hashcat Forum › Deprecated; Previous versions › Old hashcat Support v
how to add custome hash type

Threaded Mode
how to add custome hash type
Net_Spy Offline
Junior Member
**
Posts: 10
Threads: 4
Joined: Oct 2013
#1
10-20-2013, 09:01 PM
Greetings to All,

I wonder how to add custom hash type in hashcat .

Code:
md5(md5($password).9486)

Any idea how to add that in hashcat ? Looking forward for your kind response.

Regards
Net_Spy
Find
epixoip Offline
Legend
******
Posts: 2,936
Threads: 12
Joined: May 2012
#2
10-20-2013, 09:02 PM
open a ticket to request a new format
Find
Net_Spy Offline
Junior Member
**
Posts: 10
Threads: 4
Joined: Oct 2013
#3
10-21-2013, 09:31 AM
Can you guide me , where I can fine ticket portal to open a ticket for this.

Regards
Net_Spy
Find
KT819GM Offline
Senior Member
****
Posts: 344
Threads: 2
Joined: Aug 2011
#4
10-21-2013, 10:05 AM
There is TRAC on top of this page
Find
philsmd Offline
I'm phil
******
Posts: 2,267
Threads: 16
Joined: Feb 2013
#5
10-21-2013, 10:18 AM (This post was last modified: 10-21-2013, 10:20 AM by philsmd.)
Trac is here and you may need to register if not already done (since trac is seperate from the forum and you need to create a new account there).

The algorithm you want to request is md5(md5($pass).$salt) ... since of course the devs would not add a algorithm with hard-coded constants (9486).

There are already "similar" algorithms, like md5(md5($salt).$pass) - see here .
In theory you could use a dictionary containing only 9486 and an external salt list (-e argument)... but I wouldn't really recommend it since it may be *much* slower than a new hash mode that does it the other way around (i.e. $salt is salt and $pass is the pass): md5(md5($pass).$salt).

Note: if such an algorithm would be implemented you still may need to either use -e for the external salt (in this case only a file containing the number 9486), or you need to append to *each* hash in the hashlist ":9486").
Find
undeath Offline
Sneaky Bastard
******
Posts: 2,301
Threads: 11
Joined: Jul 2010
#6
10-21-2013, 12:24 PM
why request a new hash mode when this is vbulletin?
Find
epixoip Offline
Legend
******
Posts: 2,936
Threads: 12
Joined: May 2012
#7
10-21-2013, 01:21 PM
oh, haha, so it is. good eye.
Find
philsmd Offline
I'm phil
******
Posts: 2,267
Threads: 16
Joined: Feb 2013
#8
10-21-2013, 01:27 PM
See http://hashcat.net/wiki/doku.php?id=example_hashes , hashcat supports 2 vbulletin hash modes (both have some restrictions on the salt length etc).

Anyway, by using -m 2611 == vBulletin < v3.8.5 and using either -e or adding :9486 to each line in the hash list it might work (even if it may be better to add an additional hash mode w/ md5(md5($pass).$salt) since also md5(md5($salt).$pass) is already listed/implemented as seperate hash mode).
Find
epixoip Offline
Legend
******
Posts: 2,936
Threads: 12
Joined: May 2012
#9
10-21-2013, 01:30 PM
Code:
epixoip@token:~/oclHashcat-1.00$ type joomla
joomla is a function
joomla ()
{
    echo "$(echo -n "$(echo -n $1 | md5sum | awk '{print $1}')$2" | md5sum | awk '{print $1}'):$2"
}

epixoip@token:~/oclHashcat-1.00$ joomla hashcat 9486
2f4a96428a59869fd0880fbba13db7cb:9486

epixoip@token:~/oclHashcat-1.00$ ./oclHashcat64.bin -d 1 -m 2611 -a 3 2f4a96428a59869fd0880fbba13db7cb:9486
oclHashcat v1.00 starting...

Hashes: 1 total, 1 unique salts, 1 unique digests
Bitmaps: 8 bits, 256 entries, 0x000000ff mask, 1024 bytes
Workload: 128 loops, 80 accel
Applicable Optimizers:
* Not-Iterated
* Single-Hash
* Single-Salt
* Brute-Force
Watchdog: Temperature abort trigger set to 90c
Watchdog: Temperature retain trigger set to 80c
Device #1: Tahiti, 2967MB, 925Mhz, 32MCU
Device #2: skipped by user
Device #3: skipped by user
Device #4: skipped by user
Device #5: skipped by user
Device #6: skipped by user
Device #1: Kernel ./kernels/4098/m2610_a3.Tahiti_1272.2_1272.2 (VM).kernel (267296 bytes)
Device #1: Kernel ./kernels/4098/markov_le_v2.Tahiti_1272.2_1272.2 (VM).kernel (134476 bytes)
Device #1: Kernel ./kernels/4098/bzero.Tahiti_1272.2_1272.2 (VM).kernel (30444 bytes)

2f4a96428a59869fd0880fbba13db7cb:9486:hashcat

Session.Name...: oclHashcat
Status.........: Cracked
Input.Mode.....: Mask (?1?2?2?2?2?2?2) [7]
Hash.Target....: 2f4a96428a59869fd0880fbba13db7cb:9486
Hash.Type......: vBulletin < v3.8.5
Time.Started...: Mon Oct 21 04:22:43 2013 (1 sec)
Speed.GPU.#1...:  2169.6 MH/s
Recovered......: 1/1 (100.00%) Digests, 1/1 (100.00%) Salts
Progress.......: 1509949440/134960504832 (1.12%)
Rejected.......: 0/1509949440 (0.00%)
HWMon.GPU.#1...: 42% Util, 33c Temp, 20% Fan

Started: Mon Oct 21 04:22:43 2013
Stopped: Mon Oct 21 04:22:50 2013
Find
Net_Spy Offline
Junior Member
**
Posts: 10
Threads: 4
Joined: Oct 2013
#10
10-21-2013, 02:42 PM
@epixoip thanks for that idea , but I have about number of hashes to test is there any other way to accomplish it. I've register on trac yet waiting for activation email form their side.Looking forward for your kind response.

Regards
Net_Spy
Find