m 23800 Token length exception

[User21]

Hi. I have a hash $RAR3$*1*xxxxxxxxxxxxxxxx*xxxxxxxx*xx*xx*x*xxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxx*33:1::946

writing a command:  .\hashcat.exe -m 23800 -a 0 $RAR3$*1*xxxxxxxxxxxxxxxx*xxxxxxxx*xx*xx*x*xxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxx*33 pass.txt
and I get the error:
Hash '[b]$RAR3$*1*xxxxxxxxxxxxxxxx*xxxxxxxx*xx*xx*x*xxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxx*33': Token length exception
No hashes loaded.
[/b]what am I doing wrong?

[Snoopy]

take a look at examples

https://hashcat.net/wiki/doku.php?id=example_hashes

23800 ends with 33 only so your hash is to long as mentioned in "Token length exception"

where is this hash from?

[User21]

take a look at examples

https://hashcat.net/wiki/doku.php?id=example_hashes

23800 ends with 33 only so your hash is to long as mentioned in "Token length exception"

where is this hash from?

winrar

[Demandred]

I have a similar problem.
I'm trying to recover the rar archive password. Its hash is $RAR3$*1*2d33730b6e177cbc*046a17cb*384144*391791*1*HEX*33 hash file is about 750 KB.


My output:

Code:

PS D:\hashcat-6.2.5> .\hashcat -m 23800 -a 3 1.hash -i ?d?d
hashcat (v6.2.5) starting

* Device #1: WARNING! Kernel exec timeout is not disabled.
            This may cause "CL_OUT_OF_RESOURCES" or related errors.
            To disable the timeout, see: https://hashcat.net/q/timeoutpatch
* Device #2: WARNING! Kernel exec timeout is not disabled.
            This may cause "CL_OUT_OF_RESOURCES" or related errors.
            To disable the timeout, see: https://hashcat.net/q/timeoutpatch
CUDA API (CUDA 11.6)
====================
* Device #1: NVIDIA GeForce GTX 1070, 7243/8191 MB, 15MCU

OpenCL API (OpenCL 3.0 CUDA 11.6.110) - Platform #1 [NVIDIA Corporation]
========================================================================
* Device #2: NVIDIA GeForce GTX 1070, skipped

Minimum password length supported by kernel: 0
Maximum password length supported by kernel: 128

Hashfile '1.hash' on line 1 ($RAR3$...67d12ef485b06669bb09f6169e16d*33): Token length exception
No hashes loaded.

What could be the problem?

[Snoopy]

just guessing on another thread some time ago

sometimes software changes it behavior on how the passwords are generated (iteration count etc.) there was a module where the var for iteration count was lower than the actual count/lenght resulting in an token length exeption

in your case this could be also the problem, because, 750kb of text is quite huge/different in comparision to the 110 bytes of the example hash

$RAR3$*1*ad56eb40219c9da2*834064ce*32*13*1*eb47b1abe17a1a75bce6c92ab1cef3f4126035ea95deaf08b3f32a0c7b8078e1*33

quick look in

https://github.com/hashcat/hashcat/blob/...le_23800.c

the max lenght of the hash before *33 is 655056 so your 750kb is a little bit to much i guess

could you provide the rar-file or the whole hash per pn plz?

EDIT:
found the thread i mentioned
https://hashcat.net/forum/thread-10116-p...l#pid52700