hashcat Forum

(07-06-2022, 03:26 PM)Snoopy Wrote: [ -> ]i think you downloaded the website instead of the file, use this

https://raw.githubusercontent.com/openwa...ce2john.py

line 61 is an empty line, not a line with html title tag

It Works!!! 
i can try use hashcat to crack it now.



hashcat step :
i input command in cmd
「
hashcat.exe -m 9600 -a 3 tes.xlsx:$office$*2013*100000*256*16*05e8e518b10494aafcce44a494f0cccd*7491c7e5da8671e1ad76e9cedd742438*b0cf8e0470dced9a5bc0396c8098d645c81e8d2a1ffc81ceccd7393adf087f23
」

it return error message :
Hash'tes.xlsx:$office$*2013*100000*256*16*05e8e518b10494aafcce44a494f0cccd*7491c7e5da8671e1ad76e9cedd742438*b0cf8e0470dced9a5bc0396c8098d645c81e8d2a1ffc81ceccd7393adf087f23': Signature unmatched

No hashes loaded.

anyword type wrong?

put the hash into a file and remove the tes.xlsx: at the beginning, this is a not neccessary info from the output or use option --username to tell hashcat it should ignore this info, and add -O (optimzed kernel)





next thing, when using -a3 aka bruteforce you should also provide a mask, if not provided, hahscat will use a standard mask for attacking, if you have any idea about your password or the passwordstyle you should use a modified mask

(07-06-2022, 05:10 PM)Snoopy Wrote: [ -> ]put the hash into a file and remove the tes.xlsx: at the beginning, this is a not neccessary info from the output or use option --username to tell hashcat it should ignore this info, and add -O (optimzed kernel)

Code:

hashcat.exe -O -m9600 -a3 hashfile.txt

i no idea about pw . so i use a 3 to do it

1. put hashtagfile.txt into hashcat same folder > done.
2. remove tes.xlsx: > done.
3. type in cmd :
hashcat.exe -o -m 9600 -a 3 $office$*2013*100000*256*16*05e8e518b10494aafcce44a494f0cccd*7491c7e5da8671e1ad76e9cedd742438*b0cf8e0470dced9a5bc0396c8098d645c81e8d2a1ffc81ceccd7393adf087f23

------------------------------------
return error message : 

No hash-mode matches the structure of the input hash.

-o should be followed by file passtobestore.txt

(07-06-2022, 06:31 PM)cq88uik Wrote: [ -> ]

(07-06-2022, 05:10 PM)Snoopy Wrote: [ -> ]put the hash into a file and remove the tes.xlsx: at the beginning, this is a not neccessary info from the output or use option --username to tell hashcat it should ignore this info, and add -O (optimzed kernel)

Code:

hashcat.exe -O -m9600 -a3 hashfile.txt

i no idea about pw . so i use a 3 to do it

1. put hashtagfile.txt into hashcat same folder > done.
2. remove tes.xlsx: > done.
3. type in cmd :
hashcat.exe -o -m 9600 -a 3 $office$*2013*100000*256*16*05e8e518b10494aafcce44a494f0cccd*7491c7e5da8671e1ad76e9cedd742438*b0cf8e0470dced9a5bc0396c8098d645c81e8d2a1ffc81ceccd7393adf087f23

------------------------------------
return error message : 

No hash-mode matches the structure of the input hash.

(07-07-2022, 08:08 AM)hetcat Wrote: [ -> ]-o should be followed by file passtobestore.txt

finally it run!



waiting for result . 


thanks hetcat 's reply , 
and Snoopy step by step help ! 

*
have one question between rar3 & officefile ,
office file : hashcat.exe -m 9600 -a 3 $office$*2013*........ -o password.txt
why without -o xx.txt , it doesn't work?

but,
i try rar3
rar3 : hashcat.exe -m 12500 -a 3 $rar3$......  
it will show result in cmd .