Questions tagged [hashcat]
Hashcat is a program designed to brute force hashes, and is commonly used to crack passwords.
156
questions
1
vote
1
answer
250
views
John the Ripper doesn't identify hash
I have a ZIP file of my gallery that contains images and videos which is over 5GB in size. I forgot the password for that ZIP file now I'm trying to crack it to extract files from there. I tried using ...
0
votes
1
answer
144
views
Crack hash with given salt and dictionary [duplicate]
pbkdf2:sha256:600000$m28HtZYwJYMjkhJ5$2d481c9f3fe597390e4c4192f762188bf311e834030a11e069019015fb336c14
This is the format in which I have the hash. I also have a dictionary which consists of the ...
-1
votes
1
answer
227
views
Is there anyway to crack this salted Hash? [closed]
The Task is kind of a CTF task that I was given and I have no idea how to do this.
I had to crack a password on a zipfile and then crack the 3 hashes in the txt file within the zip file. I cracked the ...
- 9
1
vote
0
answers
72
views
Hashcat when account name is "Not a real account" [closed]
Couldn't hashcat be applied to godbolt.org given this file data?
/etc/passwd
ce:x:10240:10240:Not a real account:/app:/bin/bash
/etc/shadow
ce:$1$rockyou$hty8SH9lK4mcCQXKENxaa1:18723:0:99999:7:::
...
- 111
2
votes
1
answer
1k
views
Converting zip2john output to hashcat
I have video files stacked in zip and I forgot the password.
I want to use hashcat, because john will take much longer, but the hash from hash zip2john isn't compatible and I don't know how to convert ...
- 21
1
vote
0
answers
101
views
What's the most simple approach to this wordlist generation and ruleset problem?
This is a password recovery project, which is more complex than just generated a wordlist, since using my tries (see below) it seems to be not enough to just generate a wordlist.
I'm trying to recover ...
- 1,633
1
vote
1
answer
748
views
john the ripper tool - how to combine wordlist with incremental modes?
In hashcat, when we need to crack password based on wordlist, but additionally want to try partly bruteforce random ASCII characters in the end of any entry from the wordlist, we can use the following ...
- 13
1
vote
1
answer
524
views
How secure is HTTP auth digest in 2023
I'm trying to figure out the time needed to crack an HTTP digest auth. According to the RFC2069, the digest in calculated according to this scheme :
HA1 = MD5(username:realm:password)
HA2 = MD5(method:...
- 589
0
votes
0
answers
1k
views
hashcat token length exception
Using pdf2john I get a hash like this:
$pdf$2*3*128*2147483644*1*16*1111111111111111111111111111111111111111111111111111111111111111111111111111111111111111111111111111*32*...
- 153
2
votes
1
answer
3k
views
Crack with Hashcat using hash and salt
I am new to Hashcat and I am trying to crack a password/salt hash. Everything I have tried comes back as "no hash-mode matches..." Any assistance on the correct hashcat command line would ...
3
votes
2
answers
3k
views
How can I identify the salt value used in a password hash?
I'm currently learning about password cracking, and I have a set of passwords with their respective hash values. I used Hashcat to crack the hash values, just to see how it works, but I got different ...
0
votes
1
answer
10k
views
I know hash and salt; how do I use hashcat to decrypt?
hash: 341A451DCF7E552A237D49A63BFBBDF1
salt: 1234
I have a word bank I generated using CeWL that I think I am supposed to use. But when I run
hashcat --force -a 0 -m 0 ...
- 1
0
votes
0
answers
65
views
How to find the correspond hash algorithm? [duplicate]
I'm currently working on a project. but i still facing some issue due to some crypted data. i know the plaintext and got the correspond hash.
plaintext: C018AE45B37DAE665486F4151E0C1E6F
Hash: rROkd+...
- 21
0
votes
1
answer
248
views
Is it possible to use hashcat or john the ripper on a .drmz file?
I have n .drmz files which I can read with Javelin PDF Reader. Obviously to access the content I need a password, which I have, the same for each file.
In case I don't have the password is there a way ...
- 3
1
vote
0
answers
185
views
Hashcat with md5 and Mask
I'm trying to connect to my meter by using some open-source software, all the meter supports the dlms-cosem standard. But the problem is the meter disconnected due to a failed security check.
After ...
- 21
0
votes
0
answers
947
views
Cracking an MD5 password with little info to go off of
I am taking a security class and part of an assignment this week is to crack a given MD5 hash.
All the professor has given us for this task is the hash, the knowledge that the password is 6 or 7 ...
- 1
0
votes
1
answer
473
views
How to use a logical OR in Hashcat rules
I'm currently trying to crack a password-hash in hashcat.
But I'm facing a problem and can't figure out how to solve it.
