hashcat Forum
Output with --show help. - Printable Version

+- hashcat Forum (https://hashcat.net/forum)
+-- Forum: Deprecated; Ancient Versions (https://hashcat.net/forum/forum-46.html)
+--- Forum: Very old oclHashcat-plus Support (https://hashcat.net/forum/forum-23.html)
+--- Thread: Output with --show help. (/thread-1700.html)



Output with --show help. - DanUK - 10-27-2012

Basically, I have a file which looks like.

email:hash

And I have a file which looks like

hash:pass.

I've tried writing a script to match these up, but I fucking failed. I want the output to be like email:pass.

I've tried looking at replied on here from earlier threads, but It's not working for me.

This Is what I'm using.

Code:
oclHashcat-plus64.exe --show --outfile [output file] --outfile-format 2 [dicts]

But I'm getting this error.

Code:
Usage: oclHashcat-plus64.exe [options]... hash|hashfile|hccapfile [dictionary|mask|directory]...

Try --help for more help.

I've tried adding -m 3000 (it's plain md5 hashes), but it's not helping.

Any input is appreciated.


RE: Output with --show help. - M@LIK - 10-28-2012

oclHashcat-plus's --show is too simple to do that.

Apparently, you're on Windows. So grab gawk (Google it) and run the following kinda-ugly one-liner:
Code:
gawk -F: "FNR==NR{a[$2]=$1;next} $1 in a{print a[$1] FS $2}" email.hash.txt hash.pass.txt > email.pass.txt
Note: Pwds with ':' in them will not get extracted correctly.



RE: Output with --show help. - DanUK - 10-28-2012

(10-28-2012, 12:14 AM)M@LIK Wrote: oclHashcat-plus's --show is too simple to do that.

Apparently, you're on Windows. So grab gawk (Google it) and run the following kinda-ugly one-liner:
Code:
gawk -F: "FNR==NR{a[$2]=$1;next} $1 in a{print a[$1] FS $2}" email.hash.txt hash.pass.txt > email.pass.txt
Note: Pwds with ':' in them will not get extracted correctly.

Worked like a charm bro.

Thanks so much Smile