Quantcast
Channel: hashcat Forum - All Forums
Viewing all 7847 articles
Browse latest View live

1Password Master Password file location (MAC)?

$
0
0
Hi all, 

My best friend is currently in a home after having a brain haemorrhage at the age of 32 and is able to talk a little, and write, but cannot remember everything. I'm trying, with his parents, to get into his 1password vault on his Mac, as everything is tied to it.

He has told his dad what the password is a few times now (same each time, contains special characters ) but it doesn't work and he gets frustrated when asked repeatedly and he can't remember something.
I think with the info he's given us, I could perform a mask attack.

Question is, where do I find the file on a Mac with the hashed 1Password Master password?

We have access to the Macbook, but he didn't use the Mac's Keychain, he used 1Password instead. 
We're unable to update his website, or keep his social media accounts active if we can't log in 

Any help would be much appreciated!

rule creation with special characters (utf8 issue?)

$
0
0
Trying to get a custom rule working for cracking some longer passwords that we've noticed a pattern in:

Namely: word digit digit digit special word-repeated

so came up with the series of rules that look similar to: 


Code:
$1$2$3$£d]]]]

Problem is I'm over in the UK. We use £ and sometimes the euro symbol too. So when trying to use this rule you get:

Code:
Skipping invalid or unsupported rule in file test.rule on line 1: $1$2$3$£d]]]]

How do you utilise utf-8 characters as part of your rule construction?

m02500_aux1nullGBE): error: failed in Gen backend.

$
0
0
Hello guys and gals. I'm tearing my hair out trying to get hashcat up and running on my bootable usb drive. I have included the command I am trying to run, also the same command with --force as well as the output in both cases...please help me! I am fairly new to linux, but I am very keen to learn. I have read through the faq's and they seem to suggest that I don't need to use my GPU but on the home page of this website (hashcat.net) their are recommended requirements for both Intel GPU and CPU. I am running The-Distribution-Which-Does-Not-Handle-OpenCL-Well (The-Distribution-Which-Does-Not-Handle-OpenCL-Well (Kali)) rolling on my usb on a windows 7 hp elitebook 8750. It has an i5 core processor and 8G of RAM. Output follows:
_____________________________________________________________________________________________
Without --force
--------------------
root@The-Distribution-Which-Does-Not-Handle-OpenCL-Well (The-Distribution-Which-Does-Not-Handle-OpenCL-Well (Kali)):~# hashcat -m 2500 -a 3 -i --increment-min 8 --increment-max 10 /root/Downloads/24880_1572835516.hccapx ?a?a?a?a?a?a?a?a?a?a
hashcat (v5.1.0) starting...

* Device #1: Intel's OpenCL runtime (GPU only) is currently broken.
            We are waiting for updated OpenCL drivers from Intel.
            You can use --force to override, but do not report related errors.
* Device #2: Not a native Intel OpenCL runtime. Expect massive speed loss.
            You can use --force to override, but do not report related errors.
No devices found/left.

Started: Wed Nov 20 19:26:21 2019
Stopped: Wed Nov 20 19:26:21 2019

_____________________________________________________________________________________________
With --force
----------------
root@The-Distribution-Which-Does-Not-Handle-OpenCL-Well (The-Distribution-Which-Does-Not-Handle-OpenCL-Well (Kali)):~# hashcat -m 2500 -a 3 -i --increment-min 8 --increment-max 10 /root/Downloads/24880_1572835516.hccapx ?a?a?a?a?a?a?a?a?a?a --force
hashcat (v5.1.0) starting...

OpenCL Platform #1: Intel
=========================
* Device #1: Intel(R) HD Graphics IvyBridge M GT2, 1422/1897 MB allocatable, 16MCU

OpenCL Platform #2: The pocl project
====================================
* Device #2: pthread-Intel(R) Core(TM) i5-3360M CPU @ 2.80GHz, skipped.

Hashes: 2 digests; 1 unique digests, 1 unique salts
Bitmaps: 16 bits, 65536 entries, 0x0000ffff mask, 262144 bytes, 5/13 rotates

Applicable optimizers:
* Zero-Byte
* Single-Hash
* Single-Salt
* Brute-Force
* Slow-Hash-SIMD-LOOP

Minimum password length supported by kernel: 8
Maximum password length supported by kernel: 63

Watchdog: Hardware monitoring interface not found on your system.
Watchdog: Temperature abort trigger disabled.

* Device #1: build_opts '-cl-std=CL1.2 -I OpenCL -I /usr/share/hashcat/OpenCL -D LOCAL_MEM_TYPE=1 -D VENDOR_ID=4 -D CUDA_ARCH=0 -D AMD_ROCM=0 -D VECT_SIZE=1 -D DEVICE_TYPE=4 -D DGST_R0=0 -D DGST_R1=1 -D DGST_R2=2 -D DGST_R3=3 -D DGST_ELEM=4 -D KERN_TYPE=2500 -D _unroll'
* Device #1: Kernel m02500-pure.8e78a544.kernel not found in cache! Building may take a while...
clBuildProgram(): CL_BUILD_PROGRAM_FAILURE

m02500_aux1nullGBE): error: failed in Gen backend.

