hashcat Forum › Support › hashcat v
Weird result with MSSQL 2000 mode 131

Threaded Mode
Weird result with MSSQL 2000 mode 131
Mem5 Offline
Posting Freak
*****
Posts: 803
Threads: 135
Joined: Feb 2011
#1
08-18-2019, 10:07 PM (This post was last modified: 08-18-2019, 10:12 PM by Mem5.)
Hi,
I have a MSSQL 2000 hash - mode 131 - This hash does NOT exist :
0x040016460666FF8664F8FF8F14400064F44FFF6FFF06044FF61FFF8664F8FF8F14400064F44FFF6FFF06044FF61F

When cracked, hashcat v5.1.0 displays :
0x0400164606660000000000000000000000000000000000000000FF8664F8FF8F14400064F44FFF6FFF06044FF61F:password

Not the same hash! Why does hashcat replaces the red part with zeros?

Thanks!
Find
Reply
undeath Offline
Sneaky Bastard
******
Posts: 2,301
Threads: 11
Joined: Jul 2010
#2
08-18-2019, 10:39 PM (This post was last modified: 08-18-2019, 10:39 PM by undeath.)
A MSSQL 2000 hash consists of two hashes, one with the correct case and one with all upper case letters. Hashcat probably simply ignores one of them.

see https://www.theregister.co.uk/2002/07/08...passwords/
Find
Reply
Mem5 Offline
Posting Freak
*****
Posts: 803
Threads: 135
Joined: Feb 2011
#3
08-18-2019, 11:09 PM (This post was last modified: 08-19-2019, 10:50 AM by Mem5.)
I wonder why it does not copy the hash itself in the result.

Will read.
Thanks.
Find
Reply
atom Offline
Administrator
*******
Posts: 5,185
Threads: 230
Joined: Apr 2010
#4
08-22-2019, 11:25 AM
You're right, it should. I've never seen this block being filled with data (not being zero). Please create GitHub issue.
Website Find
Reply