Is there a Hashcat-as-a-Service or is everyone just renting out EC2 GPU instances by the hour?
I personally choose not to send client hashes into untrusted environments. I’d maybe consider EC2 with client permission, but not other dodgy services.
Hashcat 6.0
51–55 of 55 posts
Re: Hashcat 6.0
#52So what's the difference between hashcat and johntheripper? Any reason to use one over the other?
Hashcat has far better performance, unsure if jtr supports ‘rules’ (eg add ‘1!’ Suffix to each word - bashcat has many rules like this).
Hashcat is a pita for quick jobs so JTR is better if you’re teaching a class of unequipped students.
I’ve never had hashcat work out of the box at all, either driver issues or it exits because it overheats my GFX. When it is running it is very, very good though.
Re: Hashcat 6.0
#53So what's the difference between hashcat and johntheripper? Any reason to use one over the other?
I’ve used johntheripper for wordlists and hashcat for brute-forcing, but the ethos might have changed.
Hashcat supports wordlists with large rule sets, search ‘best64 ruleset’ for instance
Re: Hashcat 6.0
#54Earlier quoted context omitted.
I ran it recently on my 1080ti: Session..........: hashcat Status...........: Exhausted Hash.Type........: MS Office 2010 Hash.Target......: $office$ 2010 100000 128 16*[removed] Time.Started.....: Sat Apr 18 09:05:24 2020 (3 mins, 35 secs) Time.Estimated...: Sat Apr 18 09:08:59 2020 (0 secs) Guess.Base.......: File (merged.txt) Guess.Queue......: 1/1 (100.00%) Speed.#1.........: 92589 H/s (2.67ms) @ Accel:256 Loops:…
Is that saying ~92k hashes per second? What's the MS Office 2010 hash type?
I think that is what it is saying! The hash type is AES-128 with SHA-1 hash stretching x100,000[0][1]. The Office 2010 hashmode is 9200[2].
At work, someone of importance wanted access to a password protected file from an employee that left. I ran it through several wordlists to demonstrate an attempt was made and shared the cost/time required for 100% recovery. Never solved it and the cost/time analysis was enough to make them say oh well!
[0] https://en.m.wikipedia.org/wiki/Microsoft_Office_password_pr... [1] https://en.m.wikipedia.org/wiki/Key_stretching [2] https://hashcat.net/wiki/doku.php?id=example_hashes