Itunes Backup

[joswr1ght]

This beta update sort of works, but has some problems. I'm using Mac OS X 10.11.6 (El Capitan) with Hashcat and the OpenCL submodule from GitHub this morning. With the Manifest.plist file IncognitoEntity posted with the password test123, I'm able to recover the password after 4.5 minutes with a very short password list, but most of the time I get Abort trap: 6  errors:

Code:

$ ~/bin/itunes_backup2hashcat.pl Manifest.plist  >itunes.txt
$ printf "password1\npassword2\ntest123\npassword3" >mylist
$ ~/Hack/hashcat/hashcat -m 14800 -a 0 --weak-hash-threshold 0 itunes2.txt mylist
hashcat (v3.30-55-g32e285f) starting...

OpenCL Platform #1: Apple
=========================
* Device #1: Intel(R) Core(TM) i7-4980HQ CPU @ 2.80GHz, skipped
* Device #2: Iris Pro, 384/1536 MB allocatable, 40MCU
* Device #3: GeForce GT 750M, 512/2048 MB allocatable, 2MCU

Hashes: 1 digests; 1 unique digests, 1 unique salts
Bitmaps: 16 bits, 65536 entries, 0x0000ffff mask, 262144 bytes, 5/13 rotates
Rules: 1

Generated dictionary stats for mylist: 38 bytes, 4 words, 4 keyspace

INFO: approaching final keyspace, workload adjusted

[s]tatus [p]ause [r]esume [b]ypass [c]heckpoint [q]uit => Abort trap: 6

Longer lists produce CL_INVALID_VALUE/CL_DEVICE_NOT_FOUND errors:

Code:

$ ~/Hack/hashcat/hashcat -m 14800 -a 0 --weak-hash-threshold 0 itunes2.txt mylist
hashcat (v3.30-55-g32e285f) starting...

OpenCL Platform #1: Apple
=========================
* Device #1: Intel(R) Core(TM) i7-4980HQ CPU @ 2.80GHz, skipped
* Device #2: Iris Pro, 384/1536 MB allocatable, 40MCU
* Device #3: GeForce GT 750M, 512/2048 MB allocatable, 2MCU

Hashes: 1 digests; 1 unique digests, 1 unique salts
Bitmaps: 16 bits, 65536 entries, 0x0000ffff mask, 262144 bytes, 5/13 rotates
Rules: 1

Cache-hit dictionary stats mylist: 1863 bytes, 204 words, 204 keyspace

[s]tatus [p]ause [r]esume [b]ypass [c]heckpoint [q]uit => clEnqueueReadBuffer(): CL_INVALID_VALUE

clEnqueueReadBuffer(): CL_DEVICE_NOT_FOUND

Basic stuff like benchmark results shows 0 H/s, which seems wrong:

Code:

$ ~/Hack/hashcat/hashcat -m 14800 -b
hashcat (v3.30-55-g32e285f) starting in benchmark mode...

OpenCL Platform #1: Apple
=========================
* Device #1: Intel(R) Core(TM) i7-4980HQ CPU @ 2.80GHz, skipped
* Device #2: Iris Pro, 384/1536 MB allocatable, 40MCU
* Device #3: GeForce GT 750M, 512/2048 MB allocatable, 2MCU

Hashtype: iTunes Backup >= 10.0

Speed.Dev.#2.....:        0 H/s (1844673858308.33ms)
Speed.Dev.#3.....:        0 H/s (61.95ms)
Speed.Dev.#*.....:        0 H/s

Started: Fri Jan 27 10:03:57 2017
Stopped: Fri Jan 27 10:04:04 2017

Should I open some bugs to track these issues? Maybe I'm doing something wrong, or there's something wrong with my Mac?

Thanks,

-Josh