hashcat as hash validator
#1
Hello,

Is it possible to run hashcat just to verify the hashlist file - check if every hash has the correct format for the hash type?

Thanks
Reply
#2
You can. Check the exit status code and/or output, eg: "no hashes loaded", "hashfile empty or corrupt" etc.
Reply
#3
Thanks.

My use case required to validate hashes and do it without any need for installed drivers.
I sucessfully patched hashcat to skip opencl init and now it works great as hash format validator.
Reply
#4
Nice! Are you able to share it with community and/or the fork existing source code?
Reply
#5
Yeah, it is here (I can possibly a special repo for it)
https://github.com/nesfit/fitcrack/tree/...hvalidator

Here is exact small and bit hacky patch how to do it:
https://github.com/nesfit/fitcrack/blob/...ator.patch

In fitcrack, we use it as a backed tool on a server to verify hashes (and we want to do so without opencl, etc), so user can see if entered hash is correct or not immediately.

So output of our "hashvalidator" has the format:
HASH OK
or
HASH Token length exception, etc..

I think this could be upstreamable as --verify-hashes-only. Do you think it could be useful for the community?
Reply