Cpu, Gpu fails, dictionary attack, hipFuncGetAttribute is missing from HIP shared lib
#1
Hi, I'm trying a dictionary attack against a NTLM (code 1000) hash from my windows SAM and SYSTEM files. Unfortunately there are some errors related to my cpu and gpu. I also tried this in a linux system and with other programs as Jhon without correct results. 15-35 seconds the time used to give me a full output. Please note that in rockyou.txt there is also my windows password. hash.txt has only the marti hash of 32 characters.
I print here some outputs+a very interesting hashcat -I at the botton of this message.

hashcat -m 1000 -a 0 -O C:\Users\Marti\Documents\hash.txt C:\Users\Marti\Documents\rockyou.txt
hashcat (v6.2.6) starting

hipFuncGetAttribute is missing from HIP shared library.

ADL2_Overdrive_Caps(): -8

ADL2_Overdrive_Caps(): -8

ADL2_Overdrive_Caps(): -8

OpenCL API (OpenCL 2.1 AMD-APP (3075.13)) - Platform #1 [Advanced Micro Devices, Inc.]
======================================================================================
* Device #1: AMD Radeon R7 M265 Series, 2944/3072 MB (3072 MB allocatable), 6MCU

OpenCL API (OpenCL 2.0 ) - Platform #2 [Intel(R) Corporation]
=============================================================
* Device #2: Intel(R) HD Graphics 5500, 1568/3234 MB (404 MB allocatable), 24MCU
* Device #3: Intel(R) Core(TM) i7-5500U CPU @ 2.40GHz, skipped

Minimum password length supported by kernel: 0
Maximum password length supported by kernel: 27

Hashes: 1 digests; 1 unique digests, 1 unique salts
Bitmaps: 16 bits, 65536 entries, 0x0000ffff mask, 262144 bytes, 5/13 rotates
Rules: 1

Optimizers applied:
* Optimized-Kernel
* Zero-Byte
* Precompute-Init
* Meet-In-The-Middle
* Early-Skip
* Not-Salted
* Not-Iterated
* Single-Hash
* Single-Salt
* Raw-Hash

Watchdog: Temperature abort trigger set to 90c

Host memory required for this attack: 1300 MB

Dictionary cache built:
* Filename..: C:\Users\Marti\Documents\rockyou.txt
* Passwords.: 14344392
* Bytes.....: 139921508
* Keyspace..: 14344385
* Runtime...: 3 secs

Approaching final keyspace - workload adjusted.

Cracking performance lower than expected?

* Append -w 3 to the commandline.
  This can cause your screen to lag.

* Append -S to the commandline.
  This has a drastic speed impact but can be better for specific attacks.
  Typical scenarios are a small wordlist but a large ruleset.

* Update your backend API runtime / driver the right way:
  https://hashcat.net/faq/wrongdriver

* Create more work items to make use of your parallelization power:
  https://hashcat.net/faq/morework

Session..........: hashcat
Status...........: Exhausted
Hash.Mode........: 1000 (NTLM)
Hash.Target......: xxx4ce4xxx9ba532xxx31bdc6xxxa437
Time.Started.....: Wed Oct 30 16:17:02 2024 (7 secs)
Time.Estimated...: Wed Oct 30 16:17:09 2024 (0 secs)
Kernel.Feature...: Optimized Kernel
Guess.Base.......: File (C:\Users\Marti\Documents\rockyou.txt)
Guess.Queue......: 1/1 (100.00%)
Speed.#1.........:  1007.9 kH/s (1.17ms) @ Accel:1024 Loops:1 Thr:128 Vec:1
Speed.#2.........:  1133.7 kH/s (0.22ms) @ Accel:512 Loops:1 Thr:8 Vec:1
Speed.#*.........:  2141.6 kH/s
Recovered........: 0/1 (0.00%) Digests (total), 0/1 (0.00%) Digests (new)
Progress.........: 14344385/14344385 (100.00%)
Rejected.........: 6538/14344385 (0.05%)
Restore.Point....: 14335142/14344385 (99.94%)
Restore.Sub.#1...: Salt:0 Amplifier:0-1 Iteration:0-1
Restore.Sub.#2...: Salt:0 Amplifier:0-1 Iteration:0-1
Candidate.Engine.: Device Generator
Candidates.#1....: (roles) -> #1BISCUTHEAD!
Candidates.#2....: $HEX[21636f6d6574733037] -> $HEX[042a0337c2a156616d6f732103]
Hardware.Mon.#1..: Temp: 51c Fan: 35% Util: 64% Core: 825MHz Mem: 900MHz Bus:4
Hardware.Mon.#2..: N/A

