hashcat unexpected output from "s" Rule

[Hash-IT]

Using latest beta of hascat 0.40b4

Code:

hashcat-cli32.exe -r "test.rule" --stdout dic.txt >> Out.txt

dic.txt contains ABCDEFGH

test.rule conatains

Code:

sABsBCsCDsDEsEFsFGsGHsHIsIJsJKsKLsLMsMNsNOsOPsPQsQRsRSsSTsTUsUVsVWsWXsXYsYZsZA

Output file ends up with ...

Code:

AAAAAAAA

Should be ...

Code:

BCDEFGHI

[atom]

Simply to many functions

[Hash-IT]

Simply to many functions

Ahh... any idea what the limit is ?

This has just broken an idea I had for the "Limiting the consecutive occurrence" thread.



Oh hang on... Interesting development.

Add another rule of equal length...

Code:

sAEsBFsCGsDHsEIsFJsGKsHLsIMsJNsKOsLPsMQsNRsOSsPTsQUsRVsSWsTXsUYsVZsWAsXBsYCsZD

So the rule file looks like this.

Code:

sABsBCsCDsDEsEFsFGsGHsHIsIJsJKsKLsLMsMNsNOsOPsPQsQRsRSsSTsTUsUVsVWsWXsXYsYZsZA
sAEsBFsCGsDHsEIsFJsGKsHLsIMsJNsKOsLPsMQsNRsOSsPTsQUsRVsSWsTXsUYsVZsWAsXBsYCsZD

IT WORKS !!! huh ???

[ntk]

use hashcat-cli 0.39

command:
./hashcat-cli32.bin -r /home/k/ohc/rules/replace.rule /home/k/ohc/exam.hash --stdout /home/k/dict/test /dev/null /dev/null > /home/k/dict/analyse

test dict:
ABABABAB
ABABABAC
ABABABAD
ABABABAE
AHRQUBPW
AHRQUBPX
AHRQUBPY
AHRQUBPZ
AHRQUBQA
AHRQUBQB
AHRQUBQC

test rule:
sAB

output:
BBBBBBBB
BBBBBBBC
BBBBBBBD
BBBBBBBE
BHRQUBPW
BHRQUBPX
BHRQUBPY
BHRQUBPZ
BHRQUBQB
BHRQUBQB
BHRQUBQC


if content of test rule is sABsBC, then output on the same test dict is:
CCCCCCCC
CCCCCCCC
CCCCCCCD
CCCCCCCE
CHRQUCPW
CHRQUCPX
CHRQUCPY
CHRQUCPZ
CHRQUCQC
CHRQUCQC
CHRQUCQC

I can not make any sense of it? Strange.

[M@LIK]

One rule at a time (Starting from left) applied at the whole line:

Code:

ABCDEFGH + sAB = BBCDEFGH
BBCDEFGH + sBC = CCCDEFGH
CCCDEFGH + sCD = DDDDEFGH
DDDDEFGH + sDE = EEEEEFGH
EEEEEFGH + sEF = FFFFFFGH
FFFFFFGH + sFG = GGGGGGGH
GGGGGGGH + sGH = HHHHHHHH
HHHHHHHH + sHI = IIIIIIII
IIIIIIII + sHI = JJJJJJJJ
JJJJJJJJ + sHI = KKKKKKKK
...
ZZZZZZZZ + sZA = ZZZZZZZZ

Get it handsome? xD

This is one of the thing I "smelled" as "wrong" on the the other thread.

[ntk]

the few last lines seems to make sense. The first 4 is unexpected. What ever it is, it breaks what you innitially want to do: filterout repeat-char combinations.

---

handsome? You mean Hash-IT. me, I am too old for that trick, M@lik. hihi

yes it makes sense. Hash-It needs to lift up the whole line by one char forward, in order to keep the pattern.

[Hash-IT]

@ntk and @M@LIK

It seems to be that hashcat doesn't read the rule properly if it is on the first line. See my post above.

It does seem to work if there is more than one rule in the list and it even works for the pattern idea !!!!

How about that M@LIK !!!!

[ntk]

I think we need to go back to one thread. It makes me dizzy to jump here and there

---

oh dear... I won't comment

[Hash-IT]

Strange...

I am getting intermittent results.

Sometimes it seems to work and others it doesn't.

I just put ..

Code:

ABCDEFGH
QWERTYUI

In the password list and ...

