Quantcast
Channel: hashcat Forum - All Forums
Viewing all 8212 articles
Browse latest View live

WPA/WPA2 using PMK 2501

$
0
0
Hai
Admin & Member
any body can Ex plying to me
1) PMK 2051 burtforce attack???? possible ??? like pyrit???
2) PMK 2051 mode HCCAPx file support ????

hashcat approved gpu driver no longer available

$
0
0
The web page here: https://hashcat.net/hashcat/

... says Windows users need 'AMD Radeon Software Crimson Edition (15.12 or later)', but AMD are not hosting this any more. Instead they direct me to download their 'Radeon Software Adrenalin Edition Graphics Driver Installer for Windows 10 64-Bit'. (https://support.amd.com/en-us/download)

Can anybody confirm the Adrenalin driver works for Hashcat?

cryptomator

$
0
0
Can some one tell me please how I can trace my forgotten password in cryptomater application with Hashcat?

GHash

$
0
0
From what I can tell, hashcat does not have a module for G-Hash-32. Does anyone know of a program than can encrypt (e.g. for use in a known plain text attack) or crack G-Hash-32 hashes? I am trying (with permission) to crack password hashes from an IBM 4690 OS version 6 enhanced. Based on parsing the adxcsouf.dat file, it appears that this OS has switched from using adxcrypt or sha1 to G-Hash-32

Sleeve bearing vs ball bearing GPU fans

$
0
0
There is one thing that miners and hashcat rig owners have in common.  Some of us run our machines 24/7/365.

However, in order to do this with the least amount of maintenance, Founders Editions cards still seem to reign supreme due to the use of fans with ball bearings.

I discovered recently that some Nvidia 10 series GPUs (mostly Gigabyte Windforce) are shipped with fans that use sleeve bearings instead of ball bearings.  Whether your are a miner or a hashcat user, the way to go is undoubtedly GPUs with fans that use ball bearings, not sleeve bearings.

This phenomena is documented on a crypto currency blog if you are at all curious.  https://cryptomining-blog.com/tag/windfo...pair-fans/

The short version of what happens is that sleeve bearings will have all of their internal lubricant evaporate in about 3 months and then the fans will fail almost exactly at the 3 month mark.  At this point, you will be replacing the fan or worse, the GPU.  A GPU that uses a ball bearing fan, on the other hand, probably wouldn't see fan failure for several years (most ball bearing fans are rated at 50,000 hours), assuming that the GPU is kept relatively dust free.

That brings me to my question.  Has anyone in either the miner or hashcat community built an index of which GPUs use ball bearing fans and which GPUs use sleeve bearing fans?  This information would be very valuable so that any potential purchaser of a GPU could make an informed buying decision.

Does such an index exist?  Perhaps I am not looking hard enough.  *goes to Google*

PDF Hash

$
0
0
Hi,
I generated the hash from a PDF by using the Perl verion of JohnTheRipper-bleeding-jumbo:

Code:
perl JohnTheRipper-bleeding-jumbo/run/pdf2john.pl test.pdf > hash.txt

Then I want to start hashcat:

Code:
C:\pdf\hashcat>hashcat64.exe -m 10400 -a 3 "hash.txt" ?a?a?a?a?a?a?a?a?a?a

but get the error:

Code:
C:\pdf\hashcat>hashcat64.exe -m 10400 -a 3 "hash.txt" ?a?a?a?a?a?a?a?a?a?a
hashcat (v4.2.1) starting...

OpenCL Platform #1: NVIDIA Corporation
======================================
* Device #1: GeForce GTX 970, 1024/4096 MB allocatable, 13MCU

./OpenCL/m10400_a3-optimized.cl: Pure OpenCL kernel not found, falling back to optimized OpenCL kernel
Hashfile 'hash.txt' on line 1 ($pdf$2...6a04f3baed07dd91afd5a13afe7ae130): Token length exception
No hashes loaded.

