hashcat Forum - All Forums

how to use hashcat

Wed, 22 May 2013 13:35:13 +0000

Hi Members & Staff

I am totally new with hashcat i have Kali Linux as operating system which have hashcat already installed in it.

1) What Hashcat do?
2) How to use it?

I have good knowledge of aircrack-ng and other stuff but hashcat is totally new for me please advice

Thank You

ERROR: clGetPlatformIDs() -1001

Wed, 22 May 2013 09:21:22 +0000

hi every one
i have an error in oclHashcat-plus32.exe

i use from hashcat on desktop pc with windows 7 and i have a ati radeon 6870 graphic card and i install catalyst 13.5

but when i run oclHashcat-plus32.exe and enter this command :

Code:

C:\hashcat\oclHashcat-plus>oclHashcat-plus32.exe -m 2500 -a 3 capture.hccap ?u?u

?u?u?u?u?u?u

i see this error :

Code:

ERROR: clGetPlatformIDs() -1001

i cant find any solution for windows desktop station

what can i do ?
plz help me

and im sry for my bad language
im iranian and my lang is persian
im so sorry

Same hashes different results

Wed, 22 May 2013 09:07:42 +0000

Hi, I'm looking into MSSQL 2005 hashes.

I've run hashcat on my workstation cpu previously and everything seemed to work fine. Today I started with Hashcat-plus (cudaHashcat-plus64 0.14.7z to be precise) running on an Amazon EC2 Cluster GPU instance.

I've been using 2 hashes for testing purposes that both result in a 5 character result. The weird thing is that every other time (literally 2 out of 4 runs) I run the command the result changes between Exhausted and Cracked.

Same hashes, same command:
-a 3 -m 132 -1 ?l?u?d ?1?1?1?1?1

The results are both lower case alpha characters only. And although the success rate seems to be somewhat higher when I run with just ?l instead of ?l?u?d it still returns exhausted 1 out of 5 times.

What could this possibly be? What could I try to fix this?

(VM) .kernel not found in cache

Wed, 22 May 2013 03:44:41 +0000

Running oclHashcat-plus and getting an error message:

oclHashcat-plus v0.14 by atom starting...

Hashes: 1 total, 1 unique salts, 1 unique digests
Bitmaps: 8 bits, 256 entries, 0x000000ff mask, 1024 bytes
Workload: 16 loops, 2 accel
Watchdog: Temperature abort trigger set to 90c
Watchdog: Temperature retain trigger set to 80c
Device #1: Pitcairn, 1871MB, 1100Mhz, 20MCU
Device #2: Pitcairn, 1883MB, 1100Mhz, 20MCU
Device #1: Kernel ./kernels/4098/m1800.Pitcairn_1084.4_1084.4 (VM).kernel not found in cache! Building may take a while...
ERROR: ./kernels/4098/m1800.VLIW1.llvmir: No such file or directory

I dug around and found Trac ticket #128 which referenced a similar problem for which an update was issued: "Status changed from new to closed fixed in b8, thanks for reporting!"

So does this look like something I'm doing wrong?

Does anyone have an idea how to remedy this issue?

Thanks in advance, any help is greatly appreciated!

Specs:

Ubuntu 12.04.2 LTS (3.5.0-27-generic #46~precise1-Ubuntu SMP x86_64 GNU/Linux)

amd-driver-installer-catalyst-13.1-linux-x86.x86_64

clinfo:

GPU #1 : AMD 7870 GHZ Edition
Name: Pitcairn
Vendor: Advanced Micro Devices, Inc.
Device OpenCL C version: OpenCL C 1.2
Driver version: 1084.4 (VM)

GPU #2 : AMD 7870 GHZ Edition

Name: Pitcairn
Vendor: Advanced Micro Devices, Inc.
Device OpenCL C version: OpenCL C 1.2
Driver version: 1084.4 (VM)

CPU: AMD FX-6100

Name: AMD FX™-6100 Six-Core
Vendor: AuthenticAMD
Device OpenCL C version: OpenCL C 1.2
Driver version: 1084.4 (sse2,avx,fma4)
Profile: FULL_PROFILE
Version: OpenCL 1.2 AMD-APP (1084.4)

install oclhashcat-plus on windows

Tue, 21 May 2013 23:35:08 +0000

Hey guys, i wanna install hashcat on windows, but it's not working i think...
i want it to look like this

where can i download this version and how to install? (i know i just have to unzip it but i think somethings wrong)
coz i see this

[spoiler][/spoiler]

TripleDES

Mon, 20 May 2013 18:31:54 +0000

Is any version of hashcat family able to crack TripleDES?
Thank you!

