Modify Session files to resume at choosen point

Modify Session files to resume at choosen point - Printable Version

+- hashcat Forum (https://hashcat.net/forum)
+-- Forum: Misc (https://hashcat.net/forum/forum-15.html)
+--- Forum: User Contributions (https://hashcat.net/forum/forum-25.html)
+--- Thread: Modify Session files to resume at choosen point (/thread-3212.html)

Modify Session files to resume at choosen point - prophil - 03-08-2014

Hey everybody,

My first attempt with this tool made me playing around a little and then I (actually, my GPU, hehe) spend days working my dict-files .. but I screwed up the session file. All I know is that I was at 87% after those 3 days. I didn't want to start all over again, I wanted to continue at those 87%.

That's how you do it.
Open the session file in an hex-editor, I use HxD. I don't know how to describe the location, sorry, please look at the screenshot to find the place. that is your current progress, even though in the wrong order Smile

you have to kind of typing it backwards in your calculator. if you convert it to dec, it will show you the same like oclhash. so feel free to choose a different start number, convert it to hex, turn it around (A1 B2 C3 E4 = E4 C3 B2 A1) and replace the original number with that. Save.

Happy women day 2014!
PhiL

RE: Modify Session files to resume at choosen point - atom - 03-11-2014

oclHashcat v1.20 will have better support for manual restore point setting

RE: Modify Session files to resume at choosen point - gecko64 - 12-25-2015

(03-11-2014, 07:47 PM)atom Wrote: oclHashcat v1.20 will have better support for manual restore point setting

Hi ! I'm on the last version of Cudahashcat and i don't find the option to restart at X pourcent ? I was at 59.95%
I created a session but when i've used the restore option, it didn't restart where i was; maybe because i've stopped the program with a CTRL + C.
Here, there are three hours that i'm searching this option but i don't find Undecided

Command used :
cudaHashcat64.exe --status --status-timer=1 --session namesession --restore -m 2500 -a3 file.hccap ?u?u?u?u?u?u?u?u

No idea if someone can help me ?
Thx in advance :-)

RE: Modify Session files to resume at choosen point - philsmd - 12-25-2015

That is easy and if you didn't find the answer in the forum already, you shoud find it easily by looking at the --help output:

Code:
-s,  --skip=NUM                    Skip number of words

to find the "correct value" for you you first need to run:

Code:
$ cudaHashcat64.exe -m 2500 -a 3 --keyspace file.hccap ?u?u?u?u?u?u?u?u

8031810176

(btw: this is the same value that you see in the status screen: Restore.Point..: 0/8031810176 (0.00%))

Then just do the math: 8031810176 * 0.5995 = 4815070200

That means you should run it like this (-s value):

Code:
cudaHashcat64.exe --status --status-timer 1 --session namesession -s 4815070200 -m 2500 -a 3 file.hccap ?u?u?u?u?u?u?u?u

Note: of course it would also be possible to modify the .restore file, but that might be a little bit more complicated
Note2: I don't know how accurate your statement "it was at 59.95 %" is, maybe you should start a little bit before 59.95% to make sure you don't miss keyspace (it would be important that also the restore point was at least at 59.95 % to guarantee that you don't miss any crack)

RE: Modify Session files to resume at choosen point - gecko64 - 12-25-2015

(12-25-2015, 04:53 PM)philsmd Wrote: That is easy and if you didn't find the answer in the forum already, you shoud find it easily by looking at the --help output:

Code:
-s, --skip=NUM Skip number of words

to find the "correct value" for you you first need to run:

Code:
$ cudaHashcat64.exe -m 2500 -a 3 --keyspace file.hccap ?u?u?u?u?u?u?u?u 8031810176

(btw: this is the same value that you see in the status screen: Restore.Point..: 0/8031810176 (0.00%))

Then just do the math: 8031810176 * 0.5995 = 4815070200

That means you should run it like this (-s value):

Code:
cudaHashcat64.exe --status --status-timer 1 --session namesession -s 4815070200 -m 2500 -a 3 file.hccap ?u?u?u?u?u?u?u?u

Note: of course it would also be possible to modify the .restore file, but that might be a little bit more complicated
Note2: I don't know how accurate your statement "it was at 59.95 %" is, maybe you should start a little bit before 59.95% to make sure you don't miss keyspace (it would be important that also the restore point was at least at 59.95 % to guarantee that you don't miss any crack)

Thx for your help ! :-)