[BUG] in POT-Parser for specific entries -> hash:salt:pwpart1:pwpart2
#1
hello everyone

i found a bug in the potfile-parser for entries like this

Code:
hash:salt:pw-part1:pw-part2

where the : is part of already found/known password

using a potfile eg.  with 100 entries, where this with an entry like this is the last entry, results in hashcat only recognizing 99 entries, resulting in "recracking" the already known password, resulting in a second, third, fourth and so on... entry with the same entry.

my potfile is hashtype specific, so with a little help of
Code:
sort, uniq -c and regex
i can tell you the following, the error (probably) occurs only in this style of entry, described obove because 

: inside/outside a salt seems to work normally because i found this style multiple times (but with uniq entries)
 
Code:
hash:salt-part1:salt-part2:password
hash:salt-part1::salt-part2:password
hash:salt-part1:salt-part2::password
hash::salt-part1:salt-part2:password

Hashtype is 2811, dont know wheter or not the saltsize is fixed for this hash or how your parser splits these specific entries, but the error should be located there?
Reply