Having the example hash for mode 14700 in the file "hash" it works as it should:
Code:
# hashcat.exe -m14700 -a3 hash hashc?l?l
hashcat (v6.2.4-74-gbd2cde31a) starting
[...]
$itunes_backup$*9*b8e3f3a970239b22ac199b622293fe4237b9d16e74bad2c3c3568cd1bd3c471615a6c4f867265642*10000*454226374058742486226723225
5853830404566**:hashcat
Session..........: hashcat
Status...........: Cracked
Hash.Mode........: 14700 (iTunes backup < 10.0)
Hash.Target......: $itunes_backup$*9*b8e3f3a970239b22ac199b622293fe423...4566**
Time.Started.....: Tue Oct 19 00:30:02 2021 (0 secs)
Time.Estimated...: Tue Oct 19 00:30:02 2021 (0 secs)
Kernel.Feature...: Pure Kernel
Guess.Mask.......: hashc?l?l [7]
Guess.Queue......: 1/1 (100.00%)
Speed.#1.........: 5854 H/s (0.66ms) @ Accel:16 Loops:64 Thr:512 Vec:1
Recovered........: 1/1 (100.00%) Digests
Progress.........: 676/676 (100.00%)
Rejected.........: 0/676 (0.00%)
Restore.Point....: 0/676 (0.00%)
Restore.Sub.#1...: Salt:0 Amplifier:0-1 Iteration:9984-9999
Candidate.Engine.: Device Generator
Candidates.#1....: hashcer -> hashcqg
Started: Tue Oct 19 00:29:53 2021
Stopped: Tue Oct 19 00:30:05 2021