|
Search Results
|
| Post |
Author |
Forum
[asc]
|
Replies |
Views |
Posted |
| |
|
Thread: HTTP Digest Auth
Post: RE: HTTP Digest Auth
| It's hash type -m 11400 = SIP digest authentication (MD5)
The format is:
Quote:
--
$sip$*[URI_SERVER]*[URI_CLIENT]*[USERNAME]*[REALM]*[METHOD]*[URI_PREFIX]*[URI_RESOURCE]*[URI_SUFFIX]*[NONCE_SERVER]... |
|
philsmd |
hashcat
|
7 |
10,204 |
05-15-2017, 08:31 PM |
| |
|
Thread: MD5: Need Advice
Post: RE: MD5: Need Advice
| Yeah, it's completely wrong. Redownload a fresh copy of hashcat and do the changes correctly as I told you (I even highlighted a full set of lines you need to change so in theory you couldn't miss the... |
|
philsmd |
hashcat
|
21 |
20,788 |
05-15-2017, 08:37 PM |
| |
|
Thread: HTTP Digest Auth
Post: RE: HTTP Digest Auth
| In my opinion it should be very obvious if you know what the HTTP Digest Authentication fields mean and for what they are used for. Anyway here is how you would format it in your *very* specific examp... |
|
philsmd |
hashcat
|
7 |
10,204 |
05-16-2017, 08:08 AM |
| |
|
Thread: Rule help
Post: RE: Rule help
| something like:
Code:
--
$1 $2 $3 d ] ] ]
--
should work as an equivalent rule for M $1 $2 $3 4
(yeah, it's not always perfectly the same, depending on how close you are to the maximum password le... |
|
philsmd |
hashcat
|
5 |
4,934 |
05-16-2017, 06:42 PM |
| |
|
Thread: FIFO help
Post: RE: FIFO help
| If you are using just a few rules (or possibly even just 1), you can use -j/-k together with -a1 for each and every rule:
Code:
--
hashcat -m 1000 -a 1 -w 4 -j "$1 $2 $3" hash.txt dict1.txt dict2.tx... |
|
philsmd |
hashcat
|
3 |
4,472 |
05-25-2017, 11:01 AM |
| |
|
Thread: FIFO help
Post: RE: FIFO help
| As said, the first approach (with -j/-k) should be used if you plan to use only very few rules: i.e. you can start hashcat a couple of times (one after the other in a sequence, or loop if you prefer) ... |
|
philsmd |
hashcat
|
3 |
4,472 |
05-26-2017, 07:44 AM |
| |
|
Thread: Windows 10 Online Account
Post: RE: Windows 10 Online Account
| I think that the hashes can still be cached and this process can somehow be compared to cached credentials within a local domain (LSA etc). I'm not an expert in this regard, but there must be some way... |
|
philsmd |
hashcat
|
7 |
10,257 |
05-19-2017, 08:31 AM |
| |
|
Thread: need help with markov chain, or possibly another solution for decrypt of AES-256
Post: RE: need help with markov chain, or possibly anoth...
| There are still some open questions here:
1. how do you know if the decryption worked correctly ? You at least need to know the key, the plain text and the cipher text (you didn't state that you have ... |
|
philsmd |
hashcat
|
13 |
11,856 |
05-27-2017, 06:57 PM |
| |
|
Thread: VeraCrypt dictionary attack
Post: RE: VeraCrypt dictionary attack
| Most important question: how did you generate the binary data file needed for hashcat, did you follow this guide: https://hashcat.net/faq#how_do_i_extract_the_hashes_from_truecrypt_volumes ? |
|
philsmd |
hashcat
|
6 |
7,719 |
05-27-2017, 07:52 PM |
| |
|
Thread: VeraCrypt dictionary attack
Post: RE: VeraCrypt dictionary attack
| Well, if you are 100% sure that the extracted data is what hashcat expects, we might need to find the culprit somewhere else. For instance, you didn't tell us how long these password candidates are...... |
|
philsmd |
hashcat
|
6 |
7,719 |
05-27-2017, 09:16 PM |
| |
|
Thread: need help with markov chain, or possibly another solution for decrypt of AES-256
Post: RE: need help with markov chain, or possibly anoth...
