Merge pcap with gps data (nmea) and visualize it on map

April 25, 2020, 10:49 am

Hi!

Not a hashcat question but this forum seems like a right place to ask.

Cant find proper tool for merging radiotap dump with nmea from gps device. Is there any?

Also, can I have my own Wigle? Any solution to host such a thing on premises? The closest thing I know would be Kismet but I cant host Kismet on my mobile build to dump pcapng with gps in a first place and probably would need to jump through some tough hoops to import my data into Kismet' geo-visualizer.

What I need is to view sources of signal on map (ideally - make some basic queries and not only for APs but also for STAs).
What I can do is dumping radiotap and nmea with tcpdump and some cat.

Running hxcdumptool is possible but is kinda last resort kind of thing. Still, would need some decent solution to store, query and visualize that data.

Im quite new to all that geolocation stuff so literally any advice would be appreciated.

↧

Author: XeNonDumps New Updates

April 25, 2020, 12:42 pm

≫ Next: Author: XeNonDumps New Updates

≪ Previous: Merge pcap with gps data (nmea) and visualize it on map

Author: XeNonDumps New Updates (track1 track2 fullz SELL FRESH Dumps (ORIGINAL TRACK1/2), Fullz/ Visa, MasterCard, Amex, Disco , dump)

I offer you a good Dumps/Fullz/Bank printed plastic with holos and signature line selling service.
USA, CANADA, EU, LATIN, ASIA and EXOTIC dumps!
Big and HOT new base! Don't loose your chance!

====== SELL CVV HOT AND FRESH ALL COUNTRY ======

- I'm looking for a good customer to buy cvv everyday and long-term
- I will discount or bonus if you order bulk

+ Format Cvv fullz info :
|Type Of Card|Card Number|Exp.Date|CVV2|First Name|Last Name|DOB|SSN|Address|City|State|Zip Code|Country|Email|Phone number|MMN|DL|

---------------------------
Cvv Eu...
France = $20 (fullz info = $40)
Germany = $20 (fullz info = $40)
Italy = $20 (fullz info = $40)
Sweden = $20 (fullz info = $40)
Asia = $15 (fullz info = $35)

EUROPE, ASIA, SOUTH AMERICA

Visa Classic | MasterCard Standart 101 CODE - $70 per 1 dump
Visa Classic | MasterCard Standart 201 CODE - $50 per 1 dump
Visa Gold | Platinum | MasterCard Gold | Platinum 101 CODE - $90 per 1 dump
Visa Gold | Platinum | MasterCard Gold | Platinum 201 CODE - $70 per 1 dump
VISA|MASTERCARD BUSINESS | SIGNATURE | PURCHASE | CORPORATE 101 CODE - $100 per 1 dump
VISA|MASTERCARD BUSINESS | SIGNATURE | PURCHASE | CORPORATE 201 CODE - $80 per 1 dump
INFINITE | 101 CODE- $150 per 1 Dump
INFINITE | 201 CODE- $100 per 1 Dump

USA

Visa Classic | MasterCard Standart 101 CODE - $30 per 1 dump
Visa Gold | Platinum | MasterCard Gold | Platinum 101 CODE - $25 per 1 dump
VISA|MASTERCARD BUSINESS | SIGNATURE | PURCHASE | CORPORATE 101 CODE - $30 per 1 dump
Amex | Discovery - $30 per 1 dump

CANADA, AUSTRALIA

Visa Classic | MasterCard Standart 201 CODE - $20
Visa Gold | Platinum | MasterCard Gold | Platinum 201 CODE - $25 per 1 dump
VISA|MASTERCARD BUSINESS | SIGNATURE| PURCHASE | CORPORATE 201 CODE - $35 per 1 dump

1. High valid rate 100% valid.
2. Don't ask dumps for free (dumps for test, etc), If you can't BUY some dumps for test, we don't want work with you.
We are also not sending dumps for cashing!
3. Daily update.
4. I'm not reseller like somebody else.
5. I always replace if low balance because i dont sell dead goods here.
6. My test minimum $200 = 5pcs Dumps Inbulk

Payment:

