EH-Net

Ethical Hacking Discussions and Related Certifications => Network Pen Testing => Topic started by: El33tsamurai on May 07, 2012, 09:25:54 AM



Title: HashCat MD5 with salt cracking
Post by: El33tsamurai on May 07, 2012, 09:25:54 AM
Was looking for the Password cracking did not see it so Ill start here, sorry if its wrong please:

Hello,

been trying for a few days now trying to get hashcat to work, cracking a MD5 hash with salt.

This is just a quick example or what I am trying to do

69c12c189531e95fc6b6b4191ce29220 is the hash
the salt is dz
the password for this is dz0000
fakehash has the above hash
salt has the above salt

This does not work:
./hashcat-cli32.bin -m 0 -a 3 -e salt --bf-pw-min=4 --bf-pw-max=6 --bf-cs-buf=1234567890 fakehash

When I run this it does work:
./hashcat-cli32.bin -m 0 -a 3 -e salt --bf-pw-min=4 --bf-pw-max=6 --bf-cs-buf=1234567890dz fakehash

When I run this it works but tries
./hashcat-cli32.bin -m 0 -a 3 -e salt --bf-pw-min=5 --bf-pw-max=6 --bf-cs-buf=abcdefghijklmnopqrstuvwxyz1234567890ABCDEFGHIJKLMNOPQRSTUVWXYZ fackhash

to my understanding it start 0000 and goes from there so it should put dz in front and then at 6 it should do dz0000 resulting in the first crack.  But instead it does 000000 and goes from there not using the salt.  How do I force it to use salt any help would be greatly apprenticed.


Title: Re: HashCat MD5 with salt cracking
Post by: unicityd on May 07, 2012, 10:25:17 AM
I think you're using the wrong has mode.  '-m 0' is MD5 with no salt.  You want  '-m 2' for md5($salt.$pass).