6.1.1 potfile
#1
Hashcat for Windows, version 6.1.1 is not writing potfile. The file created is empty. No potfile switches used.

Password is found, but not written to potfile.
Reply
#2
Please post your command line, with any sensitive info replaced with generic info
~
Reply
#3
Code:
hashcat -m 6211 -a 3 -w 3 -i --session=ses ..\test\container.tc ?b?b?b
Reply
#4
the name of the potfile depends on the session name:
if you use --session ses , then your file name of the potfile is: ses.potfile
Reply
#5
(09-08-2020, 12:50 PM)philsmd Wrote: the name of the potfile depends on the session name:
if you use --session ses , then your file name of the potfile is: ses.potfile

There is no such file created.

The only created file is hashcat.potfile with length of 0 bytes.
Reply
#6
Filename of the container is 256.tc so maybe filename with digits only is not accepted?
Reply
#7
If you delete the empty potfile, is it recreated on the next run?
~
Reply
#8
(09-09-2020, 03:09 AM)royce Wrote: If you delete the empty potfile, is it recreated on the next run?

Yes.
Reply
#9
Guys! This is really a problem!!

6.1.1 is not writing password to potfile after finding one!!
Reply
#10
@philsmd, I can recreate this - for both TrueCrypt and Veracrypt, it seems, if a session is specified, but a potfile is not, then ses.potfile is not created on the fly that I can find (on Linux, anyway). Running the same command twice causes another crack (rather than skipping it as already having been cracked). And if I explicitly add "--potfile-path=ses.potfile",  it creates a potfile with zero length and nothing is written to it on crack.

Perhaps this is because TrueCrypt and VeraCrypt hashes are read directly from the container/volume? IIRC it used to store the filename in the potfile instead?
~
Reply