Started: Wed Aug 08 11:24:06 2018
Stopped: Wed Aug 08 11:24:06 2018

Thats the hash inside of hash.txt:

Code:
$pdf$2*3*128*-1028*1*16*1cbbfa9726072cab27c25203533e8f7c*32*b5161fe8b25afcbe69f1c9cdc8445d8c01000000000000000000000000000000*32*f7b4b890408713c4880d202ced4055186a04f3baed07dd91afd5a13afe7ae130

What do I wrong? Was following this tutorial: https://blog.didierstevens.com/2017/12/2...fs-part-1/

Thanks for any help and best regards,
Frank

hcxdumptool ?

$
0
0
I been away for years, i was reading on the board and someone mention the new tool "hcxdumptool "

Is it included with hashcat , and does it work good on WPA?

TIA

Question on positional rules with specific charsets

$
0
0
Hello all,

I've started to give a try to the KoreLogic 2017 challenge as your team provided a nice writeup.
Challenge 1 is quite straightforward, except that I have some hard time to write a rule to get, from a dictionnary, the word "D1rections"
I used existing leetspeak.rule with some "c" and "$s" but unfortunately leet-transformations are applied to all occurrences. I've seen in the wiki that I can use "p" to choose a specific char position to overwrite, but I don't know how to deal with it as I cannot choose which char to overwrite Indeed, here I just want to overwrite possible leet chars.
AFAIK, the rule should replace char X at position p and replace it with char Y. And should be able to make iterations to replace 1,2,3,...,#  char (if same char occur # times in the word), but I don't see anything like this in the wiki page.


Any idea ?

Thanks !

need help

$
0
0
hi my problem is with hashcat 4.2.1 and windows 10 64 bit with radeon 7990 with drivers 17.7.1 i'm get on wpa2 -m 2500 2232 h/s
and on hashcat 4.1.0 same system i get 273.7 kh/s
i test it with latest amd drivers 18.8.1 and same resultat
my layout is hashcat64.exe -b -m 2500 and also hashcat64.exe -b -m 2500 -w 3
and hashcat64.exe -b -m 2500 -w 3 -O


Thank you

hashcat v4.2.0

$
0
0


Welcome to hashcat v4.2.0! 

Download binaries or sources: https://hashcat.net/hashcat/ 



This release is mostly about expanding support for new algorithms and fixing bugs:
  • Added hash-mode 16700 = FileVault 2
  • Added hash-mode 16800 = WPA-PMKID-PBKDF2
  • Added hash-mode 16801 = WPA-PMKID-PMK
  • Added hash-mode 16900 = Ansible Vault

Thanks to @hops_ch for contributing the Ansible Vault mode!



Improvements:
  • Added JtR-compatible support for hex notation in the rules engine
  • Added OpenCL device utilization to the status information in machine-readable output
  • Added missing NV Tesla and Titan GPU details to tuning database
  • General file handling: Abort if a byte-order mark (BOM) is detected in a wordlist, hashlist, maskfile or rulefile
  • HCCAPX management: Use advanced hints in message_pair stored by hcxtools about endian bitness of replay counter
  • OpenCL kernels: Abort session if kernel self-test fails
  • OpenCL kernels: Add '-pure' prefix to kernel filenames to avoid problems caused by reusing existing hashcat installation folder
  • OpenCL kernels: Removed the use of 'volatile' keyword in inline assembly instructions where it is not needed
  • OpenCL kernels: Switched array pointer types in function declarations in order to be compatible with OpenCL 2.0
  • Refactored code for --progress-only and --speed-only calculation
  • SIP cracking: Increased the nonce field to allow a salt of 1024 bytes
  • TrueCrypt/VeraCrypt cracking: Do an entropy check on the TC/VC header on start
Notes:
  • The removal of 'volatile' keyword has a large positive impact on cracking performance on macOS
  • The refactored code for --progress-only is important if hashcat is used in combination with a distributed overlay such as hashtopolis


Fixed Bugs:
  • Fixed a function declaration attribute in -m 8900 kernel that led to unusable -m 9300 (which shares kernel code with -m 8900)
  • Fixed a miscalculation in --progress-only mode output for extremely slow kernels like -m 14800
  • Fixed a missing check for errors on OpenCL devices leading to invalid removal of the restore file
  • Fixed a missing kernel in -m 5600 in combination with -a 3 and -O if mask is >= 16 characters
  • Fixed detection of AMD_GCN version when the rocm driver is used
  • Fixed missing code section in -m 2500 and -m 2501 to crack corrupted handshakes with a LE endian bitness base
  • Fixed a missing check for hashmodes using OPTS_TYPE_PT_UPPER causing the self-test to fail when using combinator and hybrid modes


- atom

How to run Combinator from hashcat-utils on windows

$
0
0
Hello, I am trying to run the combinator util so I can pipe the output to hashcat in order to apply rules.

