Bruteforce not finding simple 4 letter hash?
#11
(12-14-2024, 09:52 PM)mho Wrote: I see this is an old post.
But I have the same problem, was it ever looked at?
I am running under Windows 11 with Hashcat 6.2.6 and Intel Arc a750, running with new drivers. 

Hashcat has trouble finding hashes with the optimized kernel

"87654321"
.\hashcat --potfile-disable -m 1000 -O -a 3  D109D4B749ABA95D12042DCDBD8ADD2D ?d?d?d?d?d?d?d?d

If I remove the -O flag it is found.
This is bad. I work as a pentester an I am dependent that I get accurate results.
I have run hashcat for many days with the -O flag


Session..........: hashcat
Status...........: Exhausted
Hash.Mode........: 1000 (NTLM)
Hash.Target......: d109d4b749aba95d12042dcdbd8add2d
Time.Started.....: Sat Dec 14 20:54:31 2024 (0 secs)
Time.Estimated...: Sat Dec 14 20:54:31 2024 (0 secs)
Kernel.Feature...: Optimized Kernel
Guess.Mask.......: ?d?d?d?d?d?d?d?d [8]
Guess.Queue......: 1/1 (100.00%)
Speed.#1.........:  568.2 MH/s (1.78ms) @ Accel:128 Loops:100 Thr:32 Vec:4
Recovered........: 0/1 (0.00%) Digests (total), 0/1 (0.00%) Digests (new)
Progress.........: 100000000/100000000 (100.00%)
Rejected.........: 0/100000000 (0.00%)
Restore.Point....: 1000000/1000000 (100.00%)
Restore.Sub.#1...: Salt:0 Amplifier:0-100 Iteration:0-100
Candidate.Engine.: Device Generator
Candidates.#1....: 10524799 -> 69699999

This seems like an issue with your specific runtime/hardware, as I can't recreate this on my system. The Arc drivers are a little rough still so a runtime issue isn't too unlikely, but my A770 didn't show any issues when I tested it previously. That's also quite a slow speed, and there's no hardware info in your status. Are you sure it's using the Arc and not an iGPU you may have? The intel iGPU drivers have been known to have issues in the past and you should even get a warning when trying to use them. It's also possible this is related to the Microsoft OpenCL runtime they keep forcing on Windows 11 users. It's known to be broken right now and has caused us a lot of headaches recently, most of the time it doesn't even allow hashcat to start properly. Could you post the output of `hashcat -I`? Also this isn't running in a container/VM is it?
Reply