I will test/crack my shadowfile with backtrack, how can I do this?
1. What Hashtype is this shadow on Linux Debian?
example (modified)
kare:On6ZrLf4xHOpM:11761::::::
2. I use backtrack and CUDA.
Is this possible without wordlist to crack it via Bruteforce
Thanks
yes, its descrypt -m 1500
(09-19-2012, 03:32 PM)atom Wrote: [ -> ]yes, its descrypt -m 1500
Can you give me a line please?
I use hashcat-gui, but I dont find --hash mode 1500??
Only MD5 (APR) = 1600
and SHA256 = 1400
EDIT:
oclHashcat-plus include --mode 1500
How can I see wich Hashfile Type is a hash?
(09-19-2012, 03:51 PM)termito Wrote: [ -> ]Can you give me a line please?
I use hashcat-gui, but I dont find --hash mode 1500??
Only MD5 (APR) = 1600
and SHA256 = 1400
EDIT:
oclHashcat-plus include --mode 1500
How can I see wich Hashfile Type is a hash?
oclhashcat-plus64 -m 1500 hash.txt mask
for the mask part read this:
http://hashcat.net/wiki/doku.php?id=mask_attack
The hash.txt should contain only this:
For "wich Hashfile Type is a hash", you have to know. You can tell from where the hash comes from, it's length, the salt, etc.
Thanks, but I have a problem. I make a seperate shadowfile and fill in only this Hashcode "On6ZrLf4xHOpM:11761"
cudaHashcat-plus64.exe --hash-type 1500 --attack-mode 3 U:\backtrack\shadow ?u?l
I get this the error
ERROR: No hashes loaded
(09-20-2012, 05:20 PM)termito Wrote: [ -> ]Thanks, but I have a problem. I make a seperate shadowfile and fill in only this Hashcode "On6ZrLf4xHOpM:11761"
cudaHashcat-plus64.exe --hash-type 1500 --attack-mode 3 U:\backtrack\shadow ?u?l
I get this the error
ERROR: No hashes loaded
Because you have to remove the :11761 part, it's not part of the hash. Look at my example, it's only the 13 characters part that is the hash.
Sorry this was only an example and is not the really the haschcode I used, I forget in this Forum to clear the :11761
Now I used another hachcode from shadow but I get always an error
The line:
cudaHashcat-plus64.exe --hash-type 1500 --attack-mode 3 --gpu-async --gpu-devices 1 U:\backtrack\shadow ?u?l
The error:
hash: $1$qXXXNw6$MFKIkNKIHksXXXXFUejYB., line length exception: 34
ERROR: No hashes loaded
Hashes with $1$ are different.
Use: -m500 or --hash-type 500.
Thanks Im happy - it works now without error.
Here the log:
cudaHashcat-plus v0.07 by atom starting...
Hashes: 1
Unique salts: 1
Unique digests: 1
Bitmaps: 8 bits, 256 entries, 0x000000ff mask, 1024 bytes
GPU-Loops: 64
GPU-Accel: 32
Password lengths range: 1 - 15
Platform: NVidia compatible platform found
Watchdog: Temperature limit set to 90c
Device #1: GeForce 8800 GTX, 768MB, 1350Mhz, 16MCU
Device #1: Allocating 77MB host-memory
Device #1: Kernel ./kernels/4318/m0500.sm_10.64.cubin
Status.......: Exhausted
Input.Mode...: Mask (?l?u?d?l?u?d)
Hash.Target..: $1$qXXXNw6$MFKIkNKIHksXXXXFUejYB.
Hash.Type....: md5crypt, MD5(Unix), FreeBSD MD5, Cisco-IOS MD5
Time.Running.: 3 mins, 24 secs
Time.Left....: 0 secs
Time.Util....: 204942.3ms/4389.9ms Real/CPU, 2.2% idle
Speed........: 223.0k c/s Real, 225.1k c/s GPU
Recovered....: 0/1 Digests, 0/1 Salts
Progress.....: 45697600/45697600 (100.00%)
Rejected.....: 0/45697600 (0.00%)
HW.Monitor.#1: 97% GPU, 84c Temp
Started: Thu Sep 20 20:25:25 2012
Stopped: Thu Sep 20 20:28:50 2012
1. Is the Speed 223.0k/s ---> ok? I think to slow for a 8800GTX?
2. I like test Bruteforce, what is the mask for e.g. "kevin33"?
1. I don't know what the expected speed should be so I can't answer.
2. ?l?l?l?l?l?d?d Note that l is lowercase L not the number one.