+- hashcat Forum (https://hashcat.net/forum)
+-- Forum: Support (https://hashcat.net/forum/forum-3.html)
+--- Forum: hashcat (https://hashcat.net/forum/forum-45.html)
+--- Thread: Axcrypt support (/thread-7614.html)
RE: Axcrypt support - undeath - 07-31-2018
(07-31-2018, 05:46 PM)laulaf Wrote: Have you got some an exemple of software proper text editor ?
Notepad++
RE: Axcrypt support - laulaf - 08-02-2018
I do not understand, when I look at the file hash.txt, there are no characters before $ and when I run the command line, there is an error because there are characters in front of $ ???? ?
I have recreated my hash:
C: \ Python27> python axcrypt2john.py R485hgtd-jpg.axx
I copy and paste into a text file and I recorded with the 4 possible encodings: ANSI, Unicode, Unicode big endian and UTF-8. Nothing works except with ANSI encoding where I get:
C: \ hashcat-4.1.0> hashcat64 hashANSI.txt -m 13200 -a 3 -1 ?l?u?d 1?1?1?1?1?1?1?1?
hashcat (v4.1.0) starting ...
OpenCL Platform # 1: NVIDIA Corporation
======================================
* Device # 1: GeForce GTX 1050 Ti, 1024/4096 MB allocatable, 6MCU
Hashes: 1 digests; 1 unique digests, 1 unique salts
Bitmaps: 16 bits, 65536 entries, 0x0000ffff mask, 262144 bytes, 5/13 rotates
Applicable optimizers:
* Zero-Byte
* Single-Hash
* Single-Salt
* Brute-Force
Minimum password length supported by kernel: 0
Maximum password length supported by kernel: 256
Watchdog: Temperature abort trigger set to 90c
Cracking performance lower than expected?
* Append -w 3 to the commandline.
This can cause your screen to lag.
* Update your OpenCL runtime / driver the right way:
https://hashcat.net/faq/wrongdriver
* Create more work items to make use of your parallelization power:
https://hashcat.net/faq/morework
[s] tatus [p] ause [b] ypass [c] heckpoint [q] ==
I chose to type s and I get:
Session ..........: hashcat
Status ...........: Running
Hash.Type ........: AxCrypt
Hash.Target ......: $ axcrypt $ * 1 * 15000 * cc6d4549f04a2bb6a184f34e034dfe14 * ... f8ed60
Time.Started .....: Thu Aug 02 12:13:56 2018 (40 secs)
Time.Estimated ...: Mon Mar 18 18:47:23 2024 (5 years, 229 days)
Guess.Mask .......: 1? 1? 1? 1? 1? 1? 1? 1? [9]
Guess.Charset ....: -1? L? U? D, -2 Undefined, -3 Undefined, -4 Undefined
Guess.Queue ......: 1/1 (100.00%)
Speed.Dev. # 1 .....: 19831 H / s (20.96ms) @ Accel: 64 Loops: 16 Thr: 1024 Vec: 1
Recovered ........: 0/1 (0.00%) Digests, 0/1 (0.00%) Salts
Progress .........: 393216/3521614606208 (0.00%)
Rejected .........: 0/393216 (0.00%)
Restore.Point ....: 393216/3521614606208 (0.00%)
Candidates # 1 ....: 19lSERIN -> 1cCMERIN
HWMon.Dev. # 1 .....: Temp: 60c Fan: 23% Util: 68% Core: 1759MHz Mem: 3504MHz Bus: 16
[s] tatus [p] ause [b] ypass [c] heckpoint [q] ==
It seems to be a little better no? So there I am bad typing my command line? But where is my mistake?
RE: Axcrypt support - laulaf - 08-02-2018
But ... I feel like the computer is working, every time I type s, I have a different line in Candidates. # 1.
So, now it's, how long should I run?
RE: Axcrypt support - undeath - 08-02-2018
ANSI is alright, always use it for hash lists. UTF-8 only works when your text editor does not write a BOM (or has a way to disable it).
Your attack looks alright now.
RE: Axcrypt support - laulaf - 08-02-2018
Ok, so I leave the computer running, I'll see what he gives me in a few hours, a few days ... a few months! I'll keep you informed.
RE: Axcrypt support - laulaf - 08-03-2018
I do not understand anything, it's so strange????
I launched this command line because I think my password has lowercase, uppercase, numbers and must be between 6 to 8 characters long. The file that contains the hash is hashANSI.txt and I want to put what the computer finds in resultat.txt:
C: \ hashcat-4.1.0> hashcat64 -m 13200 -a 3 -o resultat.txt hashANSI.txt -2 ?u?d?l --increment -w 3 ?2?2?2?2?2?2?2?2
Everything seems to start well (I did not put all the steps where I tapped on 's')
hashcat (v4.1.0) starting...
