hashcat Forum › Support › hashcat v
Weird client behaviour in Brain Attack

Threaded Mode
Weird client behaviour in Brain Attack
NoReply Offline
Member
***
Posts: 107
Threads: 6
Joined: Sep 2018
#1
02-19-2019, 02:16 PM (This post was last modified: 02-19-2019, 02:17 PM by NoReply.)
I am currently running a brain attack in the following setup:

- Hashcat version: 5.1.0
- Offline 10G LAN network
- 1 dedicated Brain Server Machine (Specs: Ryzen 2400G, 32 GB RAM, Windows 10)
- 3 Brain Client Machines (Specs: i7-4790k, 32 GB RAM, RTX 2080 Ti FE, Windows 7/10)
- Target Hash mode: 14600 LUKS cbc-essiv: sha256
- Single Target
- brain-client-features=3

Two clients are running separate mask-attacks, which already ran upon a certain point, but were aborted.
The other client is running a dictionary attack. Obviously, the two clients running the mask attack are only getting rejected batches upon a certain point. Shortly after they actually start doing some work, they stop with their brain link saying "receiving" without any activity. The client application itself is responsive, i.e. pressing s still gives a status, but if I want to quit, they hang. The dictionary attack keeps running smooth and after it finishes, the mask-attacks start running again.

Did anyone observe something similar?

Best,
NoReply
Find
Reply
atom Offline
Administrator
*******
Posts: 5,185
Threads: 230
Joined: Apr 2010
#2
02-20-2019, 08:47 AM
Please provide all information like commandline setup and files so that we can reproduce locally.
Website Find
Reply
NoReply Offline
Member
***
Posts: 107
Threads: 6
Joined: Sep 2018
#3
02-20-2019, 12:43 PM (This post was last modified: 02-20-2019, 12:44 PM by NoReply.)
Did a new test with these settings:

Server Params: hashcat64.exe --brain-server --brain-password <password> --brain-port 12345

Client Params (Dictionary): hashcat64.exe -m 14600 -a 0 -O -w 3 -z --brain-host 192.168.4.8 --brain-password <password> --brain-port 12345 --brain-client-features 3 <target_luks_file> <dictionary>
Dictionary: https://hashes.org/download.php?foundId=...&year=2019

Client Params (Mask 1): hashcat64.exe -m 14600 -a 3 -O -w 4 -z --brain-host 192.168.4.8 --brain-password <password> --brain-port 12345 --brain-client-features 3 <target_luks_file> ?d?d?d?d?d?d?d?d

Client Params (Mask 2): hashcat64.exe -m 14600 -a 3 -O -w 4 -z --brain-host 192.168.4.8 --brain-password <password> --brain-port 12345 --brain-client-features 3 <target_luks_file> ?a?a?a?a

The attacks were started in that order and I cleared the Brain Longterm Memory by removing all brain.* files. Now all clients appear to block each other, none of them is running anymore...

Also attached full Server output and status of the clients. I will leave the files up for approx 24 hours: https://www.dropbox.com/s/0b53bat5txyz2h...s.zip?dl=1
Find
Reply