First time user help pls
#1
Thumbs Up 
Hi all,

First time user and done some googling on how to use hashcat but not getting any love from her today.

I have dumped the passwords from a SAM file of a offline Win7 system with samdump2 and the resulting hash file looks ok.

However when I try to execute I get the following:
Code:
al@al-ubuntu:~/hashcat-0.34$ cat /home/al/Desktop/gateway.txt
Administrator:500:aad3b435b51404eeaad3b435b51404ee:31d6cfe0d16ae931b73c59d7e0c089c0:::
Guest:501:aad3b435b51404eeaad3b435b51404ee:31d6cfe0d16ae931b73c59d7e0c089c0:::
Corey:1000:aad3b435b51404eeaad3b435b51404ee:07789b63276053841c4df8965355aec1:::
al@al-ubuntu:~/hashcat-0.34$ sudo ./hashcat-cli.bin -a 3 -m 1000 /home/al/Desktop/gateway.txt
[sudo] password for al:
Initializing with 8 threads and 32mb segment-size...

NOTE: press enter for status-screen

Skipping line: Administrator:500:aad3b435b51404eeaad3b435b51404ee:31d6cfe0d16ae931b73c59d7e0c089c0::: (line length exception)
Skipping line: Guest:501:aad3b435b51404eeaad3b435b51404ee:31d6cfe0d16ae931b73c59d7e0c089c0::: (line length exception)
Skipping line: Corey :1000:aad3b435b51404eeaad3b435b51404ee:07789b63276053841c4df8965355aec1::: (line length exception)
No hashes loaded
al@al-ubuntu:~/hashcat-0.34$

Any help appreciated.

Thanks

-Al



#2
(01-01-2011, 06:06 AM)big_bad_al Wrote: Hi all,

First time user and done some googling on how to use hashcat but not getting any love from her today.

I have dumped the passwords from a SAM file of a offline Win7 system with samdump2 and the resulting hash file looks ok.

However when I try to execute I get the following:
Code:
al@al-ubuntu:~/hashcat-0.34$ cat /home/al/Desktop/gateway.txt
Administrator:500:aad3b435b51404eeaad3b435b51404ee:31d6cfe0d16ae931b73c59d7e0c089c0:::
Guest:501:aad3b435b51404eeaad3b435b51404ee:31d6cfe0d16ae931b73c59d7e0c089c0:::
Corey:1000:aad3b435b51404eeaad3b435b51404ee:07789b63276053841c4df8965355aec1:::
al@al-ubuntu:~/hashcat-0.34$ sudo ./hashcat-cli.bin -a 3 -m 1000 /home/al/Desktop/gateway.txt
[sudo] password for al:
Initializing with 8 threads and 32mb segment-size...

NOTE: press enter for status-screen

Skipping line: Administrator:500:aad3b435b51404eeaad3b435b51404ee:31d6cfe0d16ae931b73c59d7e0c089c0::: (line length exception)
Skipping line: Guest:501:aad3b435b51404eeaad3b435b51404ee:31d6cfe0d16ae931b73c59d7e0c089c0::: (line length exception)
Skipping line: Corey :1000:aad3b435b51404eeaad3b435b51404ee:07789b63276053841c4df8965355aec1::: (line length exception)
No hashes loaded
al@al-ubuntu:~/hashcat-0.34$

Any help appreciated.

Thanks

-Al

Also tried just having:

aad3b435b51404eeaad3b435b51404ee:07789b63276053841c4df8965355aec1

in a file on its own. Same prob!
#3
If you want to crack NTLM hashes, you must leave them in:
Code:
hash
hash
hash
format.
Since HC doesnt support LM hashes, NTLM will only work.
#4
(01-01-2011, 01:55 PM)Rolf Wrote: If you want to crack NTLM hashes, you must leave them in:
Code:
hash
hash
hash
format.
Since HC doesnt support LM hashes, NTLM will only work.

So for :

Code:
aad3b435b51404eeaad3b435b51404ee:07789b63276053841c4df8965355aec1

since the aa..... is the NT hash, and 07789.... is the NTLM hash I should just have:

07789b63276053841c4df8965355aec1

On a line on its own?

-Al


#5
Yes.
aad3... is LM, not NT hash.
0778... is NT/NTLM hash.
#6
(01-01-2011, 07:53 PM)Rolf Wrote: Yes.
aad3... is LM, not NT hash.
0778... is NT/NTLM hash.

Cool. Better put that new Cuda card to work with ocl......

Thanks

-Al
#7
Slightly OT for this thread, but now trying oclhashcat so I use CUDA and getting:

Code:
al@al-ubuntu:~/oclHashcat-0.23$ sudo ./oclHashcat32.bin -m 1000 -n 80 ?l?l?l?l?l?l?l?d?d /home/al/min3.hash
./oclHashcat32.bin: /usr/lib/nvidia-current/libOpenCL.so: no version information available (required by ./oclHashcat32.bin)
Usage: ./oclHashcat32.bin [options] hashlist dict_left|mask_left dict_right|mask_right

Try --help for more help.
al@al-ubuntu:~/oclHashcat-0.23$

Cant see where I am going wrong with syntax? I dont want to dictionary it at all, pure brute force it?

Cheers

-Al
#8
u must use left and right mask
sudo ./oclHashcat32.bin -m 1000 -n 80 /home/al/min3.hash ?l?l?l?l ?l?l?l?d?d
wuuut