I compiled the source code via code-blocks, but when I run the program it keeps printing 'hello world!'. I am definitely being trolled here lol.

Can anyone share the best way of running/installing the separate combinator-util on windows? Your help would be much appreciated. Thanks!

hcxdumptool status

$
0
0
Managed to dump a PMKID, but hcxdumptool did not saied that it found a PMKID. Maybe because "enable status" does not work on my hashcat Version(latest release) without a number imput. "Enable status 8" prints the request status, but no "found PMKID". Hashcat did not crack the hash after 1,5h, so i think the password is longer than 8 digits. What is the command to crack all possible lenghts ? Just add " l?"s ?

Status: hashcat + AMD GPU + Windows

$
0
0
I've did some test with hashcat v4.2.1 with an AMD RX480 GPU on Windows 7 with the latest AMD "Adrenalin" driver ( win7-64bit-radeon-pro-software-adrenalin-edition-18.7.1-july9.exe ) just to make sure it's working and we do not need to change anything to the driver recommendation on the main hashcat page. 

Some guy on IRC mentioned to change it which is the reason I wanted to verify what he said.

I haven't used AMD hardware on a Windows box (and much more important, the AMD original driver) for quite some time, but I can confirm everything still works out of the box.

Quote:Platform ID #2
  Vendor  : Advanced Micro Devices, Inc.
  Name    : AMD Accelerated Parallel Processing
  Version : OpenCL 2.1 AMD-APP (2671.3)

  Device ID #2
    Type           : GPU
    Vendor ID      : 1
    Vendor         : Advanced Micro Devices, Inc.
    Name           : Ellesmere
    Version        : OpenCL 2.0 AMD-APP (2671.3)
    Processor(s)   : 36
    Clock          : 1266
    Memory         : 3264/4096 MB allocatable
    OpenCL Version : OpenCL C 2.0
    Driver Version : 2671.3

Here's a screenshot from afterburner with hashcat running in benchmark. Each time a new benchmark (for a different hash mode) is starting the graph reset, the GPU utilization ideally goes to 100% and the core clock stays on maximum.

[Image: amd_rx480_afterburner_adrenalin.png]

Here's some robust benchmark output:

Quote:d:\tools\hashcat-4.2.1>hashcat64.exe -b --mac
# version: v4.2.1-3-gdad05d9f
# option: --optimized-kernel-enable
2:0:1266:1750:49.92:11981034475
2:100:1266:1750:70.20:4258718563
2:1400:1266:1750:81.78:1838697478
2:1700:1266:1750:82.91:449761650
2:2500:1264:1750:90.30:191428
2:1000:1266:1750:51.76:23059660320
2:3000:1266:1750:51.21:11564387348
2:5500:1266:1750:91.23:13241766084
2:5600:1264:1750:89.10:856523284
2:1500:1266:1750:82.41:452750315
2:500:1266:1750:58.43:4795802
2:3200:1266:1750:62.15:8988
2:1800:1266:1750:96.96:75429
2:7500:1266:1750:76.88:121269534
2:13100:1266:1750:78.08:119613469
2:15300:1266:1750:89.86:34430
2:15900:1266:1750:66.19:17582
2:7100:1266:1750:65.94:2963
2:11600:1266:1750:50.14:5196
2:12500:1244:1750:46.97:14522
2:13000:1266:1750:49.64:16366
2:6211:1266:1750:58.91:145405
2:13400:1266:1750:146.84:170447
2:6800:1265:1750:43.07:1441705
2:11300:1266:1750:91.07:2046
Started: Thu Aug 09 14:51:20 2018
Stopped: Thu Aug 09 14:54:59 2018

The most interessting fact is that the windows driver is clearly faster than the linux driver (MD5 @ Linux: 10,203,053,705 vs Windows: 11,981,034,475). I think this is related to the power limit that I can set to 50% on windows using afterburner. Important! Do not confuse setting the power limit with overclocking. Setting the power limit just effectively disables the power consumption throttling. This enables the benchmark to run smooth on the 1266 Mhz boost clock and not to jump around crazy to save a few watts. The 1266 Mhz is the stock clock setting for this GPU. Damn AMD, why can't you just give us such a quality driver for Linux!