* Device #1: Kernel /usr/share/hashcat/OpenCL/m02500-pure.cl build failed - proceeding without this device.

Started: Wed Nov 20 19:05:57 2019
Stopped: Wed Nov 20 19:06:42 2019

_____________________________________________________________________________________________
clinfo output
-----------------
root@The-Distribution-Which-Does-Not-Handle-OpenCL-Well (Kali):~# clinfo
Number of platforms                              2
  Platform Name                                  Intel Gen OCL Driver
  Platform Vendor                                Intel
  Platform Version                                OpenCL 1.2 beignet 1.3
  Platform Profile                                FULL_PROFILE
  Platform Extensions                            cl_khr_global_int32_base_atomics cl_khr_global_int32_extended_atomics cl_khr_local_int32_base_atomics cl_khr_local_int32_extended_atomics cl_khr_byte_addressable_store cl_khr_3d_image_writes cl_khr_image2d_from_buffer cl_khr_depth_images cl_khr_spir cl_khr_icd cl_intel_accelerator cl_intel_subgroups cl_intel_subgroups_short cl_khr_gl_sharing
  Platform Extensions function suffix            Intel

  Platform Name                                  Portable Computing Language
  Platform Vendor                                The pocl project
  Platform Version                                OpenCL 1.2 pocl 1.3 None+Asserts, LLVM 8.0.1, SPIR, SLEEF, POCL_DEBUG
  Platform Profile                                FULL_PROFILE
  Platform Extensions                            cl_khr_icd
  Platform Extensions function suffix            POCL

  Platform Name                                  Intel Gen OCL Driver
Number of devices                                1
  Device Name                                    Intel(R) HD Graphics IvyBridge M GT2
  Device Vendor                                  Intel
  Device Vendor ID                                0x8086
  Device Version                                  OpenCL 1.2 beignet 1.3
  Driver Version                                  1.3
  Device OpenCL C Version                        OpenCL C 1.2 beignet 1.3
  Device Type                                    GPU
  Device Profile                                  FULL_PROFILE
  Device Available                                Yes
  Compiler Available                              Yes
  Linker Available                                Yes
  Max compute units                              16
  Max clock frequency                            1000MHz
  Device Partition                                (core)
    Max number of sub-devices                    1
    Supported partition types                    None, None, None
    Supported affinity domains                    (n/a)
  Max work item dimensions                        3
  Max work item sizes                            512x512x512
  Max work group size                            512
  Preferred work group size multiple              16
  Preferred / native vector sizes               
    char                                                16 / 8     
    short                                                8 / 8     
    int                                                  4 / 4     
    long                                                2 / 2     
    half                                                0 / 8        (n/a)
    float                                                4 / 4     
    double                                              0 / 2        (n/a)
  Half-precision Floating-point support          (n/a)
  Single-precision Floating-point support        (core)
    Denormals                                    No
    Infinity and NANs                            Yes
    Round to nearest                              Yes
    Round to zero                                No
    Round to infinity                            No
    IEEE754-2008 fused multiply-add              No
    Support is emulated in software              No
    Correctly-rounded divide and sqrt operations  No
  Double-precision Floating-point support        (n/a)
  Address bits                                    32, Little-Endian
  Global memory size                              1989148672 (1.853GiB)
  Error Correction support                        No
  Max memory allocation                          1491075072 (1.389GiB)
  Unified memory for Host and Device              Yes
  Minimum alignment for any data type            128 bytes
  Alignment of base address                      1024 bits (128 bytes)
  Global Memory cache type                        Read/Write
  Global Memory cache size                        8192 (8KiB)
  Global Memory cache line size                  64 bytes
  Image support                                  Yes
    Max number of samplers per kernel            16
    Max size for 1D images from buffer            65536 pixels
    Max 1D or 2D image array size                2048 images
    Base address alignment for 2D image buffers  4096 bytes
    Pitch alignment for 2D image buffers          1 pixels
    Max 2D image size                            8192x8192 pixels
    Max 3D image size                            8192x8192x2048 pixels
    Max number of read image args                128
    Max number of write image args                8
  Local memory type                              Local
  Local memory size                              65536 (64KiB)
  Max number of constant args                    8
  Max constant buffer size                        134217728 (128MiB)
  Max size of kernel argument                    1024
  Queue properties                               
    Out-of-order execution                        No
    Profiling                                    Yes
  Prefer user sync for interop                    Yes
  Profiling timer resolution                      80ns
  Execution capabilities                         
    Run OpenCL kernels                            Yes
    Run native kernels                            Yes
    SPIR versions                                1.2
  printf() buffer size                            1048576 (1024KiB)
  Built-in kernels                                __cl_copy_region_align4;__cl_copy_region_align16;__cl_cpy_region_unalign_same_offset;__cl_copy_region_unalign_dst_offset;__cl_copy_region_unalign_src_offset;__cl_copy_buffer_rect;__cl_copy_image_1d_to_1d;__cl_copy_image_2d_to_2d;__cl_copy_image_3d_to_2d;__cl_copy_image_2d_to_3d;__cl_copy_image_3d_to_3d;__cl_copy_image_2d_to_buffer;__cl_copy_image_3d_to_buffer;__cl_copy_buffer_to_image_2d;__cl_copy_buffer_to_image_3d;__cl_fill_region_unalign;__cl_fill_region_align2;__cl_fill_region_align4;__cl_fill_region_align8_2;__cl_fill_region_align8_4;__cl_fill_region_align8_8;__cl_fill_region_align8_16;__cl_fill_region_align128;__cl_fill_image_1d;__cl_fill_image_1d_array;__cl_fill_image_2d;__cl_fill_image_2d_array;__cl_fill_image_3d;block_motion_estimate_intel;
  Device Extensions                              cl_khr_global_int32_base_atomics cl_khr_global_int32_extended_atomics cl_khr_local_int32_base_atomics cl_khr_local_int32_extended_atomics cl_khr_byte_addressable_store cl_khr_3d_image_writes cl_khr_image2d_from_buffer cl_khr_depth_images cl_khr_spir cl_khr_icd cl_intel_accelerator cl_intel_subgroups cl_intel_subgroups_short cl_khr_gl_sharing cl_intel_motion_estimation

