Posts: 18
Threads: 1
Joined: Jun 2018
06-15-2018, 07:22 AM
Hello,
I am trying to crack an hmac-sha256 hash. This hash is a three separate worded password (abc abc abc). I was wondering if this could be developed, is feasible, or if there is a way, and I just do not know it yet. I have done the combinator attack using two wordlists and the rule to remember and append over the word [Left: $ Ml4, Right: $ ], but all three words need to be different.
Thank you in advance,
vigilantbag [newbie]
Posts: 2,301
Threads: 11
Joined: Jul 2010
06-15-2018, 11:41 AM
(This post was last modified: 06-15-2018, 02:40 PM by undeath.)
You can pipe in the output of combinator3. That's only useful for slow hashes though. You will notice speed decrease with hmac-sha256.
Depending on how big your wordlists are you can pre-generate a new one with the combinations of two and then use that for another combination attack with your third wordlist.
Posts: 18
Threads: 1
Joined: Jun 2018
May I ask, how do I pipe in the output to be used in the same session? And for your second option on pre-generating a new wordlist, I need to use three separate wordlists, giving me three different word sets per candidate, but [left: $ Ml4 and Right: $ ] only give me two different words and a copy.
Posts: 5,185
Threads: 230
Joined: Apr 2010
Code:
./combinator3.bin wordlist1.txt wordlist2.txt wordlist3.txt | ./hashcat -m 10900 hash.txt
Posts: 18
Threads: 1
Joined: Jun 2018
(06-15-2018, 07:42 PM)atom Wrote: Code:
./combinator3.bin wordlist1.txt wordlist2.txt wordlist3.txt | ./hashcat -m 10900 hash.txt
Thank you.
Posts: 18
Threads: 1
Joined: Jun 2018
06-15-2018, 08:19 PM
(This post was last modified: 06-15-2018, 08:32 PM by vigilantbag.)
Is there a way that I can input the space separator rules into the triple combinator? I tried doing -j "$ " and -k "$ " in line after combinator, but before the wordlist files, but it still just appended the candidate words on top of each other like (abcabcabc) rather than (abc abc abc) which is what I am looking for.
Posts: 2,301
Threads: 11
Joined: Jul 2010
(06-15-2018, 07:01 PM)vigilantbag Wrote: And for your second option on pre-generating a new wordlist, I need to use three separate wordlists, giving me three different word sets per candidate, but [left: $ Ml4 and Right: $ ] only give me two different words and a copy.
Any reason you couldn't do that while pre-generating said intermediate wordlist?
Posts: 18
Threads: 1
Joined: Jun 2018
(06-15-2018, 11:51 PM)undeath Wrote: (06-15-2018, 07:01 PM)vigilantbag Wrote: And for your second option on pre-generating a new wordlist, I need to use three separate wordlists, giving me three different word sets per candidate, but [left: $ Ml4 and Right: $ ] only give me two different words and a copy.
Any reason you couldn't do that while pre-generating said intermediate wordlist?
I do not know how to do pre-generate wordlists. My current wordlist (which I am using for all three in the combinator3) is 13Mb.
Posts: 2,301
Threads: 11
Joined: Jul 2010
ok, saving the result of combining such a big wordlist is infeasible. But running that in combinator3 would probably take several years to complete anyway.
Posts: 18
Threads: 1
Joined: Jun 2018
06-16-2018, 12:27 AM
(This post was last modified: 06-16-2018, 12:29 AM by vigilantbag.)
There are a series of hashes that I am trying to crack. To rephrase my original question, here is a completed sample of what I am looking for:
{
"id": "[Unimportant]",
"hint": "3 words",
"sample": true,
"prf": "HMAC-SHA256",
"rounds": 100000,
"salt": "e65814e4382759f85550029e723dc7e7",
"derived": "[Hash removed because of rules]",
"pwd": "governor washout beak"
},
The string after "pwd:" is one of the strings I am looking for. You can see that these are three different (spaced) words. I am attempting to do a wordlist (combinator) attack using three identacle wordlists to get me the password of three spaced words.