- atom

hashcat OpenCL error

$
0
0
Hello...

Long time I didn't use this tool. Today I tried it again and got surprised by the errors I got.

I'm using Debian Stretch and hashcat v3.30 from Debian repositories. I have an ATI/AMD HD7970M running open source drivers and all that stuff.

I have just generated an MD5 hash to try it out and when I run the following command:

Code:
hashcat -m 0 -a 3 63c385429a290dd34a872ee6be7a559d ?l?u?d

It returned the following problems:

Code:
hashcat -m 0 -a 3 63c385429a290dd34a872ee6be7a559d ?l?u?d
hashcat (v3.30) starting...

OpenCL Platform #1: Mesa
========================
* Device #1: AMD PITCAIRN (DRM 2.49.0 / 4.9.0-7-amd64, LLVM 3.9.1), 1433/2048 MB allocatable, 20MCU

Hashes: 1 digests; 1 unique digests, 1 unique salts
Bitmaps: 16 bits, 65536 entries, 0x0000ffff mask, 262144 bytes, 5/13 rotates

Applicable Optimizers:
* Zero-Byte
* Precompute-Init
* Precompute-Merkle-Demgard
* Meet-In-The-Middle
* Early-Skip
* Not-Salted
* Not-Iterated
* Single-Hash
* Single-Salt
* Brute-Force
* Raw-Hash

Watchdog: Hardware Monitoring Interface not found on your system
Watchdog: Temperature abort trigger disabled
Watchdog: Temperature retain trigger disabled

* Device #1: build_opts '-I /usr/share/hashcat/OpenCL -D VENDOR_ID=16 -D CUDA_ARCH=0 -D VECT_SIZE=4 -D DEVICE_TYPE=4 -D DGST_R0=0 -D DGST_R1=3 -D DGST_R2=2 -D DGST_R3=1 -D DGST_ELEM=4 -D KERN_TYPE=0 -D _unroll -cl-std=CL1.2'
* Device #1: Kernel m00000_a3.3e988fe8.kernel not found in cache! Building may take a while...
clBuildProgram(): CL_BUILD_PROGRAM_FAILURE

input.cl:34:1: error: OpenCL version 1.1 does not support the 'static' storage class specifier
input.cl:204:1: error: OpenCL version 1.1 does not support the 'static' storage class specifier

* Device #1: Kernel /usr/share/hashcat/OpenCL/m00000_a3.cl build failure. Proceeding without this device.

Started: Sat Aug 11 13:45:30 2018
Stopped: Sat Aug 11 13:45:33 2018

or
https://paste.debian.net/1037532/

Is there a way of fixing this? Workaround?

Attack PMKID 16800 is slow

$
0
0
After I read this thread https://hashcat.net/forum/thread-7717.html, I tried the attack 16800, I have latest version of hashcat git pull few minutes ago, but attack 16800 is slow.
My GPU is not very fast, but I exptect a more fast execution.

Code:
hashcat (v4.2.1-4-g188a9568) starting in benchmark mode...

Benchmarking uses hand-optimized kernel code by default.
You can use it in your cracking session by setting the -O option.
Note: Using optimized kernel code limits the maximum supported password length.
To disable the optimized kernel code in benchmark mode, use the -w option.

