Hashcat DES restore file manual EDIT

[Clemens]

Hello,

I try to manually edit my restore file for a des crack.
I want to get at ca. 74% progress.
I got e.g. to 75% by editing words_cur to 00 00 00 00 06 00 00 00 (https://hashcat.net/wiki/doku.php?id=restore)
But I fail when e.g. trying e.g. 00 00 00 00 05 00 00 01, it says value to big. As should be clear I don't entirely understand how it works yet...would be nice if some one could enlighten me.

Oh and for completeness this is the command/mask I use:

hashcat -m 14000 hashes.txt -o cracked.txt -a 3 -1 /usr/share/hashcat/charsets/DES_full.charset --hex-charset ?1?1?1?1?1?1?1?1 -w 4 --outfile-format 5

Oh my guess is it has to do with big endian/little endian so a hint in that direction would be nice which format is used...because I get confused when trying things.

[philsmd]

endianness !

If you do not understand the format, you could just use analyze_hc_restore.pl from https://github.com/philsmd/analyze_hc_restore instead (perl must be installed of course)

[Clemens]

OK I'll try the tool...that it was because of endianness I realised after the asking the question, see my last edit (like it always go in forums, the moment you ask a question you realise what the answer might be, just that fraction too late of course).
But I'll try the perl script saves my brain a bit with all the bitswaps.

Many thanks!