mscash2 - can't find password in dictionary

[jacobsh]

Hi.

I have a domain user and cached password from windows 10. I run the following command in hashcat:

hashcat64.exe -m 2100 $DCC2$10240#user#hash myDictionary.txt


I have put the hashed password in the dictionary, but when hashcat is done it has not found the password. If I hash the password manually (using passlib for python) with the username as a salt, I get the correct hash.

Am I missing something? Thanks in advance.

Regards
Jacob

[jacobsh]

It looks like hashcat is limiting DCC2 to 15 character passwords. It works fine as long as I keep the password 15 characters or less, but once I go above that the password is not found.

Is this a deliberate limitation?

EDIT: Seems like a deliberate limitation: https://www.notsosecure.com/maximum-pass...h-reached/

[Mem5]

EDIT: Seems like a deliberate limitation: https://www.notsosecure.com/maximum-pass...h-reached/

It's a article from 2013, and using an old version of hashcat.
We should check with the latest version.

[jacobsh]

EDIT: Seems like a deliberate limitation: https://www.notsosecure.com/maximum-pass...h-reached/

It's a article from 2013, and using an old version of hashcat.
We should check with the latest version.

You are correct, I was using an older version of hashcat *facepalm*
Using the latest version it correctly identifies the password.

Thank you.