Rar archive
#4
(04-29-2023, 08:50 PM)Alexander Mak Wrote:
(04-29-2023, 06:52 PM)b8vr Wrote:
(04-29-2023, 12:41 PM)Alexander Mak Wrote: Hello, I have a hash of the password from the rar archive.
I got it with john the ripper.
When I tried to recover it with hashcat, I got the following message "Hashfile '25.txt' on line 1 ($RAR3$...8exxxxx0d6xxx12b619acx42xxxxxx97*35): Token length exception

* Token length exception: 1/1 hashes
  This error happens if the wrong hash type is specified, if the hashes are
  malformed, or if input is otherwise not as expected (for example, if the
  --username option is used but no username is present)" . I looked here which hashes support hashcat
https://hashcat.net/wiki/doku.php?id=example_hashes
And my hash is not there, as I understand it, it turned out to be too long.
It turned out to be 1944374 characters and its size is almost two megabytes.
Tell me what I need to do so that hashcat reads it and starts the recovery?
I can attach the complete hash file if needed.

Did you edit the hash to make it fit hashcat, after extracting it? Using rar2john makes it crackable with hohn, but not hashcat, unless you remove all the data in front of or behind the hash. Also, what mode did you use, when running hashcat?

Yes, I edited the hash after using john the ripper.
I didn't use any special mode in hashcat, just typed in a command and ran it.
Do I need to use some specific mode in hashcat?

Well, a specific hashmode. I was thinking of the -m 12500 for rar3 and -m 13000 for rar5. In your case that would be -m 12500.
Reply


Messages In This Thread
Rar archive - by Alexander Mak - 04-29-2023, 12:41 PM
RE: Rar archive - by b8vr - 04-29-2023, 06:52 PM
RE: Rar archive - by Alexander Mak - 04-29-2023, 08:50 PM
RE: Rar archive - by b8vr - 04-29-2023, 09:36 PM
RE: Rar archive - by Alexander Mak - 04-30-2023, 08:14 PM