  Platform Name                                  Portable Computing Language
Number of devices                                1
  Device Name                                    pthread-Intel(R) Core(TM) i5-3360M CPU @ 2.80GHz
  Device Vendor                                  GenuineIntel
  Device Vendor ID                                0x6c636f70
  Device Version                                  OpenCL 1.2 pocl HSTR: pthread-i686-pc-linux-gnu-i686
  Driver Version                                  1.3
  Device OpenCL C Version                        OpenCL C 1.2 pocl
  Device Type                                    CPU
  Device Profile                                  FULL_PROFILE
  Device Available                                Yes
  Compiler Available                              Yes
  Linker Available                                Yes
  Max compute units                              4
  Max clock frequency                            3500MHz
  Device Partition                                (core)
    Max number of sub-devices                    4
    Supported partition types                    equally, by counts
    Supported affinity domains                    (n/a)
  Max work item dimensions                        3
  Max work item sizes                            4096x4096x4096
  Max work group size                            4096
  Preferred work group size multiple              8
  Preferred / native vector sizes               
    char                                                16 / 16     
    short                                              16 / 16     
    int                                                  8 / 8     
    long                                                4 / 4     
    half                                                0 / 0        (n/a)
    float                                                8 / 8     
    double                                              4 / 4        (cl_khr_fp64)
  Half-precision Floating-point support          (n/a)
  Single-precision Floating-point support        (core)
    Denormals                                    No
    Infinity and NANs                            Yes
    Round to nearest                              Yes
    Round to zero                                No
    Round to infinity                            No
    IEEE754-2008 fused multiply-add              No
    Support is emulated in software              No
    Correctly-rounded divide and sqrt operations  No
  Double-precision Floating-point support        (cl_khr_fp64)
    Denormals                                    Yes
    Infinity and NANs                            Yes
    Round to nearest                              Yes
    Round to zero                                Yes
    Round to infinity                            Yes
    IEEE754-2008 fused multiply-add              Yes
    Support is emulated in software              No
  Address bits                                    32, Little-Endian
  Global memory size                              4294967295 (4GiB)
  Error Correction support                        No
  Max memory allocation                          1073741824 (1024MiB)
  Unified memory for Host and Device              Yes
  Minimum alignment for any data type            128 bytes
  Alignment of base address                      1024 bits (128 bytes)
  Global Memory cache type                        Read/Write
  Global Memory cache size                        3145728 (3MiB)
  Global Memory cache line size                  64 bytes
  Image support                                  Yes
    Max number of samplers per kernel            16
    Max size for 1D images from buffer            67108864 pixels
    Max 1D or 2D image array size                2048 images
    Max 2D image size                            8192x8192 pixels
    Max 3D image size                            2048x2048x2048 pixels
    Max number of read image args                128
    Max number of write image args                128
  Local memory type                              Global
  Local memory size                              2097152 (2MiB)
  Max number of constant args                    8
  Max constant buffer size                        2097152 (2MiB)
  Max size of kernel argument                    1024
  Queue properties                               
    Out-of-order execution                        No
    Profiling                                    Yes
  Prefer user sync for interop                    Yes
  Profiling timer resolution                      1ns
  Execution capabilities                         
    Run OpenCL kernels                            Yes
    Run native kernels                            Yes
    SPIR versions                                1.2
  printf() buffer size                            16777216 (16MiB)
  Built-in kernels                                (n/a)
  Device Extensions                              cl_khr_byte_addressable_store cl_khr_global_int32_base_atomics cl_khr_global_int32_extended_atomics cl_khr_local_int32_base_atomics cl_khr_local_int32_extended_atomics cl_khr_3d_image_writes cl_khr_spir cl_khr_fp64 cl_khr_int64_base_atomics cl_khr_int64_extended_atomics cl_khr_fp64


