RAR hash cracking problems

[crypted.wolf]

Hey
I tried to use Cudahashcat to crack rar file in stdin input mode.
but all the candidate passwords are rejected.
i don't know why?
any one can help me?
this is my command:

Code:

maskprocessor\mp64.exe -i 18:26 -1 ?l?s password?1?1?1?1?1?1?1?1|C:\cuda37\cudaHashcat-1.37\cudaHashcat64.exe -a 0 -m 12500 -d 1,2,3,4,5,6,8 --gpu-temp-abort=75 -p : --outfile-format=3 -o c:\cracked\rarhash.txt c:\hashes\11122.txt

this is cudahashcat status:
all

Code:

Session.Name...: cudaHashcat Status.........: Aborted Input.Mode.....: Pipe Hash.Target....: [hash-filtered] Hash.Type......: RAR3-hp Time.Started...: Thu Oct 15 03:10:14 2015 (1 day, 20 hours) Speed.GPU.#1...:        0 H/s Speed.GPU.#2...:        0 H/s Speed.GPU.#3...:        0 H/s Speed.GPU.#4...:        0 H/s Speed.GPU.#5...:        0 H/s Speed.GPU.#6...:        0 H/s Speed.GPU.#7...:        0 H/s Speed.GPU.#*...:        0 H/s Recovered......: 0/1 (0.00%) Digests, 0/1 (0.00%) Salts Progress.......: 577314814262 Rejected.......: 577314814262 Started: Thu Oct 15 03:10:14 2015 Stopped: Fri Oct 16 23:52:42 2015

[epixoip]

-m 12500 supports a max of 20 chars in -a 0, so your candidates shouldn't be rejected. And indeed I cannot reproduce this with 1.37 using the command you provided:

Code:

sagitta@inceptus:~/cudaHashcat-1.37$ maskprocessor/src/mp64.bin -i 18:26 -1 ?l?s password?1?1?1?1?1?1?1?1 | ./cudaHashcat64.bin --quiet --status -m 12500 rar.test ^C Session.Name...: cudaHashcat Status.........: Aborted Input.Mode.....: Pipe Hash.Target....: ... Hash.Type......: RAR3-hp Time.Started...: Sat Oct 17 00:34:23 2015 (12 secs) Speed.GPU.#1...: 9429 H/s Recovered......: 0/1 (0.00%) Digests, 0/1 (0.00%) Salts Progress.......: 79872 Rejected.......: 0 HWMon.GPU.#1...: 91% Util, 59c Temp, 26% Fan

But let's talk about that command, because it doesn't make any sense.

First, you're telling maskprocessor to increment from length 18-26, but your mask is only 16 chars long. And that's on top of the fact that there's absolutely no reason to use maskprocessor here at all. You also don't need to specify -p or --outfile-format, and your --gpu-temp-abort value is insanely low. And what happened to device 7?

Fixing your command for you:

Code:

cudaHashcat64 -a 3 -m 12500 -o C:\cracked\rarhash.txt -w 3 -1 ?l?s C:\hashes\11122.txt password?1?1?1?1?1?1?1?1

And this leads us to your final and biggest problem: that keyspace is way too big. You're trying to brute force 59^8 on a very slow algorithm. Even if you had 8x Titan X this would take 35 years (or, you would need 280x Titan X to exhaust this keyspace in one year.)

[crypted.wolf]

at first i have to say thank you epixoip
device #7 is destroyed
the word "password" is just an substitute for the real password.
the word before mask has about 18 char length
i have 8 Tesla M2090
i used a command like you but after 20 character length hashcat finished the progress and did not continue to 21..26 char length

[epixoip]

Ah ok, that makes more sense then. But yeah, there's a 20-char limit for this algorithm.

[crypted.wolf]

any solution or alternative like pipe input?

[epixoip]

No, there's no way to get around it.