+- hashcat Forum (https://hashcat.net/forum)
+-- Forum: Support (https://hashcat.net/forum/forum-3.html)
+--- Forum: hashcat (https://hashcat.net/forum/forum-45.html)
+--- Thread: Hashcat DES restore file manual EDIT (/thread-8851.html)
Hashcat DES restore file manual EDIT - Clemens - 12-27-2019
Hello,
I try to manually edit my restore file for a des crack.
I want to get at ca. 74% progress.
I got e.g. to 75% by editing words_cur to 00 00 00 00 06 00 00 00 (https://hashcat.net/wiki/doku.php?id=restore)
But I fail when e.g. trying e.g. 00 00 00 00 05 00 00 01, it says value to big. As should be clear I don't entirely understand how it works yet...would be nice if some one could enlighten me.
Oh and for completeness this is the command/mask I use:
hashcat -m 14000 hashes.txt -o cracked.txt -a 3 -1 /usr/share/hashcat/charsets/DES_full.charset --hex-charset ?1?1?1?1?1?1?1?1 -w 4 --outfile-format 5
Oh my guess is it has to do with big endian/little endian so a hint in that direction would be nice which format is used...because I get confused when trying things.
RE: Hashcat DES restore file manual EDIT - philsmd - 12-27-2019
endianness !
If you do not understand the format, you could just use analyze_hc_restore.pl from https://github.com/philsmd/analyze_hc_restore instead (perl must be installed of course)
RE: Hashcat DES restore file manual EDIT - Clemens - 12-27-2019
OK I'll try the tool...that it was because of endianness I realised after the asking the question, see my last edit (like it always go in forums, the moment you ask a question you realise what the answer might be, just that fraction too late of course).
But I'll try the perl script saves my brain a bit with all the bitswaps.
Many thanks!