how to add custome hash type
#1
Greetings to All,

I wonder how to add custom hash type in hashcat .

Code:
md5(md5($password).9486)

Any idea how to add that in hashcat ? Looking forward for your kind response.

Regards
Net_Spy
#2
open a ticket to request a new format
#3
Can you guide me , where I can fine ticket portal to open a ticket for this.

Regards
Net_Spy
#4
There is TRAC on top of this page
#5
Trac is here and you may need to register if not already done (since trac is seperate from the forum and you need to create a new account there).

The algorithm you want to request is md5(md5($pass).$salt) ... since of course the devs would not add a algorithm with hard-coded constants (9486).

There are already "similar" algorithms, like md5(md5($salt).$pass) - see here .
In theory you could use a dictionary containing only 9486 and an external salt list (-e argument)... but I wouldn't really recommend it since it may be *much* slower than a new hash mode that does it the other way around (i.e. $salt is salt and $pass is the pass): md5(md5($pass).$salt).

Note: if such an algorithm would be implemented you still may need to either use -e for the external salt (in this case only a file containing the number 9486), or you need to append to *each* hash in the hashlist ":9486").
#6
why request a new hash mode when this is vbulletin?
#7
oh, haha, so it is. good eye.
#8
See http://hashcat.net/wiki/doku.php?id=example_hashes , hashcat supports 2 vbulletin hash modes (both have some restrictions on the salt length etc).

Anyway, by using -m 2611 == vBulletin < v3.8.5 and using either -e or adding :9486 to each line in the hash list it might work (even if it may be better to add an additional hash mode w/ md5(md5($pass).$salt) since also md5(md5($salt).$pass) is already listed/implemented as seperate hash mode).
#9
Code:
epixoip@token:~/oclHashcat-1.00$ type joomla joomla is a function joomla () { echo "$(echo -n "$(echo -n $1 | md5sum | awk '{print $1}')$2" | md5sum | awk '{print $1}'):$2" } epixoip@token:~/oclHashcat-1.00$ joomla hashcat 9486 2f4a96428a59869fd0880fbba13db7cb:9486 epixoip@token:~/oclHashcat-1.00$ ./oclHashcat64.bin -d 1 -m 2611 -a 3 2f4a96428a59869fd0880fbba13db7cb:9486 oclHashcat v1.00 starting... Hashes: 1 total, 1 unique salts, 1 unique digests Bitmaps: 8 bits, 256 entries, 0x000000ff mask, 1024 bytes Workload: 128 loops, 80 accel Applicable Optimizers: * Not-Iterated * Single-Hash * Single-Salt * Brute-Force Watchdog: Temperature abort trigger set to 90c Watchdog: Temperature retain trigger set to 80c Device #1: Tahiti, 2967MB, 925Mhz, 32MCU Device #2: skipped by user Device #3: skipped by user Device #4: skipped by user Device #5: skipped by user Device #6: skipped by user Device #1: Kernel ./kernels/4098/m2610_a3.Tahiti_1272.2_1272.2 (VM).kernel (267296 bytes) Device #1: Kernel ./kernels/4098/markov_le_v2.Tahiti_1272.2_1272.2 (VM).kernel (134476 bytes) Device #1: Kernel ./kernels/4098/bzero.Tahiti_1272.2_1272.2 (VM).kernel (30444 bytes) 2f4a96428a59869fd0880fbba13db7cb:9486:hashcat Session.Name...: oclHashcat Status.........: Cracked Input.Mode.....: Mask (?1?2?2?2?2?2?2) [7] Hash.Target....: 2f4a96428a59869fd0880fbba13db7cb:9486 Hash.Type......: vBulletin < v3.8.5 Time.Started...: Mon Oct 21 04:22:43 2013 (1 sec) Speed.GPU.#1...: 2169.6 MH/s Recovered......: 1/1 (100.00%) Digests, 1/1 (100.00%) Salts Progress.......: 1509949440/134960504832 (1.12%) Rejected.......: 0/1509949440 (0.00%) HWMon.GPU.#1...: 42% Util, 33c Temp, 20% Fan Started: Mon Oct 21 04:22:43 2013 Stopped: Mon Oct 21 04:22:50 2013
#10
@epixoip thanks for that idea , but I have about number of hashes to test is there any other way to accomplish it. I've register on trac yet waiting for activation email form their side.Looking forward for your kind response.

Regards
Net_Spy