hashcat Forum
How about RAR5 to hashcat? - Printable Version

+- hashcat Forum (https://hashcat.net/forum)
+-- Forum: Deprecated; Previous versions (https://hashcat.net/forum/forum-29.html)
+--- Forum: Old oclHashcat Support (https://hashcat.net/forum/forum-38.html)
+--- Thread: How about RAR5 to hashcat? (/thread-5300.html)



How about RAR5 to hashcat? - halexan - 03-01-2016

As we know, oclHashcat-2.10b134 already supported RAR5. Is there any tools to convert RAR5 to hashcat hash formats?

According to what I know, "rar2john" probably do not support RAR5. Am I right?


RE: How about RAR5 to hashcat? - epixoip - 03-01-2016

No that's incorrect, rar2john supports RAR5. The problem is, it is not a standalone utility. It is compiled into john. I've looked at breaking it out into a standalone utility, but it will take a lot of work to do so due to how many john-isms the code uses. Eventually it will need to be done though.


RE: How about RAR5 to hashcat? - halexan - 03-01-2016

(03-01-2016, 03:57 AM)epixoip Wrote: No that's incorrect, rar2john supports RAR5. The problem is, it is not a standalone utility. It is compiled into john. I've looked at breaking it out into a standalone utility, but it will take a lot of work to do so due to how many john-isms the code uses. Eventually it will need to be done though.

Thank you, epixoip.

I have another question. The example hashes only give a string of hashcat format hash. Where can I get the meaning of each segment? 

For example, RAR5 example hash is:

$rar5$16$74575567518807622265582327032280$15$f8b4064de34ac02ecabfe9abdf93ed6a$8$9843834ed0f7c754

What does every segment means?

$rar5
16------salt length? 
74575567518807622265582327032280------salt?
15------hmac loops?
f8b4064de34ac02ecabfe9abdf93ed6a------init vector? 
8------??
9843834ed0f7c754------psw check?

Are there any descriptions of example hashes?