1. Bitcoin

3. Western Union/Money Gram.

——— My ICQ : 775 680

——— Discord : SooRich#1123

——— Email : billybender70@yahoo.com

<=========== ADD ME LET GET PAID TOGETHER ============>

↧

Author: XeNonDumps New Updates

April 25, 2020, 12:43 pm

≫ Next: Author: XeNonDumps New Updates

≪ Previous: Author: XeNonDumps New Updates

↧

Author: XeNonDumps New Updates

April 25, 2020, 12:43 pm

≫ Next: Noob: DES-OFB key recovery w/known contents

≪ Previous: Author: XeNonDumps New Updates

↧

Noob: DES-OFB key recovery w/known contents

April 19, 2020, 3:21 pm

≫ Next: DES with partial plain text

≪ Previous: Author: XeNonDumps New Updates

Hi all.

I am new to HashCat and have been trying to figure out how to get Hashcat to recovery the encryption key when I know the original contents and encrypted contents..

Also too the files a have are all HEX files (as is the key and Init vector) if that complicates things any?

I hope someone smarter than me can point me in the right direction, I have tried the usual googling/youtubing, but I'm not finding what I'm after. Sorry if this has been asked before.

Thanks

Dave.

↧

DES with partial plain text

April 20, 2020, 4:10 am

≫ Next: How to extract hash of mssql

≪ Previous: Noob: DES-OFB key recovery w/known contents

Hi
I have a problem with recovering a DES password using Hashcat when I only know the first six bytes of the plaintext.
The plain text is say 11 22 33 44 55 66 xx xx
I know the full cipher text.

I understand that the source code needs to be patched to "white out" some bits corresponding to the unknown, two last bytes.
Then when hashcat is run using "--keep-guessing" it will find many false positives. I can then examine them manually to find the full plain text.

I'm only a beginner in C so I do not know which bits to "white-out". I guess the modules in question are cpu_des.c and cpu.des.h ?

Can anyone help me with this, please?
Thanks in anticipation.

↧

How to extract hash of mssql

April 20, 2020, 8:19 pm

≫ Next: Bruteforce with descending characters - zzz,zzy,zzx

≪ Previous: DES with partial plain text

How to extract hash of mssql

↧

Bruteforce with descending characters - zzz,zzy,zzx

April 25, 2020, 3:55 pm

≫ Next: Separator Unmatched

≪ Previous: How to extract hash of mssql

Hello, I'm trying to crack a password using all letters. Instead of starting it from aaaaa, how can I make it start at zzzzz and have it bruteforce backwards to zzzzy, zzzzx, zzzzw etc?

Thanks

↧

Separator Unmatched

April 25, 2020, 11:19 pm

≫ Next: Error CPU Intel Hashcat 5.1.0.

≪ Previous: Bruteforce with descending characters - zzz,zzy,zzx

I am using the hashkiller.dict.txt file as my dictionary and i get get the following on each possible password in the dictionary, what separator is it looking for?

Hashfile 'hashkiller-dict.txt' on line 1 (tf): Separator unmatched
Hashfile 'hashkiller-dict.txt' on line 2 (V3): Separator unmatched
Hashfile 'hashkiller-dict.txt' on line 3 ( 3O): Separator unmatched
Hashfile 'hashkiller-dict.txt' on line 4 ( E{): Separator unmatched
Hashfile 'hashkiller-dict.txt' on line 5 (!J6): Separator unmatched
Hashfile 'hashkiller-dict.txt' on line 6 (!Nt): Separator unmatched
Hashfile 'hashkiller-dict.txt' on line 7 ("<p): Separator unmatched
Hashfile 'hashkiller-dict.txt' on line 8 ("?8): Separator unmatched
Hashfile 'hashkiller-dict.txt' on line 9 ("Pw): Separator unmatched
Hashfile 'hashkiller-dict.txt' on line 10 (#/p): Separator unmatched

----Snip---
Thanks in advance
-joe

↧

Error CPU Intel Hashcat 5.1.0.

April 27, 2020, 2:19 am

≫ Next: Hashcating 7z passw

≪ Previous: Separator Unmatched

Hi,

I'm using directly the binaries version of hashcat, hashcat-5.1.0.