Started: Wed Oct 30 16:16:29 2024
Stopped: Wed Oct 30 16:17:10 2024



I also tried  to run Hashcat with CPU Only 
hashcat -m 1000 -a 0 --opencl-device-types 1 C:\Users\Marti\Documents\hash.txt C:\Users\Marti\Documents\rockyou.txt
hashcat (v6.2.6) starting

hipFuncGetAttribute is missing from HIP shared library.

OpenCL API (OpenCL 2.1 AMD-APP (3075.13)) - Platform #1 [Advanced Micro Devices, Inc.]
======================================================================================
* Device #1: AMD Radeon R7 M265 Series, skipped

OpenCL API (OpenCL 2.0 ) - Platform #2 [Intel(R) Corporation]
=============================================================
* Device #2: Intel(R) HD Graphics 5500, skipped
* Device #3: Intel(R) Core(TM) i7-5500U CPU @ 2.40GHz, 4021/8106 MB (1013 MB allocatable), 4MCU

Minimum password length supported by kernel: 0
Maximum password length supported by kernel: 256

Hashes: 1 digests; 1 unique digests, 1 unique salts
Bitmaps: 16 bits, 65536 entries, 0x0000ffff mask, 262144 bytes, 5/13 rotates
Rules: 1

Optimizers applied:
* Zero-Byte
* Early-Skip
* Not-Salted
* Not-Iterated
* Single-Hash
* Single-Salt
* Raw-Hash

ATTENTION! Pure (unoptimized) backend kernels selected.
Pure kernels can crack longer passwords, but drastically reduce performance.
If you want to switch to optimized kernels, append -O to your commandline.
See the above message to find out about the exact limits.

