Reversing MSCHAPv2 to NTLM
#5
(10-01-2016, 09:19 PM)evilmog Wrote:  
The final value PT3 you need to bruteforce locally using hashcat des mode 14000, the hash format will look like this:
7D01513435B36DCA:1122334455667788 the keyspace will be ?1?1? on -a charsets/DES_full.charset

Hey Guys, I'm sorry for the silly question, following the example, I'm having trouble cracking PT3. 

# cat tocrack
7D01513435B36DCA:1122334455667788


./hashcat -m 14000 tocrack -o cracked -a 3 -w 4 -1 charsets/DES_full.charset --hex-charset ?1?1000000000000

...

Session.Name...: hashcat                                  
Status.........: Exhausted
Input.Mode.....: Mask (?1?1000000000000) [8]
Custom.Charset.: -1 charsets/DES_full.charset, -2 Undefined, -3 Undefined, -4 Undefined
Hash.Target....: 7d01513435b36dca:1122334455667788
Hash.Type......: DES (PT = $salt, key = $pass)
Time.Started...: 0 secs
Candidates.#1..: $HEX[31bd000000000000] -> $HEX[9bff000000000000]
Speed.Dev.#1...:  5269.9 kH/s (0.05ms)
Recovered......: 0/1 (0.00%) Digests, 0/1 (0.00%) Salts
Progress.......: 16384/16384 (100.00%)
Rejected.......: 0/16384 (0.00%)
HWMon.Dev.#1...: N/A

If I just run "./hashcat -m 14000 tocrack -o cracked -a 3 -w 4 -1 charsets/DES_full.charset --hex-charset ?1?1" it gives me:

WARNING: Skipping mask '?1?1' because it is smaller than the minimum password length

I've also tried with other hashes that I know are good. What am I doing wrong? Do I need to specify the correct mask for the odd-parity adjusted DES key?


Messages In This Thread
Reversing MSCHAPv2 to NTLM - by evilmog - 10-01-2016, 03:46 AM
RE: Reversing MSCHAPv2 to NTLM - by epixoip - 10-01-2016, 06:38 AM
RE: Reversing MSCHAPv2 to NTLM - by soldo - 10-01-2016, 04:05 PM
RE: Reversing MSCHAPv2 to NTLM - by evilmog - 10-01-2016, 09:19 PM
RE: Reversing MSCHAPv2 to NTLM - by bcxbm - 10-05-2016, 09:52 AM
RE: Reversing MSCHAPv2 to NTLM - by atom - 10-05-2016, 02:24 PM
RE: Reversing MSCHAPv2 to NTLM - by bcxbm - 10-06-2016, 02:54 AM
RE: Reversing MSCHAPv2 to NTLM - by atom - 10-06-2016, 06:03 PM
RE: Reversing MSCHAPv2 to NTLM - by fuzztester - 11-01-2016, 04:21 PM
RE: Reversing MSCHAPv2 to NTLM - by atom - 11-03-2016, 12:05 AM
RE: Reversing MSCHAPv2 to NTLM - by evilmog - 11-03-2016, 11:24 PM
RE: Reversing MSCHAPv2 to NTLM - by sneaky_peet - 03-06-2017, 07:28 PM
RE: Reversing MSCHAPv2 to NTLM - by atom - 03-07-2017, 10:00 AM
RE: Reversing MSCHAPv2 to NTLM - by evilmog - 04-25-2018, 01:10 AM
RE: Reversing MSCHAPv2 to NTLM - by evilmog - 04-30-2018, 08:07 PM
RE: Reversing MSCHAPv2 to NTLM - by ktinoulas - 05-07-2018, 03:15 PM
RE: Reversing MSCHAPv2 to NTLM - by undeath - 05-07-2018, 05:13 PM
RE: Reversing MSCHAPv2 to NTLM - by ktinoulas - 05-14-2018, 10:18 AM
RE: Reversing MSCHAPv2 to NTLM - by royce - 05-12-2018, 07:18 PM