06-04-2023, 12:24 AM
(06-03-2023, 07:12 PM)Alexander Mak Wrote:(06-03-2023, 06:35 PM)marc1n Wrote:(06-03-2023, 06:17 PM)Alexander Mak Wrote:(06-03-2023, 05:59 PM)marc1n Wrote:(06-03-2023, 05:36 PM)Alexander Mak Wrote: I have seen examples of compressed and uncompressed hashes, but this does not solve my problem in any way. I know that both of these hashes are from compressed archives and that's why I used the 23800 mode. But hashcat still throws an error, you know? Maybe my hashes are not compatible with hashcat because they end in 34 and 35?
Using rar2john
These hashes are not compatible you must try john the ripper
I extracted these hashes with john the ripper using the rar2john 25.rar > 25.hash and rar2john 26.rar > 26.hash commands. Files with these hashes are created, then I delete the archive name and symbols :1:: in these files, leaving the beginning with $RAR3$*1*81d3764... and the end 61e18*34 (also with the second hash) in the last line. What else do I need to do with these hashes using john the ripper?
Nothing you need to use rar2john your_file.rar > output_file next command john output_file
In this case, recovery starts with the help of john the ripper.
As I understand it, my hashes are not compatible with hashcat and I won't be able to restore them using it
Rar2john is not John the Ripper, it's an external tool for hash extraction.
What marc1n is trying to tell you, is that you need to use john, as in the command just named "john". Like hashcat, that has a lot of options, but a very basic command would be to just run "john rar2john_output_file".