+- hashcat Forum (https://hashcat.net/forum)
+-- Forum: Misc (https://hashcat.net/forum/forum-15.html)
+--- Forum: General Talk (https://hashcat.net/forum/forum-33.html)
+--- Thread: All Chars = Big Chaos (/thread-2275.html)
All Chars = Big Chaos - TrAnn3l - 04-30-2013
I just wanted to crack every possible hash, so i mkade my self a charset, which contains all chars in hex, and used it in bruteforce mode in oclHashcat. I was surprised, because it looks like ther would be after many hashes a double [LF] or in hex 0x0A. So in the pot file, there are many blank lines, because double [LF] is just like ENTER.
I don't know, how to handle this.
I just had a few thoughts how that could be happen, and then i discovered, that when you log into a website, you often use ENTER to log in, instead of pressing the login button.
extract of the pot file:
Code:
01ebeaafc334e503f4acc94a18df9fa5:1122
063ae6f07f0d8fd2e598e451cdb942b5:7192
296d46937e5ce248e219593813e546b6:shit
00cdaacb24f13aa4af8f084ff2c304c8:7265
1f1f1eb58e44d5d24e44070b3b29c0d5:9542
29550bc8caab76137fa6b70f5e71b1d9:6172
1e21e02a72c5516c33f2a791ee03cbd9:2272
223c4d85dae6c8b1a1405c8aff7018e5:1215
246848a09d9700dc1d1e5945453216f3:wk85
22be9002ee0233c0a89c411d0b6009ff:3535
203b07dda5b10c4d7b8a09dc63550106:6632
054bfd3ce64edc478057eaaefdfe1d09:7252
18f431045fdd20bc3cdf58f882874655:pass
176afe04d49b9770d64a27f97d21d337:bios
0d70128ac1abb96dd54bd4cc483375fa:lejtRE: All Chars = Big Chaos - epixoip - 04-30-2013
with odd plains like this it's good to use one of the outfile formats that include hex_plain
hitting enter on an html form won't actually append a line feed, unless it's a multiline text box. it's more likely that the algorithm used is md5(pass . "\n") or something
RE: All Chars = Big Chaos - TrAnn3l - 04-30-2013
ok, nice to know.
I tried that already, i still get blank lines.
RE: All Chars = Big Chaos - epixoip - 05-01-2013
you will still get the blank lines, yes. there is no avoiding that...
RE: All Chars = Big Chaos - atom - 05-02-2013
Yes, this is a common technique. Some websites use CR as salt which leads to all kind of confusing results.
RE: All Chars = Big Chaos - Incisive - 05-03-2013
You can use
Code:
--outfile=Myfile.out --outfile-format=5instead; then at least hash and password will be in hex, except the :'s of your separator character. I don't know if the salt's in hex in this mode or not, though.
RE: All Chars = Big Chaos - hannhimhe - 05-04-2013
Is it possible to append ($) a linefeed (hex 0a) to a dictionary attack using rules?
RE: All Chars = Big Chaos - Waffle - 05-04-2013
of course it is possible to write a rule for this.
^[tab]+0{
Insert a tab character at the start of the word. Increment it (0x9 -> 0xa). Rotate it into position.
RE: All Chars = Big Chaos - atom - 05-13-2013
nice
