|
Search Results
|
| Post |
Author
[desc]
|
Forum |
Replies |
Views |
Posted |
| |
|
Thread: How can I extract rules from wordlists?
Post: RE: How can I extract rules from wordlists?
| Be sure you are using python 2.7. I tried 3.4 and it didn't work until I switched to 2.7. |
|
rsberzerker |
General Talk
|
7 |
12,214 |
01-04-2015, 02:48 PM |
| |
|
Thread: Practical PRINCE: 1 CPU + 24 hours = 63% Linkedin hashes cracked, 100% automated
Post: RE: Practical PRINCE: 1 CPU + 24 hours = 63% Linke...
| Been playing with Prince (0.19) and I noticed something strange. When using one list, it exhausts within seconds. Using a second list, it keeps going and going. Same command line, just the dictionary ... |
|
rsberzerker |
hashcat-utils, maskprocessor, statsprocessor, md5stress, wikistrip
|
22 |
74,872 |
01-19-2015, 06:23 PM |
| |
|
Thread: oclHashcat bruteforce
Post: RE: oclHashcat bruteforce
| I'm a little late, but instead of -i you could use a file with masks instead. For the example above of 1-7, create a file with the following lines:
?a
?a?a
?a?a?a
?a?a?a?a
?a?a?a?a?a
?a?a?a?a?... |
|
rsberzerker |
Old oclHashcat Support
|
12 |
19,260 |
02-05-2015, 03:12 PM |
| |
|
Thread: Is it even possible?
Post: RE: Is it even possible?
| Well, the character set is 26+26 = 52. Ten characters is 52^10 = 144,555,105,949,057,024 possible passwords. At 10m/sec (which is very low depending on the hash), ~458 years.
BUT...10m/sec is low f... |
|
rsberzerker |
Old hashcat Support
|
11 |
16,222 |
02-08-2015, 09:19 PM |
| |
|
Thread: Is it even possible?
Post: RE: Is it even possible?
| If you have the hash, you should have the salt too. Hashcat (and oclhashcat), given the right -m parameter, will automatically use the salt. You don't need to crack that. |
|
rsberzerker |
Old hashcat Support
|
11 |
16,222 |
02-08-2015, 11:49 PM |
| |
|
Thread: No Output of Cracked Hashes
Post: RE: No Output of Cracked Hashes
| Generally, the plain wordlists don't crack many, if any, passwords. But combine them with rules and you are more likely to get something. The best64 ruleset, included with oclhashcat, is a good one. J... |
|
rsberzerker |
Old oclHashcat Support
|
10 |
12,485 |
02-09-2015, 03:26 AM |
| |
|
Thread: No Output of Cracked Hashes
Post: RE: No Output of Cracked Hashes
| There are several online hash generators. Try giving them a "password" and get the hash. Then be sure the password is the dictionary you are using to attack said hash. This way, you will get to see a ... |
|
rsberzerker |
Old oclHashcat Support
|
10 |
12,485 |
02-09-2015, 05:33 AM |
| |
|
Thread: Is it even possible?
Post: RE: Is it even possible?
| Yes. The salt is normally stored with the hash. So if you have access to the hash, you have access to the salt. |
|
rsberzerker |
Old hashcat Support
|
11 |
16,222 |
02-10-2015, 03:10 PM |
| |
|
Thread: Rule shortcut
Post: Rule shortcut
| I've noticed in several lists I've been working on lately, I see several email addresses used as passwords. I suspect there are more than what I've found.
I'd like to write a rule to append some co... |
|
rsberzerker |
General Help
|
9 |
13,600 |
04-10-2015, 04:38 AM |
| |
|
Thread: Rule shortcut
Post: RE: Rule shortcut
|
epixoip Wrote: (04-10-2015, 05:29 AM)
--
the shortcut is to use a stream editor to generate the rule file for you.
for example if you have a list of domains called "domains.txt", you would use som... |
|
rsberzerker |
General Help
|
9 |
13,600 |
04-10-2015, 05:33 AM |
| |
|
Thread: best64.rule contest
Post: RE: best64.rule contest
| I vote yes to this too. And as to Kgx's question, probably, but so what? Passwords used change over time, and the rules need to be updated against them. |
|
rsberzerker |
Organisation and Events
|
34 |
64,134 |
04-11-2015, 03:15 AM |
| |
|
Thread: bug in 1.35?
Post: bug in 1.35?
| I hadn't noticed 1.35 was out, so I just downloaded it. I have been using 1.33. But when I ran 1.35, it didn't recover anything, while the same run with 1.33 did. Here are the command lines.
First I ... |
|
rsberzerker |
Old oclHashcat Support
|
3 |
5,293 |
04-13-2015, 01:03 AM |
| |
|
Thread: bug in 1.35?
Post: RE: bug in 1.35?
| So bug. Thanks. I guess I stick with 1.33 for now. |
|
rsberzerker |
Old oclHashcat Support
|
3 |
5,293 |
04-13-2015, 01:22 AM |
| |
|
Thread: Rule shortcut
Post: RE: Rule shortcut
| I've been working with this and had the [maybe] bright idea to combine this with the best64 rules. It somewhat works, and has found some hashes even in it's current somewhat broken state. Some of the ... |
|
rsberzerker |
General Help
|
9 |
13,600 |
04-13-2015, 05:11 AM |
| |
|
Thread: Rule shortcut
Post: RE: Rule shortcut
|
epixoip Wrote: (04-13-2015, 05:17 AM)
--
Spaces are optional.
The rule isn't failing, it just isn't loading because it's too long to be used on GPU. It will work in hashcat-cli though.
--
What is t... |
|
rsberzerker |
General Help
|
9 |
13,600 |
04-13-2015, 05:26 AM |
| |
|
Thread: Rule shortcut
Post: RE: Rule shortcut
|
coolbry95 Wrote: (04-13-2015, 05:51 AM)
--
The limit is 15 functions per line. If you were to use a combinator attack you would do username domains -j '$@'.
--
Thanks. That explains why I get the ... |
|
rsberzerker |
General Help
|
9 |
13,600 |
04-13-2015, 06:11 AM |
| |
|
Thread: Email passwords ruleset v0.1
Post: Email passwords ruleset v0.1
| I've been trying my hand some of the hashes.org hashes, and notice some are email addresses. That actually makes sense. An email address will (usually) meet the length requirement, and the "@" and "."... |
|
rsberzerker |
User Contributions
|
1 |
5,234 |
04-13-2015, 06:32 AM |
| |
|
Thread: HashCat t-shirt !
Post: RE: HashCat t-shirt !
| At the very least, you can loose the = sign.
Loosing the "+ 4 GTX970" would make it less busy. Most people might understand the Hash with "password killer/analyzer", but the GTX970 would be lost on... |
|
rsberzerker |
User Contributions
|
7 |
13,400 |
04-13-2015, 06:42 AM |
| |
|
Thread: -w and sessions
Post: -w and sessions
| oclhashcat has 3 Workload Profiles:
1 = Reduced performance profile (low latency desktop)
2 = Default performance profile
3 = Tuned performance profile (high latency desktop)
It appear... |
|
rsberzerker |
Old oclHashcat Support
|
1 |
4,315 |
05-24-2015, 08:24 PM |
| |
|
Thread: 980GTX MSI vs Reference
Post: RE: 980GTX MSI vs Reference
|
epixoip Wrote: (05-24-2015, 10:50 PM)
--
It is possible that resellers in your area do not sell reference design cards. You could contact them and ask them if they are able to get reference design ca... |
|
rsberzerker |
Hardware
|
20 |
41,550 |
05-25-2015, 01:36 AM |