I have to substitute the same char with a different rule sometimes (something ...
- 1
1
vote
0
answers
42
views
Open Veracrypt container (password+keyfile) without password? [duplicate]
I lost my password for encrypted disk.
Is there a way to do something without dumb cracking?
Maybe recovery mode? Because I just lost 50% of my auth data...?
- 11
1
vote
0
answers
251
views
"john --format=axcrypt" is not returning results
I would like to open a mysterious old file that I found on my Hard Disk, the contents of which I do not know nor can I guess from its name (PB-mp4-rar.axx).
The file was password-protected with the ...
user285664
1
vote
0
answers
443
views
Cracking passwords following rules with John or hashcat
I would like to crack the forgotten password of a very old archive file (rar) with JTR or hashcat.
I remember it was starting with a certain number from a set of numbers e.g.
prefix number from the ...
- 11
2
votes
1
answer
5k
views
kali linux encrypting passwords with yescrypt - how to change?
I'm using John The Ripper for password cracking and adding new users/passwords to test it out. When I create a new user and password, the hash starts with $y$ which is from yescrypt. When testing a ...
1
vote
1
answer
2k
views
John the Ripper method takes so much time to crack the hashcat file
Does John the Ripper method take so much time to crack the password? It's been 3 hours since the process started. No output yet and my PC specs are lower than you think.
Hashcat:
Airtel-My WIFI-BMF422-...
- 11
0
votes
0
answers
610
views
Cracking UTF encoded hash using hashcat
I'm conducting tests using hashcat and find it very difficult if the hash is encoded.
See the below function which takes the plain text, converts that to the bytes, creates the SHA512 hash and then ...
6
votes
3
answers
24k
views
Crack JWT HS256 with hashcat
Is it possible to crack a JSON Web Token (JWT) using HS-256 algorithm with hashcat on a normal PC?
hashcat password.txt -m 16500 -a3
How can I calculate how much time it will take?
JWT first section ...
- 163
2
votes
1
answer
666
views
Cracking password with static prefix and suffix
I found a pattern password generation that works like that:
sha1("very long static prefix text blablabla "+password+" very long static suffix text");
I tried hashcat combined ...
- 21
1
vote
1
answer
2k
views
Using hashcat -s with --increment
I have multiple computers which I am planning to use. They all run a custom-made client that starts hashcat with different args.
I am able to submit the current progress, candidates etc (everything in ...
user277837
7
votes
2
answers
4k
views
Can you use an FPGA with hashcat?
Hashcat lists FPGAs as OpenCL device type in its help.
- [ OpenCL Device Types ] -
# | Device Type
===+=============
1 | CPU
2 | GPU
3 | FPGA, DSP, Co-Processor
Can you really connect and use an ...
- 1,019
1
vote
0
answers
286
views
Need help cracking a MacOS Catalina password
I have found the hashes for the stored passwords on my mac, I do not have the administrator passwords, I do have the hashes coming from the /var folder. I have tried decrypting it using hashcat but it ...
- 11
0
votes
1
answer
1k
views
Hashcat brute force - markov chains
Hashcat uses Markov chains by default when using brute force mode. Do they really speed up the cracking since a randomly generated password normally has the same probability for every combination?
- 1,019
0
votes
0
answers
4k
views
Hashcat:: Token length exception. No hashes loaded
I'm trying to crack a wallet.dat hash from an old file from 2013. I created a hash with bitcoin2john and it is 112 characters. I can't get it to work.
I'm wondering if there is something wrong with my ...
0
votes
0
answers
14
views
How to pipe a character set on hydra [duplicate]
How to pipe a characterset to Hydra.
Something like this which can be done on hashcat
(crunch 8 8 123456789| hashcat -m 0 ce5cff0195a6b059a32411b6202ab49)
8
votes
1
answer
12k
views
With password cracking, what is the fastest known password cracking rig in hashes per second? [closed]
To properly assess password strength, I have been trying to research what the fastest known password cracking rig is in hashes per second.
HashCat claims that their software is the world's fastest, ...
- 285
0
votes
1
answer
342
views
Using John or hashcat when password stub is leaked by weak crypto
I'm pentesting a system (call it X) which uses an internal secret key. Due to weaknesses in the crypto, I can determine:
The SHA1 hash of the key (stored as a checksum)
With high probability, the ...
- 267
4
votes
1
answer
12k
views
hashcat skipping gpu even if it's recognizing the device and the driver is installed
I'm trying to run hashcat on a MacBook Pro.
Running hashcat -I to check the devices' informations yields:
hashcat (v6.2.5-38-g8b61f60e8) starting in backend information mode
OpenCL Info:
============
...
1
vote
1
answer
1k
views
In hashcat, is there a simple way to set the amount of symbols in the password?
