Quantcast
Channel: hashcat Forum - All Forums
Viewing all 8186 articles
Browse latest View live

pot, restore, log location

$
0
0
Hello, please add the option of saving temporary files to the current folder, in the old hashcat it was very convenient.

Benchmarks for hashcat v4.00 on AMD and NVIDIA cards

$
0
0
Hello.

I'm looking for benchmark results of the latest hashcat v4.00 running on AMD and NVIDIA cards.

A Polaris vs Pascal vs VEGA excel sheet, like those posted for earlier versions of hashcat.

Does anyone have a link ?

Is it true that VEGA is a lot faster than GTX 1080 ?

And how about a VEGA liquid vs 1080 Ti comparison ?

TIA!

hashcat v4.0.0 slow with itunes backup 14800

$
0
0
Good work!

I've just got round to using the new version but it seems that mode 14800 iTunes back up>=10 is a lot slower then previously. I don't have time right now to get more specifics but so far, I seem to only get around 30% compared to using 3.6

Restore Fails

$
0
0
For the last couple of weeks I have noticed hashcat failing to restore a session. The error I seem to get is 
Quote:Restore value is greater than keyspace
. I have been running hashcat for a day or two, so having to restart is annoying.

When I stop hashcat I use checkpoint 'c' so I am not sure what I am doing wrong. I have been using 3.6.

--restore after hardware upgrade?

$
0
0
I've got a long jon running in my cracking rig (weeks). It's started on 3 GPUs. I've got a 4th GPU. If I quit the job, install the extra GPU and --restore the job: will it work? If so, on 3 or 4 GPUs? Or will things get screwed up? Thanks!

Memory usage hashcat v4

$
0
0
For large tasks I split hash files on several files. Each file contains about the max number of hashes my GPUs can handle, based on trial and error.

I've mentioned that the number of hashes I can crack using v4 at once is lower than when using v3.6 (using v4 with -O since it slower using the new kernels): files made based on v3.6 don't fit in GPU memory on v4. So it seems GPU memory usage increased.

Is the a way to easily determine the max number of hashes of a specific type  a specific version of hashcat can handle at once? If not: might this be an interesting feature request? Something like hashcat64.bin -m100 --maxhashes? Thanks!

Fortgate Hash Trouble

$
0
0
Hello, 

I am working on a Fortigate (Specifically FortiGate-300D v5.6.2) and testing out hash validation from the hashes pulled out of the config file. Here is the format (masked of course)

set password ENC XX2b82XXN5Keax/i0zq9Psn12v8X015siW+roACDLb3OiCMOtQ6ttPLNutxP4=

When I feed that "XX2b82XXN5Keax/i0zq9Psn12v8X015siW+roACDLb3OiCMOtQ6ttPLNutxP4=" into hashcat with -m 7000 I get a line-length exception.  Generally this means that the parsing of the hash isn't aligned with the mode (in this case 7000). I wanted to see if there was something I was missing here. Per the wiki this seems like the right format. 

Any ideas or thoughts?  I'm thinking that maybe fortigate changed the format of the encoded password or something.

Veracrypt assistance needed

$
0
0
Hi, I am doing a test with veracrypt 1.21  on a veracrypt volume. I created an encrypted container with standard information, so AES 256, hash sha-512.

The password is : password1
My goal is to retrieve it, as a test.

So i read these topics before asking you the question;
https://hashcat.net/forum/thread-6694-post-35714.html
https://hashcat.net/forum/thread-5699.html
https://hashcat.net/wiki/doku.php?id=fre...pt_volumes

So i used the command on wincyg: dd if=c:/users/mypath/myencryptedfolder of=c:/users/desktop/hash.tc bs=1 skip=65536 count=512

then i ran:

hashcat64.exe -a 3 -m 13711 (also tried with 13712, 13713, 13723, 13751 and 13752) hash.tc

i got an error message, saying Invalid hash


I decrypted my volume, took a memory dump, tried with passware (passware found nothing). I mounted my volume and took a look at my pagefile, i saw a trace about SHA256 + Serpent-Twofish-AES encryption near of my mounted volume... So i think im pretty close, i dont understand why im having that invalid hash error

So, im doing something wrong obviously. What is it?

