hashcat
advanced password recovery

Found a work around for hash type 2711, untested for otheres. Download and try hashcat_plus v0.07.


I'm having trouble with hashcat plut and hashcat lite with list of IPB2 hashalts. I can crack them via hashcat 0.39 without a problem, but is tons slower. Maybe someone else can see my mistake?

hash example is:
d59be66565eeb562bb2b724d71b8a4e3:S$~!!

plaintext is:
omgwtf

I tried both oclhashcat plus and oclhashcat lite to crack this via gpu power (dual hd 6950s) and no luck ^.^.

I'm also running ubuntu 12 if that means anything different and am on 64-bit.

here are the commands i'm using, text.txt holds the hash, and tword.txt holds a list of words with the plaintext in it.

Are you sure?
Cause I generated the hash for "omgwtf" and here's what I found:
7f8f65c062e3a9536fad48fead0af65a: S$~./:omgwtf

2811 = IPB2+, MyBB1.2+ (9 in hashcat-0.39) = md5(md5($salt).md5($pass))

My friend cracked them (not sure what version he used, and came up with them. I double checked in each of the 3 versions and only hashcat 0.39 will crack it for me . Here are the hashes he cracked (5 of 5 lol).

Ok I rechecked my commands I used, the salt gets changed, and is why my orignal post the salt don't match the list above. Maybe this has something todo with my issues, but even hashcat-plus loading from a file don't crack it

S$~!! is the correct salt.

Ahh, yes... you gave two different salts -__-

Anyway, the hashes you provide are correct cracks:

Try loading the hashes from a file, and use this command:
Make sure that the hashes are with the correct salts and that the passwords are in the dict (tword.txt).

Results:


Could this be a bad driver issue? I'm running Catalyst Version 12.4 under ubuntu 12.04 with two ATI HD 6950 cards not in cross fire.

Then, I'm sorry I don't know what's wrong there.

Thanks for trying.

If I remember correctly, back when I only had one card installed under windows 7, oclhashcat-plus worked fine for a small wordlist attack on the same list.

I guess its all about the multihash -m 2611, -m 2711 and -m 2811 bug in AMD catalyst for < hd77xx. If it works fine on single hashes all you can do is to pray to AMD catalyst coder to fix this issue.

Thanks for the info atom. In windows 7, it seemed to work, but that was with a single card. I wonder if an older driver would solve the problem?

Hello,

I face the same issue as well with VBulletin and IPB hashes.

I have the plaintexts for the hashes I am trying to crack with oclhashcat-plus v0.081 and even then it does not show the results:

With one Hash it works fine:


I added a couple of more IPB hashes to the IPB.txt file for which the plain texts are present in testIPB.txt and this time there were no results:

---

My OS is: Windows 7 64 Bit Ultimate
ATI Catalyst version 12.04
GPU: ATI Radeon HD 5870

If someone else can post their results of oclhashcat-plus v0.08 with multi IPB and VBulletin hashes along with OS/ATI Catalyst Version/GPU info, that would be helpful.

---

@hashfixer: I am not sure if OS is the issue here, since in my case, I face the same issue with multihashes even while running on Windows 7 x64.

---

Here is a test performed on VBulletin hashes with 3 char salt (-m 2611)

Please note that, testVB.txt has all the plaintexts for the hashes present in VB.txt.


Next, I tested by keeping only one hash in VB.txt and again running the dictionary attack:

And it cracks:


I would be interested to know that when was the first time this issue was reported and is there anything that can be done in the code of oclhashcat-plus to allow it to work with ATI Radeon Cards < hd7xxx for multi IPB and VB Hashes?

Can a hotfix be released?

I will be posting some more results of my test with other attack modes like Hybrid + mask (-a 6).

---

Here is an interesting result. For multi VBulletin Hashes, the Hybrid + Mask (-a 6) attack works.

I removed the last 2 characters from all the plaintexts. The 2 characters with either lowercase alphabets or a digit. This allowed me to use a Hybrid + Mask attack to test. Here are the results and as you can see, all the hashes got cracked:

---

Next step was to try a similar Hybrid + Mask (-a 6) attack with multi IPB2 hashes and see if it works:


And, it does not work!

---

The combination attack (-a 1) also seems to work with Multi VBulletin Hashes:

---

Even the combination attack (-a 1) does not work with Multi IPB2 Hashes:

---

So, it can be concluded that Multi VBulletin Hashes will not work with Dictionary Attack mode.

Multi IPB hashes will not work in any mode!

Need to test some more hash types to see if they are affected as well.

Hope this will help someone who is also facing the same issues.