+- hashcat Forum (https://hashcat.net/forum)
+-- Forum: Support (https://hashcat.net/forum/forum-3.html)
+--- Forum: hashcat (https://hashcat.net/forum/forum-45.html)
+--- Thread: Asterisk sign in hash? (/thread-12239.html)
Asterisk sign in hash? - Burtie - 11-28-2024
I've been following some tutorials on how to get the password from password protected winrar archives.
I'm a total newbie so it took me some time to even get things started.
It's my own rar archive but its old and I'm pretty sure I had some simple password for it.
So I used John the Ripper to get the hash (I think its called). But the problem is that the hash was pages long? Not just a few lines as in the tutorials. So after some reading I think I got what I need, only the most important line to use.
But it has asterisks in it (*), seven of them. Is that normal or am I doing something wrong?
RE: Asterisk sign in hash? - penguinkeeper - 11-28-2024
Yep, that's perfectly normal. Archive hashes use the asterisk to delimit different fields and often the size of the hash scales with how long the archive is, so if you have a large archive, the hash will be bigger. There are some examples here:
https://hashcat.net/wiki/doku.php?id=example_hashes
RE: Asterisk sign in hash? - Burtie - 11-28-2024
(11-28-2024, 07:00 PM)penguinkeeper Wrote: Yep, that's perfectly normal. Archive hashes use the asterisk to delimit different fields and often the size of the hash scales with how long the archive is, so if you have a large archive, the hash will be bigger. There are some examples here:
https://hashcat.net/wiki/doku.php?id=example_hashes
Thank you for replying.
In my case the hash starts with "$RAR3$*1*" and as I mentioned the hash is huge (367MB).
output.txt takes over a minute to scroll from top to bottom
It's not a locked archive, I can open it but need the password to extract what's in it.
I'm not sure what part of the hash I need to go further and I guess I'm not supposed to use the massive content in output.txt?
RE: Asterisk sign in hash? - zamgold - 12-01-2024
(11-28-2024, 07:37 PM)Burtie Wrote:(11-28-2024, 07:00 PM)penguinkeeper Wrote: Yep, that's perfectly normal. Archive hashes use the asterisk to delimit different fields and often the size of the hash scales with how long the archive is, so if you have a large archive, the hash will be bigger. There are some examples here:
https://hashcat.net/wiki/doku.php?id=example_hashes
Thank you for replying.
In my case the hash starts with "$RAR3$*1*" and as I mentioned the hash is huge (367MB).
output.txt takes over a minute to scroll from top to bottom
It's not a locked archive, I can open it but need the password to extract what's in it.
I'm not sure what part of the hash I need to go further and I guess I'm not supposed to use the massive content in output.txt?
I can try to find the password if you give me a link to the archive in a private message, and if there is additional information about the password