+- hashcat Forum (https://hashcat.net/forum)
+-- Forum: Support (https://hashcat.net/forum/forum-3.html)
+--- Forum: hashcat (https://hashcat.net/forum/forum-45.html)
+--- Thread: odd pdf hash (/thread-8539.html)
odd pdf hash - darkalfie - 08-11-2019
I ran through a pdf through pdf2john (via https://www.onlinehashcrack.com/tools-pdf-hash-extractor.php ) and got this
$pdf$4*4*128*-1852*1*36*45364233363931362d343430352d343731302d424341322d384544433342383134334546*32*e092972efafad5802a75bc100249f6a800000000000000000000000000000000*32*09dbdfcceb36685843aa57b70b0cd45f63e5cc9edd24e82293276edf8b03adfb
Only it doesn't match any of the examples from https://hashcat.net/wiki/doku.php?id=example_hashes (Its too short for one thing)
Is it an issue with pdf2john ? (I tried to get the latest github release, and they only have a pdf2john.pl not pdf2john.py mentioned so i used the web version)
I ran hashcat with all the pdf -m modes, and either got Token length exception or Separator unmatched
RE: odd pdf hash - undeath - 08-12-2019
I don't know if there are slight differences in john's and hashcat's format but you can try with this script: https://github.com/stricture/hashstack-server-plugin-hashcat/blob/master/scrapers/pdf2hashcat.py