08-02-2022, 03:13 PM
I have a small amount of knowledge in IT and I thought I could muddle my way through figuring out hashcat, but it is supremely complicated, and I am now starting my plead for help.
I have spent about three weeks trying to guess the password to a Word file that my father left me in his Will, but there is no indication of what the password is.
My father spoke several languages, so the password might not be in English or just in English. I don't know if it's a single word or a longer phrase, but I'm betting it's a word - but I don't know what language, so am not sure how a word list will help.
I have (I think) successfully gotten as far as getting the hash from the file. I've read the rules of this site and it says to not post the hash unless it is requested. But for you to help me figure out the password, I think I have to give you the hash. I do not have a powerful laptop or any option of using one. In fact, I am doing this on a VirtualBox Linux Mint virtual machine (although I've had the same lack of results on a The-Distribution-Which-Does-Not-Handle-OpenCL-Well (Kali) virtual machine).
The Word version that was used was either Word 97 or at most 2003.
I've tried various parameters, but I basically out of my depth and guessing without fully understanding if I should or should not be adding certain parameters to the hashcat command. Below is the output as far as I've gotten.
If you're able to help me, please let me know and I can provide you the hash.
Thanks.
--------- output ----------
de@SpectreVM:~/Desktop/Untitled Folder$ hashcat --force -m 9700 -a 0 -w 3 --potfile-path ./outputhashes.txt hash.txt -r /usr/share/hashcat/rules/best64.rule nmap.lst
hashcat (v5.1.0) starting...
OpenCL Platform #1: The pocl project
====================================
* Device #1: pthread-Intel(R) Core(TM) i7-5500U CPU @ 2.40GHz, 1024/2948 MB allocatable, 1MCU
/usr/share/hashcat/OpenCL/m09700_a0-optimized.cl: Pure OpenCL kernel not found, falling back to optimized OpenCL kernel
Hashes: 1 digests; 1 unique digests, 1 unique salts
Bitmaps: 16 bits, 65536 entries, 0x0000ffff mask, 262144 bytes, 5/13 rotates
Rules: 77
Applicable optimizers:
* Optimized-Kernel
* Zero-Byte
* Precompute-Init
* Not-Iterated
* Single-Hash
* Single-Salt
Minimum password length supported by kernel: 0
Maximum password length supported by kernel: 15
Watchdog: Hardware monitoring interface not found on your system.
Watchdog: Temperature abort trigger disabled.
* Device #1: build_opts '-cl-std=CL1.2 -I OpenCL -I /usr/share/hashcat/OpenCL -D LOCAL_MEM_TYPE=2 -D VENDOR_ID=64 -D CUDA_ARCH=0 -D AMD_ROCM=0 -D VECT_SIZE=8 -D DEVICE_TYPE=2 -D DGST_R0=0 -D DGST_R1=1 -D DGST_R2=2 -D DGST_R3=3 -D DGST_ELEM=4 -D KERN_TYPE=9700 -D _unroll'
Dictionary cache hit:
* Filename..: nmap.lst
* Passwords.: 5041
* Bytes.....: 39980
* Keyspace..: 388157
Approaching final keyspace - workload adjusted.
Session..........: hashcat
Status...........: Exhausted
Hash.Type........: MS Office <= 2003 $0/$1, MD5 + RC4
Hash.Target......: $oldoffice$1*c5cc7447aaf68025539517d91cf75ff8*6c5f3...bdc0b6
Time.Started.....: Tue Aug 2 08:08:28 2022 (2 secs)
Time.Estimated...: Tue Aug 2 08:08:30 2022 (0 secs)
Guess.Base.......: File (nmap.lst)
Guess.Mod........: Rules (/usr/share/hashcat/rules/best64.rule)
Guess.Queue......: 1/1 (100.00%)
Speed.#1.........: 205.0 kH/s (47.66ms) @ Accel:32 Loops:9 Thr:64 Vec:8
Recovered........: 0/1 (0.00%) Digests, 0/1 (0.00%) Salts
Progress.........: 388157/388157 (100.00%)
Rejected.........: 231/388157 (0.06%)
Restore.Point....: 5041/5041 (100.00%)
Restore.Sub.#1...: Salt:0 Amplifier:72-77 Iteration:0-9
Candidates.#1....: dog ->
Started: Tue Aug 2 08:08:23 2022
Stopped: Tue Aug 2 08:08:32 2022
I have spent about three weeks trying to guess the password to a Word file that my father left me in his Will, but there is no indication of what the password is.
