04-23-2014, 05:31 AM
hashcat does not support dmg, and there's nothing you can do to trick it into working with dmg.
further, the "hash" that is extracted with dmg2john is not a hash at all. there is no stored password hash. the user's password is passed through a key derivation function which generates a key that is used to decrypt the image. the "hash" that you see from dmg2john is all of the bits necessary to determine the kdf settings and to verify a successful decryption.
further, the "hash" that is extracted with dmg2john is not a hash at all. there is no stored password hash. the user's password is passed through a key derivation function which generates a key that is used to decrypt the image. the "hash" that you see from dmg2john is all of the bits necessary to determine the kdf settings and to verify a successful decryption.