Password list

December 4, 2017, 6:07 am

≫ Next: How long will hashcat finish copying while restore

≪ Previous: Does generate-rules.exe not have a help?

$

0

0

7 years ago, rockyou.txt with some masking was considered good enough.  Not so much anymore.  I used to have quite a few good word lists compiled, sorted, awk'd, cewl'd, crunch'd, etc. but lost that data unfortunately.

Does anyone know of any GOOD sights now where we can get the latest leaked lists? (any lists with unsalted MD5 is OK, I don't mind spending a few minutes cracking them)

Good 'ole Brian says LeakedBase is down now

https://krebsonsecurity.com/2017/12/hack...more-41756

---

How long will hashcat finish copying while restore

December 4, 2017, 6:52 am

≫ Next: crc32 hash format, No hashes loaded, line length exception?

≪ Previous: Password list

$

0

0

c:\hc>hashcat64 --restore
hashcat (v4.0.1) starting in restore mode...
OpenCL Platform #1: NVIDIA Corporation
======================================
* Device #1: GeForce GTX 1060 6GB, 1536/6144 MB allocatable, 10MCU
* Device #2: GeForce GTX 1060 6GB, 1536/6144 MB allocatable, 10MCU
OpenCL Platform #2: Advanced Micro Devices, Inc.
================================================
* Device #3: Spectre, skipped.
* Device #4: AMD A10-7700K Radeon R7, 10 Compute Cores 4C+6G, skipped.
Hashes: 3 digests; 3 unique digests, 1 unique salts
Bitmaps: 16 bits, 65536 entries, 0x0000ffff mask, 262144 bytes, 5/13 rotates
Rules: 18
Applicable optimizers:
* Zero-Byte
* Single-Salt
* Slow-Hash-SIMD-LOOP
Password length minimum: 8
Password length maximum: 63
Watchdog: Temperature abort trigger set to 90c
Watchdog: Temperature retain trigger set to 75c
Starting attack in stdin mode...
Session..........: hashcat
Status...........: Running
Hash.Type........: WPA/WPA2
Hash.Target......: final26c4.hccapx
Time.Started.....: Mon Dec 04 22:41:17 2017 (9 secs)
Time.Estimated...: Mon Dec 04 22:41:26 2017 (0 secs)
Guess.Base.......: Pipe
Guess.Mod........: Rules (symapd.rule)
Speed.Dev.#1.....:        0 H/s (0.00ms)
Speed.Dev.#2.....:        0 H/s (0.00ms)
Speed.Dev.#*.....:        0 H/s
Recovered........: 0/3 (0.00%) Digests, 0/1 (0.00%) Salts
Progress.........: 0
Rejected.........: 0
Restore.Point....: 0
Candidates.#1....: [Copying]
Candidates.#2....: [Copying]
HWMon.Dev.#1.....: Temp: 48c Fan: 33% Util:  0% Core:1506MHz Mem:3802MHz Bus:16
HWMon.Dev.#2.....: Temp: 46c Fan: 33% Util:  0% Core:1506MHz Mem:3802MHz Bus:4
Session..........: hashcat
Status...........: Running
Hash.Type........: WPA/WPA2
Hash.Target......: final26c4.hccapx
Time.Started.....: Mon Dec 04 22:41:17 2017 (9 mins, 12 secs)
Time.Estimated...: Mon Dec 04 22:50:29 2017 (0 secs)
Guess.Base.......: Pipe
Guess.Mod........: Rules (symapd.rule)
Speed.Dev.#1.....:        0 H/s (0.00ms)
Speed.Dev.#2.....:        0 H/s (0.00ms)
Speed.Dev.#*.....:        0 H/s
Recovered........: 0/3 (0.00%) Digests, 0/1 (0.00%) Salts
Progress.........: 0
Rejected.........: 0
Restore.Point....: 0
Candidates.#1....: [Copying]
Candidates.#2....: [Copying]
HWMon.Dev.#1.....: Temp: 28c Fan: 33% Util:  0% Core: 139MHz Mem: 405MHz Bus:16
HWMon.Dev.#2.....: Temp: 24c Fan: 33% Util:  0% Core: 139MHz Mem: 405MHz Bus:4

crc32 hash format, No hashes loaded, line length exception?

