|
Search Results
|
| Post |
Author |
Forum
[desc]
|
Replies |
Views |
Posted |
| |
|
Thread: MS Office Instant decryption
Post: MS Office Instant decryption
| Hello,
I wonder how some tools (Passware for example) claim our their website to "instant decrypt" Office files version |
|
Mem5 |
General Talk
|
9 |
15,351 |
08-16-2017, 07:30 PM |
| |
|
Thread: MS Office Instant decryption
Post: RE: MS Office Instant decryption
| "few minutes" ? Are you sure ? It take 10 hours on my 1080.
Using
Code:
--
hashcat64.exe -m 9700 --keep-guessing -a 3 hash.txt ?a?a?a?a?a?a
--
Am I doing something wrong? |
|
Mem5 |
General Talk
|
9 |
15,351 |
08-20-2017, 08:47 PM |
| |
|
Thread: MS Office Instant decryption
Post: RE: MS Office Instant decryption
| Thanks philsmd for this explanation.
But as I said before (I hope) I am looking for "a" password - not necessarily the original one - just one working password for forensics as you quote it.
That's ... |
|
Mem5 |
General Talk
|
9 |
15,351 |
09-19-2017, 09:38 PM |
| |
|
Thread: MS Office Instant decryption
Post: RE: MS Office Instant decryption
|
philsmd Wrote: (08-21-2017, 08:58 AM)
--
because you probably should use the collider mode 9710 (with mask ?b?b?b?b?b) for instant access to the data
--
Back to my tests, I have a oldoffice "type 1"... |
|
Mem5 |
General Talk
|
9 |
15,351 |
09-11-2017, 09:37 PM |
| |
|
Thread: 500M hashes
Post: 500M hashes
| Hi,
On the page https://haveibeenpwned.com/Passwords one can download the Pwned Passwords list, which is a list of 500 millions SHA-1 hashed passwords.
Hashcat tell me "Insuficient memory" when I ... |
|
Mem5 |
General Talk
|
3 |
4,305 |
05-28-2018, 07:18 PM |
| |
|
Thread: Question about hccapx file
Post: RE: Question about hccapx file
| I am not aware of a tool to edit hccapx.
Have a try with the philsmd's repo https://github.com/philsmd?tab=repositories |
|
Mem5 |
General Talk
|
6 |
4,366 |
06-03-2018, 04:25 PM |
| |
|
Thread: 500M hashes
Post: RE: 500M hashes
| HI,
Thank you for this detailed explanation.
The goal was to test/benchmark few wordlists and rules against a known database.
When you say "your current platform isn't big enough to hold them all" do ... |
|
Mem5 |
General Talk
|
3 |
4,305 |
06-03-2018, 04:37 PM |
| |
|
Thread: MS Office Instant decryption
Post: RE: MS Office Instant decryption
|
Mem5 |
General Talk
|
9 |
15,351 |
07-15-2018, 10:24 PM |
| |
|
Thread: cap to hccapx - best practices ?
Post: cap to hccapx - best practices ?
| Hi,
What's the practice when converting .(p)cap files to hccapx?
Some users adivse cap2hccapx from hashcat-utils, while some other users advise to use hcxpcaptool from ZerBea.
What's the diffenre... |
|
Mem5 |
General Talk
|
2 |
2,425 |
08-03-2018, 01:24 PM |
| |
|
Thread: cap to hccapx - best practices ?
Post: RE: cap to hccapx - best practices ?
|
Mem5 |
General Talk
|
2 |
2,425 |
08-03-2018, 02:08 PM |
| |
|
Thread: hcxpcaptool - output possible WPA/WPA2 plainmasterkey list
Post: hcxpcaptool - output possible WPA/WPA2 plainmaster...
| Hi,
I'm quite old to hash cracking but quite new to WPA stuff, and I take the new Zerbea tools release opportunity to learn and share.
I don't know if hashcat forum it the best place to discuss about... |
|
Mem5 |
General Talk
|
1 |
4,247 |
08-06-2018, 11:50 AM |
| |
|
Thread: Large wordlist editor windows
Post: RE: Large wordlist editor windows
| If you want to stay on Windows, install a linux subsystem, you will have a linux shell into windows, so you'll be able to use sed/awk/grep etc.
Link: https://docs.microsoft.com/en-us/windows/wsl/inst... |
|
Mem5 |
General Talk
|
4 |
3,254 |
08-24-2018, 12:08 PM |
| |
|
Thread: Little Help to young Hackerman
Post: RE: Little Help to young Hackerman
|
undeath Wrote: (09-28-2018, 10:21 AM)
--
There is a IRC channel. Kids these days… :P
--
+1 :D |
|
Mem5 |
General Talk
|
7 |
4,547 |
09-28-2018, 01:40 PM |
| |
|
Thread: Extracting ESSID from hccapx files
Post: RE: Extracting ESSID from hccapx files
| According to hccapx structure https://hashcat.net/wiki/doku.php?id=hccapx#detailed_structure
ESSID offset is from 0x0a to 0x29.
wlanhcxinfo tool can extract for you, or you can do it with standard l... |
|
Mem5 |
General Talk
|
2 |
2,392 |
11-01-2018, 10:27 AM |
| |
|
Thread: Rules test
Post: RE: Rules test
| --stdout is your friend:
Code:
--
> echo kevin | hashcat64 --stdout -j "c"
Kevin
> echo kevin | hashcat64 --stdout -r best64.txt
kevin1
...
--
|
|
Mem5 |
General Talk
|
2 |
2,318 |
11-05-2018, 08:22 PM |
| |
|
Thread: intercepting application that reads encrypted zip
Post: RE: intercepting application that reads encrypted ...
| - Read from memory (RAM) the process space
or/and
- hook all API used by the process. You will be able to see for example the params given to function, so maybe the password. |
|
Mem5 |
General Talk
|
4 |
3,399 |
11-07-2018, 08:49 PM |
| |
|
Thread: MS Office 2019 hashes
Post: MS Office 2019 hashes
| Anyone tested MS Office 2019 encrypted file hashes ?
Are they the same encryption algo as Office 2016 ?
Thanks. |
|
Mem5 |
General Talk
|
2 |
2,621 |
11-14-2018, 05:37 PM |
| |
|
Thread: MS Office 2019 hashes
Post: RE: MS Office 2019 hashes
|
Mem5 |
General Talk
|
2 |
2,621 |
11-15-2018, 01:27 AM |
| |
|
Thread: About Winzip (13600) hash
Post: About Winzip (13600) hash
| Hi,
I notice a double '*' in the example (https://hashcat.net/wiki/doku.php?id=example_hashes) Winzip hash:
$zip2$*0*3*0*b5d2b7bf57ad5e86a55c400509c672bd*d218*0**ca3d736d03a34165cfa9*$/zip2$
When I... |
|
Mem5 |
General Talk
|
2 |
3,417 |
11-20-2018, 08:43 PM |
| |
|
Thread: About Winzip (13600) hash
Post: RE: About Winzip (13600) hash
| Right,
Quote:
--
DF = compressed data DF can be Le*2 hex bytes, and if so, then it is the ENTIRE file blob written 'inline'.
--
So if your zip file is 100 Mb, the hash will be huge for nothing.
After... |
|
Mem5 |
General Talk
|
2 |
3,417 |
11-21-2018, 11:36 AM |