Obtain a Hash from a Excel 2007 file

Sun, 19 May 2013 18:02:51 +0000

Hi there, According to the Microsoft whitepaper the following specs are defined for the Excel password security encryption:

Key derivation is performed using 50,000 iterations[source] of SHA-1 (increased to 100k in SP2).
Uses a 16-byte (128-bit) random salt.
AES is the block cipher used to encrypt the document.
By default, 128-bit key are used. There is a registry tweak to change this to 256-bit.
The AES block cipher is implemented in Microsoft's CSP / CryptoAPI.

This info give me a good point to crack a Excel password, but... I don't find any information or documentation to get the hash from an Excel file.

Anyone knows how get it?

Thanks in advance and sorry for my english

Byebye!

--remove with just one hash?

Sun, 19 May 2013 17:08:27 +0000

Running hashcat-cli64.exe 0.44 with --remove against the last or just one hash seems to not remove it when the password is successfully found.

Shouldn't it remove the last hash, and leave a zero-byte file, instead?

Saving calculated hashes

Sun, 19 May 2013 09:49:01 +0000

Hi!
Is there any option to save calculated hashes from dictionary to another file?
Can i just hash every line from dict and save it?
Im buliding small database with plain:md5:sha1 and hashing it with php would take few years

modified-batchcrack.sh

Sun, 19 May 2013 07:20:08 +0000

same as the batchcrack.sh but I added rules option and all wordlist in the folder instead of just two. I found out today that my rules were not even running right so it all works now in cygwin ..

http://rmccurdy.com/scripts/batchcrack_rmccurdy.sh

http://rmccurdy.com/scripts/fu.txt for examples/help

Here some things/Ideas i want to add:
* auto bin or exe path detect 32 or 64 in windows and *nix auto detect CUDA or OPENCL
* maybe some kind of benchmark test to auto set what rules/wordlist it uses based on hashtype selected and benchmark results ( basically autopwn for OCLhashcat ) maybe set a max time to crack
* import AD password policy tool and automagicly find/remove/use rules based on the AD password policy

anyway im off to bed.. my poor pile of crap video card... thanks all

Code:

Session.Name...: cudaHashcat-plus

Status.........: Running

Rules.Type.....: File (./rules/T0XlC.rule)

Input.Mode.....: File (../Dictionaries/18_in_1.lst)

Hash.Target....: ****************************

Hash.Type......: NTLM

Time.Started...: Sun May 19 02:59:01 2013 (19 mins, 2 secs)

Time.Estimated.: Sun May 19 13:38:43 2013 (10 hours, 20 mins)

Speed.GPU.#1...:   559.7M/s

Recovered......: 0/1 (0.00%) Digests, 0/1 (0.00%) Salts

Progress.......: 635031470080/21335242138320 (2.98%)

Rejected.......: 0/635031470080 (0.00%)

HWMon.GPU.#1...: 99% Util, 70c Temp, 1950rpm Fan

OWNED!
7 char password caps and special chars and a number It’s a 1337 speak password. I see 1337 speak quite often ...almost all the time

Probabilistic number generation

Sat, 18 May 2013 20:58:48 +0000

I had this idea the other day but am wondering how to generate a wordlist/pipe it into hashcat.

Let's say you have a series of hashes, all of which have a 10 digit number as the input. Assuming the numbers are randomly generated, the probability of a single digit being 0-9 is 1/10. The probability of two of the same digits next to each other is 1/100, 3 digits is 1/1i000, and so on.

I first though permute could do this. While it generates all the permutations of 1234567890 just fine, there are duplicates when repeating one of the numbers(eg. 1224567890). If all 90+1 permutations for no repeating digits+1 repeating digits are calculated, that's 3.3 billion, clearly far too many duplicates.

My question is basically, any way to generate numbers where the least repeated digits are generated first?

oclHashcat-lite-0.15 AMD 7800 windows won't start

Sat, 18 May 2013 15:25:24 +0000

Windows 7-64 bit home edition AMD HD 7800
Catalyst version 13.1
Directx 11
Direct 3D version 9.14.10.0945
Driver packaging version 9.012 - 121219a - 151592C-ATI
2D Driver version 8.01.01.1278
OpenGL version 6.14.10.12002
using Hashcat 0.15 only catalyst 13.1 because it's says that is only correct option.

