Search Results
Post Author Forum Replies Views Posted [asc]
    Thread: .NET SHA256Cng (SHA256 Bcrypt?)
Post: RE: .NET SHA256Cng (SHA256 Bcrypt?)

Turns out hashcat does have a mode using utf16le. Mode 1440 = sha256($salt.utf16le($pass)). It does not however encode the salt for you, this must be done manually (https://gchq.github.io/CyberChef/#r...
DanielG hashcat 7 960 03-25-2024, 02:37 PM
    Thread: .NET SHA256Cng (SHA256 Bcrypt?)
Post: RE: .NET SHA256Cng (SHA256 Bcrypt?)

Ah yes, it seems that they don't first decode the salt from base64. The annoying thing is that 'Encoding.Unicode.GetBytes' returns what looks like a UTF-16 representation of the data. As a byte arr...
DanielG hashcat 7 960 03-25-2024, 12:04 PM
    Thread: .NET SHA256Cng (SHA256 Bcrypt?)
Post: RE: .NET SHA256Cng (SHA256 Bcrypt?)

The SHA256Cng is just the OS 'fast' way of creating a sha256 hash. Nothing weird is happening in regards to BCrypt. I think some parts of the code are missing that perhaps alter or change the salt...
DanielG hashcat 7 960 03-25-2024, 10:11 AM
    Thread: Cpu or vga is best for cracking password ?
Post: RE: Cpu or vga is best for cracking password ?

yes it is
DanielG General Talk 4 2,928 03-13-2024, 05:57 PM
    Thread: Hashes from clear passwords
Post: RE: Hashes from clear passwords

Okay fair enough. I tried looking around but I could not find a pre made tool that creates lists of different hashes from a wordlists. I'm afraid you'll need to define the hash types you want and get ...
DanielG hashcat-utils, maskprocessor, statsprocessor, md5stress, wikistrip 6 3,913 03-12-2024, 05:10 PM
    Thread: Hashes from clear passwords
Post: RE: Hashes from clear passwords

"could script this in bash or python for some hashes, but this is inefficient and has limited hash type support compared to hashcat." You could do every hash / type that Hashcat has in Python. The ...
DanielG hashcat-utils, maskprocessor, statsprocessor, md5stress, wikistrip 6 3,913 03-12-2024, 09:58 AM
    Thread: Mask/Charset - Try 1 More Character?
Post: RE: Mask/Charset - Try 1 More Character?

It's binary counting where 0 = ?? and 1 = ?1 whereby avoiding 11111 (which you already brute-forced) and 00000 (5 question marks). This means there are only (2^5 - 2 =) 30 lines. Here are those 30 ...
DanielG hashcat 5 2,020 12-06-2023, 12:04 PM
    Thread: Mask/Charset - Try 1 More Character?
Post: RE: Mask/Charset - Try 1 More Character?

In total it is also less than the whole [0-9a-zA-Z!@?]{5}
DanielG hashcat 5 2,020 12-06-2023, 10:44 AM
    Thread: Mask/Charset - Try 1 More Character?
Post: RE: Mask/Charset - Try 1 More Character?

make a mask file and fill it with: ?l?u?d!@,???1?1?1?1 ?l?u?d!@,?1???1?1?1 ?l?u?d!@,?1?1???1?1 ?l?u?d!@,?1?1?1???1 ?l?u?d!@,?1?1?1?1?? that way you are checking every option where questionma...
DanielG hashcat 5 2,020 12-06-2023, 09:39 AM
    Thread: Can we highlight progress status when hashcat works?
Post: RE: Can we highlight progress status when hashcat ...

It is separate software you can get on https://github.com/hashtopolis/server
DanielG hashcat 8 5,029 11-15-2023, 10:22 AM
    Thread: Need help Mask list
Post: RE: Need help Mask list

Before we make the mask, let’s do some math. Using your restrictions let’s make some best case scenario's. - password length: minimum 9, maximum 12 characters - the first two or three characters I re...
DanielG hashcat 1 1,753 10-12-2023, 10:20 AM
    Thread: Keepass Windows User Account
Post: RE: Keepass Windows User Account

No unfortuanatly that information is not brute forceable. It cannot be cracked.
DanielG hashcat 3 2,484 10-11-2023, 01:50 PM
    Thread: Keepass Windows User Account
Post: RE: Keepass Windows User Account

This is not possible, Keepass also warns about this on their site: "KeePass can make the database dependent on the current Windows user account. If you enable this option, you can only open the d...
DanielG hashcat 3 2,484 10-11-2023, 12:51 PM
    Thread: Is this hashcat that is being used
Post: RE: Is this hashcat that is being used

No this is a custom tool made by https://www.upsightsecurity.com/
DanielG General Talk 2 2,752 06-29-2023, 09:03 AM
    Thread: Hashcat rule: Take first letter of each word in given word list
Post: RE: Hashcat rule: Take first letter of each word i...

That's to complex for rules, you would need to pre-process your word list with something different. For example create something in a scripting language you are comfortable with (pyhton, powershell, e...
DanielG hashcat 2 2,980 12-12-2022, 10:48 AM
    Thread: number of attemps with a mask for a NTLM hash type
Post: RE: number of attemps with a mask for a NTLM hash ...

And to put it into perspective, using a NVIDIA RTX 3080 TI (https://www.onlinehashcrack.com/tools-benchmark-hashcat-nvidia-rtx-3080-ti.php) card, and assuming it can maintain a steady 117.4 GH/s speed...
DanielG hashcat-utils, maskprocessor, statsprocessor, md5stress, wikistrip 4 6,673 08-08-2022, 09:49 AM
    Thread: How to solve some strange hash of hack.chat
Post: RE: How to solve some strange hash of hack.chat

This is not something hashcat can do. Also the first 6 bytes of base64 only gives you the first 4 bytes of the hash. So you lose 224 bits of info about the hash. This will result in *a lot* of false p...
DanielG hashcat 3 4,926 07-27-2022, 09:48 AM
    Thread: comment out unused lines in hcmask file
Post: RE: comment out unused lines in hcmask file

https://hashcat.net/wiki/doku.php?id=frequently_asked_questions#what_is_a_hashcat_mask_file states: Code: -- There are 4 important syntax rules: if you use \, the comma will be seen by *hashc...
DanielG hashcat 1 2,696 07-21-2022, 09:25 AM
    Thread: mp64 Print hex as string
Post: RE: mp64 Print hex as string

don't specify --hex-charset
DanielG hashcat-utils, maskprocessor, statsprocessor, md5stress, wikistrip 3 8,105 01-07-2022, 10:38 AM
    Thread: Identify unknown hash format
Post: RE: Identify unknown hash format

It looks like base64 encoded data, it's not the exact correct length but I assume you maybe made a length typo when replacing some of the data with XXXX. If the length is roughly correct then this loo...
DanielG General Talk 1 3,823 11-22-2021, 10:49 AM