hashcat Forum - First time user help pls

Hi all,

First time user and done some googling on how to use hashcat but not getting any love from her today.

I have dumped the passwords from a SAM file of a offline Win7 system with samdump2 and the resulting hash file looks ok.

However when I try to execute I get the following:

Code:
al@al-ubuntu:~/hashcat-0.34$ cat /home/al/Desktop/gateway.txt 

Administrator:500:aad3b435b51404eeaad3b435b51404ee:31d6cfe0d16ae931b73c59d7e0c089c0:::

Guest:501:aad3b435b51404eeaad3b435b51404ee:31d6cfe0d16ae931b73c59d7e0c089c0:::

Corey:1000:aad3b435b51404eeaad3b435b51404ee:07789b63276053841c4df8965355aec1:::

al@al-ubuntu:~/hashcat-0.34$ sudo ./hashcat-cli.bin -a 3 -m 1000 /home/al/Desktop/gateway.txt 

[sudo] password for al: 

Initializing with 8 threads and 32mb segment-size...

NOTE: press enter for status-screen

Skipping line: Administrator:500:aad3b435b51404eeaad3b435b51404ee:31d6cfe0d16ae931b73c59d7e0c089c0::: (line length exception)

Skipping line: Guest:501:aad3b435b51404eeaad3b435b51404ee:31d6cfe0d16ae931b73c59d7e0c089c0::: (line length exception)

Skipping line: Corey :1000:aad3b435b51404eeaad3b435b51404ee:07789b63276053841c4df8965355aec1::: (line length exception)

No hashes loaded

al@al-ubuntu:~/hashcat-0.34$

Any help appreciated.

Thanks

-Al

(01-01-2011, 06:06 AM)big_bad_al Wrote: [ -> ]Hi all,

First time user and done some googling on how to use hashcat but not getting any love from her today.

I have dumped the passwords from a SAM file of a offline Win7 system with samdump2 and the resulting hash file looks ok.

However when I try to execute I get the following:

Code:
al@al-ubuntu:~/hashcat-0.34$ cat /home/al/Desktop/gateway.txt Administrator:500:aad3b435b51404eeaad3b435b51404ee:31d6cfe0d16ae931b73c59d7e0c089c0::: Guest:501:aad3b435b51404eeaad3b435b51404ee:31d6cfe0d16ae931b73c59d7e0c089c0::: Corey:1000:aad3b435b51404eeaad3b435b51404ee:07789b63276053841c4df8965355aec1::: al@al-ubuntu:~/hashcat-0.34$ sudo ./hashcat-cli.bin -a 3 -m 1000 /home/al/Desktop/gateway.txt [sudo] password for al: Initializing with 8 threads and 32mb segment-size... NOTE: press enter for status-screen Skipping line: Administrator:500:aad3b435b51404eeaad3b435b51404ee:31d6cfe0d16ae931b73c59d7e0c089c0::: (line length exception) Skipping line: Guest:501:aad3b435b51404eeaad3b435b51404ee:31d6cfe0d16ae931b73c59d7e0c089c0::: (line length exception) Skipping line: Corey :1000:aad3b435b51404eeaad3b435b51404ee:07789b63276053841c4df8965355aec1::: (line length exception) No hashes loaded al@al-ubuntu:~/hashcat-0.34$

Any help appreciated.

Thanks

-Al

Also tried just having:

aad3b435b51404eeaad3b435b51404ee:07789b63276053841c4df8965355aec1

in a file on its own. Same prob!

If you want to crack NTLM hashes, you must leave them in:

Code:
hash

hash

hash

format.
Since HC doesnt support LM hashes, NTLM will only work.

(01-01-2011, 01:55 PM)Rolf Wrote: [ -> ]If you want to crack NTLM hashes, you must leave them in:

Code:
hash hash hash
format.
Since HC doesnt support LM hashes, NTLM will only work.

So for :

Code:
aad3b435b51404eeaad3b435b51404ee:07789b63276053841c4df8965355aec1

since the aa..... is the NT hash, and 07789.... is the NTLM hash I should just have:

07789b63276053841c4df8965355aec1

On a line on its own?

-Al

Yes.
aad3... is LM, not NT hash.
0778... is NT/NTLM hash.

(01-01-2011, 07:53 PM)Rolf Wrote: [ -> ]Yes.
aad3... is LM, not NT hash.
0778... is NT/NTLM hash.

Cool. Better put that new Cuda card to work with ocl......

Thanks

-Al

Slightly OT for this thread, but now trying oclhashcat so I use CUDA and getting:

Code:
al@al-ubuntu:~/oclHashcat-0.23$ sudo ./oclHashcat32.bin -m 1000 -n 80 ?l?l?l?l?l?l?l?d?d /home/al/min3.hash 

./oclHashcat32.bin: /usr/lib/nvidia-current/libOpenCL.so: no version information available (required by ./oclHashcat32.bin)

Usage: ./oclHashcat32.bin [options] hashlist dict_left|mask_left dict_right|mask_right

Try --help for more help.

al@al-ubuntu:~/oclHashcat-0.23$

Cant see where I am going wrong with syntax? I dont want to dictionary it at all, pure brute force it?

Cheers

-Al

u must use left and right mask
sudo ./oclHashcat32.bin -m 1000 -n 80 /home/al/min3.hash ?l?l?l?l ?l?l?l?d?d