NULL platform behavior
  clGetPlatformInfo(NULL, CL_PLATFORM_NAME, ...)  Intel Gen OCL Driver
  clGetDeviceIDs(NULL, CL_DEVICE_TYPE_ALL, ...)  Success [Intel]
  clCreateContext(NULL, ...) [default]            Success [Intel]
  clCreateContext(NULL, ...) [other]              Success [POCL]
  clCreateContextFromType(NULL, CL_DEVICE_TYPE_DEFAULT)  Success (1)
    Platform Name                                Intel Gen OCL Driver
    Device Name                                  Intel(R) HD Graphics IvyBridge M GT2
  clCreateContextFromType(NULL, CL_DEVICE_TYPE_CPU)  No devices found in platform
  clCreateContextFromType(NULL, CL_DEVICE_TYPE_GPU)  Success (1)
    Platform Name                                Intel Gen OCL Driver
    Device Name                                  Intel(R) HD Graphics IvyBridge M GT2
  clCreateContextFromType(NULL, CL_DEVICE_TYPE_ACCELERATOR)  No devices found in platform
  clCreateContextFromType(NULL, CL_DEVICE_TYPE_CUSTOM)  No devices found in platform
  clCreateContextFromType(NULL, CL_DEVICE_TYPE_ALL)  Success (1)
    Platform Name                                Intel Gen OCL Driver
    Device Name                                  Intel(R) HD Graphics IvyBridge M GT2

ICD loader properties
  ICD loader Name                                OpenCL ICD Loader
  ICD loader Vendor                              OCL Icd free software
  ICD loader Version                              2.2.12
  ICD loader Profile                              OpenCL 2.2


This is all the output I think is relevant. I would appreciate any useful comments, help or pointing out of my faults. As I said above I am keen to learn but I don't know where I am going wrong. PLEASE HELP ME!!!!

Hashcat vs Keepass 2 (.kdbx)

$
0
0
Hi. Please check if the mask is correctly formed. Translated by Google.

Condition:
Search for the unknown part of the password using the sets: l, u, d. From 1 to 16 characters long (in addition to the known part).

Code:
hashcat64.exe -a 3 -m 13400 -i —increment-min=1 —increment-max=16 -1 ?l?u?d Keepass2.hash Sdkdjso38sLfj9ar?1

And, could you please calculate how long the search with this condition will take. Thanks!!!

Quote:hashcat (v5.1.0) starting in benchmark mode...

Benchmarking uses hand-optimized kernel code by default.
You can use it in your cracking session by setting the -O option.
Note: Using optimized kernel code limits the maximum supported password length.
To disable the optimized kernel code in benchmark mode, use the -w option.

* Device #1: Intel's OpenCL runtime (GPU only) is currently broken.
We are waiting for updated OpenCL drivers from Intel.
You can use —force to override, but do not report related errors.
* Device #4: Not a native Intel OpenCL runtime. Expect massive speed loss.
You can use —force to override, but do not report related errors.
ADL_Overdrive_Caps(): -8

ADL_Overdrive_Caps(): -8

OpenCL Platform #1: Intel(R) Corporation
========================================
* Device #1: Intel(R) UHD Graphics 620, skipped.
* Device #2: Intel(R) Core(TM) i7-8550U CPU @ 1.80GHz, skipped.

OpenCL Platform #2: Advanced Micro Devices, Inc.
================================================
* Device #3: gfx804, 1523/2048 MB allocatable, 8MCU
* Device #4: Intel(R) Core(TM) i7-8550U CPU @ 1.80GHz, skipped.

Benchmark relevant options:
===========================
* —optimized-kernel-enable

Hashmode: 13400 - KeePass 1 (AES/Twofish) and KeePass 2 (AES) (Iterations: 6000)

Speed.#3.........: 29896 H/s (92.76ms) @ Accel:256 Loops:128 Thr:64 Vec:1

veracrypt container

$
0
0
Hey guys,
i have a big problem with my 300 GB crypted veracrypt container. (no PIM, just a password)
i tried all my passwords already. without success.

is there any way to get the password via hashcat?

sorry for this simple stupid question, I am new here
but i am ready to learn all the skills i need even if it would take several years.
These are all my old family pictures and videos .... Sad Sad Sad

Should I use deskey_to_ntlm on crack.sh result?

