hashcat Forum
Segmentation fault (core dumped) maybe an exploit - Printable Version

+- hashcat Forum (https://hashcat.net/forum)
+-- Forum: Deprecated; Ancient Versions (https://hashcat.net/forum/forum-46.html)
+--- Forum: Very old oclHashcat-plus Support (https://hashcat.net/forum/forum-23.html)
+--- Thread: Segmentation fault (core dumped) maybe an exploit (/thread-1855.html)



Segmentation fault (core dumped) maybe an exploit - Toil - 12-22-2012

i dunno if it's vulnerable to command execution or not, don't have time to look into it any more.
Code:
http://124.191.80.11/no-problem.txt
output of ./hashcat-ocl-64.bin -c 500 --gpu-accel 160 --gpu-loops 1024 -n 800 --remove -m 0 rsnl/uncracked.txt -o rsnl/cracked.txt -a 3 -1 ?l?d?s?u  dogf


strace of the same command
http://124.191.80.11/no-problem.strace.txt



output of; ./hashcat-ocl-64.bin -c 500 --gpu-accel 160 --gpu-loops 1024 -n 800 --remove -m 0 rsnl/uncracked.txt -o rsnl/cracked.txt -a 3 -1 ?l?d?s?u ~/wordlists/wotwot
http://124.191.80.11/big-problem.txt


strace of same command
http://124.191.80.11/big-problem.strace.txt


~/wordlists/wotwot is a 2.5GB wordlist.



RE: Segmentation fault (core dumped) maybe an exploit - Toil - 12-22-2012

Also, I havea no idea what causes it.


But notice the -a3, -1, and the wordlist

it works fine with just the -a3 stuff, and with just the wordlist.
Ubuntu 12.04, 7970HD radeon


RE: Segmentation fault (core dumped) maybe an exploit - atom - 12-22-2012

Its a null-pointer derefence, no need to worry.


RE: Segmentation fault (core dumped) maybe an exploit - epixoip - 12-23-2012

oclHashcat doesn't run as setuid root, so there's no way it could be exploited to gain anything.