hashcat Forum
How do I add a dictionary like Rockyou? - Printable Version

+- hashcat Forum (https://hashcat.net/forum)
+-- Forum: Deprecated; Previous versions (https://hashcat.net/forum/forum-29.html)
+--- Forum: Old hashcat Support (https://hashcat.net/forum/forum-20.html)
+--- Thread: How do I add a dictionary like Rockyou? (/thread-1854.html)

Pages: 1 2


How do I add a dictionary like Rockyou? - Kandeen - 12-21-2012

Hi guys,

I'm quite new at this so normally I wouldn't be asking for help so early on but I'm lacking time to recover this password.

Could someone please give me an example command line of which command I'd have to issue to add a dictionary (like rockyou) to crack a phpass string?

I managed to get a simple brute force command working with some help from the Wiki but the status displayed it'd take > 10 years! I'm not sure if that's normal but surely it wouldn't decrease enough compared with the few days I have left to recover this password.

Help would be much appreciated!


RE: How do I add a dictionary like Rockyou? - forumhero - 12-21-2012

if you use the gui version it'll show you the commands.


RE: How do I add a dictionary like Rockyou? - U_nix - 12-21-2012

Most basic commands:

cd /path/to/binary/

./oclHashcat-plus64.bin -m 0 -a 0 /path/to/hashlist.txt /path/to/dictionary.txt

for multiple dicts in one folder:

./oclHashcat-plus64.bin -m 0 -a 0 /path/to/hashlist.txt /path/to/dictionaryfolder



for combinationattack:

./oclHashcat-plus64.bin -m 0 -a 1 /path/to/hashlist.txt /path/to/dictionary1.txt /path/to/dictionary2.txt


RE: How do I add a dictionary like Rockyou? - Kandeen - 12-21-2012

Hi guys,

Thanks for your replies. I got a dictionary attack working, unfortunately it has been running for 3 hours now and the time left display is 13 years.

Am I just unlucky with the password I need to crack or are my settings wrong?


RE: How do I add a dictionary like Rockyou? - U_nix - 12-21-2012

What hashtype?

Hashcat should run through a 5gb dictionary in a few minutes if hashtype is MD5 and mode is normal.


RE: How do I add a dictionary like Rockyou? - Kandeen - 12-21-2012

Ah I must've done something wrong then. I used the GUI to select "NVIDIA (CUDA)" and selected phpass in cudahashcat-plus.

I did this cause I didn't see phpass in the normal Hashcat with "CPU only".

Should I pick MD5(phpBB3) in normal hashcat?

Thanks for your quick replies!


RE: How do I add a dictionary like Rockyou? - U_nix - 12-21-2012

I think no.

I don` t know much about phpass() but this is the description:

- Hash algorithm (blowfish, DES, or MD5 in that order if available)
- Salt (random unique salt generated for each password)
- Iterations or password stretching (a specified number of iterations or rounds set as desired)

Source:
http://resources.infosecinstitute.com/wordpress-password-hashes/

I read something about several thousand iterations but that seems to be defined by it` s user. In this case yes. Cracking takes much time. Unique salts, xxxxk iterations etc. is much computing.

So much you can see it as attackvector.

http://stackoverflow.com/questions/5841608/speed-of-different-php-mcrypt-algorithms


RE: How do I add a dictionary like Rockyou? - Kandeen - 12-21-2012

This is...quite complicated!

I did manage to use the GUI to make a command that includes the Rockyou dictionary, best64rule and MD5(phpBB3) and it actually started decrypting, it's giving me an estimated time of 60 minutes before completion.

But does this mean that what it's doing now is pretty much pointless?


RE: How do I add a dictionary like Rockyou? - U_nix - 12-21-2012

Where is the hash from? There could be many variables.

https://www.phpbb.com/kb/article/difference-between-encryption-and-hashing/


RE: How do I add a dictionary like Rockyou? - Kandeen - 12-21-2012

It's from a Wordpress website (if that's what you mean!)

As far as I know they use a custom form of phpass (whatever that means, I read it somewhere)

edit: seems Wordpress is actually associated with -m 400 that being MD5(phpBB3)

Still, the progress is incredibly slow, it went from an hour to an estimated of 9 hours.

hashcat-cli64.exe --hash-mode 400 --rules-file C:\hashcat-gui-0.5.1\hashcat\rules\best64.rule C:\Users\Admin\Desktop\hash.txt C:\Hashcat\rockyou.txt

That's my command that started the decryption. Do you notice anything funky that could slow down the decryption? I know it takes longer the more complex the password is, but I've also seen examples that took only a few minutes so I find 9 hours quite hard to believe.