hashcat Forum › Support › hashcat v
Hashcat brain stops working

Threaded Mode
Hashcat brain stops working
walterlacka Offline
Member
***
Posts: 63
Threads: 10
Joined: Nov 2017
#1
02-25-2021, 05:51 PM
Code:
C:\hashcat-6.1.1>hashcat.exe --brain-server --brain-password xxccss 1614267533.716299 |  0.22s |  0 | Read 287512872 bytes from session 0x5dc9abac in 217.03 ms 1614267533.716299 |  0.00s |  0 | Read 1728 bytes from attack 0xe1cdb5b3 in 0.26 ms 1614267533.716299 |  0.00s |  0 | Brain server started 1614267556.376673 |  22.66s |  0 | Connection from 127.0.0.1:49870 1614267556.376673 |  0.00s |  0 | Connection from 127.0.0.1:49869 1614267556.384716 |  0.01s |  1 | Session: 0x5dc9abac, Attack: 0xe1cdb5b3, Kernel-power: 917504 1614267556.384716 |  0.00s |  2 | Session: 0x5dc9abac, Attack: 0xe1cdb5b3, Kernel-power: 655360 1614267557.278028 |  0.89s |  2 | L |  104.10 ms | Long: 35939109, Inc: 268110, New: 0 1614267557.548751 |  0.27s |  1 | L |  140.92 ms | Long: 35939109, Inc: 389518, New: 0 1614267557.621686 |  0.07s |  2 | L |  118.32 ms | Long: 35939109, Inc: 267017, New: 0 1614267558.005596 |  0.39s |  2 | L |  108.08 ms | Long: 35939109, Inc: 272006, New: 0 1614267558.104698 |  0.10s |  1 | L |  168.12 ms | Long: 35939109, Inc: 374811, New: 0 1614267558.380056 |  0.28s |  2 | L |  102.35 ms | Long: 35939109, Inc: 280184, New: 0 1614267558.602080 |  0.22s |  1 | L |  144.23 ms | Long: 35939109, Inc: 399039, New: 0 1614267558.762034 |  0.16s |  2 | L |  153.92 ms | Long: 35939109, Inc: 291962, New: 0 1614267559.107579 |  0.35s |  1 | L |  144.27 ms | Long: 35939109, Inc: 409632, New: 0 1614267559.115672 |  0.01s |  2 | L |  105.71 ms | Long: 35939109, Inc: 290616, New: 0