$
0
0
Hello all,

So I've got NetNTLMv1 credentials and used crack.sh to crack them because it would take TOO much time if I try to do it with my rig..

However, I'm a bit confused and want to confirm that my understanding is correct.. The end result of crack.sh (what they call the key) is the actual NTLM hash right? If I have that hash, is it possible to confirm it using hashcat?

I think that it is the NTLM hash but just need a confirmation before I start trying to crack it.. The reason why I think that it is the NTLM hash is because the last four chars are identical to the PT3 segment I received from chapcrack..


P.S. why did I get confused in the first place? Because online cracking tools told me that the hash I have is 'unknown' type, and because the hash-identifier tool on The-Distribution-Which-Does-Not-Handle-OpenCL-Well (Kali) puts NTLM as one of least possible candidates for that hash

new 5700xt fails to benchmark

$
0
0
Microsoft Windows [Version 10.0.18362.476]
(c) 2019 Microsoft Corporation. All rights reserved.

E:\hashcat-5.1.0\hashcat-5.1.0>hashcat64 -b -O
hashcat (v5.1.0) starting in benchmark mode...

Benchmarking uses hand-optimized kernel code by default.
You can use it in your cracking session by setting the -O option.
Note: Using optimized kernel code limits the maximum supported password length.
To disable the optimized kernel code in benchmark mode, use the -w option.

ADL_Overdrive5_CurrentActivity_Get(): -8

ADL_Overdrive5_CurrentActivity_Get(): -8

ADL_Overdrive5_CurrentActivity_Get(): -8

ADL_Overdrive5_CurrentActivity_Get(): -8

OpenCL Platform #1: Advanced Micro Devices, Inc.
================================================
* Device #1: gfx1010, 4048/8176 MB allocatable, 20MCU

Benchmark relevant options:
===========================
* --optimized-kernel-enable

Hashmode: 0 - MD5

Speed.#1.........: 22766.5 MH/s (58.25ms) @ Accel:512 Loops:512 Thr:256 Vec:1

Hashmode: 100 - SHA1

Speed.#1.........:  8804.8 MH/s (75.38ms) @ Accel:512 Loops:256 Thr:256 Vec:1

Hashmode: 1400 - SHA2-256

clBuildProgram(): CL_BUILD_PROGRAM_FAILURE

Error: AMD HSA Code Object loading failed.

* Device #1: Kernel ./OpenCL/m01400_a3-optimized.cl build failed - proceeding without this device.

Started: Wed Dec 04 18:22:05 2019
Stopped: Wed Dec 04 18:22:27 2019

E:\hashcat-5.1.0\hashcat-5.1.0>


I mainly want to run -m 2500 but it fails anyways

getcernelarginfo procedure entry point not found in library

$
0
0
after updating OpenСL from 16 to 18 the latest version is getting an error getcernelarginfo procedure entry point not found in library

hashcat crash on benchmark

$
0
0
I've been trying to get my RX580 rig to work with hashcat for days now but I can't get it to work. I currently have 6 RX580's mounted on a AsRock H110 motherboard. I'm running Windows 10 x64.

Somehow when I benchmark MD5 it works but after that it crashes. Also when I try to benchmark WPA it just shows 0H/s

I've tried installing the newest and some of the older AMD drivers but none of the ones I tried worked like it should. Is there any way to troubleshoot or debug this?

Full benchmark (attempt)
Code:
$ ./hashcat.exe -b
hashcat (v5.1.0-1495-g53254b45) starting in benchmark mode...

Benchmarking uses hand-optimized kernel code by default.
You can use it in your cracking session by setting the -O option.
Note: Using optimized kernel code limits the maximum supported password length.
To disable the optimized kernel code in benchmark mode, use the -w option.

OpenCL API (OpenCL 2.1 AMD-APP (2906.10)) - Platform #1 [Advanced Micro Devices, Inc.]
======================================================================================
* Device #1: Ellesmere, 3968/4096 MB (3264 MB allocatable), 36MCU
* Device #2: Ellesmere, 3968/4096 MB (3264 MB allocatable), 36MCU
* Device #3: Ellesmere, 3968/4096 MB (3264 MB allocatable), 36MCU
* Device #4: Ellesmere, 3968/4096 MB (3264 MB allocatable), 36MCU
* Device #5: Ellesmere, 3968/4096 MB (3264 MB allocatable), 36MCU
* Device #6: Ellesmere, 3968/4096 MB (3264 MB allocatable), 36MCU

OpenCL API (OpenCL 2.1 ) - Platform #2 [Intel(R) Corporation]
=============================================================
* Device #7: Intel(R) HD Graphics 630, 6359/6423 MB (3211 MB allocatable), 24MCU
* Device #8: Intel(R) Core(TM) i7-7700 CPU @ 3.60GHz, skipped

