hashcat Forum
All Chars = Big Chaos - Printable Version

+- hashcat Forum (https://hashcat.net/forum)
+-- Forum: Misc (https://hashcat.net/forum/forum-15.html)
+--- Forum: General Talk (https://hashcat.net/forum/forum-33.html)
+--- Thread: All Chars = Big Chaos (/thread-2275.html)



All Chars = Big Chaos - TrAnn3l - 04-30-2013

I just wanted to crack every possible hash, so i mkade my self a charset, which contains all chars in hex, and used it in bruteforce mode in oclHashcat. I was surprised, because it looks like ther would be after many hashes a double [LF] or in hex 0x0A. So in the pot file, there are many blank lines, because double [LF] is just like ENTER.

I don't know, how to handle this.

I just had a few thoughts how that could be happen, and then i discovered, that when you log into a website, you often use ENTER to log in, instead of pressing the login button.

extract of the pot file:
Code:
01ebeaafc334e503f4acc94a18df9fa5:1122

063ae6f07f0d8fd2e598e451cdb942b5:7192

296d46937e5ce248e219593813e546b6:shit
00cdaacb24f13aa4af8f084ff2c304c8:7265

1f1f1eb58e44d5d24e44070b3b29c0d5:9542

29550bc8caab76137fa6b70f5e71b1d9:6172

1e21e02a72c5516c33f2a791ee03cbd9:2272

223c4d85dae6c8b1a1405c8aff7018e5:1215

246848a09d9700dc1d1e5945453216f3:wk85

22be9002ee0233c0a89c411d0b6009ff:3535

203b07dda5b10c4d7b8a09dc63550106:6632

054bfd3ce64edc478057eaaefdfe1d09:7252

18f431045fdd20bc3cdf58f882874655:pass
176afe04d49b9770d64a27f97d21d337:bios
0d70128ac1abb96dd54bd4cc483375fa:lejt



RE: All Chars = Big Chaos - epixoip - 04-30-2013

with odd plains like this it's good to use one of the outfile formats that include hex_plain

hitting enter on an html form won't actually append a line feed, unless it's a multiline text box. it's more likely that the algorithm used is md5(pass . "\n") or something


RE: All Chars = Big Chaos - TrAnn3l - 04-30-2013

ok, nice to know.
I tried that already, i still get blank lines.


RE: All Chars = Big Chaos - epixoip - 05-01-2013

you will still get the blank lines, yes. there is no avoiding that...


RE: All Chars = Big Chaos - atom - 05-02-2013

Yes, this is a common technique. Some websites use CR as salt which leads to all kind of confusing results.


RE: All Chars = Big Chaos - Incisive - 05-03-2013

You can use
Code:
--outfile=Myfile.out --outfile-format=5

instead; then at least hash and password will be in hex, except the :'s of your separator character. I don't know if the salt's in hex in this mode or not, though.


RE: All Chars = Big Chaos - hannhimhe - 05-04-2013

Is it possible to append ($) a linefeed (hex 0a) to a dictionary attack using rules?


RE: All Chars = Big Chaos - Waffle - 05-04-2013

of course it is possible to write a rule for this.

^[tab]+0{

Insert a tab character at the start of the word. Increment it (0x9 -> 0xa). Rotate it into position.


RE: All Chars = Big Chaos - atom - 05-13-2013

nice Smile