7Zip hash woes
#11
(11-14-2017, 12:19 AM)philsmd Wrote: If you run hashcat again we might get the error message we need (without that long hash within the line).

This is just a temporarily fix for the error-message-problem. A proper fix would somehow truncate the hash to a fixed size.

After we have the error message, we might understand what the real problem is.

Well, that fixed the error message problem, and hints to the issue. 


Code:
./hashcat.exe -O -w1 -m11600 -a3 test.hash rockyou.txt
hashcat (v4.0.1-10-gea5425b3+) starting...

OpenCL Platform #1: Advanced Micro Devices, Inc.
================================================
* Device #1: Tahiti, 2816/3072 MB allocatable, 28MCU
* Device #2: AMD Phenom(tm) II X6 1055T Processor, skipped.

C:\msys64\home\XXX\hashcat/OpenCL/m11600-optimized.cl: Optimized OpenCL kernel requested but not needed - falling back to pure OpenCL kernel
Hash 'test.hash': Line-length exception
No hashes loaded.

Started: Mon Nov 13 17:26:07 2017
Stopped: Mon Nov 13 17:26:09 2017
#12
hashcat cannot find your "test.hash" file.
#13
(11-14-2017, 01:49 AM)undeath Wrote: hashcat cannot find your "test.hash" file.

ooopssss.... Forgot what directory I was in.  

See below for the real answer:

Code:
$ ./hashcat.exe -O -w1 -m11600 -a3 ../out.hash ../rockyou.txt
hashcat (v4.0.1-10-gea5425b3+) starting...

OpenCL Platform #1: Advanced Micro Devices, Inc.
================================================
* Device #1: Tahiti, 2816/3072 MB allocatable, 28MCU
* Device #2: AMD Phenom(tm) II X6 1055T Processor, skipped.

C:\msys64\home\XXX\hashcat/OpenCL/m11600-optimized.cl: Optimized OpenCL kernel requested but not needed - falling back to pure OpenCL kernel
Hashfile '../out.hash' on line 1: Salt-value exception
No hashes loaded.

Started: Mon Nov 13 18:12:55 2017
Stopped: Mon Nov 13 18:12:55 2017
#14
damn. salt-value exception could happen in several situations. It seems there is either something wrong with your hash or the hashcat parser for some strange reason (mistakenly?) rejects it.

If you can please share the hash in a private message (not here, because posting hashes is not allowed within the forum). I might be able to help to see where exactly it got rejected and what the reason for this rejection was.
Ideally, the parser should have more and different error messages such that it is easier to understand which "field" or condition is responsible for this behaviour within the parser.
#15
(11-14-2017, 10:40 AM)philsmd Wrote: If you can please share the hash in a private message (not here, because posting hashes is not allowed within the forum). I might be able to help to see where exactly it got rejected and what the reason for this rejection was.

PM sent.
#16
(11-14-2017, 10:40 AM)philsmd Wrote: damn. salt-value exception could happen in several situations. It seems there is either something wrong with your hash or the hashcat parser for some strange reason (mistakenly?) rejects it.

It looks like the hash was ok but the parser in hashcat was the problem.  philsmd was able to provide a patch and it tested successfully.  I created a github issue here:

https://github.com/hashcat/hashcat/issues/1450

Everything is working great now, thanks for all the help!