hashcat Forum › Support › hashcat v
Hashcat brain stops working

Threaded Mode
Hashcat brain stops working
walterlacka Offline
Member
***
Posts: 63
Threads: 10
Joined: Nov 2017
#1
02-25-2021, 05:51 PM
Code:
C:\hashcat-6.1.1>hashcat.exe --brain-server --brain-password xxccss
1614267533.716299 |  0.22s |  0 | Read 287512872 bytes from session 0x5dc9abac in 217.03 ms
1614267533.716299 |  0.00s |  0 | Read 1728 bytes from attack 0xe1cdb5b3 in 0.26 ms
1614267533.716299 |  0.00s |  0 | Brain server started
1614267556.376673 |  22.66s |  0 | Connection from 127.0.0.1:49870
1614267556.376673 |  0.00s |  0 | Connection from 127.0.0.1:49869
1614267556.384716 |  0.01s |  1 | Session: 0x5dc9abac, Attack: 0xe1cdb5b3, Kernel-power: 917504
1614267556.384716 |  0.00s |  2 | Session: 0x5dc9abac, Attack: 0xe1cdb5b3, Kernel-power: 655360
1614267557.278028 |  0.89s |  2 | L |  104.10 ms | Long: 35939109, Inc: 268110, New: 0
1614267557.548751 |  0.27s |  1 | L |  140.92 ms | Long: 35939109, Inc: 389518, New: 0
1614267557.621686 |  0.07s |  2 | L |  118.32 ms | Long: 35939109, Inc: 267017, New: 0
1614267558.005596 |  0.39s |  2 | L |  108.08 ms | Long: 35939109, Inc: 272006, New: 0
1614267558.104698 |  0.10s |  1 | L |  168.12 ms | Long: 35939109, Inc: 374811, New: 0
1614267558.380056 |  0.28s |  2 | L |  102.35 ms | Long: 35939109, Inc: 280184, New: 0
1614267558.602080 |  0.22s |  1 | L |  144.23 ms | Long: 35939109, Inc: 399039, New: 0
1614267558.762034 |  0.16s |  2 | L |  153.92 ms | Long: 35939109, Inc: 291962, New: 0
1614267559.107579 |  0.35s |  1 | L |  144.27 ms | Long: 35939109, Inc: 409632, New: 0
1614267559.115672 |  0.01s |  2 | L |  105.71 ms | Long: 35939109, Inc: 290616, New: 0

Code:
hashcat.exe -z --brain-password xxccss --brain-client-features=1 --debug-mode=4 --debug-file=matched.rule -O -w4 -m22000 -a0 d:\ftp\hashes2021\test.22000 d:\ftp\wordlist2017\rockyou.txt -r .\rules\best64.rule
hashcat (v6.1.1) starting...

Kernel ./OpenCL/m22000-optimized.cl:
Optimized kernel requested but not needed - falling back to pure kernel

CUDA API (CUDA 11.2)
====================
* Device #1: GeForce GTX 1080 Ti, 10227/11264 MB, 28MCU
* Device #2: GeForce GTX 1080, 7213/8192 MB, 20MCU

OpenCL API (OpenCL 1.2 CUDA 11.2.135) - Platform #1 [NVIDIA Corporation]
========================================================================
* Device #3: GeForce GTX 1080 Ti, skipped
* Device #4: GeForce GTX 1080, skipped

Kernel ./OpenCL/m22000-optimized.cl:
Optimized kernel requested but not needed - falling back to pure kernel

Minimum password length supported by kernel: 8
Maximum password length supported by kernel: 63

Hashes: 100 digests; 51 unique digests, 15 unique salts
Bitmaps: 16 bits, 65536 entries, 0x0000ffff mask, 262144 bytes, 5/13 rotates
Rules: 77

Applicable optimizers applied:
* Zero-Byte
* Slow-Hash-SIMD-LOOP

Watchdog: Temperature abort trigger set to 90c

INFO: Removed 20 hashes found in potfile.

