hashcat Forum › Misc › User Contributions v
Password Decoration Rule

Threaded Mode
Password Decoration Rule
Hash-IT Offline
Moderator
*****
Posts: 723
Threads: 85
Joined: Apr 2011
#21
01-25-2013, 01:14 PM
(01-25-2013, 12:00 PM)atom Wrote: Thats fine, oclHashcat limits the maximum number of functions per rule

I hadn't realised that oclhashcat-plus limits the number of functions per rule, I thought it was that the rule would make the password >15 so that is why it was rejected.

So just to make sure I understand this correctly oclhashcat-plus does not allow rules with >10 commands regardless of the resulting password length ?

If this is so and you intend to keep it that way I will modify this decoration rule and re-upload it.

However if you decide to increase oclhashcat-plus's ability to test longer passwords would it be possible to increase the password rule size limit also ? If so Please let me know and I will make a Trac ticket requesting it.

Thank you.
Find
Reply
atom Offline
Administrator
*******
Posts: 5,227
Threads: 233
Joined: Apr 2010
#22
01-25-2013, 01:19 PM
No plans for that, actually its not possible because of some hard limitations from GPU
Website Find
Reply
Hash-IT Offline
Moderator
*****
Posts: 723
Threads: 85
Joined: Apr 2011
#23
01-25-2013, 01:28 PM (This post was last modified: 01-25-2013, 01:53 PM by Hash-IT.)
(01-25-2013, 01:19 PM)atom Wrote: No plans for that, actually its not possible because of some hard limitations from GPU

OK thanks for the information. I will modify my rules and upload them again today. I will also update the rules page on the wiki to state that there is a 10 function limit.

Just so I can update the wiki properly...

I am guessing this limit is for oclhashcat-plus only ?

How many rule functions can hashcat accept ?

What would happen if the user pipes hashcat to oclhashcat-plus using larger rules ?

Thanks.
Find
Reply
atom Offline
Administrator
*******
Posts: 5,227
Threads: 233
Joined: Apr 2010
#24
01-25-2013, 02:25 PM
Yes that fine @ Wiki

There will be no problem @ hashcat pipe. There is also no such limit for slow hashes in oclHashcat-plus, thats only for fast hashes (different rule engine).
Website Find
Reply
Hash-IT Offline
Moderator
*****
Posts: 723
Threads: 85
Joined: Apr 2011
#25
01-25-2013, 03:02 PM
I am sorry about taking up your time with this atom but I want to make sure I update the wiki correctly and your answers have just made me more confused ! Big Grin

From what you have said here it seems to me that oclhashcat-plus can indeed use >10 functions per rule line except for fast algorithms.

I think you also say that hashcat can use >10 functions per rule line, perhaps on all algorithms as it is CPU based ?

Is there a limit at all on hashcat ?

To save you time I have included all the algorithms in the code box. I wonder if you could copy and paste the algorithms that have the 10 function restriction in oclhashcat-plus and identify them as such.

I will assume the algorithms not selected will have no rule function limitation.

I will then tidy it up and write it out in full on the wiki. I just don't want to post incorrect information.

Code:
MD5 md5($pass.$salt) md5($salt.$pass) md5(unicode($pass).$salt) md5($salt.unicode($pass)) SHA1 sha1($pass.$salt) sha1($salt.$pass) sha1(unicode($pass).$salt) sha1($salt.unicode($pass)) MySQL phpass, MD5(Wordpress), MD5(phpBB3) md5crypt, MD5(Unix), FreeBSD MD5, Cisco-IOS MD5 MD4 NTLM Domain Cached Credentials, mscash SHA256 sha256($pass.$salt) sha256($salt.$pass) descrypt, DES(Unix), Traditional DES md5apr1, MD5(APR), Apache MD5 SHA512 sha512($pass.$salt) sha512($salt.$pass) sha512crypt, SHA512(Unix) Domain Cached Credentials2, mscash2 Cisco-PIX MD5 WPA/WPA2 Double MD5 LM Oracle 7-10g, DES(Oracle) bcrypt, Blowfish(OpenBSD) SHA-3(Keccak) * Specific hash types: Joomla osCommerce, xt:Commerce nsldap, SHA-1(Base64), Netscape LDAP SHA nsldaps, SSHA-1(Base64), Netscape LDAP SSHA Oracle 11g SMF > v1.1 OSX v10.4, v10.5, v10.6 MSSQL(2000) MSSQL(2005) EPiServer 6.x OSX v10.7 vBulletin < v3.8.5 vBulletin > v3.8.5 IPB2+, MyBB1.2+

Thank you.
Find
Reply