December 5, 2017, 5:29 am

≫ Next: Help generating list

≪ Previous: How long will hashcat finish copying while restore

$

0

0

Same problem on CRC32. Whats going on there?

Help generating list

December 5, 2017, 6:33 am

≫ Next: CMIYC2017 - Challenge8 vBulletin

≪ Previous: crc32 hash format, No hashes loaded, line length exception?

$

0

0

Hi Hashcat members,
I am having a bit of difficulty using hashcat to generate wordlist, I've attempted to figure out this for 2 nights now and ATM it's borderline insanity. I am sure this would be easy for some of you.

I am trying to generate a list with passwords that look like;

BPM7DT601154
BPM7G1602869
BPP7CU501521
BPP8EX500570


At a glance it's uppercase, 12 characters long, the first 2 characters always start with BP and it's overall structured like "LLLNLLNNNNNN" (L for letter, N for Number)

Here is my thought process on how the generator should be structured. Each character has a minimum and maximum value I believe to be so;

 1-2    3      4      5         6             7    8    9     10    11   12
[BP][M-Q][6-8][A-O][Q-Z or 0-3][5-7][0][0-2][0-9][0-9][0-9]

At first, I figured I could use crunch to accomplish this, but quickly got a headache trying to figure it out, I am hoping hashcat can accomplish something like this alone.

Can someone help me figure this one out/lead me in the right direction?

CMIYC2017 - Challenge8 vBulletin

December 5, 2017, 10:37 pm

≫ Next: 1080 TI FE not buyable, 1070 TI FE on the rise

≪ Previous: Help generating list

$

0

0

I play a bit with the CMIYC2017-Contest. In this Challenge are some vBulletin-Hashes (challenge 8, mode 2711). Six with normal Salt-length (lenght 30 and all cracked) and the Rest with Saltlength of 30+. I tought i shorten the Salt to 30 and shift it, but i have no Result. 
I cheat  a bit and look in the CMIYC2017WriteupHashcat from the hashcat-Team. There i read, that the vBulletin salts were truncated at length 29. I dont understand this. Why is it truncated to 29? Normal length for vBulletin is 30 random chr(33-126). All used Chr in the remaining salt are ok and only longer as necessary. 
How can i identify the correct Salt to build the correct Syntax for hashcat?

1080 TI FE not buyable, 1070 TI FE on the rise

December 6, 2017, 2:53 am

≫ Next: [ask] cap to hccapx

≪ Previous: CMIYC2017 - Challenge8 vBulletin

$

0

0

Hi hashkittens,

I was trying to build my own cracking rig, but I noticed that it's not easy to get the right GPUs.
Yes, I live behind the moon and so I did not notice all these cries about out of stock GPUs.
Can somebody tell me what the actual situation is right now?

Are there GTX 1080TI Founders editions coming back to stock or are they really out of stock for good?
Will there be any successor in the near future?
Should one wait for a successor or just buy GTX 1070 TI FE in the mean time?
Would it be better to buy a non-FE GTX 1080 TI or a GTX 1070 TI FE?
Would it be better to buy a non-FE and non-TI 1080 or a GTX 1070 TI FE?

So to sum up...in what order can the "attributes" of the card be placed regarding priority to build a hash cracker?
1080 vs 1070?
FE vs non-FE?
TI vs non-TI?

Thanks,
golb

[ask] cap to hccapx

December 6, 2017, 8:16 am

≫ Next: PrestaShop Password

≪ Previous: 1080 TI FE not buyable, 1070 TI FE on the rise

$

0

0

hi, i work on project that included hashcat and i need to convert cap to hccapx
but in java/python (java is better for me)

anyone did it ?

