NetNTLMv1 Hashes not parsing

[fuzztester]

Good morning!

I recently captured netntlmv1 hashes from an engagement I'm on and they are not being parsed by hashcat. I remember doing this in the past, so i'm not sure what happened.

I also tried using the example hashes on from the wiki and those too are not being parsed. Here's output from the wiki and a test hash i captured.

Code:

hashcat () starting...

OpenCL Platform #1: Apple
=========================
* Device #1: Intel(R) Core(TM) i7-4870HQ CPU @ 2.50GHz, skipped
* Device #2: Iris Pro, 384/1536 MB allocatable, 40MCU
* Device #3: AMD Radeon R9 M370X Compute Engine, 512/2048 MB allocatable, 10MCU

Hashfile 'netntlmv1-test.txt' on line 1 (u4-netntlm::kNS:338d08f8e26de93300000000000000000000000000000000:9526fb8c23a90751cdd619b6cea564742e1e4bf33006ba41:cb8086049ec4736c ): Salt-length exception
Hashfile 'netntlmv1-test.txt' on line 2 (bob::::236696db60af0ffddd599edc72768f484b67513440fe9145:7cf8afb4c3b35baec23a90751cdd619b6cea564742e1e4bf33006ba41:cb8086049ec4736c ): Salt-length exception
Parsing Hashes: 0/2 (0.00%)...No hashes loaded

Started: Tue Nov  1 08:17:15 2016
Stopped: Tue Nov  1 08:17:15 2016

I realize that my test hash is missing some of the data from the example hash on the wiki, but it does crack in JtR. I'd prefer to use hashcat as it will run much faster.

[fuzztester]

Hashcat 2.0 this did work:

Code:

./hashcat-cli64.app -m 5500 netntlmv1.txt -a 3 ?a?a?a
Initializing hashcat v2.00 with 8 threads and 32mb segment-size...

Added hashes from file netntlmv1.txt: 2 (2 salts)

BOB::::236696db60af0ffddd599edc72768f484b67513440fe9145:7cf8afb4c3b35bae:bob
[s]tatus [p]ause [r]esume [b]ypass [q]uit =>

Input.Mode: Mask (?a?a?a) [3]
Index.....: 0/1 (segment), 857375 (words), 0 (bytes)
Recovered.: 1/2 hashes, 1/2 salts
Speed/sec.: - plains, - words
Progress..: 857375/857375 (100.00%)
Running...: --:--:--:--
Estimated.: --:--:--:--


Started: Tue Nov  1 08:52:19 2016            
Stopped: Tue Nov  1 08:52:20 2016

Good morning!

I recently captured netntlmv1 hashes from an engagement I'm on and they are not being parsed by hashcat. I remember doing this in the past, so i'm not sure what happened.

I also tried using the example hashes on from the wiki and those too are not being parsed. Here's output from the wiki and a test hash i captured.

Code:

hashcat () starting...

OpenCL Platform #1: Apple
=========================
* Device #1: Intel(R) Core(TM) i7-4870HQ CPU @ 2.50GHz, skipped
* Device #2: Iris Pro, 384/1536 MB allocatable, 40MCU
* Device #3: AMD Radeon R9 M370X Compute Engine, 512/2048 MB allocatable, 10MCU

Hashfile 'netntlmv1-test.txt' on line 1 (u4-netntlm::kNS:338d08f8e26de93300000000000000000000000000000000:9526fb8c23a90751cdd619b6cea564742e1e4bf33006ba41:cb8086049ec4736c ): Salt-length exception
Hashfile 'netntlmv1-test.txt' on line 2 (bob::::236696db60af0ffddd599edc72768f484b67513440fe9145:7cf8afb4c3b35baec23a90751cdd619b6cea564742e1e4bf33006ba41:cb8086049ec4736c ): Salt-length exception
Parsing Hashes: 0/2 (0.00%)...No hashes loaded

Started: Tue Nov  1 08:17:15 2016
Stopped: Tue Nov  1 08:17:15 2016

I realize that my test hash is missing some of the data from the example hash on the wiki, but it does crack in JtR. I'd prefer to use hashcat as it will run much faster.

[atom]

There's a space at line end