Expected bcrypt input format and terminal input
#3
If you put the hash inside quotes, you would be fine doing this in commandline:

hashcat -m 3200 -a 0 -O "$2a$05$LhayLxezLhK1LhWvKxCyLOj0j1u.Kj0jZ0pEmm134uzrQlFvQJLF6" ./wordlist

A correct formatted bcrypt does not contain Confusedomething; in the end, so remove that. That's why you get separator unmatched. So everything after the first : should be removed, including the : itself.

If you want to try with the exact password, you can do

hashcat -m 3200 -a 3 "$2a$05$LhayLxezLhK1LhWvKxCyLOj0j1u.Kj0jZ0pEmm134uzrQlFvQJLF6" password

If you want to try with a list of words with size limits, you can use an inline rule like this:

hashcat -m 3200 -a 0 "$2a$05$LhayLxezLhK1LhWvKxCyLOj0j1u.Kj0jZ0pEmm134uzrQlFvQJLF6" ./wordlist -j >8

where >8 means try words greater than 8 chars. Be aware that sizes are given as 0-9 and a-z if bigger than 9.

See also hashcat --help
Reply


Messages In This Thread
RE: Expected bcrypt input format and terminal input - by b8vr - 10-02-2022, 02:24 PM