Finding all the collisions for a given hash

[royce]

I don't know of a way to do this with hashcat today.

But the "jumbo" edition of John the Ripper has a "hidden" option (--keep-guessing) that will do this.

For CRC32, the source file has to be assembled in a particular way, as documented here:

http://openwall.info/wiki/john/hash-formats

Here is a working example.

$ cat crc32.hash
user_x:$crc32$00000000.bb0e6e9b:::dummy


$ ./john --fork=4 --format=crc32 --keep-guessing crc32.hash
Using default input encoding: UTF-8
Loaded 1 password hash (CRC32 [CRC32 32/64 CRC-32C SSE4.2])
Node numbers 1-4 of 4 (fork)
Note: Will keep guessing even after finding a possible candidate.
Press 'q' or Ctrl-C to abort, almost any other key for status
dhtchm (user_x)
ikiotid (user_x)
B6In (user_x)

... etc. Adjust the "fork" value for your number of CPUs/cores, of course.