Code:
hashcat.exe -z --brain-password xxccss --brain-client-features=1 --debug-mode=4 --debug-file=matched.rule -O -w4 -m22000 -a0 d:\ftp\hashes2021\test.22000 d:\ftp\wordlist2017\rockyou.txt -r .\rules\best64.rule hashcat (v6.1.1) starting... Kernel ./OpenCL/m22000-optimized.cl: Optimized kernel requested but not needed - falling back to pure kernel CUDA API (CUDA 11.2) ==================== * Device #1: GeForce GTX 1080 Ti, 10227/11264 MB, 28MCU * Device #2: GeForce GTX 1080, 7213/8192 MB, 20MCU OpenCL API (OpenCL 1.2 CUDA 11.2.135) - Platform #1 [NVIDIA Corporation] ======================================================================== * Device #3: GeForce GTX 1080 Ti, skipped * Device #4: GeForce GTX 1080, skipped Kernel ./OpenCL/m22000-optimized.cl: Optimized kernel requested but not needed - falling back to pure kernel Minimum password length supported by kernel: 8 Maximum password length supported by kernel: 63 Hashes: 100 digests; 51 unique digests, 15 unique salts Bitmaps: 16 bits, 65536 entries, 0x0000ffff mask, 262144 bytes, 5/13 rotates Rules: 77 Applicable optimizers applied: * Zero-Byte * Slow-Hash-SIMD-LOOP Watchdog: Temperature abort trigger set to 90c INFO: Removed 20 hashes found in potfile. Host memory required for this attack: 4115 MB Dictionary cache hit: * Filename..: d:\ftp\wordlist2017\rockyou.txt * Passwords.: 14344384 * Bytes.....: 139921497 * Keyspace..: 1104517568 [s]tatus [p]ause [b]ypass [c]heckpoint [q]uit => Session..........: hashcat (Brain Session/Attack:0x5dc9abac/0xe1cdb5b3) Status...........: Running Hash.Name........: WPA-PBKDF2-PMKID+EAPOL Hash.Target......: d:\ftp\hashes2021\test.22000 Time.Started.....: Thu Feb 25 09:39:16 2021 (10 secs) Time.Estimated...: Thu Feb 25 09:39:26 2021 (0 secs) Guess.Base.......: File (d:\ftp\wordlist2017\rockyou.txt) Guess.Mod........: Rules (.\rules\best64.rule) Guess.Queue......: 1/1 (100.00%) Speed.#1.........:        0 H/s (0.00ms) @ Accel:32 Loops:1024 Thr:1024 Vec:1 Speed.#2.........:        0 H/s (0.00ms) @ Accel:32 Loops:1024 Thr:1024 Vec:1 Speed.#*.........:        0 H/s Recovered........: 20/51 (39.22%) Digests, 8/15 (53.33%) Salts Progress.........: 114032640/16567763520 (0.69%) Rejected.........: 114032640/114032640 (100.00%) Brain.Link.All...: RX: 3.2 MB, TX: 31.6 MB Brain.Link.#1....: RX: 1.6 MB (0.00 Mbps), TX: 15.9 MB (0.00 Mbps), receiving Brain.Link.#2....: RX: 1.7 MB (0.00 Mbps), TX: 15.7 MB (0.00 Mbps), receiving Restore.Point....: 0/1104517568 (0.00%) Restore.Sub.#1...: Salt:0 Amplifier:0-0 Iteration:0-1024 Restore.Sub.#2...: Salt:0 Amplifier:0-0 Iteration:0-1024 Candidates.#1....: [Copying] Candidates.#2....: [Copying] Hardware.Mon.#1..: Temp: 33c Fan:100% Util:  0% Core:1480MHz Mem:5005MHz Bus:8 Hardware.Mon.#2..: Temp: 32c Fan:100% Util:  0% Core:1607MHz Mem:4513MHz Bus:16 [s]tatus [p]ause [b]ypass [c]heckpoint [q]uit =>


No matter how long I wait, the brain doesn't show any more messages on the console and the client appears to not be doing any work:

This is status after approx 7 mins:
Code:
Session..........: hashcat (Brain Session/Attack:0x5dc9abac/0xe1cdb5b3) Status...........: Running Hash.Name........: WPA-PBKDF2-PMKID+EAPOL Hash.Target......: d:\ftp\hashes2021\test.22000 Time.Started.....: Thu Feb 25 09:39:16 2021 (7 mins, 3 secs) Time.Estimated...: Thu Feb 25 09:46:19 2021 (0 secs) Guess.Base.......: File (d:\ftp\wordlist2017\rockyou.txt) Guess.Mod........: Rules (.\rules\best64.rule) Guess.Queue......: 1/1 (100.00%) Speed.#1.........:        0 H/s (0.00ms) @ Accel:32 Loops:1024 Thr:1024 Vec:1 Speed.#2.........:        0 H/s (0.00ms) @ Accel:32 Loops:1024 Thr:1024 Vec:1 Speed.#*.........:        0 H/s Recovered........: 20/51 (39.22%) Digests, 8/15 (53.33%) Salts Progress.........: 114032640/16567763520 (0.69%) Rejected.........: 114032640/114032640 (100.00%) Brain.Link.All...: RX: 3.2 MB, TX: 31.6 MB Brain.Link.#1....: RX: 1.6 MB (0.00 Mbps), TX: 15.9 MB (0.00 Mbps), receiving Brain.Link.#2....: RX: 1.7 MB (0.00 Mbps), TX: 15.7 MB (0.00 Mbps), receiving Restore.Point....: 0/1104517568 (0.00%) Restore.Sub.#1...: Salt:0 Amplifier:0-0 Iteration:0-1024 Restore.Sub.#2...: Salt:0 Amplifier:0-0 Iteration:0-1024 Candidates.#1....: [Copying] Candidates.#2....: [Copying] Hardware.Mon.#1..: Temp: 34c Fan:100% Util:  0% Core:1480MHz Mem:5005MHz Bus:8 Hardware.Mon.#2..: Temp: 33c Fan:100% Util:  0% Core:1607MHz Mem:4513MHz Bus:16


I've stopped the brain (ctrl-c) and restarted and this continues to happen.  Even rebooted as well.

