Search Results
Post Author Forum Replies Views Posted [asc]
    Thread: Reversing MSCHAPv2 to NTLM
Post: RE: Reversing MSCHAPv2 to NTLM

I'm trying to replicate this with some NetNTLMv1 hashes I captured during a pentest. I used moxie's chapcrack to generate the base64 encoded string: Code: -- ./chapcrack.py radius -C 7cf8afb4c3b35...
fuzztester User Contributions 18 77,534 11-01-2016, 04:21 PM
    Thread: NetNTLMv1 Hashes not parsing
Post: RE: NetNTLMv1 Hashes not parsing

Hashcat 2.0 this did work: Code: -- ./hashcat-cli64.app -m 5500 netntlmv1.txt -a 3 ?a?a?a Initializing hashcat v2.00 with 8 threads and 32mb segment-size... Added hashes from file netntlmv1.t...
fuzztester hashcat 2 9,658 11-01-2016, 02:53 PM
    Thread: NetNTLMv1 Hashes not parsing
Post: NetNTLMv1 Hashes not parsing

Good morning! I recently captured netntlmv1 hashes from an engagement I'm on and they are not being parsed by hashcat. I remember doing this in the past, so i'm not sure what happened. I also tried ...
fuzztester hashcat 2 9,658 11-01-2016, 02:21 PM
    Thread: Hashes from freeradius-wpe
Post: RE: Hashes from freeradius-wpe

rajak Wrote: (08-28-2013, 04:15 PM) -- fuzztester Wrote: (08-28-2013, 03:59 PM) -- bob:$NETNTLM$a415001cd5900a32$632e803415162e36652263799f8e8a1c05a6bc4d0ecf5d72 -- I was just looking at this myse...
fuzztester User Contributions 5 30,086 08-28-2013, 06:28 PM
    Thread: Hashes from freeradius-wpe
Post: Hashes from freeradius-wpe

Hello everyone! I have been experimenting with using freeradius-wpe to collect credentials from WPA enterprise wireless set ups. the patched radius server is giving me the hashes in the followin...
fuzztester User Contributions 5 30,086 08-28-2013, 03:59 PM
    Thread: HMAC for oclHashcat-*
Post: HMAC for oclHashcat-*

I noticed that hashcat has support for HMAC-SHA1 / HMAC-MD5 but oclHashcat-plus nor oclHashcat-lite do not. Just wondering if its in the plan to get these working so we can use GPUs to crack them.
fuzztester Feature Requests 3 20,751 01-08-2013, 07:28 PM
    Thread: Cisco ASA
Post: RE: Cisco ASA

M@LIK Wrote: (10-18-2012, 09:06 PM) -- Yes, I will be lying if I said I didn't think about that. Indeed, maskprocessor's performance is nowhere around GPU's performance. You can also make a file ...
fuzztester Very old oclHashcat-plus Support 15 75,228 10-19-2012, 04:05 PM
    Thread: Cisco ASA
Post: RE: Cisco ASA

I checked out using the maskprocess and piping it in. It does work but I must say, the performance was no where near as fast as a straight brute force mode. I was noticing that the GPU utilization...
fuzztester Very old oclHashcat-plus Support 15 75,228 10-18-2012, 08:25 PM
    Thread: Cisco ASA
Post: RE: Cisco ASA

M@LIK Wrote: (10-18-2012, 06:21 PM) -- Pipe maskprocessor (https://hashcat.net/wiki/doku.php?id=maskprocessor) to -plus, and you can use rules. Code: -- mp64 -i ?d?d?d?d | -plus -m2400 -r usernames...
fuzztester Very old oclHashcat-plus Support 15 75,228 10-18-2012, 07:47 PM
    Thread: Cisco ASA
Post: RE: Cisco ASA

M@LIK Wrote: (10-18-2012, 05:34 PM) -- That's what I was exactly writing you, see below. It's not very professional, but you can get away with rules or multi-rules. Make a rule-file with all fi...
fuzztester Very old oclHashcat-plus Support 15 75,228 10-18-2012, 05:37 PM
    Thread: Cisco ASA
Post: RE: Cisco ASA

So instead of using a salt file, i just created a wordlist rule file that looks like this: $c$i$s$c That will append the first four characters to the end of the password if the username was 'cisco'....
fuzztester Very old oclHashcat-plus Support 15 75,228 10-18-2012, 05:03 PM
    Thread: Cisco ASA
Post: RE: Cisco ASA

M@LIK Wrote: (10-18-2012, 04:36 PM) -- As far as I know, Cisco-PIX MD5 hashing doesn't involve any salting. -- When I try to crack known ASA hashes it fails...until i append the first four characte...
fuzztester Very old oclHashcat-plus Support 15 75,228 10-18-2012, 04:50 PM
    Thread: Cisco ASA
Post: RE: Cisco ASA

unix-ninja Wrote: (10-18-2012, 04:15 PM) -- The ASA does use the same hashing mechanism as PIX. They are NOT different. You should just be specifying hash and salt on the command-line. Username is i...
fuzztester Very old oclHashcat-plus Support 15 75,228 10-18-2012, 04:43 PM
    Thread: Cisco ASA
Post: Cisco ASA

I had read elsewhere that the ASA hashing was the same as the pix md5 so I decide to give it a shot with oclHashcat-plus. The file format I used was username:hash. hashcat complained that the hash...
fuzztester Very old oclHashcat-plus Support 15 75,228 10-18-2012, 03:48 PM
    Thread: Drupal 7 hashes
Post: RE: Drupal 7 hashes

gat3way Wrote: (07-13-2012, 11:04 PM) -- Generic sha512 won't work. -- Is there a tool that will? I've looked in the usual places and have come up with nothing.
fuzztester General Help 4 26,162 07-17-2012, 05:00 PM
    Thread: Drupal 7 hashes
Post: Drupal 7 hashes

Hello everyone! I'm performing a pentest and was able to compromise a web application via SQLi. This database server was also being used for Drupal. The latest version, 7 changed their hashing ...
fuzztester General Help 4 26,162 07-13-2012, 07:57 PM