Benchmark relevant options:
===========================
* --optimized-kernel-enable

Hashmode: 0 - MD5

Speed.#1.........: 13054.5 MH/s (91.80ms) @ Accel:256 Loops:512 Thr:256 Vec:1
Speed.#2.........: 13019.8 MH/s (92.06ms) @ Accel:256 Loops:512 Thr:256 Vec:1
Speed.#3.........: 13085.6 MH/s (91.46ms) @ Accel:256 Loops:512 Thr:256 Vec:1
Speed.#4.........: 12753.3 MH/s (93.96ms) @ Accel:256 Loops:512 Thr:256 Vec:1
Speed.#5.........: 13022.1 MH/s (92.10ms) @ Accel:256 Loops:512 Thr:256 Vec:1
Speed.#6.........: 12984.0 MH/s (92.33ms) @ Accel:256 Loops:512 Thr:256 Vec:1
Speed.#7.........:  555.9 MH/s (89.34ms) @ Accel:64 Loops:128 Thr:256 Vec:4
Speed.#*.........: 78475.2 MH/s

Hashmode: 100 - SHA1

Started: Sun Dec  8 12:13:15 2019
Stopped: Sun Dec  8 12:13:44 2019


WPA benchmark attempt:
Code:
$ ./hashcat.exe -b -m 2500
hashcat (v5.1.0-1495-g53254b45) starting in benchmark mode...

Benchmarking uses hand-optimized kernel code by default.
You can use it in your cracking session by setting the -O option.
Note: Using optimized kernel code limits the maximum supported password length.
To disable the optimized kernel code in benchmark mode, use the -w option.

/cygdrive/c/Users/rig_0/Documents/hashcat/OpenCL/m02500-optimized.cl: Optimized kernel requested but not needed - falling back to pure kernel
OpenCL API (OpenCL 2.1 AMD-APP (2906.10)) - Platform #1 [Advanced Micro Devices, Inc.]
======================================================================================
* Device #1: Ellesmere, 3968/4096 MB (3264 MB allocatable), 36MCU
* Device #2: Ellesmere, 3968/4096 MB (3264 MB allocatable), 36MCU
* Device #3: Ellesmere, 3968/4096 MB (3264 MB allocatable), 36MCU
* Device #4: Ellesmere, 3968/4096 MB (3264 MB allocatable), 36MCU
* Device #5: Ellesmere, 3968/4096 MB (3264 MB allocatable), 36MCU
* Device #6: Ellesmere, 3968/4096 MB (3264 MB allocatable), 36MCU

OpenCL API (OpenCL 2.1 ) - Platform #2 [Intel(R) Corporation]
=============================================================
* Device #7: Intel(R) HD Graphics 630, 6359/6423 MB (3211 MB allocatable), 24MCU
* Device #8: Intel(R) Core(TM) i7-7700 CPU @ 3.60GHz, skipped

Benchmark relevant options:
===========================
* --optimized-kernel-enable

Hashmode: 2500 - WPA-EAPOL-PBKDF2 (Iterations: 4095)

Speed.#1.........:        0 H/s (0.00ms) @ Accel:0 Loops:0 Thr:256 Vec:1
Speed.#2.........:        0 H/s (0.00ms) @ Accel:0 Loops:0 Thr:256 Vec:1
Speed.#3.........:        0 H/s (0.00ms) @ Accel:0 Loops:0 Thr:256 Vec:1
Speed.#4.........:        0 H/s (0.00ms) @ Accel:0 Loops:0 Thr:256 Vec:1
Speed.#5.........:        0 H/s (0.00ms) @ Accel:0 Loops:0 Thr:256 Vec:1
Speed.#6.........:        0 H/s (0.00ms) @ Accel:0 Loops:0 Thr:256 Vec:1
Speed.#7.........:        0 H/s (0.00ms) @ Accel:0 Loops:0 Thr:256 Vec:1
Speed.#*.........:        0 H/s

Started: Sun Dec  8 12:16:16 2019
Stopped: Sun Dec  8 12:16:38 2019

hashcat in VM

$
0
0
Hi.

First post here.
New w/ hashcat.
I googled now for +2 hours ... no joy.

Basic question ... does hashcat 5.1.0 work properly in VM (VirtualBox - host W10) and make use of GPU?

Host:
NVIDIA GeForce RTX 2080
Intel Core i9-9900K

I tried quite a lot of cuda and nvidia drivers - no success.

I get ...

Code:
hashcat (v5.1.0-1497-g8932c71a) starting...

cuInit(): no CUDA-capable device is detected

clGetPlatformIDs(): CL_PLATFORM_NOT_FOUND_KHR

ATTENTION! No OpenCL-compatible or CUDA-compatible platform found.

