+- hashcat Forum (https://hashcat.net/forum)
+-- Forum: Support (https://hashcat.net/forum/forum-3.html)
+--- Forum: hashcat (https://hashcat.net/forum/forum-45.html)
+--- Thread: Help with partially known keepass password (/thread-9765.html)
Help with partially known keepass password - hansvader - 01-11-2021
Hello. I don't know what happened but today I forgot my KeePass password with everything I need inside. My frustration is through the roof. I started googling, found a way to generate a hash with keepass2john and now I'm here.
Maybe someone could guide me to a solution to the following problem.
I'm somewhat certain that the following is the case:
KKKKKKKKKKKKUUKKKKK (K= Known character, U= Unknown character)
From what I've read so far, I guess that I need 2 dictionaries. One for the left part that I know, another for the right part.
But due to language barrier it's pretty hard to grasp how to solve this.
Could you give me hints or solutions?
I am very grateful for any idea you people can give me.
RE: Help with partially known keepass password - undeath - 01-11-2021
use a mask attack with this mask:
KKKKKKKKKKKK?a?aKKKKK
RE: Help with partially known keepass password - hansvader - 01-11-2021
(01-11-2021, 06:16 PM)undeath Wrote: use a mask attack with this mask:
KKKKKKKKKKKK?a?aKKKKK
Thank you I'll read into that.
RE: Help with partially known keepass password - hansvader - 01-11-2021
.\hashcat.exe -m 13400 -a 3 keepass.txt 'KKKKK?a?aKKKK!'
My hash looks like this:
$keepass$*2*20000000*0*x*x*x*x*x
Am I on the right way? Hashcat is working at this moment.
RE: Help with partially known keepass password - undeath - 01-11-2021
Please don't post hashes. I've censored yours.
The command looks right. I just hope you have replaced your known Ks by the actual characters.
You might see a speed gain by adding -S to your command line.
RE: Help with partially known keepass password - hansvader - 01-11-2021
(01-11-2021, 06:55 PM)undeath Wrote: Please don't post hashes. I've censored yours.
The command looks right. I just hope you have replaced your known Ks by the actual characters.
You might see a speed gain by adding -S to your command line.
Uh. Okay. I guess I've no clue what I'm doing. Thank you for your help.
Edit: I just realized that hashcat does not make any progress at all.
"Progress.........: 0/9025 (0.00%)" what's happening?
RE: Help with partially known keepass password - undeath - 01-11-2021
The mask is not optimal for hashcat. With -S it will probably be faster.
RE: Help with partially known keepass password - hansvader - 01-12-2021
Thank you so much, Undeath!! You saved me so much time. I don't want to think about what happened if I didn't manage to get back into my keepass database. I feel so relieved.
Again: Thank you and everyone involved with hashcat! <3