|
Search Results
|
| Post |
Author |
Forum |
Replies
[desc]
|
Views |
Posted |
| |
|
Thread: Location of TrueCrypt Hidden OS Header
Post: RE: Location of TrueCrypt Hidden OS Header
| I'm not sure why you are even trying to "brute-force" the offset.
The instructions are very clear: if the whole disk (operating system) is encrypted i.e. the system starts with the special boot loade... |
|
philsmd |
hashcat
|
7 |
7,597 |
07-14-2017, 08:11 PM |
| |
|
Thread: Scrypt + Salsa20/8 128 128
Post: RE: Scrypt + Salsa20/8 128 128
| 1. you are not allowed to post hashes (see forum rules https://hashcat.net/forum/announcement-2.html)
2. your conversion between the 2 formats used by john vs hashcat is completely wrong. hint: jtr do... |
|
philsmd |
hashcat
|
7 |
8,171 |
08-16-2017, 07:19 AM |
| |
|
Thread: Scrypt + Salsa20/8 128 128
Post: RE: Scrypt + Salsa20/8 128 128
| I just did several test with scrypt (even the "pleaseletmein" test) and I found no problem cracking scrypt with hashcat.
Could you please be more specific. What do you mean by "still unable to crac... |
|
philsmd |
hashcat
|
7 |
8,171 |
08-23-2017, 08:37 AM |
| |
|
Thread: Scrypt + Salsa20/8 128 128
Post: RE: Scrypt + Salsa20/8 128 128
| It should be as easy as running the following script:
Code:
--
perl scrypt_converter.pl hashes.txt
--
where the file scrypt_converter.pl contains this code:
Code:
--
#!/usr/bin/env perl
... |
|
philsmd |
hashcat
|
7 |
8,171 |
08-17-2017, 08:59 AM |
| |
|
Thread: Complex iTunes password
Post: RE: Complex iTunes password
| Please keep in mind:
1. this has nothing to do with hashcat. If the password is completely random, long enough, wasn't leaked before and therefore doesn't appear in any word list, it could be just in... |
|
philsmd |
hashcat
|
7 |
6,395 |
09-07-2017, 08:25 AM |
| |
|
Thread: VeraCrypt cracking always Exhausted
Post: RE: VeraCrypt cracking always Exhausted
| You should have already noticed by now (after we discussed and explained it here: https://hashcat.net/forum/thread-6908.html and also by looking at the example hashes here: https://hashcat.net/wiki/ex... |
|
philsmd |
hashcat
|
7 |
10,898 |
09-29-2017, 04:35 PM |
| |
|
Thread: VeraCrypt cracking always Exhausted
Post: RE: VeraCrypt cracking always Exhausted
| 512 bytes is correct. (every other size is wrong, the details are explained here: https://hashcat.net/faq#how_do_i_extract_the_hashes_from_veracrypt_volumes)
(but note: hashcat doesn't give a warning... |
|
philsmd |
hashcat
|
7 |
10,898 |
09-29-2017, 05:04 PM |
| |
|
Thread: My Bitcoin’s locked into Veracrypt container- 2 BTC to solve
Post: RE: My Bitcoin’s locked into Veracrypt container...
| Are you sure that you read the guide? see https://hashcat.net/wiki/doku.php?id=frequently_asked_questions#how_do_i_extract_the_hashes_from_veracrypt_volumes
It basically follows the same steps that... |
|
philsmd |
hashcat
|
7 |
6,792 |
11-03-2017, 01:27 PM |
| |
|
Thread: My Bitcoin’s locked into Veracrypt container- 2 BTC to solve
Post: RE: My Bitcoin’s locked into Veracrypt container...
| I think that you are looking at the whole disk instead of just the VeraCrypt boot volume.