You are probably missing the OpenCL or CUDA runtime installation.

* AMD GPUs on Linux require this driver:
  "RadeonOpenCompute (ROCm)" Software Platform (1.6.180 or later)
* Intel CPUs require this runtime:
  "OpenCL Runtime for Intel Core and Intel Xeon Processors" (16.1.1 or later)
* Intel GPUs on Linux require this driver:
  "OpenCL 2.0 GPU Driver Package for Linux" (2.0 or later)
* NVIDIA GPUs require this runtime and/or driver (both):
  "NVIDIA Driver" (418.56 or later)
  "CUDA Toolkit" (10.1 or later)
...

Stuck while Dictionary chache building

$
0
0
Hi, I have been using Hashcat on my pc for some time now. However, for the past two months, I am not able to use the application. Every time I run Hashcat with big wordlists ( around 15 to 13 GB )the application gets stuck in ' Dictionary cache building ..... (particular %) and does not go further. the percentage is constant for each word list suppose I use the 15gb wordlist from Crackstation, it gets stuck with 24.61 % each time. it stops responding after it reaches that percentage and the window cannot be closed. I have to shut down or restart the system. and windows also informs that the drive is corrupt after I restart and asks me to scan. I have tried downloading the wordlists from different links (just to make sure that the problem is not with the list) I have cleared and formatted a drive of 300gb in my pc to make sure that the problem is not with the drive. however, when I try and use a smaller wordlist that has only 1000-5000 words. this issue does not occur.
here are the system details and here is the screenshot of the error.
------------------
System Information
------------------
Time of this report: 12/9/2019, 13:12:16
Operating System: Windows 10 Home Single (10.0)
Processor: Intel(R) Core(TM) i5-8300H CPU @ 2.30GHz
Memory: 8192 MB RAM
Name: NVIDIA GeForce GTX 1050 Ti
Display Memory: 8051 MB

null

Bruteforce Unprotect() .net function

$
0
0
Hi,

For forensic purpose, is there any way to bruteforce Unprotect()  .net function ?

Code is:
Code:
[System.Security.Cryptography.ProtectedData]::Unprotect(
     ENCRYPTED_PAYLOAD
     SALT,
     [System.Security.Cryptography.DataProtectionScope]::CurrentUser)
)


This code encrypts and decrypts the data (ENCRYPTED_PAYLOAD) while running under the same account on the same machine.

My goal: decrypt the payload, on another machine and account.

The last line (CurrentUser) it the key, which is the User Context, stored inside DPAPI.
I know that hashcat can crack DPAPI hashes but it's not the point here, as I don't have the DPAPI neither.

Question is, if don't have any hash here to feed hashcat, what could I do?

Thanks!

NVAPI_GPU_NOT_POWERED

$
0
0
I'm trying to crack this MD5 hash: -- I've just read the rules, erased---
I know it is an alphanumeric sequence with two / inside and only capital letters. It's not a password though. It's supposed to look like this when decrypted: N960WVLU3DSL4.DM/N960WOYV3DSL4/N960WVLU3DSL4

I really don't know how to use the software and I desperately need your help.
When I try to use the software, I get NvAPI_GPU_GetPerfPoliciesInfo(): NVAPI_GPU_NOT_POWERED.

The hardware I am using is very modest: i5-7300HQ, GTX 1050Ti 4GB, 16GB DDR4, Windows 10 Home 1909 x64
I've tried to read the wiki but it really doesn't make much sense to me. So how can I fix my error and crack my hash? Thank you very much for your help.

(Also I would like to know if someone knows how I can automate the process. Thank you.)
(PS: I know what this hash is meant to be. How can I alternatively use a dictionary attack? I'm a total noob at this sorry)

EDIT: Trying to use another OpenCL device, I got this error which happens with the NVIDIA GPU too: No password candidates received in stdin mode, aborting.. I don't understand what it means and know what to do now. Please help.

two-key triple DES

$
0
0
Hey guys,
can hashcat help me with two-key triple DES (K1=K3) in any way?
I know the PT and of course the CT but literally nothing about the key. Only it is 2 x 56 = 112 bits. 

Any help much appreciated. Thanks!

MrLampe

Trying to recover a blockchain.info wallet

$
0
0
Hey guys as the title says i'm trying to recover a blockchain.info wallet password . But before starting to use hashcat, i need to convert the wallet.aes.json to a hash file. so i'm using the following johntheripper script: 

https://github.com/magnumripper/JohnTheR...in2john.py

The output of the script is:
wallet.aes.json:$blockchain$v2$5000$1184$...ddc40e6979055eb129fb97e3e83d642ffc4f68fe5a441c95d7eb0822ff99dcbf4b978c2...   

it's 2368 char after $
Is that amount char normal? Can hashcat handle it?

WPA help

$
0
0
I have a file that is a WPA capture, not WPA2. Which algorithm do I use? 