I don't have GPU but CPU Intel

user$ clinfo
Number of platforms 1
Platform Name Intel Gen OCL Driver
Platform Vendor Intel
Platform Version OpenCL 2.0 beignet 1.3
Platform Profile FULL_PROFILE
Platform Extensions cl_khr_global_int32_base_atomics cl_khr_global_int32_extended_atomics cl_khr_local_int32_base_atomics cl_khr_local_int32_extended_atomics cl_khr_byte_addressable_store cl_khr_3d_image_writes cl_khr_image2d_from_buffer cl_khr_depth_images cl_khr_spir cl_khr_icd cl_intel_accelerator cl_intel_subgroups cl_intel_subgroups_short cl_khr_gl_sharing
Platform Extensions function suffix Intel
beignet-opencl-icd: no supported GPU found, this is probably the wrong opencl-icd package for this hardware
(If you have multiple ICDs installed and OpenCL works, you can ignore this message)

However, when I execute the following command:

./hashcat64.bin -m 2500 -a 3 hashfile.hccapx ?d?d?d?d?d?d?d?d

I receive the following error:

hashcat (v5.1.0) starting...

beignet-opencl-icd: no supported GPU found, this is probably the wrong opencl-ic d package for this hardware
(If you have multiple ICDs installed and OpenCL works, you can ignore this messa ge)
clGetDeviceIDs(): CL_DEVICE_NOT_FOUND

beignet-opencl-icd: no supported GPU found, this is probably the wrong opencl-ic d package for this hardware
(If you have multiple ICDs installed and OpenCL works, you can ignore this messa ge)
clGetDeviceIDs(): CL_DEVICE_NOT_FOUND

No devices found/left.

Started: Mon Apr 27 09:05:40 2020
Stopped: Mon Apr 27 09:05:40 2020

Then, if I execute: hashcat -I

user$ ./hashcat64.bin -I
hashcat (v5.1.0) starting...

beignet-opencl-icd: no supported GPU found, this is probably the wrong opencl-icd package for this hardware
(If you have multiple ICDs installed and OpenCL works, you can ignore this message)
clGetDeviceIDs(): CL_DEVICE_NOT_FOUND

No devices found/left.

How can I make it work with CPU Intel?

Thanks.

↧

Hashcating 7z passw

April 27, 2020, 2:27 am

≫ Next: Guess rejection policy for mangling rules attack

≪ Previous: Error CPU Intel Hashcat 5.1.0.

Hi all,

I've been pointed to this tool and forum on reddit. As way of short background story, I got myself in a bit of a predicament. Namely, I managed to mistype something in a 45 letter password I usually use when creating my .7z data backups. After making the archive I deleted the original files and can no longer recover them.

Now, this is not the first time I typed the password wrong when doing it fast, but this is the first time I checked fast and didn't see the error in the typed password when creating the archive, so it is possible that:

I missed one or two of the letters in this password (omission)
I typed 1 or two of the same letters (accidental repetition)
I typed 1 or two of the letters located on the keyboard near the letters of the usual password (the curse of big fingers)
Some combination of the above 3

It will be pretty easy to try the repetition and omission combinations, but the third one or combination of two would be quite a job.

I am absolutely sure in first 15 and last 10 letters of the password. I never get those wrong. That means I have to guess where I made the mistake in the middle part of typed password (20 lowercase letters) so I can unlock the archive.

As I know only the very basics of this area, I'm currently needing assistance with:

1. When I extract hash of the 7z archive with 7z2hashcat64-1.3 utility (89752 characters long), Hashcat gives me a "Token length exception" error. What am I doing wrong here? Do I need another utility to extract the password hash?

2. From what I gather I would need to run a mask attack with a file where I would put all the possible combinations. To simplify, the text mask file would contain something like this:
123?56789
1234?6789
12345?789
123??6789
1234??789
123?5?789
123???789
Off course, it would be more complex (have more combinations).