Here's the brain after i press crtl-c - nothing happened for 544 seconds:
Code:
C:\hashcat-6.1.1>hashcat.exe --brain-server --brain-password xxccss 1614267533.716299 |  0.22s |  0 | Read 287512872 bytes from session 0x5dc9abac in 217.03 ms 1614267533.716299 |  0.00s |  0 | Read 1728 bytes from attack 0xe1cdb5b3 in 0.26 ms 1614267533.716299 |  0.00s |  0 | Brain server started 1614267556.376673 |  22.66s |  0 | Connection from 127.0.0.1:49870 1614267556.376673 |  0.00s |  0 | Connection from 127.0.0.1:49869 1614267556.384716 |  0.01s |  1 | Session: 0x5dc9abac, Attack: 0xe1cdb5b3, Kernel-power: 917504 1614267556.384716 |  0.00s |  2 | Session: 0x5dc9abac, Attack: 0xe1cdb5b3, Kernel-power: 655360 1614267557.278028 |  0.89s |  2 | L |  104.10 ms | Long: 35939109, Inc: 268110, New: 0 1614267557.548751 |  0.27s |  1 | L |  140.92 ms | Long: 35939109, Inc: 389518, New: 0 1614267557.621686 |  0.07s |  2 | L |  118.32 ms | Long: 35939109, Inc: 267017, New: 0 1614267558.005596 |  0.39s |  2 | L |  108.08 ms | Long: 35939109, Inc: 272006, New: 0 1614267558.104698 |  0.10s |  1 | L |  168.12 ms | Long: 35939109, Inc: 374811, New: 0 1614267558.380056 |  0.28s |  2 | L |  102.35 ms | Long: 35939109, Inc: 280184, New: 0 1614267558.602080 |  0.22s |  1 | L |  144.23 ms | Long: 35939109, Inc: 399039, New: 0 1614267558.762034 |  0.16s |  2 | L |  153.92 ms | Long: 35939109, Inc: 291962, New: 0 1614267559.107579 |  0.35s |  1 | L |  144.27 ms | Long: 35939109, Inc: 409632, New: 0 1614267559.115672 |  0.01s |  2 | L |  105.71 ms | Long: 35939109, Inc: 290616, New: 0 1614268103.466804 | 544.35s |  0 | Brain server stopping

Any tips?
Find
Reply
walterlacka Offline
Member
***
Posts: 63
Threads: 10
Joined: Nov 2017
#2
02-26-2021, 01:36 AM
Further testing reveals that brain-client-features=1 or 3 is when it stops working.  Based on what I've read, it sounds like mode 2 is less bandwidth intensive; however I cant see that being a problem given that Ive tested with brain server and client on same computer.  Ive also tested with client/server being on separate computers as well.  They are connected at 1 gbps Ethernet connections each on the same network switch on isolated VLAN.

Are there certain logs I can look at?
Find
Reply
walterlacka Offline
Member
***
Posts: 63
Threads: 10
Joined: Nov 2017
#3
02-26-2021, 02:55 AM
I'm running WIN10 with hashcat version 6.1.1.  Does that version contain the fix mentioned in this thread?
https://hashcat.net/forum/thread-9269.html
Find
Reply
walterlacka Offline
Member
***
Posts: 63
Threads: 10
Joined: Nov 2017
#4
03-03-2021, 05:38 AM
Wondering if anybody has a suggestion or 2 regarding this.  Thanks in advance.
Find
Reply