How does 0xae get skipped from 0x00-0xff range in --hex-charset ?b mask???
#5
(10-12-2022, 12:33 AM)slyexe Wrote: Are you sure hashcat is not just "Skipping" your hash because it has previously been found in the potfile? 

Show us the code of your attack running, or being exhausted.
Nope, it's not in potfile. Please check run results with full key and masked key below.

Successful attack with full key:
Quote:hashcat test.hash -m 9710 -a 3 --hex-charset f2ab1219ae --potfile-disable
hashcat (v6.2.6) starting

OpenCL API (OpenCL 3.0 ) - Platform #1 [Intel(R) Corporation]
=============================================================
* Device #1: Intel(R) UHD Graphics, 3168/6462 MB (1615 MB allocatable), 24MCU

./OpenCL/m09710_a3-optimized.cl: Pure kernel not found, falling back to optimized kernel
Minimum password length supported by kernel: 5
Maximum password length supported by kernel: 5

Hashes: 1 digests; 1 unique digests, 1 unique salts
Bitmaps: 16 bits, 65536 entries, 0x0000ffff mask, 262144 bytes, 5/13 rotates

Optimizers applied:
* Optimized-Kernel
* Zero-Byte
* Precompute-Init
* Not-Iterated
* Single-Hash
* Single-Salt
* Brute-Force

Watchdog: Hardware monitoring interface not found on your system.
Watchdog: Temperature abort trigger disabled.

Host memory required for this attack: 52 MB

The wordlist or mask that you are using is too small.
This means that hashcat cannot use the full parallel power of your device(s).
Unless you supply more work, your cracking speed will drop.
For tips on supplying more work, see: https://hashcat.net/faq/morework

Approaching final keyspace - workload adjusted.

$oldoffice$1*d6aabb63363188b9b73a88efb9c9152e*afbbb9254764273f8f4fad9a5d82981f*6f09fd2eafc4ade522b5f2bee0eaf66d:f2ab1219ae

Session..........: hashcat
Status...........: Cracked
Hash.Mode........: 9710 (MS Office <= 2003 $0/$1, MD5 + RC4, collider #1)
Hash.Target......: $oldoffice$1*d6aabb63363188b9b73a88efb9c9152e*afbbb...eaf66d
Time.Started.....: Wed Oct 12 08:46:07 2022 (1 sec)
Time.Estimated...: Wed Oct 12 08:46:08 2022 (0 secs)
Kernel.Feature...: Optimized Kernel
Guess.Mask.......: f2ab1219ae [5]
Guess.Queue......: 1/1 (100.00%)
Speed.#1.........:      73 H/s (0.19ms) @ Accel:512 Loops:1 Thr:8 Vec:4
Recovered........: 1/1 (100.00%) Digests (total), 1/1 (100.00%) Digests (new)
Progress.........: 1/1 (100.00%)
Rejected.........: 0/1 (0.00%)
Restore.Point....: 0/1 (0.00%)
Restore.Sub.#1...: Salt:0 Amplifier:0-1 Iteration:0-1
Candidate.Engine.: Device Generator
Candidates.#1....: $HEX[f2ab1219ae] -> $HEX[f2ab1219ae]

Started: Wed Oct 12 08:46:05 2022
Stopped: Wed Oct 12 08:46:09 2022

Exhausted attack with masked key:
Quote:hashcat test.hash -m 9710 -a 3 --hex-charset f2ab1219?b --potfile-disable
hashcat (v6.2.6) starting

OpenCL API (OpenCL 3.0 ) - Platform #1 [Intel(R) Corporation]
=============================================================
* Device #1: Intel(R) UHD Graphics, 3168/6462 MB (1615 MB allocatable), 24MCU

./OpenCL/m09710_a3-optimized.cl: Pure kernel not found, falling back to optimized kernel
Minimum password length supported by kernel: 5
Maximum password length supported by kernel: 5

Hashes: 1 digests; 1 unique digests, 1 unique salts
Bitmaps: 16 bits, 65536 entries, 0x0000ffff mask, 262144 bytes, 5/13 rotates

Optimizers applied:
* Optimized-Kernel
* Zero-Byte
* Precompute-Init
* Not-Iterated
* Single-Hash
* Single-Salt
* Brute-Force

Watchdog: Hardware monitoring interface not found on your system.
Watchdog: Temperature abort trigger disabled.

Host memory required for this attack: 52 MB

The wordlist or mask that you are using is too small.
This means that hashcat cannot use the full parallel power of your device(s).
Unless you supply more work, your cracking speed will drop.
For tips on supplying more work, see: https://hashcat.net/faq/morework

Approaching final keyspace - workload adjusted.

Session..........: hashcat
Status...........: Exhausted
Hash.Mode........: 9710 (MS Office <= 2003 $0/$1, MD5 + RC4, collider #1)
Hash.Target......: $oldoffice$1*d6aabb63363188b9b73a88efb9c9152e*afbbb...eaf66d
Time.Started.....: Wed Oct 12 08:48:45 2022 (0 secs)
Time.Estimated...: Wed Oct 12 08:48:45 2022 (0 secs)
Kernel.Feature...: Optimized Kernel
Guess.Mask.......: f2ab1219?b [5]
Guess.Queue......: 1/1 (100.00%)
Speed.#1.........:    29979 H/s (0.16ms) @ Accel:512 Loops:1 Thr:8 Vec:4
Recovered........: 0/1 (0.00%) Digests (total), 0/1 (0.00%) Digests (new)
Progress.........: 256/256 (100.00%)
Rejected.........: 0/256 (0.00%)
Restore.Point....: 256/256 (100.00%)
Restore.Sub.#1...: Salt:0 Amplifier:0-1 Iteration:0-1
Candidate.Engine.: Device Generator
Candidates.#1....: $HEX[f2ab121900] -> $HEX[f2ab1219ff]

Started: Wed Oct 12 08:48:43 2022
Stopped: Wed Oct 12 08:48:46 2022
Reply


Messages In This Thread
RE: How does 0xae get skipped from 0x00-0xff range in --hex-charset ?b mask??? - by saulys - 10-12-2022, 07:49 AM