SHA-256 Problem
#1
Hello,

I am unable to crack hash which includes letters from Latvian language, I am testing letter: ā. In the link are more details, also I included hashes that I generated from websites, some of them are different. Maybe there is another way to run hashcat or I am just doing something wrong?

Thank you.


Code:
The word is: testā
SHA256: a048ff102912622f75e5c8543445764b94332c1144da7f18d9ffaf369b8c99c84

Code:
http://www.kreativekorp.com/charset/encoding.php?file=cp775.kte&char=83

cmd
Code:
hashcat-cli32.exe --hash-mode 1400 --attack-mode 3 --pw-min 5 --pw-max 5 --outfile crack.txt --custom-charset1 testā hash.txt ?1?1?1?1?1

hash.txt
Code:
http://www.insidepro.com/hashes.php
3cfe55fa45e09f07b800aaefc4aa2ca114fc52749dd4477e14c9594f93449626
8f7bfb9ce7e775ecdc51caced33faeebc6396dda38dfd0ef1843145475ae9093
https://quickhash.com/
0cae07af68af90dc6493a8acf700a2c4f9fa6d5f5aafbb2bd01e31f897c6935c
http://www.hashgenerator.de/
a048ff102912622f75e5c8543445764b94332c1144da7f18d9ffaf369b8c99c8
http://www.xorbin.com/tools/sha256-hash-calculator
a048ff102912622f75e5c8543445764b94332c1144da7f18d9ffaf369b8c99c8
#2
this is most likely a charset problem.

Code:
> Desktop/hashcat-0.46/hashcat-cli64.bin -m 1400 /tmp/a -1 testā "?1?1?1?1?1?1" -a3 --pw-min 6
Initializing hashcat v0.46 by atom with 8 threads and 32mb segment-size...

Added hashes from file /tmp/a: 1 (1 salts)
Activating quick-digest mode for single-hash

NOTE: press enter for status-screen

a048ff102912622f75e5c8543445764b94332c1144da7f18d9ffaf369b8c99c8:testā

All hashes have been recovered

Input.Mode: Mask (?1?1?1?1?1?1)
Index.....: 0/1 (segment), 15625 (words), 0 (bytes)
Recovered.: 1/1 hashes, 1/1 salts
Speed/sec.: - plains, - words
Progress..: 14431/15625 (92.36%)
Running...: --:--:--:--
Estimated.: --:--:--:--

Started: Sun Aug 11 21:08:20 2013
Stopped: Sun Aug 11 21:08:20 2013
Code:
> echo -n ā | hexdump
0000000 81c4                                  
0000002
#3
Hello,

I have hash and I know there might be 2 of those special letters and its length is 5, so

Quote:hashcat-cli32.exe -m 1400 hash.txt -o crack.txt -1 char.txt "?1?1?1?1?1?1?1" -a3 --pw-min 5 --pw-max 7

char.txt (Encoded in UTF-8 without BOM)
Code:
teēstāa

hash.txt
Code:
0f508e3524bffea9ad417f945b6eb205d12767a8c8f0919c90797261cb4043a3
a048ff102912622f75e5c8543445764b94332c1144da7f18d9ffaf369b8c99c8
4f9f2c61e0e2151acd89e9a9bda89e0089de69cb3587b802427f5b79e14b89a1
59830ebc3a4184110566bf1a290d08473dfdcbd492ce498b14cd1a5e2fa2e441

crack.txt
Code:
59830ebc3a4184110566bf1a290d08473dfdcbd492ce498b14cd1a5e2fa2e441:tests
a048ff102912622f75e5c8543445764b94332c1144da7f18d9ffaf369b8c99c8:testā
4f9f2c61e0e2151acd89e9a9bda89e0089de69cb3587b802427f5b79e14b89a1:tēsta
0f508e3524bffea9ad417f945b6eb205d12767a8c8f0919c90797261cb4043a3:tēstā

Everything is working now, but I still haven't figured out something in my mind.

Thank you.
#4
UTF8 needs two bytes (thus two chars) to encode the special chars.
#5
It's correct what undeath said. To explain you need to understand how multichar bytes are used in your case.

The length for tests is 5, correct.
The length for testā and tēsta is 6, not 5!
The length for tēstā is 7.

By adding the special characters as charset hashcat splits them into 2 single byte characters. One of them indicates the utf8 mark, one the special character. Since its iteration through all of them because you do 7x?1 it brute-forces them, but not how you think it did it.

Also note that hash functions work blockwise, not charwise. They dont care about encoding.
#6
Hello,

I wanted to know is there an option to use letters from charset only once. For example charset: testsāēs, so every letter is used only once except t is two and s three times.

Thank you.
#7
you can use masks with letters.. for example

-1 ?d test?1

matches test0 - test9

read this please: https://hashcat.net/wiki/doku.php?id=mask_attack