hashcat Forum
--remove ? - Printable Version

+- hashcat Forum (https://hashcat.net/forum)
+-- Forum: Deprecated; Previous versions (https://hashcat.net/forum/forum-29.html)
+--- Forum: Old oclHashcat Support (https://hashcat.net/forum/forum-38.html)
+--- Thread: --remove ? (/thread-4393.html)



--remove ? - suggja - 05-28-2015

Ok, so normally I would input the hash type with -m 10 and then follow it with --remove to have it remove all found hashes in my txt file and leave what isnt. Then I would output the found hashes by cudahashcat64 -m 0 --username --show --outfile-format 2 new.txt -o found.txt

It use to output the selected file with no issues, now for some reason it outputs nothing, what am I doing wrong?


RE: --remove ? - epixoip - 05-28-2015

You can't use --show after using --remove, as --show will have nothing to show since you used --remove to remove the cracked hashes from the list. There will be no matching entries in the hash list, they will have been removed.


RE: --remove ? - suggja - 05-28-2015

Ok so I have a file with mixed MD5, and MD5 password.salt, I want to run the md5 Salt obviously first because if not running just md5 will output weird characters in the found.txt. I only want to leave what it hasnt found in the text file, but im assuming there is no way to do that.


RE: --remove ? - suggja - 05-28-2015

Any ideas?


RE: --remove ? - philsmd - 05-28-2015

It is all very well explained in the FAQ: --show

To sum it up: --show needs to be run on the original (not modified) hash list, it must be run after the cracking was already finished and --left is the "opposite" of --show


RE: --remove ? - suggja - 05-28-2015

Great, so with my MD5 pass salt passes I run it through hashcat, and whatever it finds I output to found.txt then I output a --left txt file to show me whats left. The remainder that I didnt find with MD5 Pass, salt I run with just MD5. Even though the FAQ didnt help, what you said did. Thanks!

Also, dont forget when you use --left you have to change the outfile format to 1 because you have no cracked passwords so it cant be variable 2!


Another question, if you do -m 0 when you are outputting the --left, Will only output the MD5 it found? I noticed I get two different results when I do -m 0 and -m 10 , My thinking is that it is outputting what is LEFT of MD5 and MD5(pass,salt)