Quantcast
Channel: hashcat Forum - All Forums
Viewing all 8118 articles
Browse latest View live

How to crack many WPA2 passwords at the same time?

$
0
0
Hi.

I'm using oclHashcat. I have three passwords for three different WPA2 networks. I was trying to combine them so that oclHashcat can try to crack all of them at the same time, but it doesn't seem to be working. It only picks up the first password in the list and tries to crack it. So it seems that I need to crack each password separately. Is there any way to speed up the cracking of WPA2 passwords and crack them in parallel?

Thanks.

MSCACHEv1 Line-Length Exception when username exceeds 12 Characters

$
0
0
Hi guys,

I'm using oclHashcat-Plus 0.14 hand having trouble when cracking some MSCACHEv1 hashes.

All usernames are converted to lowercase and in the following format:

hash:username(in lowercase)

All hashes with usernames that are 12 characters or less crack fine, using both dictionary and mask attack.

However, I get a Line-Length exception when a hash has a username that is more than 12 characters. For example, I have a file with 3 MSCAHCEv1 hashes. When loading the file into Hashcat, it accepts the 12 character username and cracks it, but rejects the usernames that are 16 and 18 characters long.

Is this a bug or is there something I have not accounted for? I have done a lot of Googling and can't find why this is happening....Unless it is something to do with the salting process, where Hashcat can't handle long usernames.

Any help would be much appreciated.

Medium/large build opinion

$
0
0
I have been asked by my company to design a beefy ass cracking box and could use a second opinion.

I will have a broker box which will dish out the jobs (virtualcl) and a bunch of slaves which should be easily addable in the future.

Broker spec:

Graphics Card 9970 (x3) (When they are released, if they are any good)
Motherboard Gigabyte GA-990FXA-UD7
CPU AMD FX-8150
RAM Corsair CMZ16GX3M2A1866C9 Vengeance
PSU Corsair PSU AX1200

And the workers will just have less ram and a worse CPU as I dont beleive they need it. (currently 1 worker)

To communicate with less latency we are opting towards using infiniband.

Any comments? There is proberly alot wrong with this Wink

Maskprocessor word at position??

$
0
0
Hi is there a way get a mask word by position or range of index.

?u

returns A-Z so instead of

?u -s M

I want to write

?u -s 13

eg

mask[0-10000000]
mask[10000001-20000000]

etc

as far as I can see it is not possible to split a mask via words and still generate all posibilities. or is there?

thank you!

Another Noob Question

$
0
0
I'm running cudaHashcat-plus64 and am having trouble with a hybrid dictionary/mask approach. I've trolled Google for this type of error to no avail. Here's the problem:

[Image: rockyouIsEmpty_zps6fdbdf5a.jpg]

It shows that the rockyou.txt file HAS words in the stats, but then says it's empty. I can replicate this error with any other dictionary I've tried. Is there a rule that I'm missing here? Thanks in advance!

Is cracking WPA/TKIP faster than WPA2/AES?

$
0
0
Hi.

I was wondering whether brute force cracking of TKIP is faster than cracking AES. I have a few networks here that use WPA/TKIP and I'm wondering whether it makes any sense to switch them to WPA2/AES.
Is it worth it? Will it make cracking more difficult?
I'm asking about oclHashcat specifically, since it seems to be the only one that can use GPU to crack WPA and WPA2.

Thanks.

How Do I... ? Base64 not work :(

$
0
0
i have search other thread (base64) on this forum.
i've try to convert base64 to hex and decrypt it with SSHA (-m 1400)
but i get error "line length exception".

and also i've try to encode it with fix length and decrypt with (-m 101 / 111)
Code:
{sha}1wJEB1c+AlEsw0tQZnE=
but still "line length exception"

Other sample encrypted hash :
Code:
EQKiMXo5R1ELVaxgkWw=
TANNLw2B3E5S1DYHrdI=
agNn9ZSd3U4Xl6Wuwg==
/QFcTYTj3U6hb0cP6r0MEpkt
Please help, thanks and sorry for my bad english.

.png  sample.PNG (Size: 44.31 KB / Downloads: 4)

One 7970 running slower than other??

