Can hybrid attack work with rules?
#3
Well... then, I think I have found a bug in OCLHashCat.
Case command-line:

Code:
# Creation of the password test file with key example "rafa3rafa3: temp=$(iconv -f ASCII -t UTF-16LE <(printf "rafa3rafa3") | openssl dgst -md4) temp=$(echo $temp | awk 'NF>1{print $NF}') temp="Administrador:500:aad3b435b51404eeaad3b435b51404ee:"$temp":::" echo $temp > TestPassword.txt oclhashcat64 -m 1000 TestPassword.txt -a 6 "c:\Dictionaries\cain.txt" ?d -j d oclHashcat v1.32 starting... Device #1: Bonaire, 1024MB, 1050Mhz, 12MCU Device #2: Tahiti, 3072MB, 1000Mhz, 32MCU Device #3: Tahiti, 3072MB, 900Mhz, 28MCU Hashes: 1 hashes; 1 unique digests, 1 unique salts Bitmaps: 8 bits, 256 entries, 0x000000ff mask, 1024 bytes Applicable Optimizers: * Zero-Byte * Precompute-Init * Precompute-Merkle-Demgard * Meet-In-The-Middle * Early-Skip * Not-Salted * Not-Iterated * Single-Hash * Single-Salt * Scalar-Mode * Raw-Hash Watchdog: Temperature abort trigger set to 90c Watchdog: Temperature retain trigger set to 80c Device #1: Kernel d:\Programas\HashCat\OCLHashCat/kernels/4098/m01000_a1.Bonaire _1573.4_1573.4 (VM).kernel (190372 bytes) Device #1: Kernel d:\Programas\HashCat\OCLHashCat/kernels/4098/markov_le_v2.Bona ire_1573.4_1573.4 (VM).kernel (39912 bytes) Device #2: Kernel d:\Programas\HashCat\OCLHashCat/kernels/4098/m01000_a1.Tahiti_ 1573.4_1573.4 (VM).kernel (190384 bytes) Device #2: Kernel d:\Programas\HashCat\OCLHashCat/kernels/4098/markov_le_v2.Tahi ti_1573.4_1573.4 (VM).kernel (39952 bytes) Device #3: Kernel d:\Programas\HashCat\OCLHashCat/kernels/4098/m01000_a1.Tahiti_ 1573.4_1573.4 (VM).kernel (190384 bytes) Device #3: Kernel d:\Programas\HashCat\OCLHashCat/kernels/4098/markov_le_v2.Tahi ti_1573.4_1573.4 (VM).kernel (39952 bytes) Generating dictionary stats for j:\Repositorio de Diccionarios para Ataques\Dicc ionarios Base\Precompilados\cain.txt: 3149586 bytes (100.00%), 306706 words, 306 Generated dictionary stats for j:\Repositorio de Diccionarios para Ataques\Dicci onarios Base\Precompilados\cain.txt: 3149586 bytes, 306706 words, 3067060 keyspa ce INFO: approaching final keyspace, workload adjusted Session.Name...: oclHashcat Status.........: Exhausted Input.Left.....: File (j:\Repositorio de Diccionarios para Ataques\Diccionarios Base\Precompilados\cain.txt) Input.Right....: Mask (?d) [1] Hash.Target....: 58a4b878e3ba2e06093acfae1d872391 Hash.Type......: NTLM Time.Started...: 0 secs Time.Estimated.: 0 secs Speed.GPU.#1...: 225.2 MH/s Speed.GPU.#2...: 593.2 MH/s Speed.GPU.#3...: 466.1 MH/s Speed.GPU.#*...: 1284.5 MH/s Recovered......: 0/1 (0.00%) Digests, 0/1 (0.00%) Salts Progress.......: 3067060/3067060 (100.00%) Skipped........: 0/3067060 (0.00%) Rejected.......: 35570/3067060 (1.16%) HWMon.GPU.#1...: 0% Util, 35c Temp, 22% Fan HWMon.GPU.#2...: 3% Util, 39c Temp, 21% Fan HWMon.GPU.#3...: 35% Util, 38c Temp, 30% Fan WARNING: Failed to restore default fan speed for gpu number: 2: Started: Sat Jan 24 04:53:54 2015 Stopped: Sat Jan 24 04:53:56 2015

I think the rule is being ignored.
Same results for "-k" intead of "-j".
Should I open a bug ticket?

Note: Cain dictionary downloaded from here:
http://downloads.skullsecurity.org/passw...in.txt.bz2


Messages In This Thread
RE: Can hybrid attack work with rules? - by atom - 01-23-2015, 12:12 PM
RE: Can hybrid attack work with rules? - by SopalajoArrierez - 01-24-2015, 05:58 AM