn't give a warning... |
|
philsmd |
hashcat
|
7 |
10,898 |
09-29-2017, 05:04 PM |
| |
|
Thread: i want to get mail:pass
Post: RE: i want to get mail:pass
| This can be accomplished by using TWO steps (1. cracking, 2. --show):
https://hashcat.net/wiki/doku.php?id=frequently_asked_questions#how_can_i_show_previously_cracked_passwords_and_output_them_in_a_s... |
|
philsmd |
hashcat
|
5 |
4,960 |
10-15-2017, 04:19 PM |
| |
|
Thread: HMAC-SHA1 with binary Key
Post: RE: HMAC-SHA1 with binary Key
| pro tip with hashcat 3.6+ or newer you could just use the --encoding-to command line option (if the word list is not already using the correct encoding):
Code:
--
$ cat hash.txt
30263e435f8ce1b... |
|
philsmd |
hashcat
|
3 |
4,169 |
10-16-2017, 07:33 AM |
| |
|
Thread: Benchmark selection
Post: RE: Benchmark selection
| Maybe VeraCrypt (in addition to TrueCrypt or as replacement for TrueCrypt) would make sense.
I think also some MS office modes could make sense within the reduced list, because it's also used a lot b... |
|
philsmd |
hashcat
|
8 |
9,943 |
10-28-2017, 01:51 PM |
| |
|
Thread: Hybrid attack
Post: RE: Hybrid attack
| You could use a hcmask file (see https://hashcat.net/wiki/doku.php?id=mask_attack#hashcat_mask_files):
file my.hcmask:
Code:
--
?l?u?d,key?1
?l?u?d,?1key
?l?u?d,key?1?1
?l?u?d,?1?1key
?l?u?... |
|
philsmd |
hashcat
|
4 |
6,069 |
10-04-2017, 08:27 PM |
| |
|
Thread: IOS 11 backup HASHCAT
Post: RE: IOS 11 backup HASHCAT
| Can you please provide some examples of password candidates that would follow your policy?
is it x times letters and y times digit?
how long is the password
It is also worth analyzing if this is fea... |
|
philsmd |
hashcat
|
5 |
6,598 |
10-15-2017, 04:31 PM |
| |
|
Thread: Range for the mask
Post: RE: Range for the mask
| First of all, I do not understand what this notation means:
Quote:
--
password|21|6|8|3|19|17|5|15|3|8|5|6|30|19|0|29|29|18|30|30|1|1|28|15|27|22|24|1|2|17|30|2017
--
does this mean your passw... |
|
philsmd |
hashcat
|
7 |
6,109 |
10-24-2017, 11:35 AM |
| |
|
Thread: I get CL_OUT_OF_RESOURCES with -m 15700/ethereum
Post: RE: I get CL_OUT_OF_RESOURCES with -m 15700/ethere...
| The cost factor (and memory needed) for ethereum/scrypt is too high for your GPU.
Try to use -D 1 and therefore run hashcat with your CPU. |
|
philsmd |
hashcat
|
9 |
8,109 |
10-29-2017, 07:32 PM |
| |
|
Thread: I get CL_OUT_OF_RESOURCES with -m 15700/ethereum
Post: RE: I get CL_OUT_OF_RESOURCES with -m 15700/ethere...
| please also apply the timeout patch (https://hashcat.net/wiki/doku.php?id=timeout_patch) like the warning says.
For intel CPUs you need to install the OpenCL driver (not the SDK). |
|
philsmd |
hashcat
|
9 |
8,109 |
10-29-2017, 07:37 PM |
| |
|
Thread: I get CL_OUT_OF_RESOURCES with -m 15700/ethereum
Post: RE: I get CL_OUT_OF_RESOURCES with -m 15700/ethere...
| do not install the cuda sdk.