Code:

sABsBCsCDsDEsEFsFGsGHsHIsIJsJKsKLsLMsMNsNOsOPsPQsQRsRSsSTsTUsUVsVWsWXsXYsYZsZA
sACsBDsCEsDFsEGsFHsGIsHJsIKsJLsKMsLNsMOsNPsOQsPRsQSsRTsSUsTVsUWsVXsWYsXZsYAsZB
sADsBEsCFsDGsEHsFIsGJsHKsILsJMsKNsLOsMPsNQsORsPSsQTsRUsSVsTWsUXsVYsWZsXAsYBsZC
sAEsBFsCGsDHsEIsFJsGKsHLsIMsJNsKOsLPsMQsNRsOSsPTsQUsRVsSWsTXsUYsVZsWAsXBsYCsZD
sAFsBGsCHsDIsEJsFKsGLsHMsINsJOsKPsLQsMRsNSsOTsPUsQVsRWsSXsTYsUZsVAsWBsXCsYDsZE
sAGsBHsCIsDJsEKsFLsGMsHNsIOsJPsKQsLRsMSsNTsOUsPVsQWsRXsSYsYZsUAsVBsWCsXDsYEsZF
sAHsBIsCJsDKsELsFMsGNsHOsIPsJQsKRsLSsMTsNUsOVsPWsQXsRYsSZsTAsUBsVCsWDsXEsYFsZG
sAIsBJsCKsDLsEMsFNsGOsHPsIQsJRsKSsLTsMUsNVsOWsPXsQYsRZsSAsTBsUCsVDsWEsXFsYGsZH
sAJsBKsCLsDMsENsFOsGPsHQsIRsJSsKTsLUsMVsNWsOXsPYsQZsRAsSBsTCsUDsVEsWFsXGsYHsZI
sAKsBLsCMsDNsEOsFPsGQsHRsISsJTsKUsLVsMWsNXsOYsPZsQAsRBsSCsTDsUEsVFsWGsXHsYIsZJ
sALsBMsCNsDOsEPsFQsGRsHSsITsJUsKVsLWsMXsNYsOZsPAsQBsRCsSDsTEsUFsVGsWHsXIsYJsZK
sAMsBNsCOsDPsEQsFRsGSsHTsIUsJVsKWsLXsMYsNZsOAsPBsQCsRDsSEsTFsUGsVHsWIsXJsYKsZL
sANsBOsCPsDQsERsFSsGTsHUsIVsJWsKXsLYsMZsNAsOBsPCsQDsREsSFsTGsUHsVIsWJsXKsYLsZM
sAOsBPsCQsDRsESsFTsGUsHVsIWsJXsKYsLZsMAsNBsOCsPDsQEsRFsSGsTHsUIsVJsWKsXLsYMsZN
sAPsBQsCRsDSsETsFUsGVsHWsIXsJYsKZsLAsMBsNCsODsPEsQFsRGsSHsTIsUJsVKsWLsXMsYNsZO
sAQsBRsCSsDTsEUsFVsGWsHXsIYsJZsKAsLBsMCsNDsOEsPFsQGsRHsSIsTJsUKsVLsWMsXNsYOsZP
sARsBSsCTsDUsEVsFWsGXsHYsIZsJAsKBsLCsMDsNEsOFsPGsQHsRIsSJsTKsULsVMsWNsXOsYPsZQ
sASsBTsCUsDVsEWsFXsGYsHZsIAsJBsKCsLDsMEsNFsOGsPHsQIsRJsSKsTLsUMsVNsWOsXPsYQsZR
sATsBUsCVsDWsEXsFYsGZsHAsIBsJCsKDsLEsMFsNGsOHsPIsQJsRKsSLsTMsUNsVOsWPsXQsYRsZS
sAUsBVsCWsDXsEYsFZsGAsHBsICsJDsKEsLFsMGsNHsOIsPJsQKsRLsSMsTNsUOsVPsWQsXRsYSsZT
sAVsBWsCXsDYsEZsFAsGBsHCsIDsJEsKFsLGsMHsNIsOJsPKsQLsRMsSNsTOsUPsVQsWRsXSsYTsZU
sAWsBXsCYsDZsEAsFBsGCsHDsIEsJFsKGsLHsMIsNJsOKsPLsQMsRNsSOsTPsUQsVRsWSsXTsYUsZV
sAXsBYsCZsDAsEBsFCsGDsHEsIFsJGsKHsLIsMJsNKsOLsPMsQNsROsSPsTQsURsVSsWTsXUsYVsZW
sAYsBZsCAsDBsECsFDsGEsHFsIGsJHsKIsLJsMKsNLsOMsPNsQOsRPsSQsTRsUSsVTsWUsXVsYWsZX
sAZsBAsCBsDCsEDsFEsGFsHGsIHsJIsKJsLKsMLsNMsONsPOsQPsRQsSRsTSsUTsVUsWVsXWsYXsZY

In the rule file and got ...

Code:

AAAAAAAA
ABABABAB
BCABCABC
CDABCDAB
EABCDEAB
CDEFGABC
GHABCDEF

You're right, it doesn't work.

....bugger.

[Hash-IT]

I can't see your desired output: "BCDEFGHI" ?

Ok I give in !! It doesn't work as expected.

No need to kick a man when he is down ..... .... :p

You cannot deny I have determination !!