hashcat Forum › Deprecated; Previous versions › Old oclHashcat Support v
How about RAR5 to hashcat?

Threaded Mode
How about RAR5 to hashcat?
halexan Offline
Junior Member
**
Posts: 28
Threads: 7
Joined: Jan 2016
#1
03-01-2016, 03:48 AM
As we know, oclHashcat-2.10b134 already supported RAR5. Is there any tools to convert RAR5 to hashcat hash formats?

According to what I know, "rar2john" probably do not support RAR5. Am I right?
Find
epixoip Offline
Legend
******
Posts: 2,940
Threads: 12
Joined: May 2012
#2
03-01-2016, 03:57 AM (This post was last modified: 03-01-2016, 04:27 AM by epixoip.)
No that's incorrect, rar2john supports RAR5. The problem is, it is not a standalone utility. It is compiled into john. I've looked at breaking it out into a standalone utility, but it will take a lot of work to do so due to how many john-isms the code uses. Eventually it will need to be done though.
Find
halexan Offline
Junior Member
**
Posts: 28
Threads: 7
Joined: Jan 2016
#3
03-01-2016, 09:28 AM (This post was last modified: 03-01-2016, 11:37 AM by halexan.)
(03-01-2016, 03:57 AM)epixoip Wrote: No that's incorrect, rar2john supports RAR5. The problem is, it is not a standalone utility. It is compiled into john. I've looked at breaking it out into a standalone utility, but it will take a lot of work to do so due to how many john-isms the code uses. Eventually it will need to be done though.

Thank you, epixoip.

I have another question. The example hashes only give a string of hashcat format hash. Where can I get the meaning of each segment? 

For example, RAR5 example hash is:

$rar5$16$74575567518807622265582327032280$15$f8b4064de34ac02ecabfe9abdf93ed6a$8$9843834ed0f7c754

What does every segment means?

$rar5
16------salt length? 
74575567518807622265582327032280------salt?
15------hmac loops?
f8b4064de34ac02ecabfe9abdf93ed6a------init vector? 
8------??
9843834ed0f7c754------psw check?

Are there any descriptions of example hashes?
Find