Before i used 0.10 with success but this time after upgrading catalyst and using newer catalyst, program starts but nothing happens (see attachment) - no temperature of GPU rising in speedfan. Cannot use 0.10 because program said that is too old.
Use before core fusion to deinstall drivers (don't uninstall all because i need premium version -do i uninstall all that are necessary? ). Maybe i don't maintain the program correctly? I mean in version 0.10 after I wrote command line program started automatically with few options to use. Please help!

problem1.png (Size: 316 KB / Downloads: 12)

hashcat VS oclHashcat-plus VS oclHashcat-lite

Fri, 17 May 2013 18:31:11 +0000

What's the difference between these three software?

oclHashcat-plus cracks TrueCrypt

Fri, 17 May 2013 12:56:03 +0000

Hey Guys,

I've some good news! I've justed finished a working oclHashcat-plus version to support cracking TrueCrypt

Everything is written 100% on GPU.

There is no copy overhead to the host, thus your CPU will stay cool at 0% and you can do whatever you want to do with it.

Current implementation is able to crack all the supported hashes:

RipeMD160
SHA512
Whirlpool

So far for the hashes (and thats what makes cracking TrueCrypt slow).

For the ciphers, I'm currently doing only AES and of course the XTS block-cipher.

Serpent and Twofish and there cascaded modes will be added next.

Quote:
root@sf:~/oclHashcat# ./oclHashcat-plus64.bin -m 6211 test.tc -a 3 ?l?l?l?l?lat -n 32 -u 2000
oclHashcat-plus v0.15 by atom starting...

Hashes: 1 total, 1 unique salts, 1 unique digests
Bitmaps: 8 bits, 256 entries, 0x000000ff mask, 1024 bytes
Workload: 1999 loops, 32 accel
Watchdog: Temperature abort trigger set to 90c
Watchdog: Temperature retain trigger set to 80c
Device #1: Cayman, 1024MB, 830Mhz, 24MCU
Device #2: Cayman, 1024MB, 830Mhz, 24MCU
Device #3: Cayman, 1024MB, 830Mhz, 24MCU
Device #4: Cayman, 1024MB, 830Mhz, 24MCU
Device #1: Kernel ./kernels/4098/m6211.Cayman_1124.2_1124.2.kernel (480220 bytes)
Device #1: Kernel ./kernels/4098/markov_le_plus.Cayman_1124.2_1124.2.kernel (145332 bytes)
Device #2: Kernel ./kernels/4098/m6211.Cayman_1124.2_1124.2.kernel (480220 bytes)
Device #2: Kernel ./kernels/4098/markov_le_plus.Cayman_1124.2_1124.2.kernel (145332 bytes)
Device #3: Kernel ./kernels/4098/m6211.Cayman_1124.2_1124.2.kernel (480220 bytes)
Device #3: Kernel ./kernels/4098/markov_le_plus.Cayman_1124.2_1124.2.kernel (145332 bytes)
Device #4: Kernel ./kernels/4098/m6211.Cayman_1124.2_1124.2.kernel (480220 bytes)
Device #4: Kernel ./kernels/4098/markov_le_plus.Cayman_1124.2_1124.2.kernel (145332 bytes)

test.tc:hashcat

Session.Name...: oclHashcat-plus
Status.........: Cracked
Input.Mode.....: Mask (?l?l?l?l?lat)
Hash.Target....: File (test.tc)
Hash.Type......: TrueCrypt 5.0+ / PBKDF2-HMAC-RipeMD160 / AES
Time.Started...: Fri May 17 14:27:40 2013 (40 secs)
Speed.GPU.#1...: 55788 H/s
Speed.GPU.#2...: 55775 H/s
Speed.GPU.#3...: 55795 H/s
Speed.GPU.#4...: 55797 H/s
Speed.GPU.#*...: 223.2 kH/s
Recovered......: 1/1 (100.00%) Digests, 1/1 (100.00%) Salts
Progress.......: 8749056/11881376 (73.64%)
Rejected.......: 0/8749056 (0.00%)
HWMon.GPU.#1...: 99% Util, 55c Temp, 29% Fan
HWMon.GPU.#2...: 99% Util, 57c Temp, N/A Fan
HWMon.GPU.#3...: 99% Util, 55c Temp, 29% Fan
HWMon.GPU.#4...: 99% Util, 57c Temp, N/A Fan

Started: Fri May 17 14:27:40 2013
Stopped: Fri May 17 14:28:23 2013

Here are some speeds from 2x hd6990:

PBKDF2-HMAC-RipeMD160 / AES: 223 kHash/s
PBKDF2-HMAC-SHA512 / AES: 95 kHash/s
PBKDF2-HMAC-Whirlpool / AES: 49 kHash/s *updated*
PBKDF2-HMAC-RipeMD160 boot-mode / AES: 451 kHash/s

These tests show oclHashcat-plus is new worlds fastest TrueCrypt cracker

While I was implementing the Whirlpool hash I found out how this hash can be optimized by over 50% in raw mode. However, some of these technique can also be used within an PBKDF2-HMAC construct.

