hashcat Forum
User:Hash Saving Syntax? - Printable Version

+- hashcat Forum (https://hashcat.net/forum)
+-- Forum: Deprecated; Previous versions (https://hashcat.net/forum/forum-29.html)
+--- Forum: Old oclHashcat Support (https://hashcat.net/forum/forum-38.html)
+--- Thread: User:Hash Saving Syntax? (/thread-3698.html)

User:Hash Saving Syntax? - HashMonster - 09-29-2014

My source file is using "user:hash", and I want to have hashcat save the email and assign it back to the corresponding cracked hash.

My syntax currently is
oclHashcat64.exe -m 0 --username --outfile=cracked.txt --remove hash.txt wordlist/rockyou.txt

And this doesn't appear to do the trick as it saves the hash:
8afa847f50a716e43752d995c8e7435a:testhash

I want output to look like
testhash@yahoo.com:testhash

Any syntax help would be NEEDED direly, and greatly appreciated.

RE: User:Hash Saving Syntax? - philsmd - 09-29-2014

See wiki and --help:

You need to do it in 2 steps.
1. crack the hashes:

Code:
oclHashcat64.exe -m 0 --username hash.txt wordlist/rockyou.txt

2. display the hashes w/ --show

Code:
oclHashcat64.exe -m 0 --username --show --outfile-format 2 hash.txt

You can also use
Code:
oclHashcat64.exe -m 0 --username --show --outfile cracked.txt --outfile-format 2 hash.txt

if you want to redirect the output to that specific file.

RE: User:Hash Saving Syntax? - HashMonster - 09-29-2014

when I use this command I'm getting only cracked hashes filling up the entire file:
password
password
password

with not hash or email attached.

I should mention that the "users" are actually emails, if that makes a difference.

RE: User:Hash Saving Syntax? - philsmd - 09-29-2014

yes, thx for testing...
It seems that it only works w/o --outfile-format 2 (or more correctly, it works w/ all outfile-formats that also output the hash at the beginning)...

I think we will categorize this as a bug and next version will output the username always when --username and --show are used together. (BTW next version of oclHashcat 1.31 will be releason soon afaik)


PS: progress of this problem is trac(k)ed here: https://hashcat.net/trac/ticket/513
PS2: I must correct myself for the --outfile-format x parameter you need in your specific case, see --help but it should be --outfile-format 1 (only hash[Confusedalt])