hashcat Forum
Oracle12C format - Printable Version

+- hashcat Forum (https://hashcat.net/forum)
+-- Forum: Deprecated; Previous versions (https://hashcat.net/forum/forum-29.html)
+--- Forum: Old hashcat Support (https://hashcat.net/forum/forum-20.html)
+--- Thread: Oracle12C format (/thread-3531.html)



Oracle12C format - dodo - 07-08-2014

Hi guys,

It's possible to use hashcat to recover password having Oracle 12c sys.user$.spare4 value?


RE: Oracle12C format - philsmd - 07-08-2014

Should work, you just need to follow the hash format ( see: http://hashcat.net/wiki/doku.php?id=example_hashes -m 112 = Oracle ), and maybe this guide too http://hashcat.net/forum/thread-2155.html on how to split the "S:..." part into hashConfusedalt

The format is [hash 40 "chars"]:[hex salt]

Please let us know if that works, maybe we need to rename the format s.t. users understand that -m 112 could crack also Oracle 12 hashes (if true).


RE: Oracle12C format - dodo - 07-09-2014

for example my Oracle format is:
[hash removed by philsmd]
The question is how to split it to hashConfusedalt ?


RE: Oracle12C format - philsmd - 07-09-2014

See here, you are not allowed to post hashes: http://hashcat.net/forum/announcement-2.html

Furthermore, I already gave you the answer you only need the "S:..." (not the second part ";H:...")
split it into a 40 character hash (first 40 chars), add a ":", and the rest is the salt.

There is an example on the wiki: http://hashcat.net/wiki/doku.php?id=example_hashes
-m 112 = Oracle 11g


RE: Oracle12C format - dodo - 07-10-2014

philsmd,Thanks alot for the help, -m 112 also works for me on Oracle 12 hashes
can you please update which hash type should be used for Oracle 10?(using 3DES)
The hash is like as:
ABCDEFGHIJKLMNOP

(-m 3100 is not recognized by hashcat)