Watchdog: Temperature abort trigger set to 90c

Initializing backend runtime for device #3. Please be patient...Stack dump:
0.      Running pass 'Intel OpenCL Vectorizer' on module 'main'.
1.      Running pass 'Intel OpenCL VectorizerCore' on function '@__Vectorized_.gpu_utf8_to_utf16'
2.      Running pass 'Predicator' on function '@__Vectorized_.gpu_utf8_to_utf16'
0x00007FF858344B44 (0x000000003117F970 0x00000000309336E0 0x00000000304A7C30 0x00000000308A9788), RegisterGlobalAtExitNotification() + 0x440734 bytes(s)
0x00007FF857EA180E (0x0000000031657988 0x000000003117F970 0x0000000025B13C10 0x000000001F7FA8C0), opencl_snprintf() + 0x7A05E bytes(s)
0x00007FF857E9EC5A (0x000000003117F970 0x000000001F7FA8C0 0x000000001F7FA7C9 0x000000002CDE4F80), opencl_snprintf() + 0x774AA bytes(s)
0x00007FF857EA237B (0x0000000025B13C10 0x000000001D663300 0x0000000025B13C10 0x00000000271AAD60), opencl_snprintf() + 0x7ABCB bytes(s)
0x00007FF857EA2465 (0x00000000271AAD60 0x0000000000000000 0x000000001F7FA960 0x000000000000007A), opencl_snprintf() + 0x7ACB5 bytes(s)
0x00007FF857E825E8 (0x00000000271AAD60 0x00000000319861B0 0x000000001D6B6EC0 0x0000000031986530), opencl_snprintf() + 0x5AE38 bytes(s)
0x00007FF857E84331 (0x0000000000000000 0x00000000271AAD60 0x00000000271AAD60 0x000000001D6632E0), opencl_snprintf() + 0x5CB81 bytes(s)
0x00007FF8583430CF (0x00000000300E4C60 0x0000000031156000 0x0000000000000007 0x0000000000000000), RegisterGlobalAtExitNotification() + 0x43ECBF bytes(s)
0x00007FF858342E0E (0x000000001D6B6EC0 0x000000001F7FAB59 0x00000000311560F0 0x00007FF8584423FF), RegisterGlobalAtExitNotification() + 0x43E9FE bytes(s)
0x00007FF858342D48 (0x0000000030931D00 0x000000001F7FAC69 0x0000000030931D00 0x0000000031681670), RegisterGlobalAtExitNotification() + 0x43E938 bytes(s)
0x00007FF857E5D604 (0x0000000000000000 0x000000001F7FAD59 0x0000000000000000 0x000000001D6635E0), opencl_snprintf() + 0x35E54 bytes(s)
0x00007FF8583430CF (0x00000000300E5560 0x000000002661AF00 0x0000000000000002 0x0000000000000000), RegisterGlobalAtExitNotification() + 0x43ECBF bytes(s)
0x00007FF858342E0E (0x000000001D6B6EC0 0x000000001F7FAE29 0x000000002661AF18 0x00007FF8584438D3), RegisterGlobalAtExitNotification() + 0x43E9FE bytes(s)
0x00007FF858342D48 (0x000000001D6B6EC0 0x0000000030A79470 0x000000001D6B6EC0 0x0000000031681670), RegisterGlobalAtExitNotification() + 0x43E938 bytes(s)
0x00007FF857E4A397 (0x0000000000000000 0x000000001F7FB379 0x0000000000000000 0x000000001CEDB508), opencl_snprintf() + 0x22BE7 bytes(s)
0x00007FF8583433AD (0x0000000027632300 0x000000001D099050 0x0000000000000008 0x0000000000000000), RegisterGlobalAtExitNotification() + 0x43EF9D bytes(s)
0x00007FF858342F49 (0x00000000267F1BF0 0x000000001F7FB560 0x000000001CEDA1C8 0x000000001F7FB730), RegisterGlobalAtExitNotification() + 0x43EB39 bytes(s)
0x00007FF857E27FC5 (0x00000000267F1BF0 0x000000001F7FB568 0x000000001F7FB580 0x000000001F7FB568), opencl_snprintf() + 0x815 bytes(s)
0x00007FF857E10862 (0x000000001D649340 0x00007FF88ABB5BA1 0xFFFFFFFFFFFFFFFE 0x000000001D649340)
0x00007FF857E22268 (0x000000001D649340 0x00000000000F8581 0x00000000000F8478 0x000000002709E110)
0x00007FF857E0EC8C (0x00007FF87BBCEC40 0x000000001CEDA160 0x000000001C9C6710 0x000000001E8713F0)
0x00007FF87BB72242 (0x000000001C9C66D8 0x000000002709E010 0x00000000000F8581 0x000000001C9C66D8)
0x00007FF88202FBF4 (0x0000000000000001 0x000000001D8EB6A0 0x0000000000000000 0x000000001E1EFF40), clWaitForEvents() + 0x410D4 bytes(s)
0x00007FF881F28260 (0x000000001C8F1790 0x000000001F7FBA49 0x0000000000000000 0x0000000000000000), ?TE_RegisterGlobalAtExitNotification@TaskExecutor@OpenCL@Intel@@YAXPEAVIAtExitCentralPoint@Utils@23@@Z() + 0x2640 bytes(s)
0x00007FF881F23CB7 (0x000000001C8F1790 0x000000001E000800 0x000000001E1F3EC0 0x0000000000000000), ?GetTaskExecutor@TaskExecutor@OpenCL@Intel@@YAPEAVITaskExecutor@123@XZ() + 0xD4D7 bytes(s)
0x00007FF881F16662 (0x0000000000000000 0x0000000000000001 0x0000000000000003 0x00007FF87B45CD34)
0x00007FF87B45DA92 (0x000000001E1EBE80 0x000000001E1EFF40 0x000000001E203840 0x000000001E203F40), ?internal_wait@task_arena_base@internal@interface7@tbb@@IEBAXXZ() + 0x4B22 bytes(s)
0x00007FF87B458305 (0x000000001E203F10 0x000000001F7FF8C0 0x000000001E1EBE80 0x0000000000000000), ?internal_current_slot@task_arena_base@internal@interface7@tbb@@KAHXZ() + 0x10D5 bytes(s)
0x00007FF87B456383 (0x000000001E1FBF00 0x000000001F7FF8C0 0x000000001E1EBE88 0x0000000000000334), ?initialize@task_scheduler_init@tbb@@QEAAXH@Z() + 0xE93 bytes(s)
0x00007FF87B450978 (0x0000000000000001 0x0000000000000000 0x0000000000000000 0x0000000000000000), ?thread_sleep_v3@internal@tbb@@YAXAEBVinterval_t@tick_count@2@@Z() + 0x1438 bytes(s)
0x00007FF87B450ADB (0x000000001E004A20 0x0000000000000000 0x000000001E004A20 0x0000000000000000), ?thread_sleep_v3@internal@tbb@@YAXAEBVinterval_t@tick_count@2@@Z() + 0x159B bytes(s)
0x00007FF87B46239B (0x00007FF87B49F520 0x000000001E004A20 0x0000000000000000 0x0000000000000000), __TBB_machine_is_in_transaction() + 0x18A3 bytes(s)
0x00007FF87B46242F (0x0000000000000000 0x0000000000000000 0x0000000000000000 0x0000000000000000), __TBB_machine_is_in_transaction() + 0x1937 bytes(s)
0x00007FF889D07374 (0x0000000000000000 0x0000000000000000 0x0000000000000000 0x0000000000000000), BaseThreadInitThunk() + 0x14 bytes(s)
0x00007FF88ABDCC91 (0x0000000000000000 0x0000000000000000 0x0000000000000000 0x0000000000000000), RtlUserThreadStart() + 0x21 bytes(s)
0x00007FF88ABDCC91 (0x0000000000000000 0x0000000000000000 0x0000000000000000 0x0000000000000000), RtlUserThreadStart() + 0x21 bytes(s)