$
0
0
Can anyone help me here. For some reason one of my 7970's is running a lot slower than the other. Example:

[s]tatus [p]ause [r]esume [b]ypass [q]uit => s
Session.Name...: oclHashcat-plus
Status.........: Running
Input.Mode.....: Mask (?d?d?d?d?d?d?d?d)
Hash.Target....: #&#*&*&$** (00:21:29:85:43:97 <-> 48:02:2a:f0:19:9b)
Hash.Type......: WPA/WPA2
Time.Started...: Wed Aug 7 22:17:41 2013 (49 secs)
Time.Estimated.: Wed Aug 7 22:27:35 2013 (9 mins, 2 secs)
Speed.GPU.#1...: 144.3k/s
Speed.GPU.#2...: 43174/s
Speed.GPU.#*...: 187.4k/s
Recovered......: 0/1 (0.00%) Digests, 0/1 (0.00%) Salts
Progress.......: 8396800/100000000 (8.40%)
Rejected.......: 0/8396800 (0.00%)
HWMon.GPU.#1...: 98% Util, 65c Temp, 31% Fan
HWMon.GPU.#2...: 98% Util, 52c Temp, 20% Fan

Number of platforms: 1
Platform Profile: FULL_PROFILE
Platform Version: OpenCL 1.2 AMD-APP (1084.4)
Platform Name: AMD Accelerated Parallel Processing
Platform Vendor: Advanced Micro Devices, Inc.
Platform Extensions: cl_khr_icd cl_amd_event_callback cl_amd_offline_devices


Platform Name: AMD Accelerated Parallel Processing
Number of devices: 3
Device Type: CL_DEVICE_TYPE_GPU
Device ID: 4098
Board name: AMD Radeon HD 7900 Series
Device Topology: PCI[ B#1, D#0, F#0 ]
Max compute units: 32
Max work items dimensions: 3
Max work items[0]: 256
Max work items[1]: 256
Max work items[2]: 256
Max work group size: 256
Preferred vector width char: 4
Preferred vector width short: 2
Preferred vector width int: 1
Preferred vector width long: 1
Preferred vector width float: 1
Preferred vector width double: 1
Native vector width char: 4
Native vector width short: 2
Native vector width int: 1
Native vector width long: 1
Native vector width float: 1
Native vector width double: 1
Max clock frequency: 0Mhz
Address bits: 32
Max memory allocation: 536870912
Image support: Yes
Max number of images read arguments: 128
Max number of images write arguments: 8
Max image 2D width: 16384
Max image 2D height: 16384
Max image 3D width: 2048
Max image 3D height: 2048
Max image 3D depth: 2048
Max samplers within kernel: 16
Max size of kernel argument: 1024
Alignment (bits) of base address: 2048
Minimum alignment (bytes) for any datatype: 128
Single precision floating point capability
Denorms: No
Quiet NaNs: Yes
Round to nearest even: Yes
Round to zero: Yes
Round to +ve and infinity: Yes
IEEE754-2008 fused multiply-add: Yes
Cache type: Read/Write
Cache line size: 64
Cache size: 16384
Global memory size: 2147483648
Constant buffer size: 65536
Max number of constant args: 8
Local memory type: Scratchpad
Local memory size: 32768
Kernel Preferred work group size multiple: 64
Error correction support: 0
Unified memory for Host and Device: 0
Profiling timer resolution: 1
Device endianess: Little
Available: Yes
Compiler available: Yes
Execution capabilities:
Execute OpenCL kernels: Yes
Execute native function: No
Queue properties:
Out-of-Order: No
Profiling : Yes
Platform ID: 0x00007f97dc1e2ee0
Name: Tahiti
Vendor: Advanced Micro Devices, Inc.
Device OpenCL C version: OpenCL C 1.2
Driver version: 1084.4 (VM)
Profile: FULL_PROFILE
Version: OpenCL 1.2 AMD-APP (1084.4)
Extensions: cl_khr_fp64 cl_amd_fp64 cl_khr_global_int32_base_atomics cl_khr_global_int32_extended_atomics cl_khr_local_int32_base_atomics cl_khr_local_int32_extended_atomics cl_khr_int64_base_atomics cl_khr_int64_extended_atomics cl_khr_3d_image_writes cl_khr_byte_addressable_store cl_khr_gl_sharing cl_ext_atomic_counters_32 cl_amd_device_attribute_query cl_amd_vec3 cl_amd_printf cl_amd_media_ops cl_amd_media_ops2 cl_amd_popcnt cl_amd_c1x_atomics


