Last time I tried Hashcat, it didn't support my 18 character password.
Hashcat – advanced password recovery
11–20 of 29 posts
Re: Hashcat – advanced password recovery
#12I can recommend Hashcat, used it myself for cracking bitcoin wallet using multiple GPUs. Great tool if you forget your password and it works with so many applications/file formats.
[deleted]
Re: Hashcat – advanced password recovery
#13I made this a while back to ease the barrier to entry to Hashcat: https://github.com/brannondorsey/naive-hashcat Not that it's that big of a barrier, but it can be somewhat daunting to new password crackers.
Or, if you want to get experimental with it, I've been working on a distributed browser password cracker here: https://github.com/brannondorsey/distributed-password-cracki.... It can be embedded in websites to borrow your visitor's CPU cycles to crack md5 hashes.Note that it is very slow in comparison to Hashcat, but its a proof-of-concept for something that I am hoping to soon add WebAssembly + WebGL GPGPU cracking to.
Re: Hashcat – advanced password recovery
#14Last time I tried Hashcat, it didn't support my 18 character password.
It does now - that's one of the main features in 4.0. They rewrote the CL hash engine to work modularly, which gives up some hand-optimized speed in exchange for simpler code and longer password support. 3.x supports 16 chars, with some hashes supporting up to 32 chars. 4.x supports 256 chars across the board.
Full details at https://hashcat.net/forum/thread-6965.html
Re: Hashcat – advanced password recovery
#15Used Hashcat in the Student Cluster Competition[1] of SC16 conference. There was a task where students were asked to recovery as many passwords as possible from a vault consisting of md5crypt and bcrypt hashes[2]. The performance was amazing - 8400k md5crypt per second with 2 NVIDIA K80.
I also profiled the code trying to discover possible optimizations, and found that the code has been heavily optimized. Computation and data transfer are well overlapped, so GPU utilization is pretty high. It's a really great tool.
[1] http://studentclustercompetition.us/2016/applications.html
[2] https://docs.google.com/document/d/1tXBy9-ajFtO_b8hvbuleqRbc...
Re: Hashcat – advanced password recovery
#16This reminds me to move to passwordstore with a gpg key on an Yubikey.
Re: Hashcat – advanced password recovery
#17I love the thermal watchdog feature!
Re: Hashcat – advanced password recovery
#18This reminds me to move to passwordstore with a gpg key on an Yubikey.
I hope you remember that GPG keys created on a Yubikey are unsafe, due to an overly simply RSAlib implementation there for their Infinion chips.
Re: Hashcat – advanced password recovery
#19I can recommend Hashcat, used it myself for cracking bitcoin wallet using multiple GPUs. Great tool if you forget your password and it works with so many applications/file formats.
I thought cracking a bitcoin wallet was technically beyond the limitations of today's computing power??
And I imagine if he mined bitcoin that he had enough GPU power to speed up hashcat cracking process :)