how to add custome hash type
#1
Greetings to All,

I wonder how to add custom hash type in hashcat .

Code:
md5(md5($password).9486)

Any idea how to add that in hashcat ? Looking forward for your kind response.

Regards
Net_Spy
#2
open a ticket to request a new format
#3
Can you guide me , where I can fine ticket portal to open a ticket for this.

Regards
Net_Spy
#4
There is TRAC on top of this page
#5
Trac is here and you may need to register if not already done (since trac is seperate from the forum and you need to create a new account there).

The algorithm you want to request is md5(md5($pass).$salt) ... since of course the devs would not add a algorithm with hard-coded constants (9486).

There are already "similar" algorithms, like md5(md5($salt).$pass) - see here .
In theory you could use a dictionary containing only 9486 and an external salt list (-e argument)... but I wouldn't really recommend it since it may be *much* slower than a new hash mode that does it the other way around (i.e. $salt is salt and $pass is the pass): md5(md5($pass).$salt).

Note: if such an algorithm would be implemented you still may need to either use -e for the external salt (in this case only a file containing the number 9486), or you need to append to *each* hash in the hashlist ":9486").
#6
why request a new hash mode when this is vbulletin?
#7
oh, haha, so it is. good eye.
#8
See http://hashcat.net/wiki/doku.php?id=example_hashes , hashcat supports 2 vbulletin hash modes (both have some restrictions on the salt length etc).

Anyway, by using -m 2611 == vBulletin < v3.8.5 and using either -e or adding :9486 to each line in the hash list it might work (even if it may be better to add an additional hash mode w/ md5(md5($pass).$salt) since also md5(md5($salt).$pass) is already listed/implemented as seperate hash mode).
#9
Code:
epixoip@token:~/oclHashcat-1.00$ type joomla
joomla is a function
joomla ()
{
    echo "$(echo -n "$(echo -n $1 | md5sum | awk '{print $1}')$2" | md5sum | awk '{print $1}'):$2"
}

epixoip@token:~/oclHashcat-1.00$ joomla hashcat 9486
2f4a96428a59869fd0880fbba13db7cb:9486

epixoip@token:~/oclHashcat-1.00$ ./oclHashcat64.bin -d 1 -m 2611 -a 3 2f4a96428a59869fd0880fbba13db7cb:9486
oclHashcat v1.00 starting...

Hashes: 1 total, 1 unique salts, 1 unique digests
Bitmaps: 8 bits, 256 entries, 0x000000ff mask, 1024 bytes
Workload: 128 loops, 80 accel
Applicable Optimizers:
* Not-Iterated
* Single-Hash
* Single-Salt
* Brute-Force
Watchdog: Temperature abort trigger set to 90c
Watchdog: Temperature retain trigger set to 80c
Device #1: Tahiti, 2967MB, 925Mhz, 32MCU
Device #2: skipped by user
Device #3: skipped by user
Device #4: skipped by user
Device #5: skipped by user
Device #6: skipped by user
Device #1: Kernel ./kernels/4098/m2610_a3.Tahiti_1272.2_1272.2 (VM).kernel (267296 bytes)
Device #1: Kernel ./kernels/4098/markov_le_v2.Tahiti_1272.2_1272.2 (VM).kernel (134476 bytes)
Device #1: Kernel ./kernels/4098/bzero.Tahiti_1272.2_1272.2 (VM).kernel (30444 bytes)

2f4a96428a59869fd0880fbba13db7cb:9486:hashcat

Session.Name...: oclHashcat
Status.........: Cracked
Input.Mode.....: Mask (?1?2?2?2?2?2?2) [7]
Hash.Target....: 2f4a96428a59869fd0880fbba13db7cb:9486
Hash.Type......: vBulletin < v3.8.5
Time.Started...: Mon Oct 21 04:22:43 2013 (1 sec)
Speed.GPU.#1...:  2169.6 MH/s
Recovered......: 1/1 (100.00%) Digests, 1/1 (100.00%) Salts
Progress.......: 1509949440/134960504832 (1.12%)
Rejected.......: 0/1509949440 (0.00%)
HWMon.GPU.#1...: 42% Util, 33c Temp, 20% Fan

Started: Mon Oct 21 04:22:43 2013
Stopped: Mon Oct 21 04:22:50 2013
#10
@epixoip thanks for that idea , but I have about number of hashes to test is there any other way to accomplish it. I've register on trac yet waiting for activation email form their side.Looking forward for your kind response.

Regards
Net_Spy