hashcat Forum
Weird client behaviour in Brain Attack - Printable Version

+- hashcat Forum (https://hashcat.net/forum)
+-- Forum: Support (https://hashcat.net/forum/forum-3.html)
+--- Forum: hashcat (https://hashcat.net/forum/forum-45.html)
+--- Thread: Weird client behaviour in Brain Attack (/thread-8165.html)



Weird client behaviour in Brain Attack - NoReply - 02-19-2019

I am currently running a brain attack in the following setup:

- Hashcat version: 5.1.0
- Offline 10G LAN network
- 1 dedicated Brain Server Machine (Specs: Ryzen 2400G, 32 GB RAM, Windows 10)
- 3 Brain Client Machines (Specs: i7-4790k, 32 GB RAM, RTX 2080 Ti FE, Windows 7/10)
- Target Hash mode: 14600 LUKS cbc-essiv: sha256
- Single Target
- brain-client-features=3

Two clients are running separate mask-attacks, which already ran upon a certain point, but were aborted.
The other client is running a dictionary attack. Obviously, the two clients running the mask attack are only getting rejected batches upon a certain point. Shortly after they actually start doing some work, they stop with their brain link saying "receiving" without any activity. The client application itself is responsive, i.e. pressing s still gives a status, but if I want to quit, they hang. The dictionary attack keeps running smooth and after it finishes, the mask-attacks start running again.

Did anyone observe something similar?

Best,
NoReply


RE: Weird client behaviour in Brain Attack - atom - 02-20-2019

Please provide all information like commandline setup and files so that we can reproduce locally.


RE: Weird client behaviour in Brain Attack - NoReply - 02-20-2019

Did a new test with these settings:

Server Params: hashcat64.exe --brain-server --brain-password <password> --brain-port 12345

Client Params (Dictionary): hashcat64.exe -m 14600 -a 0 -O -w 3 -z --brain-host 192.168.4.8 --brain-password <password> --brain-port 12345 --brain-client-features 3 <target_luks_file> <dictionary>
Dictionary: https://hashes.org/download.php?foundId=true&type=found&year=2019

Client Params (Mask 1): hashcat64.exe -m 14600 -a 3 -O -w 4 -z --brain-host 192.168.4.8 --brain-password <password> --brain-port 12345 --brain-client-features 3 <target_luks_file> ?d?d?d?d?d?d?d?d

Client Params (Mask 2): hashcat64.exe -m 14600 -a 3 -O -w 4 -z --brain-host 192.168.4.8 --brain-password <password> --brain-port 12345 --brain-client-features 3 <target_luks_file> ?a?a?a?a

The attacks were started in that order and I cleared the Brain Longterm Memory by removing all brain.* files. Now all clients appear to block each other, none of them is running anymore...

Also attached full Server output and status of the clients. I will leave the files up for approx 24 hours: https://www.dropbox.com/s/0b53bat5txyz2h8/Files.zip?dl=1