Newbie questions
#1
Hi guys.
I have couple questions so I hope that somebody can help me.

1) How to start Hashcat properly in case I have more than 1 dictionary?
For now I use bat file with such strings

Code:
SET filename=Tenda_my_test.22000
hashcat.exe -m 22000 %filename% "D:\Dictionary\Datas+X.txt" --status -w 3
hashcat.exe -m 22000 %filename% "D:\Dictionary\Datas.txt" --status -w 3

2) If my PC was abruptly restarted, can I resume cracking process? If yes, than how?
What I found
Quote:The command line switch you are looking for is --restore.
The only parameters allowed when restoring a session are:
  • --restore (required): tell hashcat that it should restore a previous session
  • --session (optional): specify the session name of the previous session that hashcat should restore
  • --restore-file-path (optional): use specific restore file path
But how can I use it in case there are a lot of dictionaries? (see above)

3) How should I act in case there are non-Latin symbols in password? For example Arabic.
Is it possible to find such dictionaries? (I was unable to do that)
Or I have to generate them by myself?

I looked through these topics
https://hashcat.net/forum/thread-7517.html
https://hashcat.net/forum/thread-6600.html
but I didn't got clear understanding, should I look for dictionary or I can use mask like
hashcat.exe -m 22000 --increment-min 8 --increment-max 8 %filename% ?a?a?a?a?a?a?a?a --status -w 3

Besides that I looked into this article
https://hashcat.net/wiki/doku.php?id=fre...arabic_etc
but it didn't help to understand this topic better.

4) I have a file with PMKID hashes from APs. It looks like that
WPA*01*xxxxxxxxxxxxxxxxxxxxxxx
WPA*01*yyyyyyyyyyyyyyyyyyyyyyyyy
WPA*01*zzzzzzzzzzzzzzzzzzzzzzz

Does one run of Hashcat will check all these 3 hashes?

Code:
SET filename=PMKID_my_test.22000
hashcat.exe -m 22000 %filename% "D:\Dictionary\Datas+X.txt" --status -w 3
Reply
#2
ad1. Instead of specifying the names of the dictionaries, it is sufficient to specify such a path D:\Dictionary\*.txt

ad2. command hashcat --session (your session name, default is hashcat) --restore

ad3. It was on the forum, look for it, there are no Arabic characters by default.

Also, start reading https://hashcat.net/wiki/
Reply
#3
Thank you, my friend, you helped me a lot!
Reply