Hashcat restore file
#1
Hi!

I'm trying to create a Python script to manage Hashcat.

My script launches Hashcat (with subprocess.Popen) from another directory in Windows.
So something like that :
C:/hashcat/hashcat64.exe --session "foo" -m 0 --potfile-path "foo.pot" -o result.txt hashes.txt...

I can't change restore file path with Hashcat so it stays in Hashcat directory (C:\hashcat\).

The Hashcat status just before I kill the process :

Code:
Session.Name...: foo
Status.........: Running
Input.Mode.....: Mask (?a?a?a?a?a) [5]
Hash.Target....: File (hashes.txt)
Hash.Type......: MD5
Time.Started...: Mon Oct 10 14:03:45 2016 (39 secs)
Time.Estimated.: Mon Oct 10 14:07:18 2016 (3 mins, 3 secs), but limit exceeded
Speed.Dev.#1...: 26629.7 kH/s (1.77ms)
Recovered......: 7/2933 (0.24%) Digests, 0/1 (0.00%) Salts
Recovered/Time.: CUR:N/A,N/A,N/A AVG:0.00,0.00,0.00 (Min,Hour,Day)
Progress.......: 2862070510/7737809375 (36.99%)
Rejected.......: 0/2862070510 (0.00%)
[b]Restore.Point..: 30127058/81450625 (36.99%)[/b]

I try to relaunch it with :
C:/hashcat/hashcat64.exe --session "foo" --restore

and the restore point jump from 36.99% to 23.69%:

Code:
[b]INFO: Changing current working directory to the path found within the .restore file: 'C:\foo\bar\'[/b]

hashcat (v3.10) starting in restore-mode...



Counting lines in hashes.txt
                         
Parsed Hashes: 0/2933 (0.00%)
                         
Parsed Hashes: 2933/2933 (100.00%)
                               
Removing duplicate hashes...
                         
Comparing hashes with potfile entries...
                                     
Structuring salts for cracking task...
                                   
Generating bitmap tables with 16 bits...
                                     
OpenCL Platform #1: Intel(R) Corporation

========================================

- Device #1: Intel(R) Core(TM) i5-6200U CPU @ 2.30GHz, 1023/4095 MB allocatable, 2MCU



Hashes: 2933 hashes; 2933 unique digests, 1 unique salts

Bitmaps: 16 bits, 65536 entries, 0x0000ffff mask, 262144 bytes, 5/13 rotates

Applicable Optimizers:

* Zero-Byte

* Precompute-Init

* Precompute-Merkle-Demgard

* Meet-In-The-Middle

* Early-Skip

* Not-Salted

* Not-Iterated

* Single-Salt

* Brute-Force

* Raw-Hash

Watchdog: Temperature abort trigger disabled

Watchdog: Temperature retain trigger disabled



Initializing device kernels and memory...
                                     
INFO: Removed 7 hashes found in pot file


                                                       

Session.Name...: foo
Status.........: Running
Input.Mode.....: Mask (?a?a?a?a?a) [5]
Hash.Target....: File (hashes.txt)
Hash.Type......: MD5
Time.Started...: Mon Oct 10 14:04:18 2016 (4 secs)
Time.Estimated.: Mon Oct 10 14:07:44 2016 (3 mins, 22 secs), but limit exceeded
Speed.Dev.#1...: 29210.9 kH/s (1.49ms)
Recovered......: 7/2933 (0.24%) Digests, 0/1 (0.00%) Salts
Recovered/Time.: CUR:N/A,N/A,N/A AVG:0.00,0.00,0.00 (Min,Hour,Day)
Progress.......: 1833099480/7737809375 (23.69%)
Rejected.......: 0/1833099480 (0.00%)
[b]Restore.Point..: 19295784/81450625 (23.69%)[/b]

Someone have an explanation why I can't restore in the same point?
And why I can't change restore file path?

Thank you
#2
This has been answered before. The reason for it jumping back is because of the way hashcat works internally. It was the last point where it could start from. 

Search the forum and wiki if you want more details.
#3
(10-10-2016, 04:17 PM)coolbry95 Wrote: This has been answered before. The reason for it jumping back is because of the way hashcat works internally. It was the last point where it could start from. 

Search the forum and wiki if you want more details.

Ok thanks, so I can't do anything to improve that?
I read a lot about Hashcat but I've never found anything about it before. Could you give me some links?