+- hashcat Forum (https://hashcat.net/forum)
+-- Forum: Deprecated; Previous versions (https://hashcat.net/forum/forum-29.html)
+--- Forum: Old oclHashcat Support (https://hashcat.net/forum/forum-38.html)
+--- Thread: extra chars and mask files (/thread-4716.html)
extra chars and mask files - tracey mo - 10-03-2015
Given this set-up to include some extra German characters:
./oclHashcat64.bin -m 7900 -1 äöüß?l -2 ÜÄÖ?u -3 €?s -a 3 --increment hashes.txt rockyou-7-2592000-copy.hcmask
I could simply use one of the rockyou mask files by making a copy and doing a simple find & replace to switch out:
1 for l
2 for u
3 for s
Correct ?
RE: extra chars and mask files - atom - 10-05-2015
That will work indeed. Note that in this case you're cracking ISO-8859-15, so make sure not use use UTF-8 in your editor.
RE: extra chars and mask files - tracey mo - 10-06-2015
Hi Atom, thanks for your help.
I think that the character encoding is the issue..
I've changed my terminal encoding ( export LANG="ISO-8859-15" )
and even attempted to change the hash files encoding ( iconv -f UTF-8 -t ISO-8859-15 um.txt ->um15.txt )
but still no joy with the following command to catch a hash that should resovle to 'Äü':
./oclHashcat64.bin -m 7900 -1 üäöß?l -2 ÄÖÜ?u -3 €?s -a 3 um15.txt ?2?1
This also fails to catch it: ./oclHashcat64.bin -m 7900 -1 üäöß?l -2 ÄÖÜ?u -3 €?s -a 3 um15.txt Äü
Any encoding will still catch simple passwords with all digits, or all lowercase: ?d?d?d, ?1?1?1
I'm pretty new to this and fear I'm doing something boneheaded here..
If it's important, the site in question was origanally built on an American server, then transfered over to a German one. Passwords were created on each instance with German characters. And I can login no problem with the 'Äü' password.
If it helps at all I can post the hash.?
RE: extra chars and mask files - atom - 10-08-2015
The problem is, if the hash was calculated while the encoding was set to UTF-8, you must attack it using UTF-8, too. Attacking masks with UTF-8 is a bit more complicated, see this blog post how to do it:
http://www.rurapenthe.me/2013/09/cracking-hashes-with-other-language.html