FPGA "no compiler is available" error

$
0
0
I tried running hashcat on an Intel/Altera FPGA to see what the performance would be like, but I'm getting the error below. Any advice on what to do to make it work?
(when I run --bench, the same errors are printed out and the device is skipped)

Also, has anyone successfully gotten hashcat to work with FPGAs? I saw some posts with discussions, but did not see anyone saying that they got it working.

Code:
hashcat64.exe -I
hashcat (v4.0.1) starting...

* Device #2: No compiler is available for this device.

* Device #2: This device does not support base atomics.

* Device #2: This device's local mem size is too small.

OpenCL Info:

Platform ID #1
 Vendor  : NVIDIA Corporation
 Name    : NVIDIA CUDA
 Version : OpenCL 1.2 CUDA 9.0.103

 Device ID #1
   Type           : GPU
   Vendor ID      : 32
   Vendor         : NVIDIA Corporation
   Name           : Quadro K4200
   Version        : OpenCL 1.2 CUDA
   Processor(s)   : 7
   Clock          : 784
   Memory         : 1024/4096 MB allocatable
   OpenCL Version : OpenCL C 1.2
   Driver Version : 384.76

Platform ID #2
 Vendor  : Intel(R) Corporation
 Name    : Intel(R) FPGA SDK for OpenCL(TM)
 Version : OpenCL 1.0 Intel(R) FPGA SDK for OpenCL(TM), Version 17.0

 Device ID #2
   Type           : Accelerator
   Vendor ID      : 8
   Vendor         : Intel(R) Corporation
   Name           : a10gx : Arria 10 Reference Platform (acla10_ref0)
   Version        : OpenCL 1.0 Intel(R) FPGA SDK for OpenCL(TM), Version 17.0
   Processor(s)   : 1
   Clock          : 1000
   Memory         : 2047/2048 MB allocatable
   OpenCL Version : OpenCL C 1.0
   Driver Version : 17.0

m 14800 (itunes Ver >10), hashcat has a strange behaviour

$
0
0
Hi,
im using hascat for several Years now, but i cant get why hashcat (4.0.1, win 10) behaves strange on this one:

I have extracted a hash from a manifest.plist. I start hashcat (for demo here) with


"hashcat64.exe -w 4 -m 14800 hash.txt -a 3 ?l?l?l"

After that, hashcat starts and shows its status 1 time

Quote:Session..........: hashcat
Status...........: Running
Hash.Type........: iTunes backup >= 10.0
Hash.Target......: $itunes_backup$*10*XXXXXXXXXXXXXXXXX...XXXXX
Time.Started.....: Fri Nov 10 10:45:06 2017 (1 sec)
Time.Estimated...: Fri Nov 10 10:45:07 2017 (0 secs)
Guess.Mask.......: ?l?l?l [3]
Guess.Queue......: 1/1 (100.00%)
Speed.Dev.#1.....:        0 H/s (5.05ms)
Recovered........: 0/1 (0.00%) Digests, 0/1 (0.00%) Salts
Progress.........: 0/17576 (0.00%)
Rejected.........: 0/0 (0.00%)
Restore.Point....: 0/676 (0.00%)
Candidates.#1....: sar -> sqx
HWMon.Dev.#1.....: Temp: 55c Fan: 33% Util: 45% Core:1000MHz Mem:1425MHz Bus:8

[s]tatus [p]ause [r]esume [b]ypass [c]heckpoint [q]uit =>

so far so good, but when i press "s" for an updated status nothing (except the time and H/s) has changed:

Quote:Session..........: hashcat
Status...........: Running
Hash.Type........: iTunes backup >= 10.0
Hash.Target......: $itunes_backup$*10*XXXXXXXXXXXXXXXXXXXXXXX...XXXXXX
Time.Started.....: Fri Nov 10 10:45:06 2017 (2 mins, 31 secs)
Time.Estimated...: Fri Nov 10 12:43:15 2017 (1 hour, 55 mins)
Guess.Mask.......: ?l?l?l [3]
Guess.Queue......: 1/1 (100.00%)
Speed.Dev.#1.....:        3 H/s (5.08ms)
Recovered........: 0/1 (0.00%) Digests, 0/1 (0.00%) Salts
Progress.........: 0/17576 (0.00%)
Rejected.........: 0/0 (0.00%)
Restore.Point....: 0/676 (0.00%)
Candidates.#1....: sar -> sqx
HWMon.Dev.#1.....: Temp: 59c Fan: 33% Util: 94% Core:1000MHz Mem:1425MHz Bus:8


