PDF Hash type
#6
(03-27-2024, 02:59 AM)xJiiKo Wrote:
(03-27-2024, 02:50 AM)JDLH Wrote: Have a look at the example hashes at https://hashcat.net/wiki/doku.php?id=example_hashes .

In the PDF hashes which hashcat and Jack the Ripper use, the first two numbers are a Version and Revision number. What comes after that — the number of fields, and the length of each field — differs depending on the Version and Revision. Which hashcat hash type ("-m" number) you use also differs.

I suggest you find a hash in example_hashes which matches the beginning of your hash: $pdf$1*2* . Then copy the entire example hash, and compare its structure carefully to the structure of the hashes you have. 

I have noticed that some tools which claim to read a PDF file and generate a hash get the hash wrong. Sometimes there is a clear place to file a bug against the tool, sometimes there is not.

I did that, the most similiar one is PDF 1.1 - 1.3 (Acrobat 2 - 4), collider #2
But its still very different...
PDF 1.1 - 1.3 (Acrobat 2 - 4), collider #2 $pdf$1*2*40*-1*0*16*

Would you mind sharing the hash?
Reply


Messages In This Thread
PDF Hash type - by xJiiKo - 03-26-2024, 11:39 PM
RE: PDF Hash type - by b8vr - 03-27-2024, 01:49 AM
RE: PDF Hash type - by xJiiKo - 03-27-2024, 02:43 AM
RE: PDF Hash type - by JDLH - 03-27-2024, 02:50 AM
RE: PDF Hash type - by xJiiKo - 03-27-2024, 02:59 AM
RE: PDF Hash type - by b8vr - 03-27-2024, 08:55 AM
RE: PDF Hash type - by xJiiKo - 03-27-2024, 12:53 PM
RE: PDF Hash type - by xJiiKo - 03-27-2024, 01:00 PM
RE: PDF Hash type - by JDLH - 03-27-2024, 11:15 PM
RE: PDF Hash type - by xJiiKo - 03-27-2024, 11:20 PM
RE: PDF Hash type - by JDLH - 03-28-2024, 05:12 AM
RE: PDF Hash type - by Chick3nman - 03-27-2024, 09:15 AM
RE: PDF Hash type - by xJiiKo - 03-27-2024, 12:59 PM
RE: PDF Hash type - by Chick3nman - 03-27-2024, 09:03 PM
RE: PDF Hash type - by xJiiKo - 03-27-2024, 11:01 PM