sha512crypt hash error
#1
greetings,

i am doing a pentest on my virtual machine with ubuntu 12.04 after retrieved the hash by launching the command :: cat /etc/shadow > testpass
i go fire up oclhashcat-plus0.09 (the last release) but i am getting this error:

WARNING: Hashfile 'testpass' in line 1 test:$6$aWykABtG$ddQNVYpo0jGGwqhUKIhjyK/YjSMQPrv1JxGd5h2TGGsovy9pjZhStOI17W8ceXRNpm1CmJYpbMQr2G8SP6Vif/:15614:0:99999:7:::
Line-length exception
ERROR: No hashes loaded

the command i use is :
./cudaHashcat-plus64.bin -m 1800 testpass -a 3 ?l?l?l?l

Any idea about that error ? i also tried to cut up the hash and use only
"$6$aWykABtG$ddQNVYpo0jGGwqhUKIhjyK/YjSMQPrv1JxGd5h2TGGsovy9pjZhStOI17W8ceXRNpm1CmJYpbMQr2G8SP6Vif"
but getting the message says :

WARNING: Hash '/YjSMQPrv1JxGd5h2TGGsovy9pjZhStOI17W8ceXRNpm1CmJYpbMQr2G8SP6Vif/': Line-length exception
ERROR: No hashes loaded

Probably i am doing something wrong cause i was always able to crack any other type of algorithms..ntlm..wpa..


Thanks
#2
Put the whole hash, starting with $6$ to if/.
#3
(10-01-2012, 05:06 PM)khoros Wrote: i also tried to cut up the hash and use only
"$6$aWykABtG$ddQNVYpo0jGGwqhUKIhjyK/YjSMQPrv1JxGd5h2TGGsovy9pjZhStOI17W8ceXRNpm1CmJYpbMQr2G8SP6Vif"

WARNING: Hash '/YjSMQPrv1JxGd5h2TGGsovy9pjZhStOI17W8ceXRNpm1CmJYpbMQr2G8SP6Vif/': Line-length exception
You did not give the beginning $6$..."
#4
(10-01-2012, 06:19 PM)Mem5 Wrote:
(10-01-2012, 05:06 PM)khoros Wrote: i also tried to cut up the hash and use only
"$6$aWykABtG$ddQNVYpo0jGGwqhUKIhjyK/YjSMQPrv1JxGd5h2TGGsovy9pjZhStOI17W8ceXRNpm1CmJYpbMQr2G8SP6Vif"

WARNING: Hash '/YjSMQPrv1JxGd5h2TGGsovy9pjZhStOI17W8ceXRNpm1CmJYpbMQr2G8SP6Vif/': Line-length exception
You did not give the beginning $6$..."

here is the full command line i use and still happening the same error ---

/cudaHashcat-plus64.bin -m 1800 $6$aWykABtG$ddQNVYpo0jGGwqhUKIhjyK/YjSMQPrv1JxGd5h2TGGsovy9pjZhStOI17W8ceXRNpm1CmJYpbMQr2G8SP6Vif -a 3 ?l?l?l?l
WARNING: Hash '/YjSMQPrv1JxGd5h2TGGsovy9pjZhStOI17W8ceXRNpm1CmJYpbMQr2G8SP6Vif': Line-length exception
ERROR: No hashes loaded

either using the full hash or get that hash in a file
#5
(10-01-2012, 07:39 PM)khoros Wrote:
(10-01-2012, 06:19 PM)Mem5 Wrote:
(10-01-2012, 05:06 PM)khoros Wrote: i also tried to cut up the hash and use only
"$6$aWykABtG$ddQNVYpo0jGGwqhUKIhjyK/YjSMQPrv1JxGd5h2TGGsovy9pjZhStOI17W8ceXRNpm1CmJYpbMQr2G8SP6Vif"

WARNING: Hash '/YjSMQPrv1JxGd5h2TGGsovy9pjZhStOI17W8ceXRNpm1CmJYpbMQr2G8SP6Vif/': Line-length exception
You did not give the beginning $6$..."

