Output with --show help.
#1
Basically, I have a file which looks like.

email:hash

And I have a file which looks like

hash:pass.

I've tried writing a script to match these up, but I fucking failed. I want the output to be like email:pass.

I've tried looking at replied on here from earlier threads, but It's not working for me.

This Is what I'm using.

Code:
oclHashcat-plus64.exe --show --outfile [output file] --outfile-format 2 [dicts]

But I'm getting this error.

Code:
Usage: oclHashcat-plus64.exe [options]... hash|hashfile|hccapfile [dictionary|mask|directory]...

Try --help for more help.

I've tried adding -m 3000 (it's plain md5 hashes), but it's not helping.

Any input is appreciated.
#2
oclHashcat-plus's --show is too simple to do that.

Apparently, you're on Windows. So grab gawk (Google it) and run the following kinda-ugly one-liner:
Code:
gawk -F: "FNR==NR{a[$2]=$1;next} $1 in a{print a[$1] FS $2}" email.hash.txt hash.pass.txt > email.pass.txt
Note: Pwds with ':' in them will not get extracted correctly.
#3
(10-28-2012, 12:14 AM)M@LIK Wrote: oclHashcat-plus's --show is too simple to do that.

Apparently, you're on Windows. So grab gawk (Google it) and run the following kinda-ugly one-liner:
Code:
gawk -F: "FNR==NR{a[$2]=$1;next} $1 in a{print a[$1] FS $2}" email.hash.txt hash.pass.txt > email.pass.txt
Note: Pwds with ':' in them will not get extracted correctly.

Worked like a charm bro.

Thanks so much Smile