hashcat for keepass using combination of the same wordslist - Printable Version +- hashcat Forum (https://hashcat.net/forum) +-- Forum: Support (https://hashcat.net/forum/forum-3.html) +--- Forum: hashcat (https://hashcat.net/forum/forum-45.html) +--- Thread: hashcat for keepass using combination of the same wordslist (/thread-10838.html) |
hashcat for keepass using combination of the same wordslist - domiq44 - 06-20-2022 Hello, I am a newbie of hashcat. But I find this activity very interesting. Here is an exercise that I play with. I have created a KeePass database "demo.kdbx" with a master password. The master password is 'B0B!3-S@M!3'. The master password match the following template XXXXSYYYY, where XXXX and YYYY come from a given words list, and S is a symbol. XXXX or YYYY may be a variant of an original word by replacing some character by symbols or numbers. Examples: BOBIE -> B0B!3 SAMIE -> S@M!3 Symbol S can be one of "!@+-..." and other symbols. I have created file words.txt with content: Code: BOBIE And use the following command : Code: $ keepass2john demo.kdbx > demo.hash Then remove at the beginning of line the word 'demo:'. Code: $ cat demo.hash Code: $ hashcat -a 1 -m 13400 -j '$-' demo.hash words.txt words.txt But the password was not found !? Here is the output : Code: hashcat (v5.1.0) starting... When I try to see potfile, nothing Code: $ hashcat --show demo.hash I need some help please Thanks. Dominique RE: hashcat using comination of the same wordslist - Banaanhangwagen - 06-20-2022 You need to precise the modus; try your --show command again with -m 13400 Bonus tip: make sure to use the latest Hashcat; you can find it on this website RE: hashcat using comination of the same wordslist - domiq44 - 06-20-2022 (06-20-2022, 01:37 PM)Banaanhangwagen Wrote: You need to precise the modus; try your --show command again with -m 13400 Thank you ! You are right ! Code: $ hashcat --show -m 13400 demo.hash The password has been found ! Great ! RE: hashcat for keepass using combination of the same wordslist - domiq44 - 06-20-2022 Is there any mean to put in the words list "words.txt" only original words like this : Code: BOBIE And to tell to hashcat to generate patterns like B0B!3, S@M!3 ? Or to add condidates like them using options ? RE: hashcat for keepass using combination of the same wordslist - Banaanhangwagen - 06-20-2022 you need to play with rules for that; see https://hashcat.net/wiki/doku.php?id=rule_based_attack RE: hashcat for keepass using rules and combination of the same wordslist - domiq44 - 06-20-2022 (06-20-2022, 02:02 PM)Banaanhangwagen Wrote: you need to play with rules for that; see https://hashcat.net/wiki/doku.php?id=rule_based_attack Words file "words.txt is now : Code: BOBIE And I have created the rule file "rules.txt" Code: : But when I want to use it, I get : Code: $ hashcat -a 1 -m 13400 -j '$-' -r rules.txt demo.hash words.txt words.txt So, I can't use mode 0 (attack) since I work with mode 1 (combinator) !? RE: hashcat for keepass using combination of the same wordslist - Banaanhangwagen - 06-20-2022 Correct. There are different techniques/approaches to tackle this, for example working with princeprocessor... RE: hashcat for keepass using combination of the same wordslist - domiq44 - 06-20-2022 (06-20-2022, 02:45 PM)Banaanhangwagen Wrote: Correct. Thank you for your help. But I don't know this technique/approache RE: hashcat for keepass using combination of the same wordslist - domiq44 - 06-20-2022 I've just seen the url https://github.com/hashcat/princeprocessor I'll take a look at this and will try to adapt my exercise. Thank you. |