For the intel OpenCL driver, follow this link: https://software.intel.com/en-us/articles/opencl-drivers#latest_CPU_runtime (and as already said, you do not need the SDK... |
|
philsmd |
hashcat
|
9 |
8,109 |
10-29-2017, 07:49 PM |
| |
|
Thread: Sanity check: "Must include chars" ruleset
Post: RE: Sanity check: "Must include chars" ruleset
| If you are sure that the password length is just 10 and only 4 "random" chars, you could also use this approach. First, generate a dict (yes, this is normally not advicable, but for very small random ... |
|
philsmd |
hashcat
|
1 |
2,055 |
10-26-2017, 07:28 AM |
| |
|
Thread: MSCHAPv2 load fail
Post: RE: MSCHAPv2 load fail
| The correct hash mode is -m 5500 = NetNTLMv1 and the password for this hash is "password".
bob::::63xxx03415162exxxxx263799f8e8axxx5a6bc4d0exxxx72:axxxx01cd59xxx32:password
BTW: you are not allo... |
|
philsmd |
hashcat
|
2 |
2,363 |
11-03-2017, 02:16 PM |
| |
|
Thread: Hashcat rule help.
Post: RE: Hashcat rule help.
|
Code:
--
hashcat --stdout -o usernames_with_digits.txt -a 6 usernames.txt ?d?d?d
--
and
Code:
--
hashcat -m 0 -a 1 -w 3 hashes.txt usernames_with_digits.txt domain_names.txt
--
|
|
philsmd |
hashcat
|
6 |
5,416 |
11-06-2017, 01:19 PM |
| |
|
Thread: My Bitcoin’s locked into Veracrypt container- 2 BTC to solve
Post: RE: My Bitcoin’s locked into Veracrypt container...
| Are you sure that you read the guide? see https://hashcat.net/wiki/doku.php?id=frequently_asked_questions#how_do_i_extract_the_hashes_from_veracrypt_volumes
It basically follows the same steps that... |
|
philsmd |
hashcat
|
7 |
6,792 |
11-03-2017, 01:27 PM |
| |
|
Thread: My Bitcoin’s locked into Veracrypt container- 2 BTC to solve
Post: RE: My Bitcoin’s locked into Veracrypt container...
| I think that you are looking at the whole disk instead of just the VeraCrypt boot volume.
Anyways, in your specific case, from offset 0xd000 (where the bytes ea 1e 7c 00 00 20 56 65 72 61 43 72 79 ... |
|
philsmd |
hashcat
|
7 |
6,792 |
11-03-2017, 09:27 PM |
| |
|
Thread: My Bitcoin’s locked into Veracrypt container- 2 BTC to solve
Post: RE: My Bitcoin’s locked into Veracrypt container...
| No, that is not true. Your math is flawed:
0x14DFF-0x14C00 = 511
but remember between 0x14DFF (included) and 0x14C00 (included) their are 512 bytes. The same principle holds that is between 1 an... |
|
philsmd |
hashcat
|
7 |
6,792 |
11-07-2017, 08:50 AM |
| |
|
Thread: Getting a weird hash from PDF?
Post: RE: Getting a weird hash from PDF?
| As far as I know the current up-to-date script to extract the info from .pdf files is pdf2john.pl (a perl file not a python file):
https://raw.githubusercontent.com/magnumripper/JohnTheRipper/bleedin... |
|
philsmd |
hashcat
|
2 |
3,265 |
11-10-2017, 10:17 PM |
| |
|
Thread: Problems with the encodings of dictionaries ...
Post: RE: Problems with the encodings of dictionaries .....
| You are not allowed to post hashes here, you get banned for breaking the forum rules.
For what regards the problem with encoding: you need to use the correct encoding, in this case it is ISO-8859-9... |
|
philsmd |
hashcat
|
5 |
4,523 |
11-12-2017, 02:22 PM |
| |
|
Thread: m 14800 (itunes Ver >10), hashcat has a strange behaviour
Post: RE: m 14800 (itunes Ver >10), hashcat has a strang...
| I don't understand what the problem is.
This is perfectly expected behaviour. -m 14800 is a hard/slow hash type.
Everything that you just described seems to be expected.
The only way to fix it ... |
|
philsmd |
hashcat
|
6 |
4,996 |
11-10-2017, 12:08 PM |
