01-07-2019, 06:24 PM
(01-07-2019, 12:18 PM)Karamba Wrote: The exact same problem and solution are explained here.
https://hashcat.net/forum/thread-7792.html
The plist2hashcat is a script, so you need to run it. Do some research how. You'll learn a lot.
In order to understand rules, begin here.
https://hashcat.net/wiki/doku.php?id=rule_based_attack
Lowercase and appending 321 will be:Code:l $3 $2 $1
Thanks, yes I spent all weekend researching and got to the point where I seem to have correctly extracted and edited all the has data from the plist. What I'm feeding hash cat though says it will take '73 days' to complete so I'm trying to get some rules in place and don't have access to maskprocessor since it seems there's no Mac build. I realise I'm using attack type 3 (Brute Force).
What I'm feeing into Hashcat is:
./hashcat -a 3 -m 7100 /Users/username/hashcat/hash.txt ?l?l?l?l?l?l?l321 /Users/username/hashcat/dic/lower.txt --potfile-path /tmp/cracked_hash.pot
Hashcat runs and displays:
Session..........: hashcat
Status...........: Running
Hash.Type........: macOS v10.8+ (PBKDF2-SHA512)
Hash.Target......: $ml$27855$0f00d525e3c304eb2f7364b649e644c5b52d7ec94...1c4cc1
Time.Started.....: Mon Jan 7 16:08:16 2019 (12 secs)
Time.Estimated...: Wed Mar 20 14:10:50 2019 (71 days, 22 hours)
Guess.Mask.......: ?l?l?l?l?l?l?l321 [10]
Guess.Queue......: 1/1 (100.00%)
Speed.#2.........: 646 H/s (8.73ms) @ Accel:8 Loops:4 Thr:256 Vec:1
Speed.#3.........: 646 H/s (8.72ms) @ Accel:8 Loops:4 Thr:256 Vec:1
Speed.#*.........: 1293 H/s
Recovered........: 0/1 (0.00%) Digests, 0/1 (0.00%) Salts
Progress.........: 0/8031810176 (0.00%)
Rejected.........: 0/0 (0.00%)
Restore.Point....: 0/308915776 (0.00%)
Restore.Sub.#2...: Salt:0 Amplifier:0-1 Iteration:5268-5272
Restore.Sub.#3...: Salt:0 Amplifier:0-1 Iteration:5268-5272
What I'm trying to do is tell Hashcat to do a dictionary attack, and tell it that the password is formed of between 6 and 9 lower case letters followed by 321 but when I choose different attack modes, it gives me ?l?l?l?l?l?l?l321: No such file or directory.