Oracle12C format

[dodo]

Hi guys,

It's possible to use hashcat to recover password having Oracle 12c sys.user$.spare4 value?

[philsmd]

Should work, you just need to follow the hash format ( see: https://hashcat.net/wiki/doku.php?id=example_hashes -m 112 = Oracle ), and maybe this guide too https://hashcat.net/forum/thread-2155.html on how to split the "S:..." part into hashalt

The format is [hash 40 "chars"]:[hex salt]

Please let us know if that works, maybe we need to rename the format s.t. users understand that -m 112 could crack also Oracle 12 hashes (if true).

[dodo]

for example my Oracle format is:
[hash removed by philsmd]
The question is how to split it to hashalt ?

[philsmd]

See here, you are not allowed to post hashes: https://hashcat.net/forum/announcement-2.html

Furthermore, I already gave you the answer you only need the "S:..." (not the second part ";H:...")
split it into a 40 character hash (first 40 chars), add a ":", and the rest is the salt.

There is an example on the wiki: https://hashcat.net/wiki/doku.php?id=example_hashes
-m 112 = Oracle 11g

[dodo]

philsmd,Thanks alot for the help, -m 112 also works for me on Oracle 12 hashes
can you please update which hash type should be used for Oracle 10?(using 3DES)
The hash is like as:
ABCDEFGHIJKLMNOP

(-m 3100 is not recognized by hashcat)