Posts: 3
Threads: 1
Joined: Jan 2023
Hi there, can hashcat crack xor encrypted strings? In example i have:
A645437DAD
A6454470AE
3109A7093A3A2CBE
3109A7093A3928BA
BC06862AE9683F341E
BC06862AE9683F3C1E
96FB8ECB69DEC383688C
96FB8ECB69DEC387618C
626292E168871C20BFBC
626292E168871C2DB9BD
626292E168871C2EBEB2
96BCEDDBEBD0A6BBB039
96BCEDDBEBD0A6BAB33F
96BCEDDBEBD0A6BBB73E
I'm looking for the way to decrypt them, i have tried many variants but non of them helped. Or maybe it's not the XOR?
Posts: 385
Threads: 1
Joined: Aug 2020
01-07-2023, 06:39 PM
(This post was last modified: 01-07-2023, 06:46 PM by marc1n.)
Posts: 3
Threads: 1
Joined: Jan 2023
(01-07-2023, 06:39 PM)marc1n Wrote: https://www.tunnelsup.com/hash-analyzer/
Hashcat hahes example:
https://hashcat.net/wiki/doku.php?id=example_hashes
I've seen the modes list, there is no XOR hash. Or what mode i need to use?
P.S. Found the similar thread
https://hashcat.net/forum/thread-4499-post-25618.html and hashes looks like my type. Or they not?
Posts: 49
Threads: 0
Joined: Oct 2021
(01-07-2023, 06:30 PM)Jane_forest Wrote: i have tried many variants but non of them helped. Or maybe it's not the XOR?
Key for XOR can be found if you have only one valid pair with long size.
I suppose your algorithm is not a simple XOR. 99% plaintexts consist of ASCII characters, but your examples don't meet this condition.
Posts: 3
Threads: 1
Joined: Jan 2023
(01-08-2023, 02:39 AM)nick8606 Wrote: (01-07-2023, 06:30 PM)Jane_forest Wrote: i have tried many variants but non of them helped. Or maybe it's not the XOR?
Key for XOR can be found if you have only one valid pair with long size.
I suppose your algorithm is not a simple XOR. 99% plaintexts consist of ASCII characters, but your examples don't meet this condition.
firs off, thx for your reply!
Long size - you mean original non encypted string? if yes, how ppl in
this thread find the xor key? The string there is not long
Code:
6879766D75076D00 (in clear password is 12345678)
6879766D75076D007F (in clear password is 123456789)
6879766D75076D007F1D (in clear password is 1234567899)
But user find somehow the key 594b455940315a3846244d (ASCII hex) which is YKEY@1Z8F$M (11 chars long)
It's amazed me how he do that