3 H/s is pretty low ^^ when i press quit after some time it displays the folowing:

Quote:Session..........: hashcat
Status...........: Quit
Hash.Type........: iTunes backup >= 10.0
Hash.Target......: $itunes_backup$*10*XXXXXXXXXXXXXXXXXX...XXXXXX
Time.Started.....: Fri Nov 10 10:45:06 2017 (9 mins, 27 secs)
Time.Estimated...: Fri Nov 10 12:09:20 2017 (1 hour, 14 mins)
Guess.Mask.......: ?l?l?l [3]
Guess.Queue......: 1/1 (100.00%)
Speed.Dev.#1.....:        3 H/s (5.04ms)
Recovered........: 0/1 (0.00%) Digests, 0/1 (0.00%) Salts
Progress.........: 2028/17576 (11.54%)
Rejected.........: 0/2028 (0.00%)
Restore.Point....: 0/676 (0.00%)
Candidates.#1....: car -> cqx
HWMon.Dev.#1.....: Temp: 62c Fan: 33% Util: 93% Core:1000MHz Mem:1425MHz Bus:8

Started: Fri Nov 10 10:45:02 2017
Stopped: Fri Nov 10 10:54:34 2017


I tried it with different PCs (at work) and at home - all windows 8.1/10 AMD and NVIDIA. The result is always the same.
Does anyone have an idea what the reason of this could be?

Getting a weird hash from PDF?

$
0
0
Hey Guys,

Been reading through the wikis and the list of examples. Ive got a few PDF's I'm trying to unlock, and I'm getting the dreaded "Line Length Exception"

Upon comparing it to what's in the wiki, the hash's im getting from pdf2john.py arent long enough?

Also I get different hash lengths depending which version of python i use. 


What I first got with Python 3
Code:
$pdf$2*3*128*-4*1*16*89d0837390dd128f3499d68850d989ed

Then when i ran it under python 2.7.2
Code:
$pdf$2*3*128*-4*1*16*89d0837390dd128f3499d68850d989ed*32*57f20e3fb8cd1ff174a743f42566293900000000000000000000000000000000

my syntax is
Code:
C:\Hashcat\hashcat64.exe -m 10500 -a 3 2010.Hash ?b?b?b?b?b

I'm startinig to wonder if this is locked in a way hashcat isn't meant to crack? IE I'm over complicating this?

Yes. i'm a newb. I figured one of you pros might look at it and go "yup. You sir are doing it wrong"
I'm on windows 10 pro, python 3.6 and 2.7.2 installed. Wondering if life will be easier to install linux alongside...

Thanks guys.

hashcat 4.0 and 4.0.1

$
0
0
hi all,

i ve hardware configuration HD5970 , windows 7 64bit, and the driver 15.200 AMD.

Before 4.0, the crack code of the itunes hash <10 ( i remeber the password) and now to test the same hash on 4.0 and 4.0.1 is not crack code.
the command is  :
hashcat64.exe  -a 3 -m 14700 "$itunes_backup$*9*HASH" ?d?d?d?d.

Best regard.

Adding CRC64

$
0
0
Hello all,

I would like to add CRC64 support. Currently, it appears that there are multiple variants and there is not a clear "official" one to add. CRC32 is supported already, and since hashcat went open source (from what I can tell) primarily to allow new algorithms to be added, I am assuming that adding this should be relatively easy.

However, I cannot find any information on how to go about this.

What do I need to do?

Thanks in advance!

hashcat 3.60 / hashcat 4.x many hashes

$
0
0
Hashes: 7268843 digests; 7268843 unique digests, 7268843 unique salts
Bitmaps: 23 bits, 8388608 entries, 0x007fffff mask, 33554432 bytes, 5/13 rotates
Rules: 1 Type: 2611


hashcat (v3.6.0) W=3
Time.Estimated...: Mon Nov 13 08:33:39 2017 (21 hours, 12 mins)
Speed.Dev.#1.....:  1470.0 MH/s (4.85ms)

hashcat (v4.0.1-4-gfddb66eb) W=3 Optimized
Time.Estimated...: Tue Nov 14 00:06:25 2017 (1 day, 12 hours)
Speed.Dev.#1.....:   848.6 MH/s (0.93ms)

