hashcat Forum

There hash intercepted via Intercepter-ng:

Code:
Kerberos Auth 10:44:53/24/02/17 192.168.5.194/192.168.1.101:88 BRUTE WITH JTR rc4-hmac DOMAIN.COM\tester:$mskrb5$$$A643483079D9E3CC6F14D3C1CB6CCC4E$601841F258521CD7A97A0032DC61E1050EC45FFFAF14A68851C91C4B925036C1864525DE

John Ripper with it normally works.
How to process it in HashCat?
If the format string as:

Code:
$krb5pa$23$tester$DOMAIN.COM$salt$A643483079D9E3CC6F14D3C1CB6CCC4E$601841F258521CD7A97A0032DC61E1050EC45FFFAF14A68851C91C4B925036C1864525DE

it is necessary to remove the symbol                              ^

and password, which I know is not suitable (((

Tell me, where did I go wrong?

You need to move the salt after the hash:

Quote:$krb5pa$23$tester$DOMAIN.COM$salt$601841F258521CD7A97A0032DC61E1050EC45FFFAF14A68851C91C4B925036C1864525DEA643483079D9E3CC6F14D3C1CB6CCC4E

Yes, its work!!!!!
Very thans!

catice

atom

catice