+- hashcat Forum (https://hashcat.net/forum)
+-- Forum: Deprecated; Previous versions (https://hashcat.net/forum/forum-29.html)
+--- Forum: Old hashcat Support (https://hashcat.net/forum/forum-20.html)
+--- Thread: Can any forensic tool discern the password length? (/thread-4780.html)
Can any forensic tool discern the password length? - basskleff - 11-04-2015
Hi all,
I have been using hashcat a little while, and I am familiar with similar tools, jtr and pyrit.
I've also started using The-Distribution-Which-Does-Not-Handle-OpenCL-Well (Kali)'s crunch, wifite, fern, etc.
This is perhaps not so much a question about hashcat per se, but a general question about the collective attack tools (The-Distribution-Which-Does-Not-Handle-OpenCL-Well (Kali), hashcat, etc.)
I am testing cracking on a wpa2 wireless network hash, and one thing that would be extremely useful in a brute-force attack is if any of these tools could discern the actual, specific length of the target password- i.e, "10 characters", "25 characters", etc., so one could know and plan the attack accordingly.
Is that possible with any of the tools?
It's one thing to have to make 95^10 or 95^25 guesses, but another to have to add them all up in between- 95^10 +95^11+....95^25 is loads more work/time and processing.
Thanks ahead!
RE: Can any forensic tool discern the password length? - epixoip - 11-04-2015
No, this is not possible (that we know of.)
RE: Can any forensic tool discern the password length? - basskleff - 11-06-2015
Thank you.
So it's either let the processor run indefinitely 24x7, or cleverly deduce/induce other means to pare down the number of guesses attempted, I suppose.
Cheers
RE: Can any forensic tool discern the password length? - xoxox - 11-07-2015
when cracking wireless networks i usually find it useful to look up the make of the route and the isp and this way get an idea of the password lenght and characters used.
often if you google images of the router it shows the sticker on the back with the password.