+- hashcat Forum (https://hashcat.net/forum)
+-- Forum: Support (https://hashcat.net/forum/forum-3.html)
+--- Forum: hashcat (https://hashcat.net/forum/forum-45.html)
+--- Thread: $RAR3$*1* (/thread-11029.html)
$RAR3$*1* - HashGov - 09-27-2022
Hi,
I have a RAR file. When I extract the hash with rar2john, I get the following hash (I inserted the XXX).
Is that correct that the file name appears in the hash? The format does not match Mode 23700 and 23800. Does somebody has any idea? Thanks
$RAR3$*1*59fc32xxxxxe8975*dc022ff5*6432*9373*0*C:\xxx.rar*19560*35:1::Hello.txt
RE: $RAR3$*1* - marc1n - 09-27-2022
Use john the ripper https://www.openwall.com/john/
RE: $RAR3$*1* - Snoopy - 09-28-2022
simply delete the extra data, im not quite sure right now first try deleting ::Hello.txt, if hashcat still says token lenght exception delete also the :1
i think :1 just tells, that there is :1 = one file in your rar, named Hello.txt
there are some scripts from JtR which outputs more data than hashcat needs
RE: $RAR3$*1* - HashGov - 09-29-2022
Worked. Delete everything after the ":".
Thank you.