Host memory required for this attack: 4115 MB

Dictionary cache hit:
* Filename..: d:\ftp\wordlist2017\rockyou.txt
* Passwords.: 14344384
* Bytes.....: 139921497
* Keyspace..: 1104517568

[s]tatus [p]ause [b]ypass [c]heckpoint [q]uit =>

Session..........: hashcat (Brain Session/Attack:0x5dc9abac/0xe1cdb5b3)
Status...........: Running
Hash.Name........: WPA-PBKDF2-PMKID+EAPOL
Hash.Target......: d:\ftp\hashes2021\test.22000
Time.Started.....: Thu Feb 25 09:39:16 2021 (10 secs)
Time.Estimated...: Thu Feb 25 09:39:26 2021 (0 secs)
Guess.Base.......: File (d:\ftp\wordlist2017\rockyou.txt)
Guess.Mod........: Rules (.\rules\best64.rule)
Guess.Queue......: 1/1 (100.00%)
Speed.#1.........:        0 H/s (0.00ms) @ Accel:32 Loops:1024 Thr:1024 Vec:1
Speed.#2.........:        0 H/s (0.00ms) @ Accel:32 Loops:1024 Thr:1024 Vec:1
Speed.#*.........:        0 H/s
Recovered........: 20/51 (39.22%) Digests, 8/15 (53.33%) Salts
Progress.........: 114032640/16567763520 (0.69%)
Rejected.........: 114032640/114032640 (100.00%)
Brain.Link.All...: RX: 3.2 MB, TX: 31.6 MB
Brain.Link.#1....: RX: 1.6 MB (0.00 Mbps), TX: 15.9 MB (0.00 Mbps), receiving
Brain.Link.#2....: RX: 1.7 MB (0.00 Mbps), TX: 15.7 MB (0.00 Mbps), receiving
Restore.Point....: 0/1104517568 (0.00%)
Restore.Sub.#1...: Salt:0 Amplifier:0-0 Iteration:0-1024
Restore.Sub.#2...: Salt:0 Amplifier:0-0 Iteration:0-1024
Candidates.#1....: [Copying]
Candidates.#2....: [Copying]
Hardware.Mon.#1..: Temp: 33c Fan:100% Util:  0% Core:1480MHz Mem:5005MHz Bus:8
Hardware.Mon.#2..: Temp: 32c Fan:100% Util:  0% Core:1607MHz Mem:4513MHz Bus:16

[s]tatus [p]ause [b]ypass [c]heckpoint [q]uit =>


No matter how long I wait, the brain doesn't show any more messages on the console and the client appears to not be doing any work:

This is status after approx 7 mins:
Code:
Session..........: hashcat (Brain Session/Attack:0x5dc9abac/0xe1cdb5b3)
Status...........: Running
Hash.Name........: WPA-PBKDF2-PMKID+EAPOL
Hash.Target......: d:\ftp\hashes2021\test.22000
Time.Started.....: Thu Feb 25 09:39:16 2021 (7 mins, 3 secs)
Time.Estimated...: Thu Feb 25 09:46:19 2021 (0 secs)
Guess.Base.......: File (d:\ftp\wordlist2017\rockyou.txt)
Guess.Mod........: Rules (.\rules\best64.rule)
Guess.Queue......: 1/1 (100.00%)
Speed.#1.........:        0 H/s (0.00ms) @ Accel:32 Loops:1024 Thr:1024 Vec:1
Speed.#2.........:        0 H/s (0.00ms) @ Accel:32 Loops:1024 Thr:1024 Vec:1
Speed.#*.........:        0 H/s
Recovered........: 20/51 (39.22%) Digests, 8/15 (53.33%) Salts
Progress.........: 114032640/16567763520 (0.69%)
Rejected.........: 114032640/114032640 (100.00%)
Brain.Link.All...: RX: 3.2 MB, TX: 31.6 MB
Brain.Link.#1....: RX: 1.6 MB (0.00 Mbps), TX: 15.9 MB (0.00 Mbps), receiving
Brain.Link.#2....: RX: 1.7 MB (0.00 Mbps), TX: 15.7 MB (0.00 Mbps), receiving
Restore.Point....: 0/1104517568 (0.00%)
Restore.Sub.#1...: Salt:0 Amplifier:0-0 Iteration:0-1024
Restore.Sub.#2...: Salt:0 Amplifier:0-0 Iteration:0-1024
Candidates.#1....: [Copying]
Candidates.#2....: [Copying]
Hardware.Mon.#1..: Temp: 34c Fan:100% Util:  0% Core:1480MHz Mem:5005MHz Bus:8
Hardware.Mon.#2..: Temp: 33c Fan:100% Util:  0% Core:1607MHz Mem:4513MHz Bus:16


