Search Results
|
Post |
Author
[asc]
|
Forum |
Replies |
Views |
Posted |
|
|
Thread: Dictiionary Attack - how-to-question
Post: RE: Dictiionary Attack - how-to-question
you need to explain more clearly what you are trying to do.
What does combining mean in your situation ? how many words combined, any separator between the words, can one word occur multiple times ... |
|
philsmd |
General Talk
|
29 |
5,284 |
04-18-2020, 09:34 PM |
|
|
Thread: Rules attack - restore not working
Post: RE: Rules attack - restore not working
The status at the end must be
Code:
--
Status...........: Aborted (Checkpoint)
--
The value of the Restore.Point must be increased (greater than 0)... Attention: the progress line is not the c... |
|
philsmd |
hashcat
|
8 |
1,537 |
04-19-2020, 04:43 AM |
|
|
Thread: how should i crack this type of hash (sha1 & salt)
Post: RE: how should i crack this type of hash (sha1 & s...
no, the salt must be with the dashes:
[email protected]:848XXXc9e5baf34d6dba20XXX755f4984b6d77cc:--74e3c24fd83d92ea72383e9b3a4292bdfb8exxxx--
if you add users, you need to use --username to skip them.
... |
|
philsmd |
hashcat
|
13 |
2,704 |
04-19-2020, 04:11 PM |
|
|
Thread: Rules attack - restore not working
Post: RE: Rules attack - restore not working
My guess is that with that many rules, the workload profile (-w 2 ? or -w 3) and the amount of GPUs, it might just take a lot of time to reach the next checkpoint.
With -w 1 more checkpoints will be ... |
|
philsmd |
hashcat
|
8 |
1,537 |
04-19-2020, 04:15 PM |
|
|
Thread: how should i crack this type of hash (sha1 & salt)
Post: RE: how should i crack this type of hash (sha1 & s...
6 dashes total = 2+2 (around salt) + 2 (after pass)
the rules only add 2 dashes, that's why I named the file append_two_dashes.txt |
|
philsmd |
hashcat
|
13 |
2,704 |
04-19-2020, 04:34 PM |
|
|
Thread: How to extract hash of mssql
Post: RE: How to extract hash of mssql
nmap for instance: https://nmap.org/nsedoc/scripts/ms-sql-dump-hashes.html
https://github.com/nmap/nmap/blob/a7638f57c88cb1b5da949147729fca76a0f332c5/scripts/ms-sql-dump-hashes.nse#L71-L73 |
|
philsmd |
hashcat
|
1 |
547 |
04-21-2020, 12:56 PM |
|
|
Thread: New plugin developer guide
Post: RE: New plugin developer guide
You do not need to wait for a new release, the guide is already online:
https://github.com/hashcat/hashcat/blob/master/docs/hashcat-plugin-development-guide.md |
|
philsmd |
hashcat
|
5 |
1,717 |
04-21-2020, 06:38 PM |
|
|
Thread: Dictiionary Attack - how-to-question
Post: RE: Dictiionary Attack - how-to-question
does the release version from https://hashcat.net/hashcat work for you ?
does it work with -D 1 (i.e. with your CPU) ? |
|
philsmd |
General Talk
|
29 |
5,284 |
04-22-2020, 11:29 AM |
|
|
Thread: Intel Integrated GPU
Post: RE: Intel Integrated GPU
in general the k a l i distribution is not recommended. You would uninstall both mesa and pocl and try to install all the required proprietary drivers from the hardware vendor page.
In some cases y... |
|
philsmd |
Hardware
|
4 |
1,779 |
04-22-2020, 11:34 AM |
|
|
Thread: Dictiionary Attack - how-to-question
Post: RE: Dictiionary Attack - how-to-question
It's not totally clear. maybe this is only a problem on macOS ? do you use the latest version of macOS ?