PrestaShop Password

December 6, 2017, 12:06 pm

≫ Next: dual cpu xeon 2696 v4 problem

≪ Previous: [ask] cap to hccapx

$

0

0

Hi..
I've lost the password of my PrestaShop account and the mailer not work..
I've try to change the settings of mailer by phpMyAdmin but not work..!
I can access by FTP and by phpMyAdmin

This is the possible salt hash:

Code:

define('_COOKIE_KEY_', 'bqfkadvejm2cwysvjib4prvh5lofpxsb3lvdndbbwmj87zita3ijxegi');
define('_COOKIE_IV_', '2zrl5b85');
define('_RIJNDAEL_KEY_', 'IFHojoic9oAIein2cncJwvg99ue2O44A');
define('_RIJNDAEL_IV_', 'KmhMP5YY3JfxTGmqHn7DRg==');

The password is f03cb3b61183818b23a9488f1114848d
I suppose that is the _COOKIE_KEY_ but I wait you..

---

dual cpu xeon 2696 v4 problem

December 6, 2017, 12:23 pm

≫ Next: Line Exception using Example Hash md5

≪ Previous: PrestaShop Password

$

0

0

hi all
a have problem
hashcat not detect my second CPU
and i use not full power (

Platform ID #2
  Vendor  : Intel(R) Corporation
  Name    : Intel(R) OpenCL
  Version : OpenCL 1.2

  Device ID #4
    Type           : CPU
    Vendor ID      : 8
    Vendor         : Intel(R) Corporation
    Name           : Intel(R) Xeon(R) CPU E5-2696 v4 @ 2.20GHz
    Version        : OpenCL 1.2 (Build 57)
    Processor(s)   : 44
    Clock          : 2200
    Memory         : 16355/65420 MB allocatable
    OpenCL Version : OpenCL C 1.2
    Driver Version : 5.0.0.57


only 50% power
all tests CINEBENCHR15.038 and cpu-z_1.82  pased and show all 88 threads

Line Exception using Example Hash md5

December 6, 2017, 4:10 pm

≫ Next: No Device Found Error

≪ Previous: dual cpu xeon 2696 v4 problem

$

0

0

First time using hashcat and i wanted to see how it works but when i run the line :
hashcat64.exe -m0 -a3 -o cracked.txt hash.txt

i get the error:


Hash 'hash.txt': Line-length exception

No hashes loaded.

all that is in the file hash.txt is the example hash but nothing happens


Thanks for any help

No Device Found Error

December 6, 2017, 5:32 pm

≫ Next: rx 560 vs 1050 vs 1050ti

≪ Previous: Line Exception using Example Hash md5

$

0

0

I'm sure this question has been answered a bunch of times but every time i try cracking a hash i get a "No Devices Found" error. I have tried this on a The-Distribution-Which-Does-Not-Handle-OpenCL-Well (Kali) and bootable USB VM.

rx 560 vs 1050 vs 1050ti

December 6, 2017, 6:59 pm

≫ Next: Etherum test wallet cant find password

≪ Previous: No Device Found Error

$

0

0

Hi all, I sell my old r9 270x card which do about 94 KH/s WPA/WPA2 which I only need. I want to buy a completly new card so here are the folowing details :

rx 560 4GB lowest price 140 euros
1050 2GB lowest price 120 euros
1050ti 4GB lowest price 165 euros

The main problem is that I can't find nowhere benchmarks for rx 560 ! The 1050ti is too expensive and I will not go with it if rx 560 can do same or similar results. The only thing I can see in the games rx 560 and 1050ti are equal, maybe a very very little advantage on rx 560 side.

So what you think ?

Etherum test wallet cant find password

December 7, 2017, 5:52 am

≫ Next: Cisco ASA hash type

≪ Previous: rx 560 vs 1050 vs 1050ti

$

0

0

Hi there
I have few questions regarding etherum wallet. created test one with password: Password!