For example, I know a password has to have at least 3 symbols, but I don't know where those symbols are. What is the simplest way to specify this when cracking the password with hashcat? The only ...
- 885
1
vote
0
answers
836
views
XMPP authentication bruteforce with hashcat
This question is about how efficient it is to bruteforce SASL authentication in the XMPP protocol.
I read the XMPP SASL authentication steps (stackoverflow link in case the first one breaks), and ...
- 111
2
votes
1
answer
3k
views
Speed up cracking a wpa2.hccapx file in hashcat
I'm trying to do a brute force with Hashcat on windows with a GPU cracking a wpa2.hccapx handshake. Based on my research I know the password is 10 characters, a mix of random lowercase + numbers only
...
- 21
0
votes
0
answers
326
views
What is the difference between 7100, 16700 and 18300 hashcat modes?
Studying how expensive and how long it takes to brute force macOS Catalina and Big Sur passwords (if possible on T2/M1 Macs).
My (likely naive) understanding is that macOS uses PBKDF2-SHA512 to hash ...
- 219
0
votes
0
answers
2k
views
How to benchmark mode with given iterations in hashcat?
I installed hashcat using following:
sudo apt update
sudo apt -y install p7zip-full
curl -O https://hashcat.net/files/hashcat-6.2.3.7z
7z x hashcat-6.2.3.7z
hashcat-6.2.3/hashcat.bin -b
When I run ...
- 219
0
votes
1
answer
680
views
What exactly is this hash that Jack the Ripper and Hashcat use (and also have tools for extracting?) [duplicate]
These tools work based on "hashes", but they seem to not mean that in traditional sense, since they can also extract hashes from a variety of formats like kdbx and zip.
I doubt all these ...
- 171
0
votes
0
answers
17
views
Significant differences in hash cracking speeds? [duplicate]
I'm doing an educational hash research. I generated MD5 hash using online tools and cracked it within a second using Hashcat and certain wordlist (yes, one second). Then I produced a WPA handshake ...
- 684
2
votes
0
answers
24k
views
Can anyone identify the $y$ hash prefix or identify what hash this could be? [closed]
I'm using Kali Linux and trying to crack my own /etc/passwd file with the username "matt". I've unshadowed it however trying to use Hashcat or JohnTheRipper to identify and crack it has ...
- 21
0
votes
0
answers
431
views
How can I add some probable Keywords to hashcat, so I can Brute-Force attack a WPA2 Network faster
I´m trying to brute force attack a WPA2 Network with Hashcat and a wpa2.hccpax file, but when I do it says that it can take 45years to brute force it. So I had the idea that probably the network I´m ...
1
vote
0
answers
2k
views
Hashcat first wordlist then brute force if nothing found
I'm trying to run my hashcat as automated and efficient as possible.
I have a file with NTLM hashes:
607C4CDCDA0EFBF023C4DEA52DF90641
D25ECD13FDDBB542D2E16DA4F9E0333D
AAD063F78DA1183CBD8BD7812FADF9C6
...
- 129
0
votes
1
answer
2k
views
hashcat not allowing increment option
Basically I am trying to bruteforce a MD5 hash in two systems using hashcat. The hash is between 3-8 characters in length. But when I attempt to split the password tries in hashcat, it throws below ...
- 111
1
vote
0
answers
3k
views
How does the WPA2 crack work with Hashcat 22000 format hash lines?
I'm trying to understand the format and functionality of WPA2 hash lines that start with WPA*02* used with -m 22000 on hashcat.
The way I understand it, this format was created as an improvement and ...
- 203
0
votes
1
answer
516
views
How to get Hashcat keyspace for combined princeProcessor plus rule-based attack
I am trying to do something like
pp64 --pw-min=10 words.txt | hashcat -a 0 **--keyspace** -r myRule.txt
but this syntax is incorrect. Is there a way to get the keyspace for this combined attack?
- 3
1
vote
0
answers
1k
views
Dynamic format used in John the Ripper jumbo way slower than MDXFind
I'm currently doing some research on a pretty huge list of hashes (approx. 2 millions) and thus I'd like to improve my cracking speed. The hash format is 12 rounds of SHA512(password + salt), which ...
- 111
1
vote
1
answer
2k
views
In Hashcat, How to generate combinatior attacks consisting of more than two words (in lenght)?
I am trying to make a combinator attack using just one dictionary:
word1
word2
word3
word4
word5
...
And would like to try all 4-words-length permutations separated by commas:
word1,word2,word3,word4
...
- 113
2
votes
1
answer
838
views
Password generation
I'm trying to generate all possible variation of a password.
The base word is like "PleaseSub!" and I need all possible version of it with uppercase, lowercase, etc.. I know there is ...
- 23