Posts: 23
Threads: 5
Joined: Oct 2012
hello i need command which will stop close batch after pass is found in hccapx file
currently i am using this command in batch when pass is found in passlist1 it still going on and on looking in next word lists
--remove not work with hccapx file
thx
64 -m 2500 -t 25 -o cracked.txt 1.hccapx pass/passlist1.txt
64 -m 2500 -t 25 -o cracked.txt 1.hccapx pass/pass list2 .txt
64 -m 2500 -t 25 -o cracked.txt 1.hccapx pass/pass list3 .txt
Posts: 42
Threads: 3
Joined: Jan 2020
I am no expert but I think something like this might work
64 -m 2500 -t 25 -o cracked.txt 1.hccapx pass/passlist1.txt
IF EXIST "cracked.txt" EXIT
64 -m 2500 -t 25 -o cracked.txt 1.hccapx pass/passlist2.txt
IF EXIST "cracked.txt" EXIT
64 -m 2500 -t 25 -o cracked.txt 1.hccapx pass/passlist3.txt
Posts: 374
Threads: 0
Joined: Nov 2017
01-25-2020, 01:15 AM
(This post was last modified: 01-25-2020, 01:16 AM by slyexe .)
It'll keep looking if you have more than one digest. Remove the other digest and you'll have no more issues.
Example of a multicap file with 6 hashes:
Session..........: hashcat
Status...........: Running
Hash.Type........: WPA-EAPOL-PBKDF2
Hash.Target......: capture.hccapx
Time.Started.....: Fri Jan 24 16:59:58 2020 (2 secs)
Time.Estimated...: Fri Jan 24 17:01:43 2020 (1 min, 43 secs)
Guess.Mask.......: 306?d?d?d?d?d?d?d [10]
Guess.Queue......: 1/1 (100.00%)
Speed.#1.........: 289.1 kH/s (415.00ms) @ Accel:512 Loops:256 Thr:256 Vec:1
Recovered........: 3/6 (50.00%) Digests, 3/6 (50.00%) Salts
Progress.........: 0/60000000 (0.00%)
Rejected.........: 0/0 (0.00%)
Restore.Point....: 0/10000000 (0.00%)
Restore.Sub.#1...: Salt:0 Amplifier:0-1 Iteration:768-1024
Candidates.#1....: 3066199999 -> 3064305378
Hardware.Mon.#1..: Temp: 40c Fan: 25% Util:100% Core:2062MHz Mem:4104MHz Bus:16
[s]tatus [p]ause [b ]ypass [c]heckpoint [q]uit =>
For my example when I start this attack it states:
INFO: Removed 3 hashes found in potfile.
If it had found all 6 hashes in the first attack it will not continue with the following attacks and halt.
Posts: 23
Threads: 5
Joined: Oct 2012
i dont have multicap just 1 network
Posts: 374
Threads: 0
Joined: Nov 2017
(01-26-2020, 05:08 PM) msalman Wrote: i dont have multicap just 1 networkIf thats the case, then after the password is found hashcat will stop.
Posts: 23
Threads: 5
Joined: Oct 2012
it wont stop i have test multiple times it will go to next wordlist
Posts: 1,042
Threads: 2
Joined: Jun 2017
01-27-2020, 06:05 PM
(This post was last modified: 01-27-2020, 06:42 PM by ZerBea .)
Does it work with the example hash from here if the PSK is in passlist1.txt?
https://hashcat.net/misc/example_hashes/hashcat.hccapx
64 -m 2500 -t 25 --remove -o cracked.txt 1.hccapx pass/passlist1.txt
Is the hash removed?
How is your handshake converted (tool?) from the original cap file? Does it need nonce-error-corrections?
Did you read docs/status_codes.txt?
status codes on exit:
-2 = gpu-watchdog alarm
-1 = error
0 = OK/cracked
1 = exhausted
2 = aborted
3 = aborted by checkpoint
4 = aborted by runtime
Does your script evaluate them?
