hashcat Forum
mode -a 5 Not working - Printable Version

+- hashcat Forum (https://hashcat.net/forum)
+-- Forum: Deprecated; Previous versions (https://hashcat.net/forum/forum-29.html)
+--- Forum: Old hashcat Support (https://hashcat.net/forum/forum-20.html)
+--- Thread: mode -a 5 Not working (/thread-1841.html)



mode -a 5 Not working - eljolot - 12-17-2012

I have downloaded hashcat-0.41 and tried to use mode -a 5 table look up, I tought I was doing all wrong And tried to make a test, to see if I'm using right that mode And I found this

On mi table file is

Code:
a=aA4@
b=bB8-
c=cC-
d=dD-
e=Ee3-
f=Ff-
g=G6g-
h=Hh-
j=Jj-
k=Kk-
l=lL-
m=Mm-
n=nN-
o=oO0-@
q=qQ-
r=Rr-
s=S5s
u=uU-
v=Vv-
w=wW-
x=xX-
y=Yy-
z=Zz-
On my dic.txt is

Code:
fuckyoualireza
stevezippo
davidolsen1234
87tapai

and the hash is 44d18509f01f2a1a95ccc79cd1527e2e:87t@p@i

I writed in this way
Code:
./hashcat-cli32.bin -a 5 -m 0 '/root/Desktop/1.txt'   '/root/Desktop/dic.txt'                        --output-format=0 --output-file=/root/Desktop/founded1.txt --remove --table-file=/root/Desktop/tablas.table --table-min=1 --table-max=20

And got

Input.Mode: Dict (/root/Desktop/dic.txt)
Index.....: 1/1 (segment), 4 (words), 49 (bytes)
Recovered.: 0/1 hashes, 0/1 salts
Speed/sec.: - plains, - words
Progress..: 4/4 (100.00%)
Running...: --:--:--:--
Estimated.: --:--:--:--

In hashcat 0.40 works fine but in 0.41 is not doing it. at least for me.


RE: mode -a 5 Not working - M@LIK - 12-17-2012

It wasn't officially, properly documented or explained but:
Tables used in Table Look-up attacks has a slightly changed format since -0.41, see below:
CHAR=STR
Where CHAR is a single character, and STR is the desired substitute, note that it can be a single character, too, or it can be a whole string, including wide characters.

So, to have your hash cracked use the following table:
Code:
a=a
a=A
a=4
a=@
a=/\
a=æ
...
Yes, you do have to repeat the char if you want to have multiple substitutions.


RE: mode -a 5 Not working - undeath - 12-17-2012

lol, that's cool. Didn't realize this feature has changed.


RE: mode -a 5 Not working - eljolot - 12-17-2012

(12-17-2012, 10:10 PM)M@LIK Wrote: It wasn't officially, properly documented or explained but:
Tables used in Table Look-up attacks has a slightly changed format since -0.41, see below:
CHAR=STR
Where CHAR is a single character, and STR is the desired substitute, note that it can be a single character, too, or it can be a whole string, including wide characters.

So, to have your hash cracked use the following table:
Code:
a=a
a=A
a=4
a=@
a=/\
a=æ
...
Yes, you do have to repeat the char if you want to have multiple substitutions.

Thnx M@LIK

Code:
Added hashes from file /root/Desktop/1.txt: 1 (1 salts)
Activating quick-digest mode for single-hash

NOTE: press enter for status-screen

All hashes have been recovered