In connection with this I have two questions:

a) Is there some tool where I can input the 123???789, and that this utility creates all the combinations for the mask file, (in the above case, the first 6 combinations)? Is https://github.com/hashcat/maskprocessor used for this?

b) Could you help me with coming up with the exact command line that would run this mask txt (combinations.hcmask) with the password hash txt (lost.hash)? All the letters I'm trying to find are lower case (?l)

So far, I got this:

Code:
-m 11600 -a 3 -o lost.hash combinations.hcmask

↧

Guess rejection policy for mangling rules attack

April 27, 2020, 2:48 am

≫ Next: Dusted off old gaming laptop

≪ Previous: Hashcating 7z passw

Hi everyone,

I know that, using particular instructions (eg, <N) and options (eg, “-j), hashcat can reject a specific guess (ie, it does not compute the hash for it).

But, I was wondering, if there is some other intrinsic rejection rules automatically implied during the attack.
In particular, I would expect a guess to be rejected when the application of the mangling rule leaves the dictionary entry unchanged (with ':' as a special case). For instance: 'Password' + 'c' = 'Password'

Is this rejection mechanism employed from hashcat? Can/Should I force this behavior on a GPU-based attack?

Thanks.

↧

Dusted off old gaming laptop

April 27, 2020, 1:01 pm

≫ Next: Some interesting test 14100

≪ Previous: Guess rejection policy for mangling rules attack

Hello all.

I just found my old MSI gaming laptop (GX660R) and installed the latest version of The-Distribution-Which-Does-Not-Handle-OpenCL-Well (Kali) 2.0 onto it, and hoped I can put it to some good use again.

I remember the good old days when I ran BT on it and used to crack hashes with my Ati Mobility Radeon HD 5870. Trust me, it's a dinosaur these days but still good compared to run CPU cracking tools.

Now to my problem, it seems that the card is no longer supported obviously, and I have had a hard time finding anything, drivers vice, that works.

Here is some dumps from the system:

$ hashcat -b
hashcat (v5.1.0) starting in benchmark mode...

Benchmarking uses hand-optimized kernel code by default.
You can use it in your cracking session by setting the -O option.
Note: Using optimized kernel code limits the maximum supported password length.
To disable the optimized kernel code in benchmark mode, use the -w option.

* Device #1: Not a native Intel OpenCL runtime. Expect massive speed loss.
You can use --force to override, but do not report related errors.
No devices found/left.

Started: Mon Apr 27 21:48:47 2020
Stopped: Mon Apr 27 21:48:47 2020

$ sudo lshw -c video
*-display
description: VGA compatible controller
product: Broadway XT [Mobility Radeon HD 5870]
vendor: Advanced Micro Devices, Inc. [AMD/ATI]
physical id: 0
bus info: pci@0000:01:00.0
version: 00
width: 64 bits
clock: 33MHz
capabilities: pm pciexpress msi vga_controller bus_master cap_list rom
configuration: driver=radeon latency=0
resources: irq:46 memory:d0000000-dfffffff memory:e0020000-e003ffff ioport:d000(size=256) memory:c0000-dffff9

$ clinfo | grep -i vendor
Platform Vendor The pocl project
Device Vendor GenuineIntel
Device Vendor ID 0x6c636f70
ICD loader Vendor OCL Icd free software

So if it isn't obvious already. I want this old kitty to rev those fans back to maximum speed for hours again. My problem is that I lack advanced experience solving these kinds of issues without taking down the whole OS a couple of times, reinstalling, etc, and to be completely honest also lack proper knowledge.

So I know it has been running before, and I would like it to be able to run again. Is there anyone on this forum willing to help me resurrect this laptop to its former glory? Help me sort this problems out?

I would appreciate it greatly! Thanks!