2500 | WPA-EAPOL-PBKDF2
2501 | WPA-EAPOL-PMK
16800 | WPA-PMKID-PBKDF2
16801 | WPA-PMKID-PMK

Im just confused on what all of them do and which one does what.

Juniper netscreen hash help

$
0
0
am trying to crack a Juniper netscreen hash on windows 10

e:\Hosting\Junk\hashcat-5.1.0>hashcat64.exe -m 22 hash.txt password.txt
hashcat (v5.1.0) starting...

* Device #1: Intel's OpenCL runtime (GPU only) is currently broken.
            We are waiting for updated OpenCL drivers from Intel.
            You can use --force to override, but do not report related errors.
* Device #3: WARNING! Kernel exec timeout is not disabled.
            This may cause "CL_OUT_OF_RESOURCES" or related errors.
            To disable the timeout, see: https://hashcat.net/q/timeoutpatch
nvmlDeviceGetFanSpeed(): Not Supported

OpenCL Platform #1: Intel(R) Corporation
========================================
* Device #1: Intel(R) UHD Graphics 630, skipped.
* Device #2: Intel(R) Core(TM) i7-8750H CPU @ 2.20GHz, skipped.

OpenCL Platform #2: NVIDIA Corporation
======================================
* Device #3: GeForce GTX 1060, 1536/6144 MB allocatable, 10MCU

Hashfile 'hash.txt' on line 1 (gZW7Sd...snip.....2o5KeCznITs=): Separator unmatched
Hashfile 'hash.txt' on line 2 (o+82k...hidden.....anMzKlpWw==): Separator unmatched
No hashes loaded.

Started: Wed Dec 11 08:39:58 2019
Stopped: Wed Dec 11 08:40:00 2019

e:\Hosting\Junk\hashcat-5.1.0>


tried in linux, am getting same error
can someone please help me with this. 

Thank you

How to enter hashcat mask?

$
0
0
I want to crack a hash from 0010000000 to 0019999999
Eg. can the mask be ?0?0?1?d?d?d?d?d?d?d or how can I achieve this? 

Yeap IM noob AF 
teach me pls XD

Advice for Reviving Old Machine for Hashcat

$
0
0
Hi everyone!

I got into hashcat a few days ago since I realized I can't remember the password I used for a truecrypt container I had back in 2009. I have an old pc with an i5-760, 4gb ram, and a 7870 ghz edition. 

I was wondering if I should just build a new system from scratch and get a mid-range gpu or can I just get a 1070 to replace my 7870. That way I can invest in what mattered most for my need. Is this advisable or not? I would like to hear your thoughts on this.

Thank you very much!

Hashcat vs Keepass 2 (.kdbx)

$
0
0
Hi. Please check if the mask is correctly formed. Translated by Google.

Condition:
Search for the unknown part of the password using the sets: l, u, d. From 1 to 16 characters long (in addition to the known part).

Code:
hashcat64.exe -a 3 -m 13400 -i —increment-min=1 —increment-max=16 -1 ?l?u?d Keepass2.hash Sdkdjso38sLfj9ar?1

And, could you please calculate how long the search with this condition will take. Thanks!!!

Quote:hashcat (v5.1.0) starting in benchmark mode...

Benchmarking uses hand-optimized kernel code by default.
You can use it in your cracking session by setting the -O option.
Note: Using optimized kernel code limits the maximum supported password length.
To disable the optimized kernel code in benchmark mode, use the -w option.

* Device #1: Intel's OpenCL runtime (GPU only) is currently broken.
We are waiting for updated OpenCL drivers from Intel.
You can use —force to override, but do not report related errors.
* Device #4: Not a native Intel OpenCL runtime. Expect massive speed loss.
You can use —force to override, but do not report related errors.
ADL_Overdrive_Caps(): -8

ADL_Overdrive_Caps(): -8

OpenCL Platform #1: Intel(R) Corporation
========================================
* Device #1: Intel(R) UHD Graphics 620, skipped.
* Device #2: Intel(R) Core(TM) i7-8550U CPU @ 1.80GHz, skipped.

OpenCL Platform #2: Advanced Micro Devices, Inc.
================================================
* Device #3: gfx804, 1523/2048 MB allocatable, 8MCU
* Device #4: Intel(R) Core(TM) i7-8550U CPU @ 1.80GHz, skipped.

Benchmark relevant options:
===========================
* —optimized-kernel-enable

Hashmode: 13400 - KeePass 1 (AES/Twofish) and KeePass 2 (AES) (Iterations: 6000)

Speed.#3.........: 29896 H/s (92.76ms) @ Accel:256 Loops:128 Thr:64 Vec:1
Viewing all 7847 articles
Browse latest View live


<script src="https://jsc.adskeeper.com/r/s/rssing.com.1596347.js" async> </script>