hashcat (v4.0.1-4-gfddb66eb) W=4 Optimized
Time.Estimated...: Mon Nov 13 20:05:49 2017 (1 day, 8 hours)
Speed.Dev.#1.....:   952.7 MH/s (7.55ms)
------------------------------------------------------------------------------
hashcat (v3.6.0) starting in benchmark mode...
Hashtype: vBulletin < v3.8.5 W=3
Speed.Dev.#1.....:  7751.0 MH/s (60.57ms)

hashcat (v4.0.1-4-gfddb66eb) starting in benchmark mode...
Speed.Dev.#1.....:  7780.9 MH/s (60.63ms) W=3 Optimized
Speed.Dev.#1.....:  8096.2 MH/s (463.26ms) W=4 Optimized


hashcat 3 is faster than hashcat 4, if there are a lot of hashes.

Problems with the encodings of dictionaries ...

$
0
0
Help please understand the hacking of passwords when working with various encodings of dictionaries...

I created a RAR archive with a password in Turkish - abaküsçü

Got a hash of the password - $RAR3$*0*83xxxx04c276xxd0*840fxxxxxxafc0a5xxxxb31053xxxx41


Also I have a dictionary in which there is a given password in the UTF-8 encoding (turkish.dic).
I ran cracking in the windows console with different options, for example:



hashcat64 -m 12500 -a 0 $RAR3$*0*83xxxx04c276xxd0*840fxxxxxxafc0a5xxxxb31053xxxx41 turkish.dic

or

hashcat64 -m 12500 -a 0  --encoding-from=utf-8 --encoding-to=866 $RAR3$*0*83xxxx04c276xxd0*840fxxxxxxafc0a5xxxxb31053xxxx41 turkish.dic


But not successfully((

What's the problem, what am I doing wrong?

[edit: all hashes masked by philsmd]

.png   screen_run1.png (Size: 38.91 KB / Downloads: 1)

.png   screen_run2.png (Size: 38.32 KB / Downloads: 1)

Does not start Hashcat

Linux drivers

$
0
0
Hello,

I recently built a computer solely for hashing. I used an old core 2 duo lying around. Latest version of hashcat requires amd ROCm. AMD ROCm requires a newer CPU ("PCIe Atomics CPU") which I don't have. I installed windows on the machine, even though it takes many minutes to boot, it can do hashcat. 

I remember from good old days I was able to run the hashcat(oclhashcat back than) with catalyst. My gpu is also amdgpu supported. If possible I would prefer that to the horrors catalyst installation.

Do I need to use an older version for hashcat to work with AMDGPU or catalyst? Is there any recommended version for such tasks? Any other ideas?

Thanks

which version of hashcat should I choose?

$
0
0
I have two servers, and CPU has a very good performance, but the graphics card is integrated graphics (very poor performance), so I want to use CPU to crack.
In addition, the server is Win2003 32 bit, which version of hashcat should I choose?
Teachers, can you give the most ideal version of hashcat Download URL?
Thank you very much.

which version of hashcat should I choose?

$
0
0
I have two servers, and CPU has a very good performance, but the graphics card is integrated graphics (very poor performance), so I want to use CPU to crack.

In addition, the server is Win2003 32 bit, which version of hashcat should I choose?

Teachers, can you give the most ideal version of hashcat Download URL?
Thank you very much.

7Zip hash woes

$
0
0
I have a particular archive that I made a couple of years back, and I'd like to crack it.  I used 7z2hashcat to export the has from the archive and then imported it into hashcat and it says no hashes found.  If I create a similar sized archive using 7zip now, I can export it's hash and crack it just fine using the same options as I tried on the one I actually want to crack.

I also tried John's 7zip hash util and it exported, but wouldn't import into hashcat either.

I am able to use the tool "7z Crark", and it imports the full 7zip file and seems to work, but the UI is awful, and it doesn't support near the features of hashcat.

I've tried hashcat 4.0.0 and 3.6.0 and both gave the same "hashes not loaded" error.

I don't have a problem posting the hash or PM'ing it if needed, but obviously I can't share the archive.

Any suggestions?
Viewing all 8186 articles
Browse latest View live


<script src="https://jsc.adskeeper.com/r/s/rssing.com.1596347.js" async> </script>