Device Type: CL_DEVICE_TYPE_GPU
Device ID: 4098
Board name: AMD Radeon HD 7900 Series
Device Topology: PCI[ B#2, D#0, F#0 ]
Max compute units: 12
Max work items dimensions: 3
Max work items[0]: 256
Max work items[1]: 256
Max work items[2]: 256
Max work group size: 256
Preferred vector width char: 4
Preferred vector width short: 2
Preferred vector width int: 1
Preferred vector width long: 1
Preferred vector width float: 1
Preferred vector width double: 1
Native vector width char: 4
Native vector width short: 2
Native vector width int: 1
Native vector width long: 1
Native vector width float: 1
Native vector width double: 1
Max clock frequency: 0Mhz
Address bits: 32
Max memory allocation: 536870912
Image support: Yes
Max number of images read arguments: 128
Max number of images write arguments: 8
Max image 2D width: 16384
Max image 2D height: 16384
Max image 3D width: 2048
Max image 3D height: 2048
Max image 3D depth: 2048
Max samplers within kernel: 16
Max size of kernel argument: 1024
Alignment (bits) of base address: 2048
Minimum alignment (bytes) for any datatype: 128
Single precision floating point capability
Denorms: No
Quiet NaNs: Yes
Round to nearest even: Yes
Round to zero: Yes
Round to +ve and infinity: Yes
IEEE754-2008 fused multiply-add: Yes
Cache type: Read/Write
Cache line size: 64
Cache size: 16384
Global memory size: 2147483648
Constant buffer size: 65536
Max number of constant args: 8
Local memory type: Scratchpad
Local memory size: 32768
Kernel Preferred work group size multiple: 64
Error correction support: 0
Unified memory for Host and Device: 0
Profiling timer resolution: 1
Device endianess: Little
Available: Yes
Compiler available: Yes
Execution capabilities:
Execute OpenCL kernels: Yes
Execute native function: No
Queue properties:
Out-of-Order: No
Profiling : Yes
Platform ID: 0x00007f97dc1e2ee0
Name: Tahiti
Vendor: Advanced Micro Devices, Inc.
Device OpenCL C version: OpenCL C 1.2
Driver version: 1084.4 (VM)
Profile: FULL_PROFILE
Version: OpenCL 1.2 AMD-APP (1084.4)
Extensions: cl_khr_fp64 cl_amd_fp64 cl_khr_global_int32_base_atomics cl_khr_global_int32_extended_atomics cl_khr_local_int32_base_atomics cl_khr_local_int32_extended_atomics cl_khr_int64_base_atomics cl_khr_int64_extended_atomics cl_khr_3d_image_writes cl_khr_byte_addressable_store cl_khr_gl_sharing cl_ext_atomic_counters_32 cl_amd_device_attribute_query cl_amd_vec3 cl_amd_printf cl_amd_media_ops cl_amd_media_ops2 cl_amd_popcnt cl_amd_c1x_atomics


Device Type: CL_DEVICE_TYPE_CPU
Device ID: 4098
Board name:
Max compute units: 6
Max work items dimensions: 3
Max work items[0]: 1024
Max work items[1]: 1024
Max work items[2]: 1024
Max work group size: 1024
Preferred vector width char: 16
Preferred vector width short: 8
Preferred vector width int: 4
Preferred vector width long: 2
Preferred vector width float: 8
Preferred vector width double: 4
Native vector width char: 16
Native vector width short: 8
Native vector width int: 4
Native vector width long: 2
Native vector width float: 8
Native vector width double: 4
Max clock frequency: 3300Mhz
Address bits: 64
Max memory allocation: 2147483648
Image support: Yes
Max number of images read arguments: 128
Max number of images write arguments: 8
Max image 2D width: 8192
Max image 2D height: 8192
Max image 3D width: 2048
Max image 3D height: 2048
Max image 3D depth: 2048
Max samplers within kernel: 16
Max size of kernel argument: 4096
Alignment (bits) of base address: 1024
Minimum alignment (bytes) for any datatype: 128
Single precision floating point capability
Denorms: Yes
Quiet NaNs: Yes
Round to nearest even: Yes
Round to zero: Yes
Round to +ve and infinity: Yes
IEEE754-2008 fused multiply-add: Yes
Cache type: Read/Write
Cache line size: 64
Cache size: 16384
Global memory size: 8333320192
Constant buffer size: 65536
Max number of constant args: 8
Local memory type: Global
Local memory size: 32768
Kernel Preferred work group size multiple: 1
Error correction support: 0
Unified memory for Host and Device: 1
Profiling timer resolution: 1
Device endianess: Little
Available: Yes
Compiler available: Yes
Execution capabilities:
Execute OpenCL kernels: Yes
Execute native function: Yes
Queue properties:
Out-of-Order: No
Profiling : Yes
Platform ID: 0x00007f97dc1e2ee0
Name: AMD FX™-6100 Six-Core Processor
Vendor: AuthenticAMD
Device OpenCL C version: OpenCL C 1.2
Driver version: 1084.4 (sse2,avx,fma4)
Profile: FULL_PROFILE
Version: OpenCL 1.2 AMD-APP (1084.4)
Extensions: cl_khr_fp64 cl_amd_fp64 cl_khr_global_int32_base_atomics cl_khr_global_int32_extended_atomics cl_khr_local_int32_base_atomics cl_khr_local_int32_extended_atomics cl_khr_int64_base_atomics cl_khr_int64_extended_atomics cl_khr_3d_image_writes cl_khr_byte_addressable_store cl_khr_gl_sharing cl_ext_device_fission cl_amd_device_attribute_query cl_amd_vec3 cl_amd_printf cl_amd_media_ops cl_amd_media_ops2 cl_amd_popcnt

