Breaking SHA1-HMAC

[philsmd]

Try it this way:
0. Check if the hash file is correct:

Code:

$ cat m0160.txt #masked
8717XXX45b7cXXX66d9XXX55c6e5b9eXXXXc46c

1. Generate external salts list (file: external_salts.txt):

Code:

$ ./hashcat-cli64.bin --stdout -a 3 ?d?d?d?d > external_salts.txt

2. Launch hashcat w/ whatever attack mode you want (but use -e external_salts.txt):

Code:

$ ./hashcat-cli64.bin --quiet -m 160 -e external_salts.txt m0160.txt --pw-min 4 -a 3 ?l?l?l?l
8717XXX45b7cXXX66d9XXX55c6e5b9eXXXXc46c:1234:abcd

Note: I am not totally sure if HMAC-SHA1 (160) + external salts (-e) were supposed to work so far, but I know that next version of cpu hashcat has support for it (I just tested it)