hashcat Forum
Currency Charsets - Printable Version

+- hashcat Forum (https://hashcat.net/forum)
+-- Forum: Support (https://hashcat.net/forum/forum-3.html)
+--- Forum: hashcat (https://hashcat.net/forum/forum-45.html)
+--- Thread: Currency Charsets (/thread-5966.html)



Currency Charsets - cybob - 10-17-2016


.jpg   curr.jpg (Size: 69.35 KB / Downloads: 17)


Hi all

I was trying to include English Pound and Euro characters along with all lower case and all digits up to 11 chars and typed the following command

Hashcat64.exe - m 1400 -i -a 3 C:\hashcat-3.10\Hashes.txt -1 ?l?d€£ ?1?1?1?1?1?1?1?1?1?1?1

However it appears I got c-cedilla and u fada or u accent, instead.

Please see attached jpg.

Any ideas what happened?

Thanks

Rob


RE: Currency Charsets - darkseid4nk - 10-17-2016

https://hashcat.net/wiki/doku.php?id=mask_attack#custom_charsets


RE: Currency Charsets - cybob - 10-17-2016

(10-17-2016, 06:07 PM)darkseid4nk Wrote: https://hashcat.net/wiki/doku.php?id=mask_attack#custom_charsets

Thanks darkseid4nk

 but -1 ?l?d€£    custom charset should have worked, if I'm reading the examples written in the wiki right.

Cheers

Rob.


RE: Currency Charsets - rico - 10-17-2016

https://hashcat.net/wiki/doku.php?id=mask_attack#hashcat_charset_files

Take a look at the file charsets/standard/English/en_cp1252.hcchr and try it something like this:

Code:
-1 charsets/standard/en_cp1252.hcchr -2 ?1?l?d ?2?2?2?2?2?2?2?2?2?2?2

Note: watch your encodings like the Wiki says.


RE: Currency Charsets - cybob - 10-17-2016

(10-17-2016, 10:03 PM)rico Wrote: https://hashcat.net/wiki/doku.php?id=mask_attack#hashcat_charset_files

Take a look at the file charsets/standard/English/en_cp1252.hcchr and try it something like this:

Code:
-1 charsets/standard/en_cp1252.hcchr -2 ?1?l?d ?2?2?2?2?2?2?2?2?2?2?2

Note: watch your encodings like the Wiki says.

Thanks Rico, 

Will try that in the morning. Nite time over here now. 

Appreciate it.

Cheers

Rob.


RE: Currency Charsets - cybob - 10-18-2016

(10-17-2016, 10:03 PM)rico Wrote: https://hashcat.net/wiki/doku.php?id=mask_attack#hashcat_charset_files

Take a look at the file charsets/standard/English/en_cp1252.hcchr and try it something like this:

Code:
-1 charsets/standard/en_cp1252.hcchr -2 ?1?l?d ?2?2?2?2?2?2?2?2?2?2?2

Note: watch your encodings like the Wiki says.

Hi Rico

I used www.xorbin.com/tools/sha256-hash-calculator to get the hash of

dracula£      4f4babd979c0c44d12aee78ffda0c409a41909eef90a4ba583b9d466bd3a5dc2

and

dra€ula1      1e490bf10b727b4bcb76a39b5d153992d31cf01d89a55c41e2d50cd1ccfe10fa

I put both hashes into poundhash.txt and ran the follow command 

Hashcat64.exe -m 1400 -i -a 3 C:\hashcat-3.10\poundhash.txt -1 C:\hashcat-3.10\charsets\standard\English\en_cp1252.HCCHR -2 ?1?l?d ?2?2?2?2?2?2?2?2?2?2?2?2

No password was cracked (8 chars exhausted) and Hashcat continued on to 9 characters.

I think the Euro and Pound characters are problematic or maybe theres something wrong with my setup.

Can someone else run try replicate this job/these results and verify if its my rig/setup thats at fault?

Probably windows to blame! :-P

Thanks in advance.

Cheers

Rob.


RE: Currency Charsets - epixoip - 10-19-2016

The characters are not problematic, it is definitely an issue with how you are testing. Again, encoding matters. The encoding of the website you're using to create the hash, the encoding of your terminal emulator / command window, the encoding of your text editor, etc. When in doubt, use hex charset.


RE: Currency Charsets - cybob - 10-19-2016

(10-19-2016, 01:55 AM)epixoip Wrote: The characters are not problematic, it is definitely an issue with how you are testing. Again, encoding matters. The encoding of the website you're using to create the hash, the encoding of your terminal emulator / command window, the encoding of your text editor, etc. When in doubt, use hex charset.

Thanks Epixoip, 100% correct. I did some digging and the default code page for cmd.exe is 850 in europe.

After more digging simply typing the command CHCP 1252 (change Code Page) at the command prompt sorts this issue.

All good now. Thanks for your help.

Cheers

Rob.