+- hashcat Forum (https://hashcat.net/forum)
+-- Forum: Support (https://hashcat.net/forum/forum-3.html)
+--- Forum: hashcat (https://hashcat.net/forum/forum-45.html)
+--- Thread: Weird client behaviour in Brain Attack (/thread-8165.html)
Weird client behaviour in Brain Attack - NoReply - 02-19-2019
I am currently running a brain attack in the following setup:
- Hashcat version: 5.1.0
- Offline 10G LAN network
- 1 dedicated Brain Server Machine (Specs: Ryzen 2400G, 32 GB RAM, Windows 10)
- 3 Brain Client Machines (Specs: i7-4790k, 32 GB RAM, RTX 2080 Ti FE, Windows 7/10)
- Target Hash mode: 14600 LUKS cbc-essiv: sha256
- Single Target
- brain-client-features=3
Two clients are running separate mask-attacks, which already ran upon a certain point, but were aborted.
The other client is running a dictionary attack. Obviously, the two clients running the mask attack are only getting rejected batches upon a certain point. Shortly after they actually start doing some work, they stop with their brain link saying "receiving" without any activity. The client application itself is responsive, i.e. pressing s still gives a status, but if I want to quit, they hang. The dictionary attack keeps running smooth and after it finishes, the mask-attacks start running again.
Did anyone observe something similar?
Best,
NoReply
RE: Weird client behaviour in Brain Attack - atom - 02-20-2019
Please provide all information like commandline setup and files so that we can reproduce locally.
RE: Weird client behaviour in Brain Attack - NoReply - 02-20-2019
Did a new test with these settings:
Server Params: hashcat64.exe --brain-server --brain-password <password> --brain-port 12345
Client Params (Dictionary): hashcat64.exe -m 14600 -a 0 -O -w 3 -z --brain-host 192.168.4.8 --brain-password <password> --brain-port 12345 --brain-client-features 3 <target_luks_file> <dictionary>
Dictionary: https://hashes.org/download.php?foundId=true&type=found&year=2019
Client Params (Mask 1): hashcat64.exe -m 14600 -a 3 -O -w 4 -z --brain-host 192.168.4.8 --brain-password <password> --brain-port 12345 --brain-client-features 3 <target_luks_file> ?d?d?d?d?d?d?d?d
Client Params (Mask 2): hashcat64.exe -m 14600 -a 3 -O -w 4 -z --brain-host 192.168.4.8 --brain-password <password> --brain-port 12345 --brain-client-features 3 <target_luks_file> ?a?a?a?a
The attacks were started in that order and I cleared the Brain Longterm Memory by removing all brain.* files. Now all clients appear to block each other, none of them is running anymore...
Also attached full Server output and status of the clients. I will leave the files up for approx 24 hours: https://www.dropbox.com/s/0b53bat5txyz2h8/Files.zip?dl=1