With hashcat -m 1000 -a 0 -d 1 -O C:\Users\Marti\Documents\hash.txt C:\Users\Marti\Documents\rockyou.txt
hashcat (v6.2.6) starting

hipFuncGetAttribute is missing from HIP shared library.

ADL2_Overdrive_Caps(): -8

ADL2_Overdrive_Caps(): -8

ADL2_Overdrive_Caps(): -8

Please get more info on my hardwares: hashcat -I
hashcat (v6.2.6) starting in backend information mode

hipFuncGetAttribute is missing from HIP shared library.

OpenCL Info:
============

OpenCL Platform ID #1
  Vendor..: Advanced Micro Devices, Inc.
  Name....: AMD Accelerated Parallel Processing
  Version.: OpenCL 2.1 AMD-APP (3075.13)

  Backend Device ID #1
    Type...........: GPU
    Vendor.ID......: 1
    Vendor.........: Advanced Micro Devices, Inc.
    Name...........: AMD Radeon R7 M265 Series
    Version........: OpenCL 1.2 AMD-APP (3075.13)
    Processor(s)...: 6
    Clock..........: 400
    Memory.Total...: 3072 MB (limited to 3072 MB allocatable in one block)
    Memory.Free....: 2944 MB
    Local.Memory...: 32 KB
    OpenCL.Version.: OpenCL C 1.2
    Driver.Version.: 3075.13
    PCI.Addr.BDF...: 04:00.0

OpenCL Platform ID #2
  Vendor..: Intel(R) Corporation
  Name....: Intel(R) OpenCL
  Version.: OpenCL 2.0

  Backend Device ID #2
    Type...........: GPU
    Vendor.ID......: 8
    Vendor.........: Intel(R) Corporation
    Name...........: Intel(R) HD Graphics 5500
    Version........: OpenCL 2.0
    Processor(s)...: 24
    Clock..........: 950
    Memory.Total...: 3234 MB (limited to 404 MB allocatable in one block)
    Memory.Free....: 1568 MB
    Local.Memory...: 64 KB
    OpenCL.Version.: OpenCL C 2.0
    Driver.Version.: 20.19.15.4531

  Backend Device ID #3
    Type...........: CPU
    Vendor.ID......: 8
    Vendor.........: Intel(R) Corporation
    Name...........: Intel(R) Core(TM) i7-5500U CPU @ 2.40GHz
    Version........: OpenCL 2.0 (Build 10094)
    Processor(s)...: 4
    Clock..........: 2400
    Memory.Total...: 8106 MB (limited to 1013 MB allocatable in one block)
    Memory.Free....: 4021 MB
    Local.Memory...: 32 KB
    OpenCL.Version.: OpenCL C 2.0
    Driver.Version.: 5.2.0.10094
Reply
#2
Well regarding your output you should try updating your opencl drivers and/or HIP

https://www.intel.com/content/www/us/en/...ivers.html

hashcat should tell you at least opencl 2.1 or 3.0 Neo for your UHD graphics part

never the less, maybe your password is also not cracked because of wrong encoding (input file, UTF-8 vs Windows-1252 or whatsoever)
Reply