DCC2 / MSCASH2 --> not working
#1
Hi,

I'm having trouble "cracking" my own cachedump with domain creds.

I got this back;

user:$DCC2$#user#7eb833ab3bddade058de4bc672debdde:fulldomainj: shortdomain (added a space because of emoji.. Smile) Also not sure what that j is doing there but the cachedump, dumped it like that.

I tried with hashcat;

hashcat -m 2100 -a 0 hash wordlist --force
hashcat (v3.5.0) starting...

Hashfile 'hash' on line 1 (user:$DCC2$#user#7eb833ab3bddade058de4bc672debdde:fulldomainjConfusedhorttdomain): Line-length exception
Parsing Hashes: 0/1 (0.00%)...No hashes loaded.

Also tried John;

john hashfile --w=wordlist --format=mscash2
Using default input encoding: UTF-8
Loaded 1 password hash (mscash2, MS Cache Hash 2 (DCC2) [PBKDF2-SHA1 128/128 SSE2 4x2])
....
....
Completed not cracked.


Any idea's?
Reply
#2
(01-18-2019, 10:19 PM)metalg Wrote: Hi,

I'm having trouble "cracking" my own cachedump with domain creds.

I got this back;

user:$DCC2$#user#7eb833ab3bddade058de4bc672debdde:fulldomainj: shortdomain  (added a space because of emoji.. Smile) Also not sure what that j is doing there but the cachedump, dumped it like that.

I tried with hashcat;

hashcat -m 2100 -a 0 hash wordlist --force
hashcat (v3.5.0) starting...

Hashfile 'hash' on line 1 (user:$DCC2$#user#7eb833ab3bddade058de4bc672debdde:fulldomainjConfusedhorttdomain): Line-length exception
Parsing Hashes: 0/1 (0.00%)...No hashes loaded.

Also tried John;

john hashfile --w=wordlist --format=mscash2
Using default input encoding: UTF-8
Loaded 1 password hash (mscash2, MS Cache Hash 2 (DCC2) [PBKDF2-SHA1 128/128 SSE2 4x2])
....
....
Completed not cracked.



Any idea's?

edited the hash for hashcat too:

$DCC2$#user#7eb833ab3bddade058de4bc672debdde

which seems to load, but now I'm stuck at Smile

/usr/share/hashcat/OpenCL/m02100.cl: No such file or directory
Reply
#3
(01-18-2019, 11:42 PM)metalg Wrote: hashcat -m 2100 -a 0 hash wordlist --force

Why are you using --force and hashcat 3.5.0?
Reply
#4
(01-19-2019, 11:05 PM)slyexe Wrote:
(01-18-2019, 11:42 PM)metalg Wrote: hashcat -m 2100 -a 0 hash wordlist --force

Why are you using --force and hashcat 3.5.0?

Hi,

Because it threw an error and said, try using --force ^^
I'll try updating hashcat.
Reply
#5
using --force will just ignore the error, not fix it.
Reply