CUDA Error

[endiz]

Hey guys, first off I just like to thank atom and the gang for creating a great community for hash cracking.

I'm trying to bruteforce a test NTLM hash using cudaHashcat-plus, and I created a dictionary and ruleset using the method mentioned here: http://hashcat.net/forum/thread-541-post...ml#pid2548

I'm receiving the following error after executing this command:

cudaHashcat-plus64.exe -m 1000 --rules-file 4char.rule --outfile cracked.txt 4char.txt

cudaHashcat-plus v0.07 by atom starting...

Hashes: 2
Unique digests: 2
Bitmaps: 8 bits, 256 entries, 0x000000ff mask, 1024 bytes
Rules: 15018570
GPU-Loops: 128
GPU-Accel: 8
Password lengths range: 1 - 15
Platform: NVidia compatible platform found
Watchdog: Temperature limit set to 90c
Device #1: GeForce GTX 460, 1024MB, 1640Mhz, 7MCU
Device #1: Allocating 8MB host-memory
ERROR: ERROR: cuMemAlloc() 2

I used maskprocessor to create the ruleset and dictionary files:

mp64 -1 ?l?d?u $?1 > 4char.rule
print "2 Character"
mp64 -1 ?l?d?u $?1$?1 >> 4char.rule
print "3 Character"
mp64 -1 ?l?d?u $?1$?1$?1 >> 4char.rule
print "4 Character"
mp64 -1 ?l?d?u $?1$?1$?1$?1 >> 4char.rule
pause

mp64 -1 ?l?d?u ?1 > 4char.txt
print "2 Character"
mp64 -1 ?l?d?u ?1?1 >> 4char.txt
print "3 Character"
mp64 -1 ?l?d?u ?1?1?1 >> 4char.txt
print "4 Character"
mp64 -1 ?l?d?u ?1?1?1?1 >> 4char.txt
pause

Anyone got any tips?

[atom]

waaa, you dont need to do that. use -a 6 mode. this attack-mode was specifically added for the thing you want to do. you can use it like: -a 6 dict -1 ?l?d?s ?1?1?1?1

oh and btw, the cuMemAlloc() is correct. if you have just 1GB gpu memory, you can not put in 15018570 which each requires 64 byte. oclHashcat also needs space for dictionary, hashlist, resultlist, bitmaps, etc...

[endiz]

Thanks. I tried this and I get usage output:

cudaHashcat-plus64.exe -m 1000 -a 6 -1 ?l?d?u ?1?1?1?1 -o cracked.txt ntlm.txt
Usage: cudaHashcat-plus64.exe [options]... hash|hashfile|hccapfile [dictionary|mask|directory]...

Try --help for more help.

[atom]

no, you have to write it this way:

cudaHashcat-plus64.exe -m 1000 -a 6 -1 ?l?d?u -o cracked.txt ntlm.txt ?1?1?1?1

[endiz]

Hmm.. still get the same usage output.

C:\oclHashcat-plus-0.07>cudaHashcat-plus64.exe -m 1000 -a 6 -1 ?l?d?u -o cracked.txt ntlm.txt ?1?1?1?1
Usage: cudaHashcat-plus64.exe [options]... hash|hashfile|hccapfile [dictionary|m
ask|directory]...

Try --help for more help.


Seems like it's the -6 attack mode. When I remove it I get the following output:

cudaHashcat-plus64.exe -m 1000 -o cracked.txt ntlm.txt ?1?1?1?1
cudaHashcat-plus v0.07 by atom starting...

Hashes: 2
Unique digests: 2
Bitmaps: 8 bits, 256 entries, 0x000000ff mask, 1024 bytes
Rules: 1
GPU-Loops: 128
GPU-Accel: 8
Password lengths range: 1 - 15
Platform: NVidia compatible platform found
Watchdog: Temperature limit set to 90c
Device #1: GeForce GTX 460, 1024MB, 1640Mhz, 7MCU
Device #1: Allocating 8MB host-memory
Device #1: Kernel ./kernels/4318/m1000_a0.sm_21.64.cubin

ERROR: ?1?1?1?1: No such file or directory

[mastercracker]

You and Atom missed one parameter: the dictionary

Use this:

cudaHashcat-plus64.exe -m 1000 -a 6 -1 ?l?d?u -o cracked.txt ntlm.txt dic.txt ?1?1?1?1

[endiz]

You and Atom missed one parameter: the dictionary

Use this:

cudaHashcat-plus64.exe -m 1000 -a 6 -1 ?l?d?u -o cracked.txt ntlm.txt dic.txt ?1?1?1?1

Thanks MC. I will try this when I get home tonight.

I'm assuming this will brute force from a - ZZZZZZZZ? Also, do I need to populate anything in the dic.txt file?

[endiz]

Hmm, it starting now but I can't crack a simple NTLM password like 'welcome'. I appreciate all the help guys, can I buy you a virtual (paypal) beer?

