Posts: 621
Threads: 57
Joined: May 2010
07-02-2010, 06:12 AM
(This post was last modified: 07-02-2010, 06:13 AM by mastercracker.)
I got this using version 0.20 and replicated in version 0.21. I was doing an attack with 2 dictionary combined and I got many cracked hashes like if they were empty passwords but they are not. I don't know the exact passwords so I can't tell what it is supposed to be. The first dictionary contains some symbols like quotation mark. I suspect that if a password start with one of them (symbol), it might cause this behavior. Here's some Hash:Salt that gives the bug:
Code:
c19ff8f18cf7ccfadcc670c3c56c3501:df
6b04def9deb2b23fb554db293184d3cb:c0
406a9f60e69dad42e7b7630d1a218083:c1
7f7acdcd59f86d749b8533d0e211f6cb:10
6b455bf19be4c1e7bde2336479ca8b68:5d
f282e979b7db7a3ef6414fb8b0593186:07
c7f374a507f05e51f1a8e413d242d314:a3
a8137cb9554e8bcde4e3494cc65f796a:b6
04345616b76c935c36a0aa47cdde3ec2:4a
d85b5749f1f17cc01fed1c021a747d2a:63
c89063a9a9a809e10a0cd630f2775aba:a1
f6ac9b6f4c97fdc396b87fc0669e199e:b1
b190aa62b67345a0daceea3a90a7c0ec:65
Posts: 5,185
Threads: 230
Joined: Apr 2010
need a dictionary to reproduce. you are using -m 2 mode?
Posts: 621
Threads: 57
Joined: May 2010
(07-02-2010, 07:34 AM)atom Wrote: need a dictionary to reproduce. you are using -m 2 mode?
Yes, it was mode 2 on OclHashcat. One of the dictionaries is about 100 Mb so I don't think I could attach it to a post. I am currently trying to find the real password of some of those hashes with PasswordsPro but it's combinatory attack is quite slow on 1 CPU.
Posts: 5,185
Threads: 230
Joined: Apr 2010
ok. i also tried it with some of my dictionaries but none of them found a password.
Posts: 5,185
Threads: 230
Joined: Apr 2010
root@sf:~/oclHashcat-0.22# echo aaa > word
root@sf:~/oclHashcat-0.22# cat word
aaa
root@sf:~/oclHashcat-0.22# echo -n aaaaaaaaa | md5sum
552e6a97297c53e592208cf97fbb3b60 -
root@sf:~/oclHashcat-0.22# echo 552e6a97297c53e592208cf97fbb3b60 > hash
root@sf:~/oclHashcat-0.22# cat hash
552e6a97297c53e592208cf97fbb3b60
root@sf:~/oclHashcat-0.22# ./oclHashcat64.bin -m 1 hash word word -e word -o x
root@sf:~/oclHashcat-0.22# cat x
552e6a97297c53e592208cf97fbb3b60:aaa:aaaaaa
root@sf:~/oclHashcat-0.22# ./oclHashcat64.bin -m 2 hash word word -e word -o x
root@sf:~/oclHashcat-0.22# cat x
552e6a97297c53e592208cf97fbb3b60:aaa:aaaaaa
hm, looks good for me
Posts: 621
Threads: 57
Joined: May 2010
I will try the following in order to isolate the bug. I will split the 100 Mb dictionary in several small ones and try them until one of the hashes is cracked. Then I will split that specific subdictionary in small parts until it reach a size that I can post. What is the maximal size of attachment?
Posts: 5,185
Threads: 230
Joined: Apr 2010
not sure. if it does not fit, use rapidshare or something similar
Posts: 621
Threads: 57
Joined: May 2010
Well, I really don't know what's going on. I was not able to reproduce the problem with the split dictionary so I tried the previous full attack and was not able to reproduce it again. Hashcat was running at the same time as OclHascat the last time I had the bug so I tried that as well without success. I have no clue what happened between yesterday and today. I will repost If I figure out what triggered it but there's nothing to be done right now.
Posts: 5,185
Threads: 230
Joined: Apr 2010
anyway, thanks for reporting! i will also keep an eye on it.