Anyways, in your specific case, from offset 0xd000 (where the bytes ea 1e 7c 00 00 20 56 65 72 61 43 72 79 ... |
|
philsmd |
hashcat
|
7 |
6,792 |
11-03-2017, 09:27 PM |
| |
|
Thread: Range for the mask
Post: RE: Range for the mask
| First of all, I do not understand what this notation means:
Quote:
--
password|21|6|8|3|19|17|5|15|3|8|5|6|30|19|0|29|29|18|30|30|1|1|28|15|27|22|24|1|2|17|30|2017
--
does this mean your passw... |
|
philsmd |
hashcat
|
7 |
6,109 |
10-24-2017, 11:35 AM |
| |
|
Thread: My Bitcoin’s locked into Veracrypt container- 2 BTC to solve
Post: RE: My Bitcoin’s locked into Veracrypt container...
| No, that is not true. Your math is flawed:
0x14DFF-0x14C00 = 511
but remember between 0x14DFF (included) and 0x14C00 (included) their are 512 bytes. The same principle holds that is between 1 an... |
|
philsmd |
hashcat
|
7 |
6,792 |
11-07-2017, 08:50 AM |
| |
|
Thread: 4.01 ERROR "Restore value is greater than keyspace" after pause/checkpoint
Post: RE: 4.01 ERROR "Restore value is greater than keys...
| oh. you tried to run the downloaded github project page as a perl file.
This is not how it works.
You need to download the perl script (text file) from https://raw.githubusercontent.com/philsmd/an... |
|
philsmd |
hashcat
|
7 |
5,866 |
11-28-2017, 04:16 PM |
| |
|
Thread: 4.01 ERROR "Restore value is greater than keyspace" after pause/checkpoint
Post: RE: 4.01 ERROR "Restore value is greater than keys...
| Thank you for this report. I can reproduce this.
We probably will need to open a github issue to track this problem.
The problem seems to be that the mask position (see https://hashcat.net/wiki/doku... |
|
philsmd |
hashcat
|
7 |
5,866 |
11-27-2017, 11:28 PM |
| |
|
Thread: Max Pass Length using Wordlists
Post: RE: Max Pass Length using Wordlists
| You could also just use reject rules from: https://hashcat.net/wiki/doku.php?id=rule_based_attack#rules_used_to_reject_plains
e.g.
Code:
--
hashcat -m 0 -a 0 -w 3 -j " |
|
philsmd |
hashcat
|
7 |
5,996 |
12-01-2017, 02:56 PM |
| |
|
Thread: No hashes loaded, line length exception?
Post: RE: No hashes loaded, line length exception?
| I think there is some special byte in there, like the windows BOM etc.
Hashcat doesn't expect that there is any other bytes within the hash file except the bytes that are required ("the hash").
... |
|
philsmd |
hashcat
|
7 |
14,268 |
12-03-2017, 10:28 AM |
| |
|
Thread: 4.01 ERROR "Restore value is greater than keyspace" after pause/checkpoint
Post: RE: 4.01 ERROR "Restore value is greater than keys...
| We already have some good news.
The problem was addressed and fixed with these source code changes: https://github.com/hashcat/hashcat/commit/42d1db42947854311028e5c25b91e9af2d154a49
The new bet... |
|
philsmd |
hashcat
|
7 |
5,866 |
11-28-2017, 10:34 AM |
| |
|
Thread: No hashes loaded, line length exception?
Post: RE: No hashes loaded, line length exception?
| If it is a non-sensitive archive, just open a issue here, explain the issue again and attach the file to the guthub issue: https://github.com/philsmd/7z2hashcat
Otherwise, I might give it a glance ... |
|
philsmd |
hashcat
|
7 |
14,268 |
12-05-2017, 08:44 AM |
| |
|
Thread: No hashes loaded, line length exception?
Post: RE: No hashes loaded, line length exception?
| @nazgulnarsil told me that he/she was able to load the hash successfully with the latest version from github (it seems that the only problem was the hashcat version, 7z2hashcat wasn't the problem at a... |
|
philsmd |
hashcat
|
7 |
14,268 |
12-06-2017, 02:54 PM |
| |
|
Thread: Already an instance running on pid 5
Post: RE: Already an instance running on pid 5
| Please do one of the following actions:
1. after stopping your current running hashcat instance (the one with --session etc), delete the file "hashcat.pid" from the main hashcat folder
2. copy all y... |
|
philsmd |
hashcat
|
7 |
10,362 |
02-06-2018, 08:41 PM |
| |
|
Thread: Already an instance running on pid 5
Post: RE: Already an instance running on pid 5
| It does. It looks if that specific process id found within the hashcat.pid file is still running.
Since tea-er's pid is strangely pid 5 (wtf ?) it might be the case that it always finds a pid with pi... |
|
philsmd |
hashcat
|
7 |
10,362 |
02-06-2018, 08:53 PM |