I've stopped the brain (ctrl-c) and restarted and this continues to happen.  Even rebooted as well.

Here's the brain after i press crtl-c - nothing happened for 544 seconds:
Code:
C:\hashcat-6.1.1>hashcat.exe --brain-server --brain-password xxccss
1614267533.716299 |  0.22s |  0 | Read 287512872 bytes from session 0x5dc9abac in 217.03 ms
1614267533.716299 |  0.00s |  0 | Read 1728 bytes from attack 0xe1cdb5b3 in 0.26 ms
1614267533.716299 |  0.00s |  0 | Brain server started
1614267556.376673 |  22.66s |  0 | Connection from 127.0.0.1:49870
1614267556.376673 |  0.00s |  0 | Connection from 127.0.0.1:49869
1614267556.384716 |  0.01s |  1 | Session: 0x5dc9abac, Attack: 0xe1cdb5b3, Kernel-power: 917504
1614267556.384716 |  0.00s |  2 | Session: 0x5dc9abac, Attack: 0xe1cdb5b3, Kernel-power: 655360
1614267557.278028 |  0.89s |  2 | L |  104.10 ms | Long: 35939109, Inc: 268110, New: 0
1614267557.548751 |  0.27s |  1 | L |  140.92 ms | Long: 35939109, Inc: 389518, New: 0
1614267557.621686 |  0.07s |  2 | L |  118.32 ms | Long: 35939109, Inc: 267017, New: 0
1614267558.005596 |  0.39s |  2 | L |  108.08 ms | Long: 35939109, Inc: 272006, New: 0
1614267558.104698 |  0.10s |  1 | L |  168.12 ms | Long: 35939109, Inc: 374811, New: 0
1614267558.380056 |  0.28s |  2 | L |  102.35 ms | Long: 35939109, Inc: 280184, New: 0
1614267558.602080 |  0.22s |  1 | L |  144.23 ms | Long: 35939109, Inc: 399039, New: 0
1614267558.762034 |  0.16s |  2 | L |  153.92 ms | Long: 35939109, Inc: 291962, New: 0
1614267559.107579 |  0.35s |  1 | L |  144.27 ms | Long: 35939109, Inc: 409632, New: 0
1614267559.115672 |  0.01s |  2 | L |  105.71 ms | Long: 35939109, Inc: 290616, New: 0
1614268103.466804 | 544.35s |  0 | Brain server stopping

Any tips?
Find
Reply
walterlacka Offline
Member
***
Posts: 63
Threads: 10
Joined: Nov 2017
#2
02-26-2021, 01:36 AM
Further testing reveals that brain-client-features=1 or 3 is when it stops working.  Based on what I've read, it sounds like mode 2 is less bandwidth intensive; however I cant see that being a problem given that Ive tested with brain server and client on same computer.  Ive also tested with client/server being on separate computers as well.  They are connected at 1 gbps Ethernet connections each on the same network switch on isolated VLAN.

Are there certain logs I can look at?
Find
Reply
walterlacka Offline
Member
***
Posts: 63
Threads: 10
Joined: Nov 2017
#3
02-26-2021, 02:55 AM
I'm running WIN10 with hashcat version 6.1.1.  Does that version contain the fix mentioned in this thread?
https://hashcat.net/forum/thread-9269.html
Find
Reply
walterlacka Offline
Member
***
Posts: 63
Threads: 10
Joined: Nov 2017
#4
03-03-2021, 05:38 AM
Wondering if anybody has a suggestion or 2 regarding this.  Thanks in advance.
Find
Reply