12-27-2023, 02:45 AM
Hello there.
I'm using Linux Kubuntu 23.10, utilizing the hashcat-nvidia packet as my laptop happens to have a Nvidia MX230 GPU card. I'm using a different test computer running Windows 11 with a 4 digits numerical pin for a password and I'm trying to teach myself how to use hashcat in order to find out its password (which I already know beforehand).
I have obtained the hash from this test computer using impacket-secretsdump on the SAM and SYSTEM files obtained from the computer's registry editor. This was suggested through this video on YouTube by channel NetworkChuck, which I've been using as a basis: https://www.youtube.com/watch?v=L26Xq7m0uQ0
I've been trying to use the following command (and variations) to crack the PIN (0908), unfortunately to no avail:
Hash.Mode........: 900 (MD4)
Hash.Target......: c5e5ebc1f7896af46da54952c70cbc2a
Time.Started.....: Wed Dec 27 01:23:00 2023, (0 secs)
Time.Estimated...: Wed Dec 27 01:23:00 2023, (0 secs)
Kernel.Feature...: Pure Kernel
Guess.Mask.......: ?d?d?d?d [4]
Guess.Queue......: 1/1 (100.00%)
Speed.#1.........: 4315.9 kH/s (0.27ms) @ Accel:1024 Loops:10 Thr:1 Vec:8
Recovered........: 0/1 (0.00%) Digests (total), 0/1 (0.00%) Digests (new)
Progress.........: 10000/10000 (100.00%)
Rejected.........: 0/10000 (0.00%)
Restore.Point....: 1000/1000 (100.00%)
Restore.Sub.#1...: Salt:0 Amplifier:0-10 Iteration:0-10
Candidate.Engine.: Device Generator
Candidates.#1....: 1234 -> 6764
I'm using Linux Kubuntu 23.10, utilizing the hashcat-nvidia packet as my laptop happens to have a Nvidia MX230 GPU card. I'm using a different test computer running Windows 11 with a 4 digits numerical pin for a password and I'm trying to teach myself how to use hashcat in order to find out its password (which I already know beforehand).
I have obtained the hash from this test computer using impacket-secretsdump on the SAM and SYSTEM files obtained from the computer's registry editor. This was suggested through this video on YouTube by channel NetworkChuck, which I've been using as a basis: https://www.youtube.com/watch?v=L26Xq7m0uQ0
I've been trying to use the following command (and variations) to crack the PIN (0908), unfortunately to no avail:
hashcat -a 3 -m 1000 c5e5ebc1f7896af46da54952c70cbc2a --force ?d?d?d?d
For the most part I only get hashcat to do one attack, understandably so as I told him to try brute forcing through 4 characters only, but for whatever reason it never manages to find out the PIN. I am not sure if I've specified the wrong hash type, if my laptop's GPU is incapable of running brute force attacks (despite having successfully cracked a different alphanumerical password by means of a dictionary attack) if the hash itself is wrong or if I should insert additional rules that I don't know about. I've been looking for a solution all over various forums for this problem and always came back empty-handed. Forgive me as I'm very much a newbie at this.
The full output that appears on the terminal at the end of the single brute force attack is as follows:
Session..........: hashcat
Status...........: ExhaustedHash.Mode........: 900 (MD4)
Hash.Target......: c5e5ebc1f7896af46da54952c70cbc2a
Time.Started.....: Wed Dec 27 01:23:00 2023, (0 secs)
Time.Estimated...: Wed Dec 27 01:23:00 2023, (0 secs)
Kernel.Feature...: Pure Kernel
Guess.Mask.......: ?d?d?d?d [4]
Guess.Queue......: 1/1 (100.00%)
Speed.#1.........: 4315.9 kH/s (0.27ms) @ Accel:1024 Loops:10 Thr:1 Vec:8
Recovered........: 0/1 (0.00%) Digests (total), 0/1 (0.00%) Digests (new)
Progress.........: 10000/10000 (100.00%)
Rejected.........: 0/10000 (0.00%)
Restore.Point....: 1000/1000 (100.00%)
Restore.Sub.#1...: Salt:0 Amplifier:0-10 Iteration:0-10
Candidate.Engine.: Device Generator
Candidates.#1....: 1234 -> 6764
Hardware.Mon.#1..: Temp: 46c Util: 15%