feature request: new hashtype support SSHA512 (LDAP)

New graphics card

$
0
0
Read some of the threads here but can't seem to get a good grasp on what I should be buying in my price range. Looking to get a card in the $150-$225 range that will be good for gaming as well for Hashcat. I don't crack a ton of hashes but crack enough that buying one that is a good choice for both makes it a strong consideration. Thanks for your time.

Wordlist word spacing

$
0
0
Does hashcat read wordswithoutspaces as one word? And if so how do I separate the words in the huge free word lists you can find online. Thanks in advance

Compare and contrast Passcape's rules

$
0
0
As I've mentioned before, I look at the world of file password recovery software, to get ideas of what else is going on out there, with word lists and rules. Those programs don't have 15 character limitations, and make working with multiple word lists easy, for example. They are also all commerical, and typically Russian.

But, trial versions are usually available, and can be broken out by UniExtract, to just look at the help files, word lists, and rules, if one doesn't want to bother with actually installing them.

A relatively new entry to the field are the Office password recovery programs by Passcape Software, at http://www.passcape.com/office_passwords

They have a john-like language, which I haven't compared to hashcat yet, but while most companies either have just a few sample rules, or a few KoreLogic rules, those Passcape's programs have 100,000 lines of rules. D3ad0ne's V2.1 rules distributed with hashcat have 35,000 lines. The more approachable KoreLogic rules for hashcat have around 200,000 lines while the more exotic, like KoreLogicRulesAppendNumbers_or_Specials_PrependLetter.rule alone has over 1,000,000 (one million) lines.

I'm not going to have the time to compare and contrast Passcape's rules to those known for hashcats, for a while, so am asking here, in case anyone else is interested. (E.g., are these simply a subset of KoreLogic's rules or unrelated? Are D3ad0ne's rules in there, without attribution? Or, are they unrelated? Are they any "good"? Etc.)

Using multiple dictionaries [noob question..]

$
0
0
Hi, I'm new to hashcat but I got hashcat CPU working with HashcatGUI BalndyUK http://www.md5decrypter.co.uk - v0.291 (I've downloaded all the latest files) and now I want to do some GPU instead because it seems to be so much faster than CPU. Well I got like 20-30 dictionaries and with the GUI you can only use two at a time but I figured it out that if you remove the path to the two dictionaries and then write the folder where you have all dictionaries (wordlist/) it will use all of them. This worked fine with hashcat CUP but now when I try with GPU it just gives me a error message "wordlist/: Permission denied". I've copied my wordlist folder and placed it in my hashcat-plus folder.

Code:
oclHashcat-plus64.exe -a 1 -m 0 -p : --session=11171400 --force -o "z:\h-cat\password.txt" --outfile-format=3 --remove --gpu-temp-abort=80 "C:\Users\adam\Desktop\main\Hashes\a2g\a2g -cleaned -1k.txt" "Z:\H-cat\HashcatGUI_0291\oclHashcat-plus-0.14\wordlist\1.txt" wordlist/

CMD
Code:
Hashes: 986 total, 1 unique salts, 986 digests
Bitmpas: 13 bits, 8192 enries, 0x00001fff mask, 32768 bytes
Wordload: 256, 80 accel
Watchdog: Temperature abort trigger set to 80c
Watchdog: Temperature retaiun trigger set to 80c
Device #1: Tahiti, 3072MB, 800Mhz, 28MCU
Device #1: Kernel ./kernels/4098/m0000/_a1.Tahiti_844.4_CAL 1.4.1648 (VM).kernel
(323116 bytes)

wordlist/: Permission denied

Z:\H-cat\HascatGUI_0291\oclHashcat-plus-0.14> ...