↧

Some interesting test 14100

April 27, 2020, 1:36 pm

≫ Next: CPU device not available

≪ Previous: Dusted off old gaming laptop

Here we are :

this is command line created using real values, for verify how does it work 14100:

hashcat -m 14100 XAXBFXX6X8AXX7X:5XXCXXFXE6XCXCXX -a 3 --hex-charset XDX6XX7X46X9XXX7XX0XCXBXX4XX1A9XXDX6XX7X46X9XXX7 --outfile-format 5 --potfile-disable

Code:
Session..........: hashcat

Status...........: Cracked

Hash.Type........: 3DES (PT = $salt, key = $pass)

Hash.Target......: XAXBFXX6X8AXX7X:5XXCXXFXE6XCXCXX

Time.Started.....: Mon Apr 27 20:29:33 2020 (0 secs)

Time.Estimated...: Mon Apr 27 20:29:33 2020 (0 secs)

Guess.Mask.......: XDX6XX7X46X9XXX7XX0XCXBXX4XX1A9XXDX6XX7X46X9XXX7 [48]

Guess.Queue......: 1/1 (100.00%)

Speed.#1.........:    4802 H/s (0.05ms) @ Accel:2 Loops:1024 Thr:256 Vec:1

Speed.#2.........:        0 H/s (0.00ms) @ Accel:2 Loops:1024 Thr:256 Vec:1

Speed.#3.........:        0 H/s (0.00ms) @ Accel:2 Loops:1024 Thr:256 Vec:1

Speed.#*.........:    4802 H/s

Recovered........: 1/1 (100.00%) Digests, 1/1 (100.00%) Salts

Progress.........: 1/1 (100.00%)

Rejected.........: 0/1 (0.00%)

Restore.Point....: 0/1 (0.00%)

Restore.Sub.#1...: Salt:0 Amplifier:0-1 Iteration:0-1024

Restore.Sub.#2...: Salt:0 Amplifier:0-0 Iteration:0-1024

Restore.Sub.#3...: Salt:0 Amplifier:0-0 Iteration:0-1024

Candidates.#1....: $HEX[XDX6XX7X46X9XXX7XX0XCXBXX4XX1A9XXDX6XX7X46X9XXX7] -> $HEX[XDX6XX7X46X9XXX7XX0XCXBXX4XX1A9XXDX6XX7X46X9XXX7]

Candidates.#2....: [Generating]

Candidates.#3....: [Generating]

Hardware.Mon.#1..: Temp: 56c Fan: 50% Util: 70% Core:1923MHz Mem:3802MHz Bus:16

Hardware.Mon.#2..: Temp: 72c Fan: 53% Util: 76% Core:1847MHz Mem:3802MHz Bus:16

Hardware.Mon.#3..: Temp: 53c Fan: 48% Util: 16% Core:1923MHz Mem:3802MHz Bus:8

Having all this values seems to be easy , but i i try to build a mask to replicate this it seems i go into a wrong way.
Question, can someone give me a tip ho to revert this data into a mask?
Guess.Mask.......: XDX6XX7X46X9XXX7XX0XCXBXX4XX1A9XXDX6XX7X46X9XXX7 [48]
is a 3des=k1k2k3 whrere k1=k3

↧

CPU device not available

April 28, 2020, 1:06 am

≫ Next: Merge .16800 files into a single one

≪ Previous: Some interesting test 14100

Hi folks,

For some reason, my hashcat can use only GPU, CPU seems to be "not available". Hashcat does not see it within the available devices.
Do you have any clue why? My CPU isn't old (i9-9900KF), and drivers should be up-to-date. I tried to explicitly enable it along with GPU using a parameter "-D 1,2" and also with "-d 1,2" ) for benchmarks in any combination, but without success.

Code:
[ 9:55:56] C:\hashcat-5.1.0>hashcat64.exe -m 0 -D 1,2 -b

hashcat (v5.1.0) starting in benchmark mode...

Benchmarking uses hand-optimized kernel code by default.

You can use it in your cracking session by setting the -O option.

Note: Using optimized kernel code limits the maximum supported password length.

To disable the optimized kernel code in benchmark mode, use the -w option.

* Device #1: WARNING! Kernel exec timeout is not disabled.

            This may cause "CL_OUT_OF_RESOURCES" or related errors.

