+- hashcat Forum (https://hashcat.net/forum)
+-- Forum: Deprecated; Previous versions (https://hashcat.net/forum/forum-29.html)
+--- Forum: Old oclHashcat Support (https://hashcat.net/forum/forum-38.html)
+--- Thread: Backslash Problem? (/thread-4758.html)
Backslash Problem? - cybob - 10-23-2015
Hi Guys
I'm back testing OclHashcat and I am having a problem.
I was trying to create a mask to crack a password with a "\" backslash in it and it wouldn't work, it kept exhausting.
So I narrowed it down to "\" as the problem and got its NTLM hash as 31D6CFE0D16AE931B73C59D7E0C089C0 and used mask "?s", but it doesn't crack it.
Am I missing something? Is it a forbidden char or something?
Confused.
Thanks in advance
Rob
RE: Backslash Problem? - epixoip - 10-23-2015
Learn how to use your shell.
RE: Backslash Problem? - cybob - 10-23-2015
Not sure what you mean.
This is what I used
oclHashcat64.exe -m 1000 -w 3 -a 3 31D6CFE0D16AE931B73C59D7E0C089C0 ?s
It works for loads of other examples but not this one.
RE: Backslash Problem? - epixoip - 10-23-2015
Backslash is an escape character. You hashed nothing, and thus ended up with a null hash.
The actual nthash of a single backslash character is aa6827f0d30e81d0ece457e99188b6a8:
Code:
epixoip ~ $ echo -n '\' | iconv -t utf16le | openssl md4
(stdin)= aa6827f0d30e81d0ece457e99188b6a8RE: Backslash Problem? - cybob - 10-23-2015
Thanks epixoip
The original password I was trying to crack was "/\rob"
I used oclHashcat64.exe -m 1000 -w 3 -a 3 D0940B824EEB5962029DB6461D46C667 ?s?s?l?l?l
Ahhh got you, got ntlm of "/\\rob" and it worked. (escape the escape char.)
oclHashcat64.exe -m 1000 -w 3 -a 3 5FAFC6A013B1B22FF992E94AA2AB8D64 ?s?s?l?l?l
Thanks for the help
Cheers
Rob.