Debian shadowfile and hashcat CUDA

[termito]

I will test/crack my shadowfile with backtrack, how can I do this?

1. What Hashtype is this shadow on Linux Debian?
example (modified)
kare:On6ZrLf4xHOpM:11761::::::

2. I use backtrack and CUDA.
Is this possible without wordlist to crack it via Bruteforce


Thanks

[atom]

yes, its descrypt -m 1500

[termito]

yes, its descrypt -m 1500

Can you give me a line please?

I use hashcat-gui, but I dont find --hash mode 1500??
Only MD5 (APR) = 1600
and SHA256 = 1400

EDIT:
oclHashcat-plus include --mode 1500

How can I see wich Hashfile Type is a hash?

[mastercracker]

Can you give me a line please?

I use hashcat-gui, but I dont find --hash mode 1500??
Only MD5 (APR) = 1600
and SHA256 = 1400

EDIT:
oclHashcat-plus include --mode 1500

How can I see wich Hashfile Type is a hash?

oclhashcat-plus64 -m 1500 hash.txt mask

for the mask part read this:

http://hashcat.net/wiki/doku.php?id=mask_attack

The hash.txt should contain only this:

Code:

On6ZrLf4xHOpM

For "wich Hashfile Type is a hash", you have to know. You can tell from where the hash comes from, it's length, the salt, etc.

[termito]

Thanks, but I have a problem. I make a seperate shadowfile and fill in only this Hashcode "On6ZrLf4xHOpM:11761"

cudaHashcat-plus64.exe --hash-type 1500 --attack-mode 3 U:\backtrack\shadow ?u?l

I get this the error
ERROR: No hashes loaded

[mastercracker]

Thanks, but I have a problem. I make a seperate shadowfile and fill in only this Hashcode "On6ZrLf4xHOpM:11761"

cudaHashcat-plus64.exe --hash-type 1500 --attack-mode 3 U:\backtrack\shadow ?u?l

I get this the error
ERROR: No hashes loaded

Because you have to remove the :11761 part, it's not part of the hash. Look at my example, it's only the 13 characters part that is the hash.

[termito]

Sorry this was only an example and is not the really the haschcode I used, I forget in this Forum to clear the :11761

Now I used another hachcode from shadow but I get always an error

The line:
cudaHashcat-plus64.exe --hash-type 1500 --attack-mode 3 --gpu-async --gpu-devices 1 U:\backtrack\shadow ?u?l


The error:
hash: $1$qXXXNw6$MFKIkNKIHksXXXXFUejYB., line length exception: 34
ERROR: No hashes loaded

[M@LIK]

Hashes with $1$ are different.
Use: -m500 or --hash-type 500.

[termito]

Thanks Im happy - it works now without error.

Here the log:
cudaHashcat-plus v0.07 by atom starting...
Hashes: 1
Unique salts: 1
Unique digests: 1
Bitmaps: 8 bits, 256 entries, 0x000000ff mask, 1024 bytes
GPU-Loops: 64
GPU-Accel: 32
Password lengths range: 1 - 15
Platform: NVidia compatible platform found
Watchdog: Temperature limit set to 90c
Device #1: GeForce 8800 GTX, 768MB, 1350Mhz, 16MCU
Device #1: Allocating 77MB host-memory
Device #1: Kernel ./kernels/4318/m0500.sm_10.64.cubin

Status.......: Exhausted
Input.Mode...: Mask (?l?u?d?l?u?d)
Hash.Target..: $1$qXXXNw6$MFKIkNKIHksXXXXFUejYB.
Hash.Type....: md5crypt, MD5(Unix), FreeBSD MD5, Cisco-IOS MD5
Time.Running.: 3 mins, 24 secs
Time.Left....: 0 secs
Time.Util....: 204942.3ms/4389.9ms Real/CPU, 2.2% idle
Speed........: 223.0k c/s Real, 225.1k c/s GPU
Recovered....: 0/1 Digests, 0/1 Salts
Progress.....: 45697600/45697600 (100.00%)
Rejected.....: 0/45697600 (0.00%)
HW.Monitor.#1: 97% GPU, 84c Temp

Started: Thu Sep 20 20:25:25 2012
Stopped: Thu Sep 20 20:28:50 2012

1. Is the Speed 223.0k/s ---> ok? I think to slow for a 8800GTX?

2. I like test Bruteforce, what is the mask for e.g. "kevin33"?

[mastercracker]

1. I don't know what the expected speed should be so I can't answer.
2. ?l?l?l?l?l?d?d Note that l is lowercase L not the number one.