[SOLVED]What am i doing wrong? no commands work
#1
i am trying to crack an old office doc (word 97) hash however no combination of commands seem to work, i get all these errors:
Code:
C:\Users\XXXX\XXXX\XXXXX\hashcat-4.0.1\hashcat-4.0.1>Hashcat6
4.exe -a 3 -m 9700 --username --status -o FOUND.txt jhash.txt
hashcat (v4.0.1) starting...

* Device #1: WARNING! Kernel exec timeout is not disabled.
            This may cause "CL_OUT_OF_RESOURCES" or related errors.
            To disable the timeout, see: https://hashcat.net/q/timeoutpatch
OpenCL Platform #1: NVIDIA Corporation
======================================
* Device #1: GeForce GTX 750 Ti, 256/1024 MB allocatable, 5MCU

C:\Users\XXXX\XXXX\XXXXX\hashcat-4.0.1\hashcat-4.0.1/OpenCL/m09700_a3-optimized.cl: Pure OpenCL kernel not found,
falling back to optimized OpenCL kernel
Hashfile 'jhash.txt' on line 1 (S.doc:$oldoffice$1*971400076ab82dd68XXXXXXXXXXXXXd1*49987289XXXXXXXXXXXXXa67b6747abc*6824aa13d09f0e8fXXXXXXXXXXXXXX8a:::::S.doc): Line-length exception
No hashes loaded.

Started: Mon Nov 20 16:24:13 2017
Stopped: Mon Nov 20 16:24:13 2017

C:\Users\XXXX\XXXX\XXXXX\hashcat-4.0.1\hashcat-4.0.1>Hashcat64.exe -a 3 -m 9700 --username --status -o FOUND.txt
jhash.txt
hashcat (v4.0.1) starting...

* Device #1: WARNING! Kernel exec timeout is not disabled.
            This may cause "CL_OUT_OF_RESOURCES" or related errors.
            To disable the timeout, see: https://hashcat.net/q/timeoutpatch
OpenCL Platform #1: NVIDIA Corporation
======================================
* Device #1: GeForce GTX 750 Ti, 256/1024 MB allocatable, 5MCU

C:\Users\XXXX\XXXX\XXXXX\hashcat-4.0.1\hashcat-4.0.1/OpenCL/m09700_a3-optimized.cl: Pure OpenCL kernel not found,
falling back to optimized OpenCL kernel
Failed to parse hashes using the 'native hashcat' format.
No hashes loaded.

Started: Mon Nov 20 16:42:53 2017
Stopped: Mon Nov 20 16:42:54 2017

C:\Users\XXXX\XXXX\XXXXX\hashcat-4.0.1\hashcat-4.0.1>Hashcat64.exe -d 2 -a 3 -m 9700 --username --status -o FOUND
.txt jhash.txt
hashcat (v4.0.1) starting...

No devices found/left.

Started: Mon Nov 20 16:45:48 2017
Stopped: Mon Nov 20 16:45:48 2017

C:\Users\XXXX\XXXX\XXXXX\hashcat-4.0.1\hashcat-4.0.1>Hashcat64.exe -d 1 -a 3 -m 9700 --username --status -o FOUND
.txt jhash.txt
hashcat (v4.0.1) starting...

* Device #1: WARNING! Kernel exec timeout is not disabled.
            This may cause "CL_OUT_OF_RESOURCES" or related errors.
            To disable the timeout, see: https://hashcat.net/q/timeoutpatch
OpenCL Platform #1: NVIDIA Corporation
======================================
* Device #1: GeForce GTX 750 Ti, 256/1024 MB allocatable, 5MCU

C:\Users\XXXX\XXXX\XXXXX\hashcat-4.0.1\hashcat-4.0.1/OpenCL/m09700_a3-optimized.cl: Pure OpenCL kernel not found,
falling back to optimized OpenCL kernel
Failed to parse hashes using the 'native hashcat' format.
No hashes loaded.

Started: Mon Nov 20 16:46:03 2017
Stopped: Mon Nov 20 16:46:03 2017

C:\Users\XXXX\XXXX\XXXXX\hashcat-4.0.1\hashcat-4.0.1>Hashcat64.exe -d 3 -a 3 -m 9700 --username --status -o FOUND
.txt jhash.txt
hashcat (v4.0.1) starting...

No devices found/left.

Started: Mon Nov 20 16:46:19 2017
Stopped: Mon Nov 20 16:46:19 2017

C:\Users\XXXX\XXXX\XXXXX\hashcat-4.0.1\hashcat-4.0.1>Hashcat64.exe -a 3 -m 9700 --username --status -o FOUND.txt
jhash.txt
hashcat (v4.0.1) starting...

* Device #1: WARNING! Kernel exec timeout is not disabled.
            This may cause "CL_OUT_OF_RESOURCES" or related errors.
            To disable the timeout, see: https://hashcat.net/q/timeoutpatch
OpenCL Platform #1: NVIDIA Corporation
======================================
* Device #1: GeForce GTX 750 Ti, 256/1024 MB allocatable, 5MCU

C:\Users\XXXX\XXXX\XXXXX\hashcat-4.0.1\hashcat-4.0.1/OpenCL/m09700_a3-optimized.cl: Pure OpenCL kernel not found,
falling back to optimized OpenCL kernel
Failed to parse hashes using the 'native hashcat' format.
No hashes loaded.

Started: Mon Nov 20 16:46:29 2017
Stopped: Mon Nov 20 16:46:29 2017
Reply
#2
The format of your hashes should be only like this:
Code:
$oldoffice$1*971400076ab82dd68XXXXXXXXXXXXXd1*49987289XXXXXXXXXXXXXa67b6747abc*6824aa13d09f0e8fXXXXXXXXXXXXXX8a
e.g. they should not contain any file names (neither at the start, nor at the end)

You can see a list of example hashes here: https://hashcat.net/wiki/example_hashes

The cmd that should work (with modified hash.txt file like mentioned above) is:
Code:
hashcat64.exe -m 9700 -a 3 -w 3 --increment -2 ?l?u?d -o FOUND.txt jhash.txt ?2?2?2?2?2?2?2


Also note: you might also consider using the collider modes -m 9710 (with mask ?b?b?b?b?b) and -m 9720
Reply
#3
(11-21-2017, 09:53 AM)philsmd Wrote: The format of your hashes should be only like this:
Code:
$oldoffice$1*971400076ab82dd68XXXXXXXXXXXXXd1*49987289XXXXXXXXXXXXXa67b6747abc*6824aa13d09f0e8fXXXXXXXXXXXXXX8a
e.g. they should not contain any file names (neither at the start, nor at the end)

You can see a list of example hashes here: https://hashcat.net/wiki/example_hashes

The cmd that should work (with modified hash.txt file like mentioned above) is:
Code:
hashcat64.exe -m 9700 -a 3 -w 3 --increment -2 ?l?u?d -o FOUND.txt jhash.txt ?2?2?2?2?2?2?2


Also note: you might also consider using the collider modes -m 9710 (with mask ?b?b?b?b?b) and -m 9720

THANK YOU!!
i am now getting information, it fully cracked the hash
Reply