Need help! about john the ripper commands word.
#11
(07-06-2022, 03:26 PM)Snoopy Wrote: i think you downloaded the website instead of the file, use this

https://raw.githubusercontent.com/openwa...ce2john.py

line 61 is an empty line, not a line with html title tag

It Works!!! 
i can try use hashcat to crack it now.

[Image: EjgNvJ.png]

hashcat step :
i input command in cmd

hashcat.exe -m 9600 -a 3 tes.xlsx:$office$*2013*100000*256*16*05e8e518b10494aafcce44a494f0cccd*7491c7e5da8671e1ad76e9cedd742438*b0cf8e0470dced9a5bc0396c8098d645c81e8d2a1ffc81ceccd7393adf087f23


it return error message :
Hash'tes.xlsx:$office$*2013*100000*256*16*05e8e518b10494aafcce44a494f0cccd*7491c7e5da8671e1ad76e9cedd742438*b0cf8e0470dced9a5bc0396c8098d645c81e8d2a1ffc81ceccd7393adf087f23': Signature unmatched

No hashes loaded.

anyword type wrong?
Reply
#12
put the hash into a file and remove the tes.xlsx: at the beginning, this is a not neccessary info from the output or use option --username to tell hashcat it should ignore this info, and add -O (optimzed kernel)



Code:
hashcat.exe -O -m9600 -a3 hashfile.txt


next thing, when using -a3 aka bruteforce you should also provide a mask, if not provided, hahscat will use a standard mask for attacking, if you have any idea about your password or the passwordstyle you should use a modified mask
Reply
#13
(07-06-2022, 05:10 PM)Snoopy Wrote: put the hash into a file and remove the tes.xlsx: at the beginning, this is a not neccessary info from the output or use option --username to tell hashcat it should ignore this info, and add -O (optimzed kernel)

Code:
hashcat.exe -O -m9600 -a3 hashfile.txt

i no idea about pw . so i use a 3 to do it

1. put hashtagfile.txt into hashcat same folder > done.
2. remove tes.xlsx: > done.
3. type in cmd :
hashcat.exe -o -m 9600 -a 3 $office$*2013*100000*256*16*05e8e518b10494aafcce44a494f0cccd*7491c7e5da8671e1ad76e9cedd742438*b0cf8e0470dced9a5bc0396c8098d645c81e8d2a1ffc81ceccd7393adf087f23

------------------------------------
return error message : 

No hash-mode matches the structure of the input hash.
Reply
#14
-o should be followed by file passtobestore.txt


(07-06-2022, 06:31 PM)cq88uik Wrote:
(07-06-2022, 05:10 PM)Snoopy Wrote: put the hash into a file and remove the tes.xlsx: at the beginning, this is a not neccessary info from the output or use option --username to tell hashcat it should ignore this info, and add -O (optimzed kernel)

Code:
hashcat.exe -O -m9600 -a3 hashfile.txt

i no idea about pw . so i use a 3 to do it

1. put hashtagfile.txt into hashcat same folder > done.
2. remove tes.xlsx: > done.
3. type in cmd :
hashcat.exe -o -m 9600 -a 3 $office$*2013*100000*256*16*05e8e518b10494aafcce44a494f0cccd*7491c7e5da8671e1ad76e9cedd742438*b0cf8e0470dced9a5bc0396c8098d645c81e8d2a1ffc81ceccd7393adf087f23

------------------------------------
return error message : 

No hash-mode matches the structure of the input hash.
Reply
#15
(07-07-2022, 08:08 AM)hetcat Wrote: -o should be followed by file passtobestore.txt

finally it run!

[Image: Sn8uY2.png]

waiting for result . 


thanks hetcat 's reply , 
and Snoopy step by step help ! 

*
have one question between rar3 & officefile ,
office file : hashcat.exe -m 9600 -a 3 $office$*2013*........ -o password.txt
why without -o xx.txt , it doesn't work?

but,
i try rar3
rar3 : hashcat.exe -m 12500 -a 3 $rar3$......  
it will show result in cmd .
Reply