OpenCL Platform #1: NVIDIA Corporation
======================================
* Device #1: GeForce GTX 1050 Ti, 1024/4096 MB allocatable, 6MCU
Hashes: 1 digests; 1 unique digests, 1 unique salts
Bitmaps: 16 bits, 65536 entries, 0x0000ffff mask, 262144 bytes, 5/13 rotates
Applicable optimizers:
* Zero-Byte
* Single-Hash
* Single-Salt
* Brute-Force
Minimum password length supported by kernel: 0
Maximum password length supported by kernel: 256
Watchdog: Temperature abort trigger set to 90c
The wordlist or mask that you are using is too small.
This means that hashcat cannot use the full parallel power of your device(s).
Unless you supply more work, your cracking speed will drop.
For tips on supplying more work, see: https://hashcat.net/faq/morework
Approaching final keyspace - workload adjusted.
Session..........: hashcat
Status...........: Exhausted
Hash.Type........: AxCrypt
Hash.Target......: $axcrypt$*1*15000*cc6d4549f04a2bb6a184f34e034dfe14*...f8ed60
Time.Started.....: Thu Aug 02 14:40:02 2018 (4 secs)
Time.Estimated...: Thu Aug 02 14:40:06 2018 (0 secs)
Guess.Mask.......: ?2 [1]
Guess.Charset....: -1 Undefined, -2 ?u?d?l, -3 Undefined, -4 Undefined
Guess.Queue......: 1/8 (12.50%)
Speed.Dev.#1.....: 17 H/s (0.14ms) @ Accel:128 Loops:64 Thr:1024 Vec:1
Recovered........: 0/1 (0.00%) Digests, 0/1 (0.00%) Salts
Progress.........: 62/62 (100.00%)
Rejected.........: 0/62 (0.00%)
Restore.Point....: 1/1 (100.00%)
Candidates.#1....: X -> X
HWMon.Dev.#1.....: Temp: 41c Fan: 0% Util: 57% Core:1784MHz Mem:3504MHz Bus:16
The wordlist or mask that you are using is too small.
This means that hashcat cannot use the full parallel power of your device(s).
Unless you supply more work, your cracking speed will drop.
For tips on supplying more work, see: https://hashcat.net/faq/morework
Approaching final keyspace - workload adjusted.
Cracking performance lower than expected?
* Update your OpenCL runtime / driver the right way:
https://hashcat.net/faq/wrongdriver
* Create more work items to make use of your parallelization power:
https://hashcat.net/faq/morework
Session..........: hashcat
Status...........: Exhausted
Hash.Type........: AxCrypt
Hash.Target......: $axcrypt$*1*15000*cc6d4549f04a2bb6a184f34e034dfe14*...f8ed60
Time.Started.....: Thu Aug 02 14:40:07 2018 (4 secs)
Time.Estimated...: Thu Aug 02 14:40:11 2018 (0 secs)
Guess.Mask.......: ?2?2 [2]
Guess.Charset....: -1 Undefined, -2 ?u?d?l, -3 Undefined, -4 Undefined
Guess.Queue......: 2/8 (25.00%)
Speed.Dev.#1.....: 885 H/s (0.18ms) @ Accel:128 Loops:64 Thr:1024 Vec:1
Recovered........: 0/1 (0.00%) Digests, 0/1 (0.00%) Salts
Progress.........: 3844/3844 (100.00%)
Rejected.........: 0/3844 (0.00%)
Restore.Point....: 62/62 (100.00%)
Candidates.#1....: Xa -> XQ
HWMon.Dev.#1.....: Temp: 41c Fan: 0% Util: 61% Core:1784MHz Mem:3504MHz Bus:16
The wordlist or mask that you are using is too small.
This means that hashcat cannot use the full parallel power of your device(s).
Unless you supply more work, your cracking speed will drop.
For tips on supplying more work, see: https://hashcat.net/faq/morework
Approaching final keyspace - workload adjusted.
