All Chars = Big Chaos

[TrAnn3l]

I just wanted to crack every possible hash, so i mkade my self a charset, which contains all chars in hex, and used it in bruteforce mode in oclHashcat. I was surprised, because it looks like ther would be after many hashes a double [LF] or in hex 0x0A. So in the pot file, there are many blank lines, because double [LF] is just like ENTER.

I don't know, how to handle this.

I just had a few thoughts how that could be happen, and then i discovered, that when you log into a website, you often use ENTER to log in, instead of pressing the login button.

extract of the pot file:

Code:

01ebeaafc334e503f4acc94a18df9fa5:1122

063ae6f07f0d8fd2e598e451cdb942b5:7192

296d46937e5ce248e219593813e546b6:shit
00cdaacb24f13aa4af8f084ff2c304c8:7265

1f1f1eb58e44d5d24e44070b3b29c0d5:9542

29550bc8caab76137fa6b70f5e71b1d9:6172

1e21e02a72c5516c33f2a791ee03cbd9:2272

223c4d85dae6c8b1a1405c8aff7018e5:1215

246848a09d9700dc1d1e5945453216f3:wk85

22be9002ee0233c0a89c411d0b6009ff:3535

203b07dda5b10c4d7b8a09dc63550106:6632

054bfd3ce64edc478057eaaefdfe1d09:7252

18f431045fdd20bc3cdf58f882874655:pass
176afe04d49b9770d64a27f97d21d337:bios
0d70128ac1abb96dd54bd4cc483375fa:lejt

[epixoip]

with odd plains like this it's good to use one of the outfile formats that include hex_plain

hitting enter on an html form won't actually append a line feed, unless it's a multiline text box. it's more likely that the algorithm used is md5(pass . "\n") or something

[TrAnn3l]

ok, nice to know.
I tried that already, i still get blank lines.

[epixoip]

you will still get the blank lines, yes. there is no avoiding that...

[atom]

Yes, this is a common technique. Some websites use CR as salt which leads to all kind of confusing results.

[Incisive]

You can use

Code:

--outfile=Myfile.out --outfile-format=5

instead; then at least hash and password will be in hex, except the :'s of your separator character. I don't know if the salt's in hex in this mode or not, though.

[hannhimhe]

Is it possible to append ($) a linefeed (hex 0a) to a dictionary attack using rules?

[Waffle]

of course it is possible to write a rule for this.

^[tab]+0{

Insert a tab character at the start of the word. Increment it (0x9 -> 0xa). Rotate it into position.

[atom]

nice