(02-02-2024, 05:50 AM)Gawrion Wrote: JTR gave me different hashes for both rar files.
-for 3.0 gave me hash with random salt
-for 2.0 gave me hash with "0000000000000000" salt.
Both hashes had the same valid syntax - due to hash types list.
I could crack 3.0 hash in JTR and hashcat.
I couldn't crack 2.0 hash in JTR and hashcat.
If someone else runs into 3.0 (not 2.0) archive files but with 16x0 salt - it was possible to crack with hashcat + suitable wordlist in my case - just forgot my cheap password from 10-15 years ago ;-)