C:\Users\endiz\Desktop\oclHashcat-plus-0.07>type ntlm.txt
674E48B68C5CD0EFD8F7E5FAA87B3D1E
C:\Users\endiz\Desktop\oclHashcat-plus-0.07>type dict2.txt
?1?1?1?1?1

C:\Users\endiz\Desktop\oclHashcat-plus-0.07>cudaHashcat-plus64.exe -m 1000 -a 6 -1 ?l ntlm.txt dict2.txt ?1?1?1?1?1
cudaHashcat-plus v0.07 by atom starting...

Hashes: 1
Unique digests: 1
Bitmaps: 8 bits, 256 entries, 0x000000ff mask, 1024 bytes
GPU-Loops: 128
GPU-Accel: 8
Password lengths range: 1 - 15
Platform: NVidia compatible platform found
Watchdog: Temperature limit set to 90c
Device #1: GeForce GTX 460, 1024MB, 1640Mhz, 7MCU
Device #1: Allocating 8MB host-memory
Device #1: Kernel ./kernels/4318/m1000_a1.sm_21.64.cubin

Scanned dictionary dict2.txt: 11 bytes, 1 words, 11881376 keyspace, starting att
ack...

[s]tatus [p]ause [r]esume [q]uit => s
Status.......: Running
Input.Base...: File (dict2.txt)
Input.Mod....: Mask (?1?1?1?1?1)
Hash.Target..: 674e48b68c5cd0efd8f7e5faa87b3d1e
Hash.Type....: NTLM
Time.Running.: 1 sec
Time.Left....: 58 secs
Time.Util....: 1883.6ms/0.0ms Real/CPU, 0.0% idle
Speed........: 197.5k c/s Real, 193.9k c/s GPU
Recovered....: 0/1 Digests, 0/1 Salts
Progress.....: 372096/11881376 (3.13%)
Rejected.....: 0/372096 (0.00%)
HW.Monitor.#1: 66% GPU, 45c Temp
[s]tatus [p]ause [r]esume [q]uit => s

Status.......: Exhausted
Input.Base...: File (dict2.txt)
Input.Mod....: Mask (?1?1?1?1?1)
Hash.Target..: 674e48b68c5cd0efd8f7e5faa87b3d1e
Hash.Type....: NTLM
Time.Running.: 1 min, 0 secs
Time.Left....: 0 secs
Time.Util....: 60022.8ms/0.0ms Real/CPU, 0.0% idle
Speed........: 197.9k c/s Real, 195.6k c/s GPU
Recovered....: 0/1 Digests, 0/1 Salts
Progress.....: 11881376/11881376 (100.00%)
Rejected.....: 0/11881376 (0.00%)
HW.Monitor.#1: 70% GPU, 47c Temp

Started: Wed Jan 11 18:03:08 2012
Stopped: Wed Jan 11 18:04:08 2012

[restrictedbytes]

dict2.txt needs to be a wordlist i.e. rockyou.txt

[endiz]

I want to bruteforce though with no wordlist. I've already tried rockyou on this set with a bunch of masks using a different tool (without GPU acceleration).

When I put the password in the dictionary, it still doesn't recover the hash using the method mentioned above. For speed, I'm trying to track the hash of 'a'.

C:\Users\endiz\Desktop\oclHashcat-plus-0.07>type dict2.txt
a

C:\Users\endiz\Desktop\oclHashcat-plus-0.07>type ntlm.txt
186CB09181E2C2ECAAC768C47C729904

C:\Users\endiz\Desktop\oclHashcat-plus-0.07>cudaHashcat-plus64.exe -m 1000 -a 6 -1 ?l ntlm.txt dict2.txt ?1
cudaHashcat-plus v0.07 by atom starting...

Hashes: 1
Unique digests: 1
Bitmaps: 8 bits, 256 entries, 0x000000ff mask, 1024 bytes
GPU-Loops: 128
GPU-Accel: 8
Password lengths range: 1 - 15
Platform: NVidia compatible platform found
Watchdog: Temperature limit set to 90c
Device #1: GeForce GTX 460, 1024MB, 1640Mhz, 7MCU
Device #1: Allocating 8MB host-memory
Device #1: Kernel ./kernels/4318/m1000_a1.sm_21.64.cubin

Scanned dictionary dict2.txt: 2 bytes, 1 words, 1 keyspace, starting attack...


Status.......: Exhausted
Input.Base...: File (dict2.txt)
Input.Mod....: Mask ($1)
Hash.Target..: 186cb09181e2c2ecaac768c47c729904
Hash.Type....: NTLM
Time.Running.: 1 sec
Time.Left....: 0 secs
Time.Util....: 1008.3ms/0.0ms Real/CPU, 0.0% idle
Speed........: 1 c/s Real, 0 c/s GPU
Recovered....: 0/1 Digests, 0/1 Salts
Progress.....: 1/1 (100.00%)
Rejected.....: 0/1 (0.00%)
HW.Monitor.#1: 0% GPU, 38c Temp

Started: Wed Jan 11 19:19:50 2012
Stopped: Wed Jan 11 19:19:51 2012

C:\Users\endiz\Desktop\oclHashcat-plus-0.07>