(03-01-2016, 03:57 AM)epixoip Wrote: No that's incorrect, rar2john supports RAR5. The problem is, it is not a standalone utility. It is compiled into john. I've looked at breaking it out into a standalone utility, but it will take a lot of work to do so due to how many john-isms the code uses. Eventually it will need to be done though.
Thank you, epixoip.
I have another question. The example hashes only give a string of hashcat format hash. Where can I get the meaning of each segment?
For example, RAR5 example hash is:
$rar5$16$74575567518807622265582327032280$15$f8b4064de34ac02ecabfe9abdf93ed6a$8$9843834ed0f7c754
What does every segment means?
$rar5
16------salt length?
74575567518807622265582327032280------salt?
15------hmac loops?
f8b4064de34ac02ecabfe9abdf93ed6a------init vector?
8------??
9843834ed0f7c754------psw check?
Are there any descriptions of example hashes?