Unsupported PDF hash
#1
Hello.

I've got a pdf I received from my employer that I actually have a password for, that is in strange status.

If I generate a hash using John - John can crack it.
If I take the hash to hashcat - it can't crack it, and in fact it does not look exactly like any of the supported hashes.

the hash starts with "$pdf$2*3*128*4294967292*1*16*" 

This is the error I am getting when trying to crack it 

"Hashfile 'd:\hash' on line 1 ($pdf$2...XXX): Token length exception

* Token length exception: 1/1 hashes
  This error happens if the wrong hash type is specified, if the hashes are
  malformed, or if input is otherwise not as expected (for example, if the
  --username option is used but no username is present)

No hashes loaded."

** If I replace the " 4294967292" with "-1028" so it looks like a valid hash, hashcat actually starts cracking it but can't crack it (I know for a fact that the password is a part of the wordlist). I use "10500" mode , the process just ends without result. I tried other "pdf" related modes - no success.

** Of course I remove the pdf filename from beginning of the hash

 -1028"
Reply


Messages In This Thread
Unsupported PDF hash - by viperxp - 08-17-2024, 08:09 PM
RE: Unsupported PDF hash - by lapsikmees - 08-17-2024, 08:34 PM
RE: Unsupported PDF hash - by viperxp - 08-17-2024, 08:57 PM
RE: Unsupported PDF hash - by lapsikmees - 08-17-2024, 09:04 PM
RE: Unsupported PDF hash - by viperxp - 08-17-2024, 09:10 PM
RE: Unsupported PDF hash - by lapsikmees - 08-17-2024, 09:16 PM
RE: Unsupported PDF hash - by viperxp - 08-18-2024, 04:50 AM
RE: Unsupported PDF hash - by nick8606 - 08-18-2024, 05:41 AM
RE: Unsupported PDF hash - by viperxp - 08-18-2024, 03:38 PM