+- hashcat Forum (https://hashcat.net/forum)
+-- Forum: Deprecated; Ancient Versions (https://hashcat.net/forum/forum-46.html)
+--- Forum: Very old oclHashcat-plus Support (https://hashcat.net/forum/forum-23.html)
+--- Thread: Timestamp for cracked hash (/thread-2864.html)
Timestamp for cracked hash - Immy - 11-25-2013
Hi!
Is there any solution to write timestamp for cracked hash?
RE: Timestamp for cracked hash - shrimp - 11-25-2013
https://hashcat.net/trac/ticket/215
RE: Timestamp for cracked hash - philsmd - 11-25-2013
I understand that this could be an interesting feature (a new outfile-format)
But for the time being, you could just use the --quiet and stdout feature (ie. not use -o) to modify the output:
Very simple example, append the output of unix date command to each output line:
Code:
./oclHashcat-plus64.bin -m 0 m0000.txt --increment-min 7 --increment-max 12 -i -a 3 hashca?a?a?a?a?a?a --quiet 2>/dev/null | sed -r 's/^(.*)$/echo \1:$(date)/e'For instance the sed command adds to each line the "date" (you could do anything here, also add unix timestamp or different timezone etc)
Drawback: maybe not each line that is outputted contains hash:plain pairs (e.g. in case of failures etc... but then the stderr should be ignored as above - default case, but you shouldn't redirect stderr to stdout, so 2>&1 should be avoided).
You can pipe the modified output to a file, e.g. ... | sed ... > cracked_with_timestamp.txt
PS. there exists similar tools (like sed/awk ...) for win users too, also sed is available as utility for win etc, therefore this should work cross-plattform... but again, build-in option might be better, since it could deal w/ special events (like failures, ...) and special outputs...
PS2. Hmm... it seems you also need to avoid hitting any key, like 's' for status, since this also will end up in stdout... so yes, it is just a hack w/ some drawbacks
PS3. Another huge problem could be the buffering that (could) occur (depending on your os - settings) between each site of the pipe, therefore if "two lines" are outputted together (maybe at different times, but within the same buffered block), sed would replace them w/ the same date value... (therefore use e.g. unbuffer ./oclHashcat ...)
PS4. we need the external command modifier of sed s.t. the rhs (right hand site) is evaluated each and every time (not only once)
RE: Timestamp for cracked hash - vima - 11-25-2013
We use a wrapper script for this that runs a watcher in another process that polls the password output file every second, writing into a new file with the time every time there is a new entry.