Simple Dictionary Test

[salty]

Hi,

I'm trying out a simple dictionary attack test. I have an Ethereum wallet I just created with Mist. I used that John the ripper python script to get the hash and put it in hash3.txt. I have the password followed by a newline in guesses.txt.  I run this command:

Code:

hashcat -m 15700 hash3.txt guesses.txt

And it appears to load the dictionary but doesn't seem to succeed. Does anyone have any suggestions?

Code:

hashcat (v5.1.0) starting... OpenCL Platform #1: Apple ========================= * Device #1: Intel(R) Core(TM) i9-9980HK CPU @ 2.40GHz, skipped. * Device #2: Intel(R) UHD Graphics 630, 384/1536 MB allocatable, 24MCU * Device #3: AMD Radeon Pro 5500M Compute Engine, 1020/4080 MB allocatable, 24MCU Hashes: 1 digests; 1 unique digests, 1 unique salts Bitmaps: 16 bits, 65536 entries, 0x0000ffff mask, 262144 bytes, 5/13 rotates Rules: 1 Applicable optimizers: * Zero-Byte * Single-Hash * Single-Salt Minimum password length supported by kernel: 0 Maximum password length supported by kernel: 256 Watchdog: Hardware monitoring interface not found on your system. Watchdog: Temperature abort trigger disabled. * Device #2: Skipping unstable hash-mode 15700 for this device.             You can use --force to override, but do not report related errors. * Device #3: Skipping unstable hash-mode 15700 for this device.             You can use --force to override, but do not report related errors. Dictionary cache hit: * Filename..: guesses.txt * Passwords.: 1 * Bytes.....: 11 * Keyspace..: 1 Session..........: hashcat                      Status...........: Exhausted Hash.Type........: Ethereum Wallet, SCRYPT Hash.Target......: $ethereum$s*262144*8*1*68d970bdfa9f074c516862b7eaa9...cffa62 Time.Started.....: Tue May 19 22:09:10 2020 (0 secs) Time.Estimated...: Tue May 19 22:09:10 2020 (0 secs) Guess.Base.......: File (guesses.txt) Guess.Queue......: 1/1 (100.00%) Speed.#*.........:        0 H/s Recovered........: 0/1 (0.00%) Digests, 0/1 (0.00%) Salts Progress.........: 0/1 (0.00%) Rejected.........: 0/0 (0.00%) Restore.Point....: 0/1 (0.00%) Started: Tue May 19 22:09:10 2020 Stopped: Tue May 19 22:09:11 2020 [color=#333333][size=small][font=Tahoma, Verdana, Arial, sans-serif]

[/font][/size][/color]

[philsmd]

It's in your output:

Code:

Skipping unstable hash-mode 15700 for this device.

It's literally saying that there is a driver problem with your specific device (Apple driver for AMD GPU and Apple driver for Intel GPU)... You could try to test with your CPU with --opencl-device-types 1

or maybe even better, try to test with a more performant (and not that broken, in terms of OpenCL driver support) GPU e.g. a windows (or even ubuntu linux) system with a modern NVIDIA GPU. but also note that scrypt is most of the time (depends of course on the make/model of the hardware and the amount of hardware) faster on modern CPU. so a modern i9 processor on linux/windows etc would probably be even better

There is little we can do here if the driver doesn't work (but the same code works witch each and every other driver/device/operating system etc)

[salty]

Thanks @philsmd. It doesn't say anything about Device #1 so I assumed that it could work on the CPU since devices 2 and 3 are graphics.

[salty]

When I pass the --opencl-device-types 1 flag, it skips the cpu and of course uses the graphics cards. This makes me think that there is something else going on. 

Code:

hashcat -m 15700 hash3.txt guesses.txt --opencl-device-types 1 hashcat (v5.1.0) starting... OpenCL Platform #1: Apple ========================= * Device #1: Intel(R) Core(TM) i9-9980HK CPU @ 2.40GHz, 8192/32768 MB allocatable, 16MCU * Device #2: Intel(R) UHD Graphics 630, skipped. * Device #3: AMD Radeon Pro 5500M Compute Engine, skipped. Hashes: 1 digests; 1 unique digests, 1 unique salts Bitmaps: 16 bits, 65536 entries, 0x0000ffff mask, 262144 bytes, 5/13 rotates Rules: 1 Applicable optimizers: * Zero-Byte * Single-Hash * Single-Salt Minimum password length supported by kernel: 0 Maximum password length supported by kernel: 256 Watchdog: Hardware monitoring interface not found on your system. Watchdog: Temperature abort trigger disabled. * Device #1: Skipping unstable hash-mode 15700 for this device.             You can use --force to override, but do not report related errors. Dictionary cache built: * Filename..: guesses.txt * Passwords.: 1 * Bytes.....: 11 * Keyspace..: 1 * Runtime...: 0 secs Session..........: hashcat                      Status...........: Exhausted Hash.Type........: Ethereum Wallet, SCRYPT Hash.Target......: $ethereum$s*262144*8*1*68d970bdfa9f074c516862b7eaa9...cffa62 Time.Started.....: Thu May 21 17:11:33 2020 (0 secs) Time.Estimated...: Thu May 21 17:11:33 2020 (0 secs) Guess.Base.......: File (guesses.txt) Guess.Queue......: 1/1 (100.00%) Recovered........: 0/1 (0.00%) Digests, 0/1 (0.00%) Salts Progress.........: 0/1 (0.00%) Rejected.........: 0/0 (0.00%) Restore.Point....: 0/1 (0.00%) Started: Thu May 21 17:11:33 2020 Stopped: Thu May 21 17:11:34 2020 [color=#333333][size=small][font=Tahoma, Verdana, Arial, sans-serif]

[/font][/size][/color]

[philsmd]

did you try to test with the beta version from https://hashcat.net/beta/

[salty]

Thanks! It looks like there is a linux binary and windows executable in there. I'm not seeing a binary for macOS. I will build from master on GitHub and try it out.

[salty]

For the latest if any macOs users are curious

Code:

brew uninstall hashcat brew install hashcat --HEAD

Success!

hashcat -m 15700 hash3.txt guesses.txt --opencl-device-types 1 --show

Where is it storing the result so that --show is required?

For other newbs. I cleared my console too quickly and wanted to run again to see the results. You can run with --potfile-disable to get it to run through the process again: hashcat -m 15700 hash3.txt guesses.txt --opencl-device-types 1 --potfile-disable