Help for noob

[Spamme]

Hello

I'm new to hashcat and I wanted to use it to find out a salt, because I know what is hashed and the hash but I missing the salt. How can do it with hashcat? I have to create a file with the hashed text and the hash and then use the brute force attack?

Thanks for the help

[mastercracker]

It depends on what algorithm was used. Sometimes it's possible to put as input the Hashass as if it was Hash:Salt in order to crack the salt.

[Spamme]

Thanks for the reply, any way it's not a password, the hash algorithm is md5 and it's used as checksum, for this reason I know the text and its hash but I need to find out the salt.

So I create a file with the hash:text only and then I use the command:

hashcat -m 10 -a 3 mytexthashfile.txt

I suppose that the format is salt.pass, because I try to find the salt I have to use the reverse one, this means pass.salt mode, am I correct?
Moreover I think that the salt is just plain text with no upper case, numbers and special chars, do I have to specify a custom charset?

Thanks

[Spamme]

I'm try to figure it out but it don't get it. I have made a test, let's say that the the salt is "md5" and the text is "function", I just create the hash for "md5function" and put it in a test.txt file, then I create a second file with the text "function" and I call it pass.txt.
Now I want to find the "md5" salt and I use the following command:

hashcat -m 10 -a 3 -e pass.txt test.txt ?a?a?a

But it doesn't find it, what is wrong?

Code:

Added hashes from file test.txt: 1 (1 salts)
Activating quick-digest mode for single-hash

NOTE: press enter for status-screen


Input.Mode: Mask (?a) [1]
Index.....: 0/1 (segment), 95 (words), 0 (bytes)
Recovered.: 0/1 hashes, 0/1 salts
Speed/sec.: - plains, - words
Progress..: 95/95 (100.00%)
Running...: --:--:--:--
Estimated.: --:--:--:--


Input.Mode: Mask (?a?a) [2]
Index.....: 0/1 (segment), 9025 (words), 0 (bytes)
Recovered.: 0/1 hashes, 0/1 salts
Speed/sec.: - plains, - words
Progress..: 9025/9025 (100.00%)
Running...: --:--:--:--
Estimated.: --:--:--:--


Input.Mode: Mask (?a?a?a) [3]
Index.....: 0/1 (segment), 857375 (words), 0 (bytes)
Recovered.: 0/1 hashes, 0/1 salts
Speed/sec.: 13.74M plains, 13.74M words
Progress..: 857375/857375 (100.00%)
Running...: --:--:--:--
Estimated.: --:--:--:--

[undeath]

Code:

~> echo -n md5function | md5sum | sed 's;^\(.\{32\}\).*$;\1:function;' > /tmp/hash
~> ./hashcat-cli64.bin -m 10 -a 3 /tmp/hash "?a?a?a"                              
Initializing hashcat v0.47 by atom with 8 threads and 32mb segment-size...

Added hashes from file /tmp/hash: 1 (1 salts)
Activating quick-digest mode for single-hash with salt

NOTE: press enter for status-screen


Input.Mode: Mask (?a) [1]
Index.....: 0/1 (segment), 95 (words), 0 (bytes)
Recovered.: 0/1 hashes, 0/1 salts
Speed/sec.: - plains, - words
Progress..: 95/95 (100.00%)
Running...: --:--:--:--
Estimated.: --:--:--:--


Input.Mode: Mask (?a?a) [2]
Index.....: 0/1 (segment), 9025 (words), 0 (bytes)
Recovered.: 0/1 hashes, 0/1 salts
Speed/sec.: - plains, - words
Progress..: 9025/9025 (100.00%)
Running...: --:--:--:--
Estimated.: --:--:--:--

190c0b684aefa1ccd96dc2eaeac741d6:function:md5

All hashes have been recovered

Input.Mode: Mask (?a?a?a) [3]
Index.....: 0/1 (segment), 857375 (words), 0 (bytes)
Recovered.: 1/1 hashes, 1/1 salts
Speed/sec.: - plains, - words
Progress..: 760874/857375 (88.74%)
Running...: --:--:--:--
Estimated.: --:--:--:--

Started: Mon Jan 27 11:07:18 2014
Stopped: Mon Jan 27 11:07:18 2014

works for me

[Spamme]

Thanks it was using the pass.txt as hash file, now it works:

hashcat-cli64.exe -m 10 -a 3 --salt-file=pass.txt test.txt ?a?a?a

Code:

Initializing hashcat v0.47 by atom with 8 threads and 32mb segment-size...

Added external salts from file pass.txt: 1 salts
Added hashes from file test.txt: 1 (1 salts)
Activating quick-digest mode for single-hash

NOTE: press enter for status-screen


Input.Mode: Mask (?a) [1]
Index.....: 0/1 (segment), 95 (words), 0 (bytes)
Recovered.: 0/1 hashes, 0/1 salts
Speed/sec.: - plains, - words
Progress..: 95/95 (100.00%)
Running...: --:--:--:--
Estimated.: --:--:--:--


Input.Mode: Mask (?a?a) [2]
Index.....: 0/1 (segment), 9025 (words), 0 (bytes)
Recovered.: 0/1 hashes, 0/1 salts
Speed/sec.: - plains, - words
Progress..: 9025/9025 (100.00%)
Running...: --:--:--:--
Estimated.: --:--:--:--

190c0b684aefa1ccd96dc2eaeac741d6:function:md5

All hashes have been recovered

Input.Mode: Mask (?a?a?a) [3]
Index.....: 0/1 (segment), 857375 (words), 0 (bytes)
Recovered.: 1/1 hashes, 1/1 salts
Speed/sec.: - plains, 3.84M words
Progress..: 839096/857375 (97.87%)
Running...: --:--:--:--
Estimated.: --:--:--:--