It could easily be that the macOS driver is buggy. You could do further test and see if other ... |
|
philsmd |
General Talk
|
29 |
5,284 |
04-22-2020, 02:13 PM |
|
|
Thread: Dictiionary Attack - how-to-question
Post: RE: Dictiionary Attack - how-to-question
I think under macOS you can't really install the driver by downloading and installing "the new" or a "different" one from the Intel (vendor) page or similar. I think under macOS the only thing you cou... |
|
philsmd |
General Talk
|
29 |
5,284 |
04-22-2020, 03:23 PM |
|
|
Thread: how to create .rule and .hcmask files
Post: RE: how to create .rule and .hcmask files
I'm pretty sure they were both generated with
PACK (Password Analysis and Cracking Kit): https://github.com/iphelix/pack
https://web.archive.org/web/20190125201146/https://thesprawl.org/projects/pac... |
|
philsmd |
hashcat
|
5 |
1,189 |
04-22-2020, 09:39 PM |
|
|
Thread: Dictiionary Attack - how-to-question
Post: RE: Dictiionary Attack - how-to-question
In general you would use a command like this:
Code:
--
hashcat -m 14700 -a 3 -w 3 --increment --increment-min 8 -2 ?u?l?d@ extracted_hash.txt ?u?2?2?2?2?2?2?2?2?2
--
instead of -2 you could al... |
|
philsmd |
General Talk
|
29 |
5,284 |
04-23-2020, 12:17 PM |
|
|
Thread: Whats the most efficient way to do this? (newbie)
Post: RE: Whats the most efficient way to do this? (newb...
maybe rule based attacks:
https://hashcat.net/wiki/doku.php?id=rule_based_attack
Code:
--
r ^T ^I ^W $5 $0
--
the last part (adding the digits, $5 $0) can be done also with a separate rule... |
|
philsmd |
hashcat
|
3 |
846 |
04-23-2020, 05:54 PM |
|
|
Thread: Dictiionary Attack - how-to-question
Post: RE: Dictiionary Attack - how-to-question
-w is for the workload profile, see the output of the hashcat --help command:
Code:
--
hashcat --help
...
- [ Workload Profiles ] -
# | Performance | Runtime | Power Consumption | Desktop I... |
|
philsmd |
General Talk
|
29 |
5,284 |
04-23-2020, 05:59 PM |
|
|
Thread: Benchmarks and Password per second
Post: RE: Benchmarks and Password per second
(kilo, mega, giga, tera) hashes per second
several algorithms do not have iterations (raw hashes for instance). The iteration count is mentioned separately, just try it yourself:
Code:
--
hashc... |
|
philsmd |
hashcat
|
3 |
983 |
04-24-2020, 08:41 AM |
|
|
Thread: Separator Unmatched
Post: RE: Separator Unmatched
That's not the correct assumption.
It literally just said:
Code:
--
Hashfile 'xyz' on line 6 ...
--
The most important part is the "Hashfile" part. The filename of course is not what the ... |
|
philsmd |
hashcat
|
5 |
1,389 |
04-26-2020, 09:35 AM |
|
|
Thread: help with hashcat.
Post: RE: help with hashcat.
what's the output of
Code:
--
hashcat -I
--
(after you installed the CUDA sdk) |
|
philsmd |
hashcat
|
13 |
2,609 |
04-26-2020, 12:56 PM |
|
|
Thread: Bruteforce with descending characters - zzz,zzy,zzx
Post: RE: Bruteforce with descending characters - zzz,zz...
yeah.
but even for the approach with testing first password candidates at the end, you could actually just use -s / -l until the whole keyspace was tested, i.e. split your keyspace in x chunks and te... |
|
philsmd |
hashcat
|
9 |
1,579 |
04-26-2020, 03:39 PM |
|
|
Thread: Separator Unmatched
Post: RE: Separator Unmatched
you need to specify the file with hashes (the "hash file") first:
for dictionary attack (-a 0) it is:
Code:
--
hashcat -m 0 -a 0 -w 3 hashes.txt wordlist.txt
--
as you can see, you need to ... |
|
philsmd |
hashcat
|
5 |
1,389 |
04-26-2020, 08:57 AM |