School

[YungGravy]

Hi everyone!

Last week, a lot of students in my summer computer science club were really interested in password cracking when I showed them there are a lot of people trying to crack those Satoshi's treasures in a topic about bitcoin. Next week, I plan to teach them more about how this process works, I want to show them how different a hash can be when the password only change 1 or 2 characters. So, is there any way I can show the hashes while brute-forcing or dump all the generated hashes to a text file ? Don't worry, I'm just gonna run brute force with one ?a mask.

For example, this hash of the password "1"

•$bitcoin$64$88363984b337eac6e8e7e4d075e9a6754798c1c1902de7a049b77cb011d6194e$16$088fafa6f4864813$285086$2$00$2$00•
Brute force with mask : ?a

Show all generated hashes OR dump them to a txt file, like
0 : $bitcoin$64$.....
1 : $bitcoin$64$.....
2 : $bitcoin$64$.....
a : $bitcoin$64$.....
b : $bitcoin$64$.....
c : $bitcoin$64$.....

Something like that, I don't know, I'm not good at this.
I hope you guys can help, thank you !

[drsnooker]

I'd start with MD5, show them an online hash generator. Have them generate a hash from say 6 lower case letters, send it to you, and use hashcat to crack it live. (6 should be doable for most laptops). Then go to SHA1 etc.

[Snoopy]

there is no way for hashcat to output generated hashes, but for this you can write a really simple python script or use some linux bash magic to show the hashes (there are plenty of simple scripts out there for at least the simple md5, sha256 and so on, as long as you can utilize the linux tools) generating hashes for something like a bitcoin wallet will be a little bit more complicated

beside what drsnooker mentioned you could utilize the benchmark option -b beside the -m* option from hashcat to show some differences in hashes and attackspeed (see help for modes)

some tests with CPU only, 2* 12 Cores (48 Threads)

Code:

md5 - 2466.8 MH/s
ntlm - 4824.2 MH/s
linux login - 8370 H/s ( be aware of the missing M ^^ )
filevault 2 - 14314 H/s
bitcoinwallet - 989 H/s
itunesbackup >10 -  25 H/s

the rest is math, ?a means 95* possibilities, ?a?a means 95^2 = 9025 possibilities, so given this ?a?a and bitcoin wallet would need 9.1 second, an itunesbackup 361 seconds 

?a = upper chars 26 + lower chars 26 + digits 10 plus special 33 = 95