OpenCL Platform #1: Advanced Micro Devices, Inc.
================================================
* Device #1: Iceland, 3263/4080 MB allocatable, 6MCU

OpenCL Platform #2: Intel(R) Corporation
========================================
* Device #2: Intel(R) Gen9 HD Graphics NEO, 3060/6120 MB allocatable, 24MCU

OpenCL Platform #3: Intel(R) Corporation
========================================
* Device #3: Intel(R) Core(TM) i7-8550U CPU @ 1.80GHz, 1912/7650 MB allocatable, 8MCU

Benchmark relevant options:
===========================
* --force
* --opencl-device-types=1,2
* --optimized-kernel-enable

Hashmode: 16800 - WPA-PMKID-PBKDF2 (Iterations: 4096)

Speed.Dev.#1.....:    27710 H/s (54.29ms) @ Accel:128 Loops:32 Thr:256 Vec:1
Speed.Dev.#2.....:     7789 H/s (95.69ms) @ Accel:32 Loops:16 Thr:256 Vec:1
Speed.Dev.#3.....:     7747 H/s (63.92ms) @ Accel:512 Loops:512 Thr:1 Vec:8
Speed.Dev.#*.....:    43246 H/s

Started: Sun Aug 12 12:14:24 2018
Stopped: Sun Aug 12 12:14:36 2018

This is the speed with MD5
Code:
hashcat (v4.2.1-4-g188a9568) starting in benchmark mode...

Benchmarking uses hand-optimized kernel code by default.
You can use it in your cracking session by setting the -O option.
Note: Using optimized kernel code limits the maximum supported password length.
To disable the optimized kernel code in benchmark mode, use the -w option.

OpenCL Platform #1: Advanced Micro Devices, Inc.
================================================
* Device #1: Iceland, 3263/4080 MB allocatable, 6MCU

OpenCL Platform #2: Intel(R) Corporation
========================================
* Device #2: Intel(R) Gen9 HD Graphics NEO, 3060/6120 MB allocatable, 24MCU

OpenCL Platform #3: Intel(R) Corporation
========================================
* Device #3: Intel(R) Core(TM) i7-8550U CPU @ 1.80GHz, 1912/7650 MB allocatable, 8MCU

Benchmark relevant options:
===========================
* --force
* --opencl-device-types=1,2
* --optimized-kernel-enable

Hashmode: 0 - MD5

Speed.Dev.#1.....:  1601.5 MH/s (61.89ms) @ Accel:512 Loops:128 Thr:256 Vec:1
Speed.Dev.#2.....:   407.6 MH/s (120.75ms) @ Accel:128 Loops:64 Thr:256 Vec:4
Speed.Dev.#3.....:   437.1 MH/s (18.93ms) @ Accel:1024 Loops:1024 Thr:1 Vec:8
Speed.Dev.#*.....:  2446.2 MH/s

Started: Sun Aug 12 12:34:43 2018
Stopped: Sun Aug 12 12:34:54 2018


This is the speed with attack 2500 WPA-EAPOL-PBKDF2
Code:
hashcat (v4.2.1-4-g188a9568) starting in benchmark mode...

Benchmarking uses hand-optimized kernel code by default.
You can use it in your cracking session by setting the -O option.
Note: Using optimized kernel code limits the maximum supported password length.
To disable the optimized kernel code in benchmark mode, use the -w option.

OpenCL Platform #1: Advanced Micro Devices, Inc.
================================================
* Device #1: Iceland, 3263/4080 MB allocatable, 6MCU

OpenCL Platform #2: Intel(R) Corporation
========================================
* Device #2: Intel(R) Gen9 HD Graphics NEO, 3060/6120 MB allocatable, 24MCU

OpenCL Platform #3: Intel(R) Corporation
========================================
* Device #3: Intel(R) Core(TM) i7-8550U CPU @ 1.80GHz, 1912/7650 MB allocatable, 8MCU

Benchmark relevant options:
===========================
* --force
* --opencl-device-types=1,2
* --optimized-kernel-enable

Hashmode: 2500 - WPA-EAPOL-PBKDF2 (Iterations: 4096)

Speed.Dev.#1.....:    26041 H/s (54.29ms) @ Accel:128 Loops:32 Thr:256 Vec:1
Speed.Dev.#2.....:     7740 H/s (95.90ms) @ Accel:32 Loops:16 Thr:256 Vec:1
Speed.Dev.#3.....:     7613 H/s (65.29ms) @ Accel:512 Loops:512 Thr:1 Vec:8
Speed.Dev.#*.....:    41394 H/s

Started: Sun Aug 12 12:40:29 2018
Stopped: Sun Aug 12 12:40:58 2018

Is it a normal speed of something is wrong?

