Questions tagged [hashcat]

Hashcat is a program designed to brute force hashes, and is commonly used to crack passwords.

Filter by
Sorted by
Tagged with
0
votes
1answer
31 views

Hashcat syntax correction

I've been cracking a box and I came across a password list and another file with the pass configuration. $hash= md5($salt . pass . salt) I have both salts and the password hash. I tried with this ...
1
vote
1answer
42 views

Hashcat mask attack getting error “seperator unmatched”

I'm trying to crack the password Ul1234 using hashcat. I created a user with that password in kali and copied the hash in the shadow folder: nils:$6$3q88Up7LX1RFIlRU$...
0
votes
0answers
77 views

Unable to start hashcat in mode 13600 WinZip : Separator Unmatched

I have a zip file containing a JPEG image of size 3.5 MB, encrypted with AES-256. I used WinZip for the creation of the zip file. In order to create the hash of the zip file, I used John The Ripper's ...
0
votes
2answers
74 views

Improving security by altering size of hash strings [duplicate]

So I was thinking, if people get access somehow to your list of hashes, it's easy for them to figure out what alghoritm you used if they have 32, 40, 60 characters etc But what if you slice those ...
2
votes
0answers
21 views

How can I crack WPA2 hash with some limitations? [duplicate]

I want to crack an 8 character password, but I know this password doesn't contain more than 4 symbols, 4 uppercase letters, 4 lowercase letters and 4 numbers, and it contains at least 2 symbols, 2 ...
5
votes
3answers
828 views

How can I find a SHA-256 hash with a given suffix using hashcat?

Recently we competed in the X-MAS 2019 CTF and many of the challenges included a proof of work (PoW) check to avoid Denial of Service (DoS) attacks against their servers. The most common was we were ...
0
votes
0answers
55 views

Determining the hash type I am working with for use in hashcat

I am trying to crack some hashed information because the passcode was lost to us. I have the hashed information in the database, and the code that was used to encrypt it. It goes through cryptastic ...
-4
votes
1answer
238 views

How to use hashcat to crack a password made with openssl-passwd? [closed]

I want use hashcat or John the Ripper to crack the hash of a password. I know the password was created using the following command: openssl passwd -crypt -salt tl ******** The asterisks, of course, ...
2
votes
1answer
263 views

new format of keepass (2) database file and hashcat

I created test DB file (.kdbx) using KeePassX, after that used keepass2john Python port from this site, but changed line 88: index += 2 to index += 4 because the size of this field is 4 bytes ...
1
vote
1answer
95 views

Hashcat to mask recover variable length password with known suffix

I'm struggling with creating a mask to brute-force using Hashcat a password of variable length, but with a known suffix. Say the known suffix is 123$ but the variable-length "prefix" can contain ...
0
votes
1answer
87 views

Hashcat custom mask - brute force 12 length passwords with 1 capital letter, 1 number and 10 lowercase letters

I need to use brute force to crack the password. I know about the password that it has exactly 1 capital letter (A-Z), exacly 1 number (1-9) and exacly 10 lowercase letters (from a to z). I have ...
-1
votes
1answer
49 views

Is it beneficial to know the first char of a wpa2 hash [duplicate]

All I will need to check is AAAAAAAA - AZZZZZZZ. So I will only have to check the A's but will checking the A's be faster knowing the first char , I can't see why it would be as it would have to ...
1
vote
1answer
345 views

How long to crack an 8 character WPA2 hash if first char is known

I know the first char is A and it's all upper alphanumeric. Is there a way to estimate how long a mid level single GPU using hashcat would take to crack it?
3
votes
1answer
917 views

Combined-Dictionary attack with hashcat, for 4 words passphrases?

Reading the new advice on password which seems to spead easily (at least in my workplace), I was wondering how to use hashcat for cracking four-word password hashes? Say I have this hash ...
0
votes
1answer
117 views

XVWA PBKDF2 with sha256 and 1000 iteration

In XVWA (Xtreme Vulnerable Web Application) I presented with an PBKDF2 with sha256 and 1000 iteration as such: <?php function create_hash($password) { // format: algorithm:iterations:salt:...
0
votes
1answer
69 views

Can't figure out input format for Hashcat salts with odd characters in salt

I have passwords that are stored by: Generating a random, 36-character "string" in the range of CHAR(1) to CHAR(256) Appending this to the entered password Retrieving the SHA512 hash of the result ...
0
votes
1answer
2k views

Estimating Password Cracking Speed Based on GPU?

