--remove ?
#1
Ok, so normally I would input the hash type with -m 10 and then follow it with --remove to have it remove all found hashes in my txt file and leave what isnt. Then I would output the found hashes by cudahashcat64 -m 0 --username --show --outfile-format 2 new.txt -o found.txt

It use to output the selected file with no issues, now for some reason it outputs nothing, what am I doing wrong?
#2
You can't use --show after using --remove, as --show will have nothing to show since you used --remove to remove the cracked hashes from the list. There will be no matching entries in the hash list, they will have been removed.
#3
Ok so I have a file with mixed MD5, and MD5 password.salt, I want to run the md5 Salt obviously first because if not running just md5 will output weird characters in the found.txt. I only want to leave what it hasnt found in the text file, but im assuming there is no way to do that.
#4
Any ideas?
#5
It is all very well explained in the FAQ: --show

To sum it up: --show needs to be run on the original (not modified) hash list, it must be run after the cracking was already finished and --left is the "opposite" of --show
#6
Great, so with my MD5 pass salt passes I run it through hashcat, and whatever it finds I output to found.txt then I output a --left txt file to show me whats left. The remainder that I didnt find with MD5 Pass, salt I run with just MD5. Even though the FAQ didnt help, what you said did. Thanks!

Also, dont forget when you use --left you have to change the outfile format to 1 because you have no cracked passwords so it cant be variable 2!


Another question, if you do -m 0 when you are outputting the --left, Will only output the MD5 it found? I noticed I get two different results when I do -m 0 and -m 10 , My thinking is that it is outputting what is LEFT of MD5 and MD5(pass,salt)