Backslash Problem?

[cybob]

Hi Guys

I'm back testing OclHashcat and I am having a problem.

I was trying to create a mask to crack a password with a "\" backslash in it and it wouldn't work, it kept exhausting.

So I narrowed it down to "\" as the problem and got its NTLM hash as 31D6CFE0D16AE931B73C59D7E0C089C0 and used mask "?s", but it doesn't crack it.

Am I missing something? Is it a forbidden char or something?

Confused.

Thanks in advance

Rob

[epixoip]

Learn how to use your shell.

[cybob]

Not sure what you mean.

This is what I used

oclHashcat64.exe -m 1000 -w 3 -a 3 31D6CFE0D16AE931B73C59D7E0C089C0 ?s

It works for loads of other examples but not this one.

[epixoip]

Backslash is an escape character. You hashed nothing, and thus ended up with a null hash.

The actual nthash of a single backslash character is aa6827f0d30e81d0ece457e99188b6a8:

Code:

epixoip ~ $ echo -n '\' | iconv -t utf16le | openssl md4
(stdin)= aa6827f0d30e81d0ece457e99188b6a8

[cybob]

Thanks epixoip

The original password I was trying to crack was "/\rob"

I used oclHashcat64.exe -m 1000 -w 3 -a 3 D0940B824EEB5962029DB6461D46C667 ?s?s?l?l?l

Ahhh got you, got ntlm of "/\\rob" and it worked. (escape the escape char.)

oclHashcat64.exe -m 1000 -w 3 -a 3 5FAFC6A013B1B22FF992E94AA2AB8D64 ?s?s?l?l?l

Thanks for the help

Cheers

Rob.