Posts: 22
Threads: 8
Joined: Jun 2018
Hashcat for Windows, version 6.1.1 is not writing potfile. The file created is empty. No potfile switches used.
Password is found, but not written to potfile.
Posts: 814
Threads: 4
Joined: Jan 2015
Please post your command line, with any sensitive info replaced with generic info
~
Posts: 22
Threads: 8
Joined: Jun 2018
Code:
hashcat -m 6211 -a 3 -w 3 -i --session=ses ..\test\container.tc ?b?b?b
Posts: 2,136
Threads: 15
Joined: Feb 2013
the name of the potfile depends on the session name:
if you use --session ses , then your file name of the potfile is: ses.potfile
Posts: 22
Threads: 8
Joined: Jun 2018
(09-08-2020, 12:50 PM)philsmd Wrote: the name of the potfile depends on the session name:
if you use --session ses , then your file name of the potfile is: ses.potfile
There is no such file created.
The only created file is hashcat.potfile with length of 0 bytes.
Posts: 22
Threads: 8
Joined: Jun 2018
Filename of the container is 256.tc so maybe filename with digits only is not accepted?
Posts: 814
Threads: 4
Joined: Jan 2015
If you delete the empty potfile, is it recreated on the next run?
~
Posts: 22
Threads: 8
Joined: Jun 2018
(09-09-2020, 03:09 AM)royce Wrote: If you delete the empty potfile, is it recreated on the next run?
Yes.
Posts: 22
Threads: 8
Joined: Jun 2018
Guys! This is really a problem!!
6.1.1 is not writing password to potfile after finding one!!
Posts: 814
Threads: 4
Joined: Jan 2015
09-21-2020, 11:16 PM
(This post was last modified: 09-21-2020, 11:19 PM by royce.)
@philsmd, I can recreate this - for both TrueCrypt and Veracrypt, it seems, if a session is specified, but a potfile is not, then ses.potfile is not created on the fly that I can find (on Linux, anyway). Running the same command twice causes another crack (rather than skipping it as already having been cracked). And if I explicitly add "--potfile-path=ses.potfile", it creates a potfile with zero length and nothing is written to it on crack.
Perhaps this is because TrueCrypt and VeraCrypt hashes are read directly from the container/volume? IIRC it used to store the filename in the potfile instead?
~