My father spoke several languages, so the password might not be in English or just in English. I don't know if it's a single word or a longer phrase, but I'm betting it's a word - but I don't know what language, so am not sure how a word list will help.
I have (I think) successfully gotten as far as getting the hash from the file. I've read the rules of this site and it says to not post the hash unless it is requested. But for you to help me figure out the password, I think I have to give you the hash. I do not have a powerful laptop or any option of using one. In fact, I am doing this on a VirtualBox Linux Mint virtual machine (although I've had the same lack of results on a The-Distribution-Which-Does-Not-Handle-OpenCL-Well (Kali) virtual machine).
The Word version that was used was either Word 97 or at most 2003.
I've tried various parameters, but I basically out of my depth and guessing without fully understanding if I should or should not be adding certain parameters to the hashcat command. Below is the output as far as I've gotten.
If you're able to help me, please let me know and I can provide you the hash.
Thanks.
--------- output ----------
de@SpectreVM:~/Desktop/Untitled Folder$ hashcat --force -m 9700 -a 0 -w 3 --potfile-path ./outputhashes.txt hash.txt -r /usr/share/hashcat/rules/best64.rule nmap.lst
hashcat (v5.1.0) starting...
OpenCL Platform #1: The pocl project
====================================
* Device #1: pthread-Intel(R) Core(TM) i7-5500U CPU @ 2.40GHz, 1024/2948 MB allocatable, 1MCU
/usr/share/hashcat/OpenCL/m09700_a0-optimized.cl: Pure OpenCL kernel not found, falling back to optimized OpenCL kernel
Hashes: 1 digests; 1 unique digests, 1 unique salts
Bitmaps: 16 bits, 65536 entries, 0x0000ffff mask, 262144 bytes, 5/13 rotates
Rules: 77
Applicable optimizers:
* Optimized-Kernel
* Zero-Byte
* Precompute-Init
* Not-Iterated
* Single-Hash
* Single-Salt
Minimum password length supported by kernel: 0
Maximum password length supported by kernel: 15
Watchdog: Hardware monitoring interface not found on your system.
Watchdog: Temperature abort trigger disabled.
* Device #1: build_opts '-cl-std=CL1.2 -I OpenCL -I /usr/share/hashcat/OpenCL -D LOCAL_MEM_TYPE=2 -D VENDOR_ID=64 -D CUDA_ARCH=0 -D AMD_ROCM=0 -D VECT_SIZE=8 -D DEVICE_TYPE=2 -D DGST_R0=0 -D DGST_R1=1 -D DGST_R2=2 -D DGST_R3=3 -D DGST_ELEM=4 -D KERN_TYPE=9700 -D _unroll'
Dictionary cache hit:
* Filename..: nmap.lst
* Passwords.: 5041
* Bytes.....: 39980
* Keyspace..: 388157
Approaching final keyspace - workload adjusted.
Session..........: hashcat
Status...........: Exhausted
Hash.Type........: MS Office <= 2003 $0/$1, MD5 + RC4
Hash.Target......: $oldoffice$1*c5cc7447aaf68025539517d91cf75ff8*6c5f3...bdc0b6
Time.Started.....: Tue Aug 2 08:08:28 2022 (2 secs)
Time.Estimated...: Tue Aug 2 08:08:30 2022 (0 secs)
Guess.Base.......: File (nmap.lst)
Guess.Mod........: Rules (/usr/share/hashcat/rules/best64.rule)
Guess.Queue......: 1/1 (100.00%)
Speed.#1.........: 205.0 kH/s (47.66ms) @ Accel:32 Loops:9 Thr:64 Vec:8
Recovered........: 0/1 (0.00%) Digests, 0/1 (0.00%) Salts
Progress.........: 388157/388157 (100.00%)
Rejected.........: 231/388157 (0.06%)
Restore.Point....: 5041/5041 (100.00%)
Restore.Sub.#1...: Salt:0 Amplifier:72-77 Iteration:0-9
Candidates.#1....: dog ->
Started: Tue Aug 2 08:08:23 2022
Stopped: Tue Aug 2 08:08:32 2022