It should look like this:
Code:
ls -All
-rw-r--r-- 1 zerobeat users 393 27. Jan 17:31 hashcat.hccapx
-rw-r--r-- 1 zerobeat users 36 27. Jan 17:33 wordlist1.txt
-rw-r--r-- 1 zerobeat users 49 27. Jan 17:33 wordlist2.txt
-rw-r--r-- 1 zerobeat users 41 27. Jan 17:34 wordlist3.txt
$ hashcat --remove -m 2500 hashcat.hccapx *.txt
hashcat (v5.1.0-1628-g424a6ee8) starting...
Session..........: hashcat
Status...........: Exhausted
Hash.Name........: WPA-EAPOL-PBKDF2
Hash.Target......: 8381533406003807685881523 (AP:ae:f5:0f:22:80:1c STA:98:7b:dc:f9:f9:50)
Time.Started.....: Mon Jan 27 17:35:40 2020 (0 secs)
Time.Estimated...: Mon Jan 27 17:35:40 2020 (0 secs)
Guess.Base.......: File (wordlist1.txt)
Guess.Queue......: 1/3 (33.33%)
Speed.#1.........: 136 H/s (0.44ms) @ Accel:8 Loops:64 Thr:1024 Vec:1
Recovered........: 0/1 (0.00%) Digests
Progress.........: 4/4 (100.00%)
Rejected.........: 0/4 (0.00%)
Restore.Point....: 4/4 (100.00%)
Restore.Sub.#1...: Salt:0 Amplifier:0-1 Iteration:0-1
Candidates.#1....: 1qayxsw2 -> 7ujm,ki8
Hardware.Mon.#1..: Temp: 53c Fan: 40% Util: 41% Core:1544MHz Mem:5005MHz Bus:16
aef50f22801c:987bdcf9f950:8381533406003807685881523:hashcat!
Session..........: hashcat
Status...........: Cracked
Hash.Name........: WPA-EAPOL-PBKDF2
Hash.Target......: 8381533406003807685881523 (AP:ae:f5:0f:22:80:1c STA:98:7b:dc:f9:f9:50)
Time.Started.....: Mon Jan 27 17:35:40 2020 (1 sec)
Time.Estimated...: Mon Jan 27 17:35:41 2020 (0 secs)
Guess.Base.......: File (wordlist2.txt)
Guess.Queue......: 2/3 (66.67%)
Speed.#1.........: 187 H/s (0.39ms) @ Accel:8 Loops:64 Thr:1024 Vec:1
Recovered........: 1/1 (100.00%) Digests
Progress.........: 5/5 (100.00%)
Rejected.........: 0/5 (0.00%)
Restore.Point....: 0/5 (0.00%)
Restore.Sub.#1...: Salt:0 Amplifier:0-1 Iteration:0-1
Candidates.#1....: 123456789 -> 123456789
Hardware.Mon.#1..: Temp: 54c Fan: 40% Util: 62% Core:1708MHz Mem:5005MHz Bus:16
Started: Mon Jan 27 17:35:27 2020
Stopped: Mon Jan 27 17:35:42 2020
$ ls -All
-rw------- 1 zerobeat users 0 27. Jan 17:35 hashcat.hccapx
-rw-r--r-- 1 zerobeat users 36 27. Jan 17:33 wordlist1.txt
-rw-r--r-- 1 zerobeat users 49 27. Jan 17:33 wordlist2.txt
-rw-r--r-- 1 zerobeat users 41 27. Jan 17:34 wordlist3.txt
We never reach wordlist3.txt, because the PSK was recovered during second task.
Posts: 23
Threads: 5
Joined: Oct 2012
Posts: 374
Threads: 0
Joined: Nov 2017
(01-27-2020, 09:10 PM) msalman Wrote: 1 = exhaustedIf it's running into exhausted then the password hasn't been found and it'll keep going thru your batch. Once it reaches cracked it'll stop as I previously mentioned.
Posts: 23
Threads: 5
Joined: Oct 2012
01-28-2020, 03:58 PM
(This post was last modified: 01-28-2020, 04:00 PM by msalman .)
the pass is in my first wordlist
11223344
Attached Files
hamza.zip (Size: 640 bytes / Downloads: 8)