here is the full command line i use and still happening the same error ---

/cudaHashcat-plus64.bin -m 1800 $6$aWykABtG$ddQNVYpo0jGGwqhUKIhjyK/YjSMQPrv1JxGd5h2TGGsovy9pjZhStOI17W8ceXRNpm1CmJYpbMQr2G8SP6Vif -a 3 ?l?l?l?l
WARNING: Hash '/YjSMQPrv1JxGd5h2TGGsovy9pjZhStOI17W8ceXRNpm1CmJYpbMQr2G8SP6Vif': Line-length exception
ERROR: No hashes loaded

either using the full hash or get that hash in a file
Looks like your slash gets chopped off. Either put this in a hash file and change your command line accordingly:

Code:
$6$aWykABtG$ddQNVYpo0jGGwqhUKIhjyK/YjSMQPrv1JxGd5h2TGGsovy9pjZhStOI17W8ceXRNpm1CmJYpbMQr2G8SP6Vif/

Or enclose your hash in double-quotes like this: "$6$aWykABtG$ddQNVYpo0jGGwqhUKIhjyK/YjSMQPrv1JxGd5h2TGGsovy9pjZhStOI17W8ceXRNpm1CmJYpbMQr2G8SP6Vif/"

Edit: The last slash is part of the hash. It was not there in your last posted command line.
#6
(10-01-2012, 08:05 PM)mastercracker Wrote:
(10-01-2012, 07:39 PM)khoros Wrote:
(10-01-2012, 06:19 PM)Mem5 Wrote:
(10-01-2012, 05:06 PM)khoros Wrote: i also tried to cut up the hash and use only
"$6$aWykABtG$ddQNVYpo0jGGwqhUKIhjyK/YjSMQPrv1JxGd5h2TGGsovy9pjZhStOI17W8ceXRNpm1CmJYpbMQr2G8SP6Vif"

WARNING: Hash '/YjSMQPrv1JxGd5h2TGGsovy9pjZhStOI17W8ceXRNpm1CmJYpbMQr2G8SP6Vif/': Line-length exception
You did not give the beginning $6$..."

here is the full command line i use and still happening the same error ---

/cudaHashcat-plus64.bin -m 1800 $6$aWykABtG$ddQNVYpo0jGGwqhUKIhjyK/YjSMQPrv1JxGd5h2TGGsovy9pjZhStOI17W8ceXRNpm1CmJYpbMQr2G8SP6Vif -a 3 ?l?l?l?l
WARNING: Hash '/YjSMQPrv1JxGd5h2TGGsovy9pjZhStOI17W8ceXRNpm1CmJYpbMQr2G8SP6Vif': Line-length exception
ERROR: No hashes loaded

either using the full hash or get that hash in a file
Looks like your slash gets chopped off. Either put this in a hash file and change your command line accordingly:

Code:
$6$aWykABtG$ddQNVYpo0jGGwqhUKIhjyK/YjSMQPrv1JxGd5h2TGGsovy9pjZhStOI17W8ceXRNpm1CmJYpbMQr2G8SP6Vif/

Or enclose your hash in double-quotes like this: "$6$aWykABtG$ddQNVYpo0jGGwqhUKIhjyK/YjSMQPrv1JxGd5h2TGGsovy9pjZhStOI17W8ceXRNpm1CmJYpbMQr2G8SP6Vif/"

Edit: The last slash is part of the hash. It was not there in your last posted command line.

did the try with double-quote here is the full command line again:

./cudaHashcat-plus64.bin -m 1800 "$6$aWykABtG$ddQNVYpo0jGGwqhUKIhjyK/YjSMQPrv1JxGd5h2TGGsovy9pjZhStOI17W8ceXRNpm1CmJYpbMQr2G8SP6Vif/" example.dict
WARNING: Hash '/YjSMQPrv1JxGd5h2TGGsovy9pjZhStOI17W8ceXRNpm1CmJYpbMQr2G8SP6Vif/': Line-length exception
ERROR: No hashes loaded

wondering why the warning is refer to the point between / of the entire hash.
Since is a test in a virtual machine the password for the user test is test unfortunaly couldn't find anything online to generate a sha512crypt to have a compare between hashes..to see if the command to grab it was correct maybe the problem is just about that.
The command i used its this :

cat /etc/shadow > testpass

maybe is the wrong command ?
#7
(10-01-2012, 08:32 PM)khoros Wrote:
(10-01-2012, 08:05 PM)mastercracker Wrote:
(10-01-2012, 07:39 PM)khoros Wrote:
(10-01-2012, 06:19 PM)Mem5 Wrote:
(10-01-2012, 05:06 PM)khoros Wrote: i also tried to cut up the hash and use only
"$6$aWykABtG$ddQNVYpo0jGGwqhUKIhjyK/YjSMQPrv1JxGd5h2TGGsovy9pjZhStOI17W8ceXRNpm1CmJYpbMQr2G8SP6Vif"

