My practice attempt to decrypt a SHA-256 hash of an IP address

[royce]

I didn't write that paste, just grabbed it because it did the job.

Works for me:

Code:

# Get the masks file. $ wget -O ip.masks https://pastebin.com/raw/4HQ6C8gG [...] # For efficiency, select the line from that we expect to match our candidate IP. $ cat ip.masks.selected 01234,012345,123456789,2?1?d.2?1?d.?d.?3?d # Make sure it's actually in the original masks file we downloaded. $ fgrep -f ip.masks.selected ip.masks 01234,012345,123456789,2?1?d.2?1?d.?d.?3?d # Get the MD5 of the target IP. $ echo -n '211.231.4.57' | md5sum e317a1a7ddb93c835fed61923522bc98  - # Verify that that's in the target hash file. $ cat 211.231.4.57.hash e317a1a7ddb93c835fed61923522bc98 # Run hashcat. The hash is cracked with the expected mask which is included in the file. $ hashcat --potfile-path=/dev/null --quiet -m 0 -a 3 211.231.4.57.hash ip.masks.selected e317a1a7ddb93c835fed61923522bc98:211.231.4.57

Also, undeath - that mask file *does* allow for leading zeroes - all the ones with .?1?2 or .?2?1. (And those could be valid IPs in some circumstances.)