{"version":3,"id":"a9abfd0e-acd6-4f61-b94a-4e6218e3b545","address":"1b683d03d29ff1d5d5d4bab15b8ec1c686a04917","Crypto":{"ciphertext":"c8d2df24d8d41ae4ef5f94d446e42adeacb112e0c7c69bfd0548b277c999ee8d","cipherparams":{"iv":"06c00f278dbae15c7d70b6e7a2860701"},"cipher":"aes-128-ctr","kdf":"scrypt","kdfparams":{"dklen":32,"salt":"f6be6c9c0fbeeacc45f2ed5ade94cee9374a05e964988a5ff51434a3c7759c6a","n":1024,"r":8,"p":1},"mac":"e520ba417017fbaf6bedb529411aead55bd80f51e021b4db846950f92d0cec61"}}

and from that extracted hash with ethereum2john.py which use formula below

$ethereum$s*n*r*p*salt*ciphertext*mac

$ethereum$s*1024*8*1*f6be6c9c0fbeeacc45f2ed5ade94cee9374a05e964988a5ff51434a3c7759c6a*c8d2df24d8d41ae4ef5f94d446e42adeacb112e0c7c69bfd0548b277c999ee8d*e520ba417017fbaf6bedb529411aead55bd80f51e021b4db846950f92d0cec61

but this formula doesnt work with hashcat 4.0 (no hash loaded), but the other formula

$ethereum$s*n*r*p*salt*mac*ciphertext

works fine, but the hashcat cant find password which is in dictionary, tried:

C:\aa\Hashcat4.0>hashcat32.exe -m 15700 -a 0 -D 1 testwallet1.txt tempdic.txt
C:\aa\Hashcat4.0>hashcat32.exe -m 15700 -D 1 testwallet1.txt tempdic.txt
C:\aa\Hashcat4.0>hashcat32.exe -m 15700 -o recovered.txt -D 1 testwallet1.txt tempdic.txt

Dictionary cache hit:
* Filename..: tempdic.txt
* Passwords.: 13
* Bytes.....: 50
* Keyspace..: 13

Session..........: hashcat
Status...........: Exhausted
Hash.Type........: Ethereum Wallet, SCRYPT
Hash.Target......: $ethereum$s*1024*8*1*f6be6c9c0fbeeacc45f2ed5ade94ce...99ee8d
Time.Started.....: Thu Dec 07 12:18:37 2017 (0 secs)
 Time.Estimated...: Thu Dec 07 12:18:37 2017 (0 secs)
 Guess.Base.......: File (tempdic.txt)
 Guess.Queue......: 1/1 (100.00%)
Speed.Dev.#2.....:        0 H/s (2.85ms)
 Recovered........: 0/1 (0.00%) Digests, 0/1 (0.00%) Salts
Progress.........: 13/13 (100.00%)
Rejected.........: 0/13 (0.00%)
Restore.Point....: 13/13 (100.00%)
Candidates.#2....: z -> 
HWMon.Dev.#2.....: N/A

This wallet (original myethwallet file) and dictionary were tested with ethcracker and password was found.
Any ideas why this doesnt work?

Cisco ASA hash type

December 7, 2017, 8:53 am

≫ Next: --keyspace Not Working?

≪ Previous: Etherum test wallet cant find password

$

0

0

Hi all,

I am playing at cracking Cisco ASA passwords for fun. I have a test ASA I am using. I have successfully cracked the enable passwords and the passwords encrypted by using the ordinary password encryption:

Code:

username test password password privilege 15

Gives the output in show run as:

Code:

username test password 4VnN2pEtX1eZQP5L encrypted privilege 15

I know this hash type is the Cisco ASA ( -m 1410 in the hashcat command).

There is another type of password hashing used on an ASA, done by entering the following command:

Code:

username test password password mschap privilege 15

Which outputs in the show run as:

Code:

username test password iEb36u6PsRetBr3YMLdYbA== nt-encrypted privilege 15

I have checked the Cisco site and managed to find out that the ASA will convert the text to unicode and then hash with MD4 which made me think to use NTLM but I am getting the line length exception error. The hash is also in base64 which doesn't match the example hash type given on the Hashcat wiki.