I was wondering if there was a calculator or formula I could use to find a rough estimation of the time it takes to crack hashes based on GPU. I am trying to assess how much performance I would lose/...
63
votes
1answer
14k views

I found a password with hashcat, but it doesn't work

My assignment required me to find the password for a PowerPoint file (97 - 2003, v. 8.0 - v. 11.0). I used office2john.py to retrieve the hash, and I removed the file name. The hash is: $...
0
votes
1answer
101 views

Can we implement custom algorithms to encode and decode wifi password hashes between Windows 10 and our Router?

Windows 10 has its own way of encrypting hashes, but these can be brute-forced by hashcat. One of our students created 2 of his own password encryption algorithms in python (One for encode, one for ...
0
votes
1answer
251 views

Limiting the number of duplicate character types in crunch

I'm trying to generate a password list of 10 character passwords containing only a combination of 3 - 6 numbers and 3 - 6 uppercase letters. I see option -d which allows a set limit of duplicates of ...
0
votes
1answer
461 views

Iterated salted sha256 hashes hashcat

I have a hash which was generated by concatenating a password to a salt, then repeating hashing 10000 times. The description for salted sha256 in the output of hashcat -h is 1410 | sha256($pass.$...
1
vote
1answer
2k views

Hashcat - separator unmatched running pmkid 16800 crack

I'm working on cracking a pmkid file. I have collected pcap file using bettercap. Then convert using this: hcxpcaptool -z bettercap-wifi-handshakes.pcap.pmkid bettercap-wifi-handshakes.pcap They ...
1
vote
1answer
2k views

Advice to help crack MD5crypt hash

I've been given a homework task to crack a particularly difficult password on a Unix system. I have found users and hashes in the etc/shadow file and cracked all but this one: $1$TyPfW4pp$...
0
votes
1answer
379 views

Benchmark Password Cracking Tools

I want to perform a benchmark for the most popular offline password cracking tools (john the ripper and hashcat)? What metrics or approach should i take about benchmarking in order to determine what ...
0
votes
1answer
3k views

hashcat - cracking a salted sha256

Given a SHA512 hash, a salt, and username I am trying to crack the hash using hashcat. Every example I've found used a hashfile as input, is there way to provide salt and hash via commandline without ...
1
vote
1answer
86 views

Multicore hacker tools?

Have a school project coming up in multicore programming. I'm interested in/have used hacking tools alot before, and was wondering if there were any good tools out there that could benefit from being ...
1
vote
1answer
207 views

Hashcat Mask Help

I'm wondering on how to run hashcat against wpa2 passwords that are in the following format: common dictionary word . three digits . common dictionary word Password Example: falcon.824.watchman Is ...
1
vote
1answer
2k views

hashcat specify number of characters

I am trying to figure out a macOS hash 10.8+ and I happen to know that it uses A-Z, a-z, 0-9, is 6-8 characters, and almost certainly random. Currently, it spits out an error regarding hash length ...
1
vote
1answer
87 views

Recover SHA1-encoded email addresses

Say you have a list of SHA1 hashes which are all encoded with the same salt. All of these are email addresses and you know at least one combination of hash and email address. Is it possible to use a ...
3
votes
1answer
5k views

Using hashcat in order to crack the JWT signature in WebGoat

I've recently started to practice my penetration testing skills and I got started with WebGoat. I got to the "Authentication Bypass" chapter, to the JWT Token cracking. WebGoat presents this JWT ...
0
votes
1answer
343 views

Using hashcat for collision attack [closed]

Whenever i tried generate √N randomly(possible combinations of password length), i always find few collisons of the hash password no matter the length, if the password was made of entirely random ...
0
votes
1answer
929 views

Brute force MD5 with a prefix and suffix up to n characters/words

I have a couple of things I would like to explore with hashcat. I have a MD5 hashed password, which I know for a fact has a prefix and a suffix. The actual password is located in the middle of the ...
1
vote
1answer
433 views

Hashcat bruteforce define digit range form and to

I know this password is between 90,000,000 and 500,000,000 how can I tell hashcat to bruteforce exactly in that range? I mean starting from 90,000,000 and ending at 500,000,000 I go the password ...
0
votes
0answers
409 views

How to mask attack a sha256 hash with following information using hashcat?

