New PDF Hash [SOLVED] - Printable Version +- hashcat Forum (https://hashcat.net/forum) +-- Forum: Support (https://hashcat.net/forum/forum-3.html) +--- Forum: hashcat (https://hashcat.net/forum/forum-45.html) +--- Thread: New PDF Hash [SOLVED] (/thread-10227.html) |
New PDF Hash [SOLVED] - libre - 07-23-2021 I extracted the hash of a password protected PDF and am trying to crack it with hashcat, but I get this error: Code: Hashfile 'hash.txt' on line 1 ($pdf$5...248b12eae2eb429ce9c4a7f46c9ad209): Token length exception This is the hash obtained with JohnTheRipper: Code: $pdf$5*6*256*-4*1*16*xxxxxxxxxxxxxxxxxxxxxxxx Is the hash really invalid or simply an unsupported new hash? I also tried cracking it with pdfcrack but got the error: Code: The specific version is not supported (Standard - 6) RE: New PDF Hash - Snoopy - 07-23-2021 what version of hashcat do u use? fast try with 6.2.3 works fine plz remove your hash now RE: New PDF Hash - libre - 07-23-2021 (07-23-2021, 01:35 PM)Snoopy Wrote: what version of hashcat do u use? fast try with 6.2.3 works fine v6.1.1 , the one available in Ubuntu repos. It's not allowed to publish hashs? I don't mind having it public, it's a simple password not used anywhere else and only protects a harmless PDF. RE: New PDF Hash - Xanadrel - 07-23-2021 (07-23-2021, 02:50 PM)libre Wrote:(07-23-2021, 01:35 PM)Snoopy Wrote: what version of hashcat do u use? fast try with 6.2.3 works fine Snoopy is right (either don't post it or mask it), it is advised to read a forum's rules before posting something, consider this a polite warning. RE: New PDF Hash - libre - 07-23-2021 (07-23-2021, 03:09 PM)Xanadrel Wrote: Snoopy is right (either don't post it or mask it), it is advised to read a forum's rules before posting something, consider this a polite warning. Done. Which mode I should use for my hash type though? $pdf$5*6*256 RE: New PDF Hash - Xanadrel - 07-23-2021 If you use latest version of hashcat you would have the automatic analysis of hashes, so if you don't use -m and there is a single possible mode it will use it. You can also use this wiki page as reference: https://hashcat.net/wiki/doku.php?id=example_hashes (And there are these options in hashcat itself too: --identify and --example-hashes) RE: New PDF Hash - libre - 07-23-2021 (07-23-2021, 03:25 PM)Xanadrel Wrote: If you use latest version of hashcat you would have the automatic analysis of hashes, so if you don't use -m and there is a single possible mode it will use it. I'm running latest now but I'm getting an error: Code: User:Laptop~/Desktop$ hashcat -b --benchmark-all I have a laptop without a powerful GPU. I downloaded the latest version and installed with make && sudo make install on my Ubuntu 21.04. CL_COMPILE_PROGRAM_FAILURE What went wrong? RE: New PDF Hash - Snoopy - 07-23-2021 plz try uninstalling pocl and switch to the intel opencl runtime provided directly by intel sudo apt-get remove pocl-opencl-icd https://software.intel.com/content/www/us/en/develop/articles/opencl-drivers.html#cpu-section or try to search for the intel-opencl in your package manager pocl seems to "misbehave" sometimes RE: New PDF Hash - libre - 07-23-2021 (07-23-2021, 04:11 PM)Snoopy Wrote: plz try uninstalling pocl and switch to the intel opencl runtime provided directly by intel I did: Code: sudo apt-fast remove pocl-opencl-icd Package was replaced successfully. Then I retried: Code: User@Laptop:~$ hashcat -b --benchmark-all Should I recompile hashcat? RE: New PDF Hash - libre - 07-23-2021 Got it working, password cracked =D What solved the error, in case someone else has same issue: Code: sudo apt-fast remove pocl-opencl-icd Then downloaded this directly from Intel: https://registrationcenter.intel.com/en/forms/?productid=3206 Had to register and submit to their terms though =/ Then: Code: sudo apt-fast install lsb-core And hashcat finally worked. Password was quite simple and cracked in a matter of minutes with: Code: hashcat -a 3 -m 10700 hash.txt -O Thanks guys! |