Posts: 10
Threads: 4
Joined: Oct 2013
Greetings to All,
I wonder how to add custom hash type in hashcat .
Code:
md5(md5($password).9486)
Any idea how to add that in hashcat ? Looking forward for your kind response.
Regards
Net_Spy
Posts: 2,936
Threads: 12
Joined: May 2012
open a ticket to request a new format
Posts: 10
Threads: 4
Joined: Oct 2013
Can you guide me , where I can fine ticket portal to open a ticket for this.
Regards
Net_Spy
Posts: 344
Threads: 2
Joined: Aug 2011
There is TRAC on top of this page
Posts: 2,267
Threads: 16
Joined: Feb 2013
10-21-2013, 10:18 AM
(This post was last modified: 10-21-2013, 10:20 AM by philsmd.)
Trac is
here and you may need to
register if not already done (since trac is seperate from the forum and you need to create a new account there).
The algorithm you want to request is md5(md5($pass).$salt) ... since of course the devs would not add a algorithm with hard-coded constants (9486).
There are already "similar" algorithms, like md5(md5($salt).$pass) - see
here .
In theory you could use a dictionary containing only 9486 and an external salt list (-e argument)... but I wouldn't really recommend it since it may be *much* slower than a new hash mode that does it the other way around (i.e. $salt is salt and $pass is the pass): md5(md5($pass).$salt).
Note: if such an algorithm would be implemented you still may need to either use -e for the external salt (in this case only a file containing the number 9486), or you need to append to *each* hash in the hashlist ":9486").
Posts: 2,301
Threads: 11
Joined: Jul 2010
why request a new hash mode when this is vbulletin?
Posts: 2,936
Threads: 12
Joined: May 2012
oh, haha, so it is. good eye.
Posts: 2,267
Threads: 16
Joined: Feb 2013
See
http://hashcat.net/wiki/doku.php?id=example_hashes , hashcat supports 2 vbulletin hash modes (both have some restrictions on the salt length etc).
Anyway, by using -m 2611 == vBulletin < v3.8.5 and using either -e or adding :9486 to each line in the hash list it might work (even if it may be better to add an additional hash mode w/ md5(md5($pass).$salt) since also md5(md5($salt).$pass) is already listed/implemented as seperate hash mode).
Posts: 2,936
Threads: 12
Joined: May 2012
Code:
epixoip@token:~/oclHashcat-1.00$ type joomla
joomla is a function
joomla ()
{
echo "$(echo -n "$(echo -n $1 | md5sum | awk '{print $1}')$2" | md5sum | awk '{print $1}'):$2"
}
epixoip@token:~/oclHashcat-1.00$ joomla hashcat 9486
2f4a96428a59869fd0880fbba13db7cb:9486
epixoip@token:~/oclHashcat-1.00$ ./oclHashcat64.bin -d 1 -m 2611 -a 3 2f4a96428a59869fd0880fbba13db7cb:9486
oclHashcat v1.00 starting...
Hashes: 1 total, 1 unique salts, 1 unique digests
Bitmaps: 8 bits, 256 entries, 0x000000ff mask, 1024 bytes
Workload: 128 loops, 80 accel
Applicable Optimizers:
* Not-Iterated
* Single-Hash
* Single-Salt
* Brute-Force
Watchdog: Temperature abort trigger set to 90c
Watchdog: Temperature retain trigger set to 80c
Device #1: Tahiti, 2967MB, 925Mhz, 32MCU
Device #2: skipped by user
Device #3: skipped by user
Device #4: skipped by user
Device #5: skipped by user
Device #6: skipped by user
Device #1: Kernel ./kernels/4098/m2610_a3.Tahiti_1272.2_1272.2 (VM).kernel (267296 bytes)
Device #1: Kernel ./kernels/4098/markov_le_v2.Tahiti_1272.2_1272.2 (VM).kernel (134476 bytes)
Device #1: Kernel ./kernels/4098/bzero.Tahiti_1272.2_1272.2 (VM).kernel (30444 bytes)
2f4a96428a59869fd0880fbba13db7cb:9486:hashcat
Session.Name...: oclHashcat
Status.........: Cracked
Input.Mode.....: Mask (?1?2?2?2?2?2?2) [7]
Hash.Target....: 2f4a96428a59869fd0880fbba13db7cb:9486
Hash.Type......: vBulletin < v3.8.5
Time.Started...: Mon Oct 21 04:22:43 2013 (1 sec)
Speed.GPU.#1...: 2169.6 MH/s
Recovered......: 1/1 (100.00%) Digests, 1/1 (100.00%) Salts
Progress.......: 1509949440/134960504832 (1.12%)
Rejected.......: 0/1509949440 (0.00%)
HWMon.GPU.#1...: 42% Util, 33c Temp, 20% Fan
Started: Mon Oct 21 04:22:43 2013
Stopped: Mon Oct 21 04:22:50 2013
Posts: 10
Threads: 4
Joined: Oct 2013
@epixoip thanks for that idea , but I have about number of hashes to test is there any other way to accomplish it. I've register on trac yet waiting for activation email form their side.Looking forward for your kind response.
Regards
Net_Spy