08-31-2017, 12:47 AM
(08-30-2017, 06:27 PM)philsmd Wrote: The format for hashcat is just:
decimal_iteration_count:hexadecimal_salt:hexadecimal_digest
you could just read the encryptionKeys.js file (and base64 convert the salt and digest) or use some other tools like this: https://github.com/philsmd/1password_agi...to_hashcat (command should look like this: perl 1password_agilekeychain_to_hashcat encryptionKeys.js)
Thank you for the reply. I ran the perl script on encryptionKeys.js and sent the output to hashcat:
Code:
OpenCL Platform #2: NVIDIA Corporation
======================================
* Device #3: GeForce GTX 1080 Ti, 2816/11264 MB allocatable, 28MCU
* Device #4: GeForce GTX 1080 Ti, 2816/11264 MB allocatable, 28MCU
hashfile is empty or corrupt.
Started: Wed Aug 30 17:18:57 2017
Stopped: Wed Aug 30 17:18:57 2017
The same encryptionKeys.js loaded (as the directory) in 1Password GUI is staring at me waiting for a password.
Can your perl script eat the whole agilekeychain directory?
Thanks!