Two Dictionaries + 3 digits

$
0
0
So what might my options be?
I can merge the dictionaries, but i'll need
Dict 1:
aaa
bbb
ccc

Dict 2:
aaa
bbb
ccc

To wind up running like:
aaaaaa
aaabbb
aaaccc
bbbaaa
bbbbbb
bbbccc
... and so forth.

I understand it will scale quite quickly in size doing so if I just make the dictionary, both files together are less than 1 meg in size so I'm not sure how quickly that'll scale up.

However, I also need to append 3 digits, 000-999 increments to the end of Dict 2 OR to the wordlist with both dictionaries merged.

Is there a way to use two dictionaries with a 3 digit mask appended to it and I'm drastically overthinking it or can I merge the two with appending every word in dict 2 to dict 1. Thanks

Use of "/" slash in mask

$
0
0
Hello all,

Just found out that the slash operator cannot be used solo in a mask.
hashcat -m 0 -a 6 dict.txt ?d\/  -> works
hashcat -m 0 -a 6 dict.txt \/?d  -> works
hashcat -m 0 -a 6 dict.txt \/        -> doesn't work
hashcat -m 0 -a 6 dict.txt '/'     -> doesn't work

I know adding a slash operato can be done in many different ways. Just wanted to point out / ask here why it is not accepted even with the backslash prior to it.

Low utilization with multi GPU

$
0
0
As stated, I recently upgraded my cracking rig from 1-1080Ti to 2x1080TI + 3x1070Ti taking advantage of the cheap GPU's with the mining exodus. The issue is, I have the 2x1080Ti's on water, when I only had1 gpu performance was great in hashcat, gpu was 100% utilized and rates were 630Mh/s+ (wpa2) (As this was also my display gpu). After adding the rest of them, and in no matter what order I run them in ( using -d 1,2 for example) each GPU will only get to about 36% utilization and the performance therefore is terrible. Is there an easy fix for this I am missing?

I will add that I have tweaked the cards , power and clock rate etc via afterburner (currently in windows, will test results in linux today as well) and using the benchmark feature (-b) they all put out great numbers, but when using in practice its down to ~36% utilization .. see benchmark below

OpenCL Platform #1: NVIDIA Corporation
======================================
* Device #1: GeForce GTX 1080 Ti, 2816/11264 MB allocatable, 28MCU
* Device #2: GeForce GTX 1080 Ti, 2816/11264 MB allocatable, 28MCU
* Device #3: GeForce GTX 1070 Ti, 2048/8192 MB allocatable, 19MCU
* Device #4: GeForce GTX 1070 Ti, 2048/8192 MB allocatable, 19MCU

Benchmark relevant options:
===========================
* --optimized-kernel-enable

Hashmode: 2500 - WPA-EAPOL-PBKDF2 (Iterations: 4096)

Speed.Dev.#1.....:   663.8 kH/s (84.77ms) @ Accel:128 Loops:64 Thr:1024 Vec:1
Speed.Dev.#2.....:   626.5 kH/s (44.77ms) @ Accel:128 Loops:32 Thr:1024 Vec:1
Speed.Dev.#3.....:   439.0 kH/s (87.31ms) @ Accel:128 Loops:64 Thr:1024 Vec:1
Speed.Dev.#4.....:   459.6 kH/s (83.42ms) @ Accel:128 Loops:64 Thr:1024 Vec:1
Speed.Dev.#*.....:  2188.9 kH/s

same GPU for Hashcat and 3d animation

$
0
0
Hello forum

i intend to buy a new graphic card (e.g. 1080ti) which should not only be supported from Hascat but as well from 3d packages :-)

In the 3d animation business, often the expensive Nvidia Quadro's are used.


What's the reason they are not using "general purpose" GPU's like the 1080 ti?


Thank you very much!
Joe

1Password opvault format

$
0
0
Hi there,

Has anyone been able to run hashcat on the opvault format? It looks a bit different than the cloudkeychain format.

I've tried -m 8200 but obviously that fails.

Thanks, Scott
Viewing all 8212 articles
Browse latest View live


<script src="https://jsc.adskeeper.com/r/s/rssing.com.1596347.js" async> </script>