What mode do I use in Hashcat to attempt to crack this password type?

Thanks in advance for any advice given.

--keyspace Not Working?

December 7, 2017, 1:29 pm

≫ Next: bcrypt salt format

≪ Previous: Cisco ASA hash type

$

0

0

Hello all,

I have been trying for quite a while now to get --keyspace to work and cannot find any documentation on why it would not. I am trying to run this:


./hashcat64.exe hashes.txt -m 0 -w 3 -O -a 3 ?a?a?a?a?a?a?a?a --keyspace

and it repeatedly gives the usage message.

Thanks in advance!

---

bcrypt salt format

December 7, 2017, 5:56 pm

≫ Next: hashcat v4.0.0 and -w 3

≪ Previous: --keyspace Not Working?

$

0

0

How would i format a hashed password with a known salt in hashcat.

$826y4$31226$dObT2IfxeM3WbUe54N0GcYc12M4T1M857N7zfg6zaN2ucM9W0.bD2p2S/7IvyzEiKXEHZZ8WX1LtpkG:65cd5a6addd58dce46fdc0b936c7740a

The column is separating the hash from the salt.

hashcat v4.0.0 and -w 3

December 6, 2017, 9:20 am

≫ Next: Minimun GPU mem requirements

≪ Previous: bcrypt salt format

$

0

0

I have a question on the workload profile. When the -w 3 is set, Why the speed in GPU k40 drove up from 600H/s to 6000H/s, it is improved too much. The question is what the method is applied that can achieve so big improvement.

Minimun GPU mem requirements

December 8, 2017, 4:18 am

≫ Next: huawei p9 lite destroyed but i get emmc image :)

≪ Previous: hashcat v4.0.0 and -w 3

$

0

0

Hello, 

i am try to run hashcat on two older nvidia gpus (9500GT) with 1 GB ram
and i am running in this error:

Code:

* Device #1: This device's local mem size is too small.

* Device #2: This device's local mem size is too small.

I cant't find the min. gpu mem specs. for running hashcat.

Can anyone help?

Thx
  FXHash

huawei p9 lite destroyed but i get emmc image :)

December 8, 2017, 5:21 am

≫ Next: Build advice

≪ Previous: Minimun GPU mem requirements

$

0

0

Hi
I drowned my phone, it was in services but it was found that it was not possible to repair it. But i read emmc, unfortunately, data partition is encrypted by the system So I start to searching and find You. I read fotter from emmc image "aes-esiv..."
Can You help me and told me where is encryptedkey and salt(i'm not sure) ? And how to get my data ?? Please help me... it is possible ?


encrypted key starts from 3a3dfc068  end  3a3dfc087 ?
salt start 3a3dfc098 end 3a3dfc0a7 ?

Please help me ..
best regards

  fotter.jpg (Size: 484.18 KB / Downloads: 0)

Build advice

December 8, 2017, 6:42 am

≫ Next: ETH wallet - Salt-length exception

≪ Previous: huawei p9 lite destroyed but i get emmc image :)

$

0

0

So I am in the process of planning a build and would appreciate any advice. The main reason I'm building this is for hashcat but I would like to use it for other things as well in the future. I'm a complete newb so would appreciate any feedback. Here's what I've come up with so far.


• Intel - Core i9-7900X 3.3GHz 10-Core Processor
  

• Noctua - NH-U9S 46.4 CFM CPU Cooler
  

• Asus - ROG RAMPAGE VI EXTREME EATX LGA2066 Motherboard
  

• 4 Dominator Platinum SE 16GB DDR4-3200 
  

• Samsung - 960 EVO 500GB M.2-2280 Solid State Drive
  

• 4 NVIDIA - GeForce GTX 1080 8GB Founders Edition Video Card
  

• Corsair - 750D ATX Full Tower Case
  

• EVGA - SuperNOVA T2 1600W 80+ Titanium Certified Fully-Modular ATX Power Supply
  

Thanks!