Recover NTLM with charset: !@$etaoinshrdlu134579
#1
How do I recover an NTLM password by using Hashcat with this charset: !@$etaoinshrdlu134579
#2
simply define that as a custom charset, then use that custom charset in your mask. you will need to encase that string in single quotes though to prevent your shell from expanding the ! and $
#3
(02-23-2014, 12:33 AM)epixoip Wrote: simply define that as a custom charset, then use that custom charset in your mask. you will need to encase that string in single quotes though to prevent your shell from expanding the ! and $

How do I do that? Could you give me the code command?
#4
really...

-1 '!@$etaoinshrdlu134579' ?1?1?1?1?1?1?1?1
#5
(02-23-2014, 01:02 AM)Si2006 Wrote: really...

-1 '!@$etaoinshrdlu134579' ?1?1?1?1?1?1?1?1

Yes, really. I can't help an overload of unclear documentation with references such as 'this is depreciated now' and 'this version is outdated' and hashcat simply not showing the current password it is trying. This does not work: -1 '!@$etaoinshrdlu134579' ?1?1?1?1?1?1?1?1. It says line-length exception error.
#6
Well if your have line length exception your file containing your hash is invalid.
The custom charset and mask is spot on, It's does work.

So make sure you don't have trailing spaces in your file!, Line count should be 32.
#7
(02-23-2014, 01:52 AM)Si2006 Wrote: Well if your have line length exception your file containing your hash is invalid.
The custom charset and mask is spot on, It's does work.

So make sure you don't have trailing spaces in your file!, Line count should be 32.

Well, what does your complete command looks like? The password is 10 characters or longer.
#8
You can also put all characters into a file (all in one line) and then use -1 filename

Should save you headache about the escaping
#9
(02-23-2014, 11:45 AM)atom Wrote: You can also put all characters into a file (all in one line) and then use -1 filename

Should save you headache about the escaping

Same 'line-length exception' error here:
oclHashcat32.exe -a 3 -m 1000 -p : -o "D:\found.txt" --outfile-format=3 -n 32 --markov-disable --gpu-temp-abort=80 -i --increment-min=10 --increment-max=11 -1 mycharsetfile.txt "<hash removed>"
#10
Hey, since you neglected to follow the rules (http://hashcat.net/forum/announcement-2.html ), I've locked your account for 1 week.

Now you've plenty of time to:
1. read again the forum rules
2. read the wiki (http://hashcat.net/wiki/ ) and especially the hash input formats (http://hashcat.net/wiki/doku.php?id=example_hashes ) and how easy it is to use custom charsets (http://hashcat.net/wiki/doku.php?id=mask...m_charsets ) by defining *and using* the defined charsets e.g. w/ -1 mycharsetfile.txt ?1?1?1?1?1?1?1?1?1?1?1
3. understand how easy it is to find those answers to your question also by using the forum search (http://hashcat.net/forum/search.php )

I hope you follow the rules in the future.