            To disable the timeout, see: https://hashcat.net/q/timeoutpatch

OpenCL Platform #1: NVIDIA Corporation

======================================

* Device #1: GeForce RTX 2080 SUPER, 2048/8192 MB allocatable, 48MCU

Benchmark relevant options:

===========================

* --opencl-device-types=1,2

* --optimized-kernel-enable

Hashmode: 0 - MD5

Speed.#1.........: 43729.5 MH/s (73.23ms) @ Accel:256 Loops:1024 Thr:256 Vec:4

Started: Tue Apr 28 09:56:20 2020

Stopped: Tue Apr 28 09:56:27 2020

[ 9:56:27] C:\hashcat-5.1.0>

[ 9:56:30] C:\hashcat-5.1.0>hashcat64.exe -I

hashcat (v5.1.0) starting...

OpenCL Info:

Platform ID #1

  Vendor  : NVIDIA Corporation

  Name    : NVIDIA CUDA

  Version : OpenCL 1.2 CUDA 10.1.0

  Device ID #1

    Type          : GPU

    Vendor ID      : 32

    Vendor        : NVIDIA Corporation

    Name          : GeForce RTX 2080 SUPER

    Version        : OpenCL 1.2 CUDA

    Processor(s)  : 48

    Clock          : 1845

    Memory        : 2048/8192 MB allocatable

    OpenCL Version : OpenCL C 1.2

    Driver Version : 436.30

[ 9:56:34] C:\hashcat-5.1.0>

[ 9:56:57] C:\hashcat-5.1.0># CPU INFO:

[ 9:57:03] C:\hashcat-5.1.0>wmic cpu get caption, deviceid, name, numberofcores, maxclockspeed, status

Caption                                DeviceID  MaxClockSpeed  Name                                      NumberOfCores  Status

Intel64 Family 6 Model 158 Stepping 13  CPU0      3600          Intel(R) Core(TM) i9-9900KF CPU @ 3.60GHz  8              OK

[ 9:57:14] C:\hashcat-5.1.0>

Thank you in advance for any advice!

↧

Merge .16800 files into a single one

April 28, 2020, 6:51 am

≫ Next: ROMPER HASH

≪ Previous: CPU device not available

Hi,

I've captured several PMKID files (.16800 extension) from my own multiple networks and I would like to run a single hashcat process to solve all files at the same time. Is there any tool to merge them? It means 1 process=1 mask to get n passwords from 1 single .16800 file (where n files were merged). Otherwise, to convert them to other extension for merging them.

Thanks.

↧

ROMPER HASH

April 28, 2020, 8:17 pm

≫ Next: cannot find an opencl icd loader library

≪ Previous: Merge .16800 files into a single one

Buen día compañeros, su colaboración ya que estoy realizando un prueba para romper los siguientes hash pero no me ha funcionado, que podria ser?

MSSQL: 0100b1ea1c69fc3bfcf4eb3f6d450c9fb1c3c01c8e6ca07d6ce5

USUARIO FTP: $1$Yq3Ed6QX$lsN02NlmFxjSJoBGHKVmU/

↧

cannot find an opencl icd loader library

April 29, 2020, 11:41 am

≫ Next: Searching guys with many GPU

≪ Previous: ROMPER HASH

MacBook Pro

CPU: 2.5 GHz Intel Core i5

GPU: Intel HD Graphics 4000 1536 MB

Eu estou a usar o Hashcat no Tails

Tails:

Intel Core i5-3210M CPU @ 2.50GHz x2

.png

Screenshot from 2020-04-24 21-19-20.png (Size: 53.66 KB / Downloads: 2)

↧

Searching guys with many GPU

April 30, 2020, 12:06 am

≫ Next: Cannot find an OpenCL ICD loader library

≪ Previous: cannot find an opencl icd loader library

Hello friends! I am searching guys with many gpu for cooperation. Please pm me.

p.s. hope i am not breaking rules by this post Smile

↧

Cannot find an OpenCL ICD loader library

April 30, 2020, 3:29 am

≫ Next: Sorting many masks by number of combinations?

≪ Previous: Searching guys with many GPU

OS X El Capitan

CPU: 2.5 GHz Intel Core i5
GPU: Intel HD Graphics 4000 1536 MB

I'm using Hashcat on Tails (Linux)

Processor: Intel Core i5-3210M CPU @ 2.50GHz x2
Graphics: Intel Ivybridge Mobile

Cannot find an OpenCL ICD loader library

↧