| I was just trying to say that you should test your script/code/tool (that you use to decrypt+verify) with a sample data consisting of a key
with that specific pattern, the plaintext that you are sear... |
|
philsmd |
hashcat
|
13 |
11,856 |
05-27-2017, 09:58 PM |
| |
|
Thread: Dictionary cache building
Post: RE: Dictionary cache building
| Yeah, it's also mentioned within docs/changes.txt
Code:
--
* changes v3.30 -> v3.40:
...
- Wordlists: Disable dictstat handling for hash-mode 3000 as it virtually creates words in the wordlist w... |
|
philsmd |
hashcat
|
1 |
5,032 |
05-28-2017, 02:01 PM |
| |
|
Thread: mask order unknown?
Post: RE: mask order unknown?
| use policygen from PACK (https://thesprawl.org/projects/pack/), i.e. the use of .hcmask files is needed (and PACK can generate them for you) |
|
philsmd |
hashcat
|
2 |
3,106 |
05-29-2017, 08:59 PM |
| |
|
Thread: need help with markov chain, or possibly another solution for decrypt of AES-256
Post: RE: need help with markov chain, or possibly anoth...
|
Code:
--
echo teststring | openssl enc -e -aes-256-ecb -K 0000123400001234000012340000123400001234000012340000123400001234 | xxd -g 1
--
and
Code:
--
echo teststring | openssl enc -e -aes-256-ec... |
|
philsmd |
hashcat
|
13 |
11,856 |
05-30-2017, 06:51 AM |
| |
|
Thread: VeraCrypt dictionary attack
Post: RE: VeraCrypt dictionary attack
| Well, that might explain it ("its length is of about 40 characters")... see https://hashcat.net/faq#what_is_the_maximum_supported_password_length
so max 31 for -a 0 (40 is already too long).
But you... |
|
philsmd |
hashcat
|
6 |
7,719 |
05-27-2017, 10:46 PM |
| |
|
Thread: Any idea if this would be much faster on a GPU?(MD5 x3 + AES decrypt)
Post: RE: Any idea if this would be much faster on a GPU...
| yeah, OpenCL support might make sense.
But there are some questions still open:
- what about the lenght of the data, is 1 block enough ?
- you need way better means to determine if the decryption... |
|
philsmd |
hashcat
|
3 |
4,337 |
05-28-2017, 04:49 PM |
| |
|
Thread: vmware Kernel library error
Post: RE: vmware Kernel library error
| Why do you use pocl?
Why do you use hashcat within a virtual machine (vmware)?
My suggested solution is to not use VMs and to install the correct OpenCL driver for your hardware. |
|
philsmd |
hashcat
|
1 |
2,685 |
05-30-2017, 08:51 PM |
| |
|
Thread: Using for Axcrypt
Post: RE: Using for Axcrypt
| Did you use the AxSuite by FistOurs (or axcrypt2john.py) to extract the "hashes" as explained here https://hashcat.net/wiki/example_hashes ? |
|
philsmd |
hashcat
|
10 |
11,238 |
05-30-2017, 09:01 PM |
| |
|
Thread: Using for Axcrypt
Post: RE: Using for Axcrypt
| Oh, thats actually interesting about the Axcrypt version difference.
I would suggest that you contact Fist0urs directly either here on forum (name "Fist0urs") or on twitter (https://twitter.com/Fis... |
|
philsmd |
hashcat
|
10 |
11,238 |
05-31-2017, 09:51 AM |
| |
|
Thread: custom hcmask aborting aborting 7 seconds
Post: RE: custom hcmask aborting aborting 7 seconds
| Please make sure that you provide the correct path to the file "test.hcmask" otherwise it will be interpreted as a literal mask specified on the command line (not a mask file: .hcmask).
If you spec... |
|
philsmd |
hashcat
|
3 |
3,694 |
05-31-2017, 08:27 PM |