Thanks in advance

SHA-256 Problem

$
0
0
Hello,

I am unable to crack hash which includes letters from Latvian language, I am testing letter: ā. In the link are more details, also I included hashes that I generated from websites, some of them are different. Maybe there is another way to run hashcat or I am just doing something wrong?

Thank you.


Code:
The word is: testā
SHA256: a048ff102912622f75e5c8543445764b94332c1144da7f18d9ffaf369b8c99c84

Code:
http://www.kreativekorp.com/charset/encoding.php?file=cp775.kte&char=83

cmd
Code:
hashcat-cli32.exe --hash-mode 1400 --attack-mode 3 --pw-min 5 --pw-max 5 --outfile crack.txt --custom-charset1 testā hash.txt ?1?1?1?1?1

hash.txt
Code:
http://www.insidepro.com/hashes.php
3cfe55fa45e09f07b800aaefc4aa2ca114fc52749dd4477e14c9594f93449626
8f7bfb9ce7e775ecdc51caced33faeebc6396dda38dfd0ef1843145475ae9093
https://quickhash.com/
0cae07af68af90dc6493a8acf700a2c4f9fa6d5f5aafbb2bd01e31f897c6935c
http://www.hashgenerator.de/
a048ff102912622f75e5c8543445764b94332c1144da7f18d9ffaf369b8c99c8
http://www.xorbin.com/tools/sha256-hash-calculator
a048ff102912622f75e5c8543445764b94332c1144da7f18d9ffaf369b8c99c8

Update rules.txt with changes.txt

$
0
0
In the \docs directory, the rules.txt file needs to have the changes from changes.txt factored in.

-1% utilization issue with cudahashcat

$
0
0
I've been looking around to see if anyone else is having the same issue as me for a while now with no success. Im running Ubuntu 12.04 with 2 geforce 9500 gts and when I run cudahashcat on a EPA my gpus are showing a -1% utilization. I checked tuner my nvidia settings and seen that one gpu is running at 20% and the other at 2%. Why is it showing -1% and only cracking at a combined speed of 3400/s?

OS GPU compatibility

$
0
0
Currently my linux box (Ubuntu 12.04) is having some major issues. It is crashing regularly, I think it is a hardware issue, (Maybe bad RAM?) but I have also learned to hate Ubuntu.

Another problem I am having is that OclHashcat crashes when I try to use Device #2, and I dont know how to fix that.

Next plan is to nuke the system, take a look at the internals and install a new OS. I am thinking Kali, but need to do more research, the google machine can only tell me so much. So I ask the forum: What OS would work the best with a 2x 7970 HD Radeon setup?

Are there any specific rules for installing the AMD catalyst drivers?

HP DL380 G7

$
0
0
Hi all!

I'm looking to convert an old Server into a password-cracking box for internal benchmarking and compliance checking. For this, I have a HP DL380 G7 with approximately 200GB of available RAM at my disposal. What I'd like to do is throw in a Graphics Card or two. However, I have no idea what to purchase - does anyone have any suggestions? I have £1500-£2000 to throw at it.

I'd love to hear your suggestions!

Thanks all!


David.

Noob Question

$
0
0
Hi guys,

I would like to know, if you can help me with some questions:
I want to buy a Tyan B7059F77AV6R-2T, and I will wait for 9970 release and I want to add 8 to this barebone.
Until here no problem, but, I would like to know the impact of memory and processor, on this other tasks:
1) Wordlist - load, generate, sort, merge, etc;
2) Rules - with a0, a1, including the big ones;
3) Hybrid attack - (a6 / a7);
4) Hashcat-utils, maskprocessor, etc.
5) Rainbow Tables - load, generate, index, etc (ok, I know this forum do not have this focus, but, you guys have a lot of hardware expertise, if you can help, ok, if not, ok too Smile ); Here I will use RAID 6 to Load them;
Thank you very much guys for your time and attention.

P.S: sorry for my bad english.

Veteran's password

$
0
0
An old veteran wants to access save his information from a samsung galaxy tab. The catch is, he had a stroke & cannot remember the password. I thought it possible to mastercode it, but alas this process wipes out everything, setting the device to factory default settings, he won't go for this at all.

Any suggestions and detailed walkthroughs that may work appreciated.


For myself i am currently looking into making a bootable usb. Tips welcome.
Viewing all 8118 articles
Browse latest View live


<script src="https://jsc.adskeeper.com/r/s/rssing.com.1596347.js" async> </script>