[s]tatus [p]ause [b]ypass [c]heckpoint [q]uit =>
Session..........: hashcat
Status...........: Running
Hash.Type........: AxCrypt
Hash.Target......: $axcrypt$*1*15000*cc6d4549f04a2bb6a184f34e034dfe14*...f8ed60
Time.Started.....: Thu Aug 02 14:40:12 2018 (20 secs)
Time.Estimated...: Thu Aug 02 14:43:26 2018 (2 mins, 54 secs)
Guess.Mask.......: ?2?2?2 [3]
Guess.Charset....: -1 Undefined, -2 ?u?d?l, -3 Undefined, -4 Undefined
Guess.Queue......: 3/8 (37.50%)
Speed.Dev.#1.....: 1232 H/s (1.53ms) @ Accel:128 Loops:64 Thr:1024 Vec:1
Recovered........: 0/1 (0.00%) Digests, 0/1 (0.00%) Salts
Progress.........: 23064/238328 (9.68%)
Rejected.........: 0/23064 (0.00%)
Restore.Point....: 0/3844 (0.00%)
Candidates.#1....: 0ar -> 0Qz
HWMon.Dev.#1.....: Temp: 42c Fan: 0% Util: 9% Core:1354MHz Mem:3504MHz Bus:16
[[s]tatus [p]ause [b]ypass [c]heckpoint [q]uit =>
Session..........: hashcat
Status...........: Running
Hash.Type........: AxCrypt
Hash.Target......: $axcrypt$*1*15000*cc6d4549f04a2bb6a184f34e034dfe14*...f8ed60
Time.Started.....: Thu Aug 02 14:57:33 2018 (7 mins, 23 secs)
Time.Estimated...: Fri Aug 03 04:58:01 2018 (13 hours, 53 mins)
Guess.Mask.......: ?2?2?2?2?2 [5]
Guess.Charset....: -1 Undefined, -2 ?u?d?l, -3 Undefined, -4 Undefined
Guess.Queue......: 5/8 (62.50%)
Speed.Dev.#1.....: 18170 H/s (79.20ms) @ Accel:128 Loops:64 Thr:1024 Vec:1
Recovered........: 0/1 (0.00%) Digests, 0/1 (0.00%) Salts
Progress.........: 7864320/916132832 (0.86%)
Rejected.........: 0/7864320 (0.00%)
Restore.Point....: 0/14776336 (0.00%)
Candidates.#1....: darie -> dcCME
HWMon.Dev.#1.....: Temp: 60c Fan: 21% Util: 90% Core:1759MHz Mem:3504MHz Bus:16
[s]tatus [p]ause [b]ypass [c]heckpoint [q]uit =>
At first he tells me that the estimated time is a few minutes and much later almost 14h! Ok, it does not matter, I leave it, I'll see you tomorrow. But ??? The next day if I still type 's' I get:
Session ..........: hashcat
Status ...........: Running
Hash.Type ........: AxCrypt
Hash.Target ......: $ axcrypt $ * 1 * 15000 * cc6d4549f04a2bb6a184f34e034dfe14 * ... f8ed60
Time.Started .....: Fri Aug 03 05:13:48 2018 (6 hours, 5 mins)
Time.Estimated ...: Sat Sep 08 23:07:30 2018 (36 days, 11 hours)
Guess.Mask .......:? 2? 2? 2? 2? 2? 2 [6]
Guess.Charset ....: -1 Undefined, -2? U? D? L, -3 Undefined, -4 Undefined
Guess.Queue ......: 6/8 (75.00%)
Speed.Dev. # 1 .....: 17891 H / s (79.55ms) @ Accel: 128 Loops: 32 Thr: 1024 Vec: 1
Recovered ........: 0/1 (0.00%) Digests, 0/1 (0.00%) Salts
Progress .........: 391643136/56800235584 (0.69%)
Rejected .........: 0/391643136 (0.00%)
Restore.Point ....: 6291456/916132832 (0.69%)
Candidates # 1 ....: 1lSe45 -> 1ktTPI
HWMon.Dev. # 1 .....: Temp: 60c Fan: 21% Util: 82% Core: 1759MHz Mem: 3504MHz Bus: 16
[s] tatus [p] ause [b] ypass [c] heckpoint [q] ==
SO, IT IS NOW FOR ... 36 DAYS, 11 HOURS !!!!!!!!!!
(> I stopped searching, and there is nothing in my resultat.txt file)
I tell myself 2 things
1) Either my command line is still not ok
2) Either my computer is really not powerful enough and I put below my config
- Processor : AMD Phenom(tm) II X4 965 3,4 Ghz
- RAM : 16Go
- Graphic card : NVIDIA GeForce GTX 1050 Ti 4Go
An idea ???
RE: Axcrypt support - undeath - 08-03-2018
axcrypt is a highly iterated, thus slow, hash. Even for very fast hashes, brute-forcing more than 8 characters is hardly feasible. Brute-force is the last resort if you have no other options.
RE: Axcrypt support - laulaf - 08-03-2018
Okay, but what we're doing is raw force, right? But, to avoid being stuck there, would there be something to change in my command line?
RE: Axcrypt support - laulaf - 08-03-2018
OK !!!!! It's all good !!!!!
I did other tests with less characters 7, 6, 5 and it was only 5 characters my password, I had ideas and with 5, it was completed in less than 1 hour !!!
Undeath, THANK YOU, THANK YOU, THANK YOU and THANK YOU !!! I really wanted these pictures, without you I would not have arrived.