I am hashcat newbie and I want to crack a hash :) The answer is 1-15 (unknown) characters and it may contain 'a-z' 'A-Z' '0-9' and '_' . (A Twitter username) How may I mask attack a hash with above ...
3
votes
1answer
810 views

Hashcat: How to discard words of length less than N after rules have been applied?

Hashcat: How to discard words of length less than N after rules have been applied? I know of the rules <N and >N that discards the word if its length is less than and greater than N, ...
1
vote
3answers
9k views

Hashcat doesn’t write to output file [closed]

I am using hashcat to crack a list of md5 hashes and have used the following command hashcat -m 0 -a 0 -o out.txt --force hashdump.txt ../rockyou.txt which gives the output Session..........: ...
2
votes
1answer
848 views

hashcat specific brute force

Is this scenario possible: I know the first three letters of the password (exact), i know the password is between 10-14 characters, i know the rest of the characters are "b,t,p,1,3,6,7" which can be ...
-1
votes
1answer
226 views

Where can i find a pre-computed 8 caracter uppercase password file/dictionary

To create an all permutations dictionary of an 8 character uppercase only password, I get I can use crunch to make this wordlist and file would roughly be 1.8 - 2Tb in size. Is there anywhere I can ...
9
votes
1answer
1k views

Mitigating the new attack on WPA2 involving PMKID

A new attack was discovered which allows cracking a WPA2 passphrase without needing to capture the 4-way handshake. While this doesn't weaken the password itself, it does mean that an attacker can ...
2
votes
3answers
9k views

Is it possible to crack any SHA1 hashed password

I'm trying to understand how easy it is to crack a SHA1 hashed password. I have a training database giving hundreds of password hashed. I have tried to use some online tools to crack them and I have ...
0
votes
1answer
734 views

How to configure hashcat to only hash fixed length passwords with N digits?

I know of mask and dictionary attacks. Using a mask attack, I specify the charset for each position in the password pattern, e.g., ?1?1?d?1?d?1?1?d, where ?1 := ?l?u?s. But how do I tell hashcat to ...
1
vote
1answer
2k views

How to crack forgotton KeePass password when knowing most of the password

A few days ago I changed my KeePass password and forgot it unfortunately. It isn't that much different from the previous one, but I kept trying and trying and it says it's incorrect I found https://...
0
votes
1answer
1k views

Which hashcat hash mode is closest to that used by BitLocker?

I'm trying to get a hypothetical benchmark for the BitLocker hash mode if Hashcat would support it. Which (-m) mode is closest to BitLocker's latest/default algorithm? From Google searches I learned ...
1
vote
1answer
437 views

Cracking Salted Peoplesoft Hashes

So I felt the saga of my last post was getting too long (linked here: Unknown round length makes hash uncrackable?) so I would create a new one addressing the current problem as it stands. My new ...
1
vote
1answer
9k views

hashcat - is there a way to set minimum password length?

Let's say I have a couple of hashes that I need to bruteforce as dictionary attack didn't work. Is there a way I can tell hashcat to start from a specific password length so it won't waste resources ...
1
vote
1answer
476 views

Unknown round length makes hash uncrackable?

So I am on an engagement and grabbed some hashes but cracking them has come to no avail. I believe I know the hash type (PBKDF2-HMAC-SHA256) but I am not sure what round size they used. This got me ...
0
votes
2answers
5k views

Cracking passwords via hashcat or rainbow tables. Which is faster?

This is more of a theoretical rather than a practical question. To give a bit of background, the discussion at work has come up with what to set our password complexity to and what the logistics would ...
3
votes
1answer
2k views

How is it that tools like Hashcat, JTR able to bruteforce an NTLMv2 hashes?

With regards to the following question about the feasibility of (brute|dictionary|rainbowtable)-forcing an NTLMv2 hash: How feasible is it for an attacker to brute-force an NTLMv2 response captured ...
4
votes
1answer
2k views

Why won't pdf2john extract the password hash of this encrypted pdf? Getting blank results

New to the community, and to JtR and Hashcat as a whole, but after searching for a few days I couldn't find a solution to this specific problem. I have a password protected PDF file that I'm trying ...
2
votes
1answer
1k views

Recover password that contains known phrase

I want to recover a long password with hashcat. The password contains a phrase and between the words are special character sequences. These sequences are limited (< 4) and unknown. But the set of ...