Search Results

I'm not aware of an attack tool that will currently do this without at least some external processing (which means reduced speed): hashcat supports the format (-m 22300), but doesn't check for trunca …

The included charset files are based on the default maximum length. You'll need to generate charsets for your target length: john --pot=rockyou.txt --make-charset=alnum62.chr Existing files will be …

First, (unless you're talking about "single crack" mode generally), I'm not sure what you mean by "a reduced wordlist of user information". It sounds like you may be describing a simple wordlist attac …

WPA2 is indeed a slow hash. But in the real world, performance is better than you might suspect: An attacker can leverage multiple GPUs. With hashcat, six GTX 1080s can exhaust ?d?d?d?d?d?d?d?d?d i …

Assuming that the passphrase was randomly generated, the two pieces of information needed to perform the calculation for a fully brute force attack are: Keyspace. This is how many possible combinatio …

You're much better off using the major cracking tools' built-in ability to ingest entire directories. For hashcat, just use a directory name where you would use a filename. Add rules with -r. Assuming …

As of the current version (3.30), hashcat does not currently support truncated hashes beyond the half-MD5 modes. In my discussions with the team, I made the pitch (basically what I wrote here). So f …

I wouldn't bother with varying the length. 15 characters from a 95-character space is probably more than sufficient - and varying the length won't buy you as much as simply increasing the length. Usi …

You've got the right idea - this is a great way to learn. For beginning and intermediate cracking, the best general password lists are actual lists of passwords - those found in leaks with large gene …

For safely dumping the hashes, this Optiv reference outlines a number of methods. The most likely of which for your use case is probably to use ntdsgrab.rb to make a volume shadow copy, and then extra …

Yes, you have to convert the hash into a format that the password-cracking suite is expecting. The best collection of such tools is from the John the Ripper project, and the one that is probably what …

I'm not aware of a way to pass a list of masks to john as a single command (in the way that hashcat allows). The best you can do today is to use the custom placeholder syntax (-1, -2, etc.) just as …

You're 100% right that storing all possible permutations wouldn't scale very well. An efficient way to generate all possible passphrases from a source wordlist "on the fly" (without having to store t …

I don't have a lot of great news for you, but I do have a couple of pointers. On the Intel side, as noted in the output, the Intel OpenCL drivers have a known problem with hashcat that must be resolv …

The answer depends on the "speed" of the target hash: If it's a fast hash (like MD5), Daisetsu is roughly correct - that it's not worth the trouble to worry about it (though it can vary based on att …