WARNING: Hash '/YjSMQPrv1JxGd5h2TGGsovy9pjZhStOI17W8ceXRNpm1CmJYpbMQr2G8SP6Vif/': Line-length exception
You did not give the beginning $6$..."

here is the full command line i use and still happening the same error ---

/cudaHashcat-plus64.bin -m 1800 $6$aWykABtG$ddQNVYpo0jGGwqhUKIhjyK/YjSMQPrv1JxGd5h2TGGsovy9pjZhStOI17W8ceXRNpm1CmJYpbMQr2G8SP6Vif -a 3 ?l?l?l?l
WARNING: Hash '/YjSMQPrv1JxGd5h2TGGsovy9pjZhStOI17W8ceXRNpm1CmJYpbMQr2G8SP6Vif': Line-length exception
ERROR: No hashes loaded

either using the full hash or get that hash in a file
Looks like your slash gets chopped off. Either put this in a hash file and change your command line accordingly:

Code:
$6$aWykABtG$ddQNVYpo0jGGwqhUKIhjyK/YjSMQPrv1JxGd5h2TGGsovy9pjZhStOI17W8ceXRNpm1CmJYpbMQr2G8SP6Vif/

Or enclose your hash in double-quotes like this: "$6$aWykABtG$ddQNVYpo0jGGwqhUKIhjyK/YjSMQPrv1JxGd5h2TGGsovy9pjZhStOI17W8ceXRNpm1CmJYpbMQr2G8SP6Vif/"

Edit: The last slash is part of the hash. It was not there in your last posted command line.

did the try with double-quote here is the full command line again:

./cudaHashcat-plus64.bin -m 1800 "$6$aWykABtG$ddQNVYpo0jGGwqhUKIhjyK/YjSMQPrv1JxGd5h2TGGsovy9pjZhStOI17W8ceXRNpm1CmJYpbMQr2G8SP6Vif/" example.dict
WARNING: Hash '/YjSMQPrv1JxGd5h2TGGsovy9pjZhStOI17W8ceXRNpm1CmJYpbMQr2G8SP6Vif/': Line-length exception
ERROR: No hashes loaded

wondering why the warning is refer to the point between / of the entire hash.
Since is a test in a virtual machine the password for the user test is test unfortunaly couldn't find anything online to generate a sha512crypt to have a compare between hashes..to see if the command to grab it was correct maybe the problem is just about that.
The command i used its this :

cat /etc/shadow > testpass

maybe is the wrong command ?


things getting better.. now i have a prompt like this:

./cudaHashcat-plus64.bin -m 1800 test -a 3 ?l?l?l?l
cudaHashcat-plus v0.09 by atom starting...

Hashes: 1 total, 1 unique salts, 1 unique digests
Bitmaps: 8 bits, 256 entries, 0x000000ff mask, 1024 bytes
Workload: 16 loops, 2 accel
Watchdog: Temperature abort trigger set to 90c
Watchdog: Temperature retain trigger set to 80c
Device #1: GeForce GTX 285, 1023MB, 1476Mhz, 30MCU

i think the problem was releated to the old driver nvidia i was at 295.41 and upgraded to 304.51, i also found out that the hash must be in a file and not passed in a single line but also the prompt won't give me any output, usually i see the stats more detailed .. what's wrong with that ?

Thanks for all the help
#8
Thats simply wrong. If you do not quote with single ' the shell will interpret $ as shell variable. So you need to either use a file for use ' instead of ".
#9
I don't know about the status problem but I have double-checked your hash and the password is test like you have mentioned.
#10
(10-01-2012, 09:33 PM)mastercracker Wrote: I don't know about the status problem but I have double-checked your hash and the password is test like you have mentioned.

Thanks for the help will try to get it work.