[split] [split] oclHashcat v0.26 - not cracking ntlm hashes

[exorcyst]

I've found that if I have multiple hashes in the list, 64-bit .26 won't crack them. If I do one hash at a time they will crack.

There doesn't seem to be a problem with the 32bit version. I'm using NTLM hashes in this case.

<------------->
C:\oclHashcat-0.26>cudaHashcat32.exe -m 1000 -o c.txt
test_hash2.txt 3tx3t.txt 3tx3t.txt
cudaHashcat v0.26 by atom starting...

Digests: 2 entries, 2 unique
Bitmaps: 8 bits, 256 entries, 0x000000ff mask, 1024 bytes
Platform: NVidia compatible platform found
Watchdog: Temperature limit set to 90c
Device #1: GeForce GTX 560 Ti, 993MB, 1645Mhz, 8MCU
Device #2: GeForce GTX 560 Ti, 993MB, 1645Mhz, 8MCU
NOTE: gpu-accel auto-adjusted to: 16
Device #1: Kernel ./kernels/4318/m1000.sm_21.32.cubin
Device #2: Kernel ./kernels/4318/m1000.sm_21.32.cubin
[s]tatus [p]ause [r]esume [q]uit =>
Status.......: Cracked
Hash.Type....: NTLM
Mode.Left....: Dict '3tx3t.txt' (271441)
Mode.Right...: Dict '3tx3t.txt' (271441)
Speed.GPU*...: 457.5M/s
Recovered....: 2/2 Digests, 1/1 Salts
Progress.....: 16777216/73680216481 (0.02%)
Running......: 1 sec
Estimated....: 2 mins, 41 secs
HW.Monitor.#1: 0% GPU, 73c Temp
HW.Monitor.#2: 0% GPU, 65c Temp

Started: Sun Aug 28 11:41:04 2011
Stopped: Sun Aug 28 11:41:05 2011

C:\oclHashcat-0.26\oclHashcat-0.26>cudaHashcat64.exe -m 1000 -o c.txt test_hash2.txt 3tx3t.txt 3tx3t.txt
cudaHashcat v0.26 by atom starting...

Digests: 2 entries, 2 unique
Bitmaps: 8 bits, 256 entries, 0x000000ff mask, 1024 bytes
Platform: NVidia compatible platform found
Watchdog: Temperature limit set to 90c
Device #1: GeForce GTX 560 Ti, 993MB, 1645Mhz, 8MCU
Device #2: GeForce GTX 560 Ti, 993MB, 1645Mhz, 8MCU
NOTE: gpu-accel auto-adjusted to: 16
Device #1: Kernel ./kernels/4318/m1000.sm_21.64.cubin
Device #2: Kernel ./kernels/4318/m1000.sm_21.64.cubin
[s]tatus [p]ause [r]esume [q]uit =>
Status.......: Exhausted
Hash.Type....: NTLM
Mode.Left....: Dict '3tx3t.txt' (271441)
Mode.Right...: Dict '3tx3t.txt' (271441)
Speed.GPU*...: 824.1M/s
Recovered....: 0/2 Digests, 0/1 Salts
Progress.....: 73680216481/73680216481 (100.00%)
Running......: 35 secs
Estimated....: 0 secs
HW.Monitor.#1: 55% GPU, 84c Temp
HW.Monitor.#2: 0% GPU, 72c Temp

Started: Sun Aug 28 11:41:13 2011
Stopped: Sun Aug 28 11:41:48 2011

[atom]

first run looks fine for me. but the 2nd not, however the commands were the same. what do i miss?

[exorcyst]

32 bit vs 64 bit (2nd run)

[exorcyst]

Can you confirm that you see the same problem on your end?

(08-29-2011 05:07 PM)exorcyst Wrote:  32 bit vs 64 bit (2nd run)

[atom]

no,i can not reproduce it. can you please provide test_hash2.txt and 3tx3t.txt? maybe the problem is inside these files.

[exorcyst]

I've enclosed the hashes, the first larger dictionary, the 2 small dictionaries that contain just enough to generate the 2 hashes I created, as well as a log of the 32bit working and the 64 bit failing to identify the hashes with the small dictionaries.

Note I'm using windows, I don't have a linux box running the dual cards. I have to operate using vmware so I run all my linux stuff under vmware and run windows 7 64-bit as the host OS, so I don't have the ability to test the linux version. I downloaded a fresh copy of the 0.26, verified the md5sum against the website and ran the tests again.

I'm using 280.26 drivers with dual gtx 570s

(08-31-2011 09:29 AM)atom Wrote:  no,i can not reproduce it. can you please provide test_hash2.txt and 3tx3t.txt? maybe the problem is inside these files.

[lanjelot]

I have the exact same issue.

Env:
Linux 2.6.32-26-server #48-Ubuntu SMP Wed Nov 24 10:28:32 UTC 2010 x86_64 GNU/Linux
nVidia GTX 460 with nvidia-current 280.13-0ubuntu1~lucid~xup1

[tatgdi]

Hello Atom,

I will attempt to test the issue of multi-hashing with v0.26 using the ati platform(driver 11.7/11.9) on the following algorithms sha1, sha256 and md5 when a dcitionary is not in use on linux using the 64 bit binanry and see if makes a difference. If anybody beats me to it; kindly post the results here.

Based on the information above it appears that the previous user was running a 64 bit version of Windows 7 x64 using Nvidia GPU's.

[atom]

since all regular oclHashcat features will be merged into oclHashcat-plus i will not longer try to debug this issue.

[chort]

I suspect I'm having this issue as well. I knew there was something strange with trying to crack NTLM, but I couldn't isolate the variables. I'll try the 32bit version and see if that makes a difference.