|
Search Results
|
| Post |
Author |
Forum
[desc]
|
Replies |
Views |
Posted |
| |
|
Thread: Itunes Backup
Post: RE: Itunes Backup
| Are you sure that the password of the first one (IOS 10.2.0) is "test123" (without quotes)?
It doesn't seem to crack and also the stackoverflow code (our reference for the algorithm) isn't able to op... |
|
philsmd |
General Talk
|
42 |
83,233 |
01-20-2017, 01:13 PM |
| |
|
Thread: TrueCrypt Help
Post: RE: TrueCrypt Help
| I'm very sorry to hear that.
Please try with the method explained here: https://hashcat.net/faq#how_do_i_extract_the_hashes_from_truecrypt_volumes
Hope that it helps (and that the password is not to... |
|
philsmd |
General Talk
|
7 |
8,739 |
01-24-2017, 10:33 PM |
| |
|
Thread: TrueCrypt Help
Post: RE: TrueCrypt Help
| wait, didn't you say it is a TrueCrypt boot volume ?
If so, the command you should be using is:
Code:
--
dd if=...DR2 of=boot_loader.tc bs=1 skip=31744 count=512
--
at least this is what ... |
|
philsmd |
General Talk
|
7 |
8,739 |
01-25-2017, 12:22 AM |
| |
|
Thread: Itunes Backup
Post: RE: Itunes Backup
| @keen, good to hear that it helped.
There is also an update to hashcat! It now supports both -m 14700 = iTunes Backup < 10 and -m 14800 = iTunes Backup >= 10 (use beta 3.30+50 or newer: https://hashc... |
|
philsmd |
General Talk
|
42 |
83,233 |
01-26-2017, 10:25 PM |
| |
|
Thread: TrueCrypt Help
Post: RE: TrueCrypt Help
| Yeah, it seems that this is the perfect use case for a mask file (see https://hashcat.net/wiki/doku.php?id=mask_attack#hashcat_mask_files) in combination with a reduced set of characters per position ... |
|
philsmd |
General Talk
|
7 |
8,739 |
01-27-2017, 09:19 AM |
| |
|
Thread: Itunes Backup
Post: RE: Itunes Backup
| Yeah, looks good Tuxel (if you are sure about the hard-coded "48df8dx4" beginning).
In theory you should be able to speed it up significantly e.g. with the "parallels" tool:
Code:
--
./hashcat --s... |
|
philsmd |
General Talk
|
42 |
83,233 |
01-19-2017, 11:43 PM |
| |
|
Thread: Itunes Backup
Post: RE: Itunes Backup
| @Tuxel don't worry the language is not the problem... but there might be other things that need to be double-checked first (we need to gather more information such that we are almost perfectly sure ab... |
|
philsmd |
General Talk
|
42 |
83,233 |
01-20-2017, 04:09 PM |
| |
|
Thread: Itunes Backup
Post: RE: Itunes Backup
| Well, it is pretty easy to see from the link posted by keen (https://stackoverflow.com/questions/1498342/how-to-decrypt-an-encrypted-apple-itunes-iphone-backup) that after the $key = pbkdf2_hmac_sha1 (... |
|
philsmd |
General Talk
|
42 |
83,233 |
01-19-2017, 12:51 AM |
| |
|
Thread: WPA/WPA2: How the hash is generated
Post: RE: WPA/WPA2: How the hash is generated
| It is actually just a kind of a checksum that is only needed internally for hashcat and wasn't meant to be something the user should care about. You shouldn't really need to know the algorithm for the... |
|
philsmd |
General Talk
|
3 |
6,795 |
03-06-2017, 09:04 AM |
| |
|
Thread: Parsing out hashes from single lines
Post: RE: Parsing out hashes from single lines
|
Code:
--
egrep -o '[0-9a-fA-F]{32}' md5.sql > md5_hashes_unsorted_ununiqed.hash
--
or even better and much more correct (because otherwise you could get some false positives):
Code:
--
SELECT p... |
|
philsmd |
General Talk
|
1 |
2,439 |
03-18-2017, 09:13 PM |
| |
|
Thread: Itunes Backup
Post: RE: Itunes Backup
| I need to close this thread for now. Too many unrelated posts. |
|
philsmd |
General Talk
|
42 |
83,233 |
03-23-2017, 09:40 PM |
| |
|
Thread: Salt-value exception
Post: RE: Salt-value exception
| Please make sure you are using the newest version of hashcat and 7z2hashcat |
|
philsmd |
General Talk
|
2 |
4,621 |
04-04-2017, 02:13 PM |
| |
|
Thread: CISCO-IOS SHA256
Post: RE: CISCO-IOS SHA256
| It's not allowed to post hashes.
1 week ban to revise the forum rules! |
|
philsmd |
General Talk
|
1 |
3,518 |
04-04-2017, 05:04 PM |
| |
|
Thread: Help using --increment in the middle of a text file
Post: RE: Help using --increment in the middle of a text...
| Of course you need to use maskprocessor correctly (depending on the shell you use).
E.g. if you use windows, you might need to quote differently, e.g. like this:
Code:
--
mp64 "i5?d i6?d i7?d i... |
|
philsmd |
General Talk
|
3 |
4,606 |
05-15-2017, 08:01 PM |
| |
|
Thread: Help using --increment in the middle of a text file
Post: RE: Help using --increment in the middle of a text...
| If you always want to insert numbers exactly at position 6, you could generate some rules on the fly like this (attention: with longer numbers and additional insert positions - in addition to position... |
|
philsmd |
General Talk
|
3 |
4,606 |
05-15-2017, 02:27 PM |
| |
|
Thread: processor couldn't load
Post: RE: processor couldn't load
| please see the output of hashcat64 --help
For instance for CPU and GPU you could use --opencl-device-types 1,2 (or short -D 1,2)
BTW: your command also contains an error "-1 -1" makes no sense, one... |
|
philsmd |
General Talk
|
2 |
3,137 |
06-02-2017, 10:18 PM |
| |
|
Thread: creating a mask
Post: RE: creating a mask
| maskprocessor can be used for this situation (the -q parameter can be used) and the output can be piped into hashcat:
Code:
--
mp64 -q 2 -1 abc ?1?1?1 | hashcat -a 0 -m 0 -w 4 hash.txt
--
|
|
philsmd |
General Talk
|
4 |
4,599 |
06-28-2017, 03:37 PM |
| |
|
Thread: crack excel password with hashcat, possible?
Post: RE: crack excel password with hashcat, possible?
|
Code:
--
python office2hashcat.py the_path_to_your_excel_file_here.xls
--
|
|
philsmd |
General Talk
|
6 |
23,537 |
06-30-2017, 09:17 AM |
| |
|
Thread: Problema en iniciar Hashcat Handshake
Post: RE: Problema en iniciar Hashcat Handshake
| @wirelees Last warning (before you get banned, next time): Forum rules exists for good reasons and (actually the first rule of this small set of rules) https://hashcat.net/forum/announcement-2.html em... |
|
philsmd |
General Talk
|
4 |
4,778 |
07-12-2017, 12:53 PM |
| |
|
Thread: old box compatibility with Hashcat
Post: RE: old box compatibility with Hashcat
| That's probably a typo, I think epixoip means hashcat-legacy (https://github.com/hashcat/hashcat-legacy), i.e. the (old) CPU-based only hashcat tool (that was called "hashcat" before "oclHashcat" was ... |
|
philsmd |
General Talk
|
4 |
4,999 |
07-14-2017, 09:27 AM |
