hashcat Forum
Recover NTLM with charset: !@$etaoinshrdlu134579 - Printable Version

+- hashcat Forum (https://hashcat.net/forum)
+-- Forum: Deprecated; Previous versions (https://hashcat.net/forum/forum-29.html)
+--- Forum: Old oclHashcat Support (https://hashcat.net/forum/forum-38.html)
+--- Thread: Recover NTLM with charset: !@$etaoinshrdlu134579 (/thread-3170.html)



Recover NTLM with charset: !@$etaoinshrdlu134579 - Darning - 02-23-2014

How do I recover an NTLM password by using Hashcat with this charset: !@$etaoinshrdlu134579


RE: Recover NTLM with charset: !@$etaoinshrdlu134579 - epixoip - 02-23-2014

simply define that as a custom charset, then use that custom charset in your mask. you will need to encase that string in single quotes though to prevent your shell from expanding the ! and $


RE: Recover NTLM with charset: !@$etaoinshrdlu134579 - Darning - 02-23-2014

(02-23-2014, 12:33 AM)epixoip Wrote: simply define that as a custom charset, then use that custom charset in your mask. you will need to encase that string in single quotes though to prevent your shell from expanding the ! and $

How do I do that? Could you give me the code command?


RE: Recover NTLM with charset: !@$etaoinshrdlu134579 - Si2006 - 02-23-2014

really...

-1 '!@$etaoinshrdlu134579' ?1?1?1?1?1?1?1?1


RE: Recover NTLM with charset: !@$etaoinshrdlu134579 - Darning - 02-23-2014

(02-23-2014, 01:02 AM)Si2006 Wrote: really...

-1 '!@$etaoinshrdlu134579' ?1?1?1?1?1?1?1?1

Yes, really. I can't help an overload of unclear documentation with references such as 'this is depreciated now' and 'this version is outdated' and hashcat simply not showing the current password it is trying. This does not work: -1 '!@$etaoinshrdlu134579' ?1?1?1?1?1?1?1?1. It says line-length exception error.


RE: Recover NTLM with charset: !@$etaoinshrdlu134579 - Si2006 - 02-23-2014

Well if your have line length exception your file containing your hash is invalid.
The custom charset and mask is spot on, It's does work.

So make sure you don't have trailing spaces in your file!, Line count should be 32.


RE: Recover NTLM with charset: !@$etaoinshrdlu134579 - Darning - 02-23-2014

(02-23-2014, 01:52 AM)Si2006 Wrote: Well if your have line length exception your file containing your hash is invalid.
The custom charset and mask is spot on, It's does work.

So make sure you don't have trailing spaces in your file!, Line count should be 32.

Well, what does your complete command looks like? The password is 10 characters or longer.


RE: Recover NTLM with charset: !@$etaoinshrdlu134579 - atom - 02-23-2014

You can also put all characters into a file (all in one line) and then use -1 filename

Should save you headache about the escaping


RE: Recover NTLM with charset: !@$etaoinshrdlu134579 - Darning - 02-23-2014

(02-23-2014, 11:45 AM)atom Wrote: You can also put all characters into a file (all in one line) and then use -1 filename

Should save you headache about the escaping

Same 'line-length exception' error here:
oclHashcat32.exe -a 3 -m 1000 -p : -o "D:\found.txt" --outfile-format=3 -n 32 --markov-disable --gpu-temp-abort=80 -i --increment-min=10 --increment-max=11 -1 mycharsetfile.txt "<hash removed>"


RE: Recover NTLM with charset: !@$etaoinshrdlu134579 - philsmd - 02-23-2014

Hey, since you neglected to follow the rules (http://hashcat.net/forum/announcement-2.html ), I've locked your account for 1 week.

Now you've plenty of time to:
1. read again the forum rules
2. read the wiki (http://hashcat.net/wiki/ ) and especially the hash input formats (http://hashcat.net/wiki/doku.php?id=example_hashes ) and how easy it is to use custom charsets (http://hashcat.net/wiki/doku.php?id=mask_attack#custom_charsets ) by defining *and using* the defined charsets e.g. w/ -1 mycharsetfile.txt ?1?1?1?1?1?1?1?1?1?1?1
3. understand how easy it is to find those answers to your question also by using the forum search (http://hashcat.net/forum/search.php )

I hope you follow the rules in the future.