PS: I'll explain the technique at my talk on passwordscon 2013 in Las Vegas.

Stay tuned for v0.15 release

--
atom

Feature request

Fri, 17 May 2013 08:37:09 +0000

Hi,
I'm cracking network unlock code of my phone.
I read hashcat's mannual and did not find where to customize the process that matches my requirements.
Do you have any ideas? Or is there a SDK?

For reference, it's verification is like this:
// those are predefined
char salt[20];
char expected[32];
// result hash
char hash[32];
// user input, numberic only
char code[?];
char buffer[64];

// 1st round
len = strlen(code);
memcpy(buffer, code, len);
memcpy(buffer + len, salt, 20);
SHA256_Transform(buffer, len + 20, hash); // output result into hash
// left rounds
for (i = 0; i < 9; i++) {
SHA256_Transform(hash, 32, hash);
}
//
if (!memcmp(expected, hash, 32))
passed();

VCL, a few questions

Thu, 16 May 2013 16:53:14 +0000

Hi guys, I want to get together a group of PCs with several GPUs each, I've a couple of questions.

1) What's the real world difference between cracking with or without Inifiniband? Which percentage of cracking power do you lose if you use gigabit ethernet cables vs using Infiniband? Is it dependant on the hash cracked?

2) Does the VCL/oclHashcat-plus combo supports computers with different GPUs models or do they need to be the exact same chip?

3) Is the PCI-e port speed important? Some motherboards have the GPUs connected via a cable, that goes to the 1x PCI-e port. For bitcoin mining, that's allright. Would I lose any speed when hash cracking?

Thanks guys!

NetNTLMv1 format

Thu, 16 May 2013 03:01:57 +0000

Hi. I was trying to crack a NetNTLMv1 hash and tried a lot of different hash formats but was not able to find the right one. I have tried the following:

Hash:Salt
Salt:Hash
$NETNTLM$salt:hash
$NETNTLM$hash:salt
$NETNTLM$salt$hash
$NETNTLM$hash$salt

I always get either a line-lenght exception error, a salt-length exception error or seperator unmatched. Can someone post a valid line that I can put in my hash file with the corresponding password so that I can check that everything is working (Not a "real" hash so that no one gets in trouble). Thanks.

EDIT: by salt I mean the challenge, of course.

Brute Force / Mask

Wed, 15 May 2013 14:41:25 +0000

How do I go about performing a brute / mask attack on a vbulletin hash with one thread that and it tries every password that is from 5 characters to 10 characters long and uses numbers, letters and symbols ?

How can I get status from hashcat for using other program?

Mon, 13 May 2013 05:03:50 +0000

Hi,

I trying to get status from oclHashcat-lite like speed, percentage and more to do GUI, I have been search and looking for answer like read .restore but it not good answer. Tried to use:

Code:

[DllImport("user32.dll")]

public static extern IntPtr PostMessage(IntPtr hWnd, IntPtr Msg, IntPtr wParam, IntPtr lParam);

to pass 's' character to program but not good as well.
Is any here can help me? I have been spent 2 days to try to do this thing

oclHashcat-plus throws an error?!

Sat, 11 May 2013 21:00:39 +0000

Hello I am a newbie in hash cracking and I usually use hashcat for cracking but since I have a GPU I thought to give oclHashcat-plus a try and see how it goes , but unfortunately it throws an error:

Code:

Hashes: 3807 total, 1 unique salts, 3542 unique digests

Bitmaps: 15 bits, 32768 entries, 0x00007fff mask, 131072 bytes

Rules: 78

Workload: 256 loops, 80 accel

Watchdog: Temperature abort trigger set to 90c

Watchdog: Temperature retain trigger set to 80c

Device #1: GeForce 8800 GTS, 320MB, 1450Mhz, 12MCU

ERROR: cuCtxCreate() 2

Any ideas why this occured ?!
GPU driver : 314.22
thanks for the help.
P.S I have a 32 bit windows 7 system