NOTE: Why not use our List Manager to crack your lists? Its easy and enables better management.

NOTE: When cracking WPA/WPA2 passwords, make sure you check gpuhash.me first incase it's already been processed.

Home - General Discussion - New HashKiller Frontend Released!


60 Results - Page 2 of 2 -
1 2
Author Message
Avatar
dipeperon

Status: n/a
Joined: Tue, 03 Apr 2018
Posts: 337
Team:
Reputation: 401 Reputation
Offline
Sat, 02 Mar 2019 @ 01:54:29

I meant to type:

md5(md5_pass . : . pass)

But it should be clear from the example


My haschat stuff (rules, scripts): https://github.com/theherp/Hashcat-stuff
BTC: 3C2h4xscGRq7XfZLicoVjRVkYrqqJ1Urc5

Avatar
blandyuk
Admin / Owner
Status: Trusted
Joined: Tue, 05 Jul 2011
Posts: 3186
Team: HashKiller
Reputation: 4152 Reputation
Offline
Sat, 02 Mar 2019 @ 08:55:27

OK I've been busy again added a debug on the Submit Founds page so you can see which lines fail and also what RegEx was used so you can test, (Great testing website linked also).

md5(md5_pass . : . pass) has been added as:

md5(md5($pass).:.$salt)
and
md5(md5($pass).:.$pass)


Please read the forum rules | Please read the paid section rules
I accept private hash lists, with forum donations only.
BTC: 15qF9WUeFUD63ishxyAMiEgGqTcYzk4j9b
GPU Power: 9x GTX 1070 + 4x GTX 1080

Avatar
blandyuk
Admin / Owner
Status: Trusted
Joined: Tue, 05 Jul 2011
Posts: 3186
Team: HashKiller
Reputation: 4152 Reputation
Offline
Sat, 02 Mar 2019 @ 09:03:13

Also just changed the export so it splits the 32hex_left list into 200MB chunks instead. This will take effect in tomorrows export.


Please read the forum rules | Please read the paid section rules
I accept private hash lists, with forum donations only.
BTC: 15qF9WUeFUD63ishxyAMiEgGqTcYzk4j9b
GPU Power: 9x GTX 1070 + 4x GTX 1080

Avatar
dipeperon

Status: n/a
Joined: Tue, 03 Apr 2018
Posts: 337
Team:
Reputation: 401 Reputation
Offline
Sat, 02 Mar 2019 @ 10:02:22

The incorrect 32hex list has been eliminated

Good job on the new algo, works flawlessly

If you want to put your rig to good use blandy, feel free to run md5 passwords list in hybrid with ?a?a?a to pull those vbulletins out the 32 hex list


My haschat stuff (rules, scripts): https://github.com/theherp/Hashcat-stuff
BTC: 3C2h4xscGRq7XfZLicoVjRVkYrqqJ1Urc5

Avatar
blandyuk
Admin / Owner
Status: Trusted
Joined: Tue, 05 Jul 2011
Posts: 3186
Team: HashKiller
Reputation: 4152 Reputation
Offline
Sat, 02 Mar 2019 @ 10:10:22

Yes I was thinking that also.


Please read the forum rules | Please read the paid section rules
I accept private hash lists, with forum donations only.
BTC: 15qF9WUeFUD63ishxyAMiEgGqTcYzk4j9b
GPU Power: 9x GTX 1070 + 4x GTX 1080

Avatar
blandyuk
Admin / Owner
Status: Trusted
Joined: Tue, 05 Jul 2011
Posts: 3186
Team: HashKiller
Reputation: 4152 Reputation
Offline
Sat, 02 Mar 2019 @ 12:41:04

OK! After breaking the frontend for a bit, its back working again lol.


Please read the forum rules | Please read the paid section rules
I accept private hash lists, with forum donations only.
BTC: 15qF9WUeFUD63ishxyAMiEgGqTcYzk4j9b
GPU Power: 9x GTX 1070 + 4x GTX 1080

Avatar
dipeperon

Status: n/a
Joined: Tue, 03 Apr 2018
Posts: 337
Team:
Reputation: 401 Reputation
Offline
Sat, 02 Mar 2019 @ 17:17:49

70k found of format:

sha1(sha1($pass) . : . $pass)


My haschat stuff (rules, scripts): https://github.com/theherp/Hashcat-stuff
BTC: 3C2h4xscGRq7XfZLicoVjRVkYrqqJ1Urc5

Avatar
blandyuk
Admin / Owner
Status: Trusted
Joined: Tue, 05 Jul 2011
Posts: 3186
Team: HashKiller
Reputation: 4152 Reputation
Offline
Sat, 02 Mar 2019 @ 19:15:05

OK will get it added.

UPDATE: Added both

sha1(sha1($pass).:.$pass)
and
sha1(sha1($pass).:.$salt)


Please read the forum rules | Please read the paid section rules
I accept private hash lists, with forum donations only.
BTC: 15qF9WUeFUD63ishxyAMiEgGqTcYzk4j9b
GPU Power: 9x GTX 1070 + 4x GTX 1080

Avatar
blandyuk
Admin / Owner
Status: Trusted
Joined: Tue, 05 Jul 2011
Posts: 3186
Team: HashKiller
Reputation: 4152 Reputation
Offline
Sun, 03 Mar 2019 @ 13:27:18

OK as promised, the 32hex_left lists has been split into 14 chunks (0-13). Make it easier to process being in smaller chunks! You do however have to batch crack them as there are 14 chunks now.


Please read the forum rules | Please read the paid section rules
I accept private hash lists, with forum donations only.
BTC: 15qF9WUeFUD63ishxyAMiEgGqTcYzk4j9b
GPU Power: 9x GTX 1070 + 4x GTX 1080

Avatar
blandyuk
Admin / Owner
Status: Trusted
Joined: Tue, 05 Jul 2011
Posts: 3186
Team: HashKiller
Reputation: 4152 Reputation
Offline
Sun, 03 Mar 2019 @ 19:53:40

OK been busy cracking the 32hex_incorrect list today cracked a few million!


Please read the forum rules | Please read the paid section rules
I accept private hash lists, with forum donations only.
BTC: 15qF9WUeFUD63ishxyAMiEgGqTcYzk4j9b
GPU Power: 9x GTX 1070 + 4x GTX 1080

Avatar
dipeperon

Status: n/a
Joined: Tue, 03 Apr 2018
Posts: 337
Team:
Reputation: 401 Reputation
Offline
Mon, 04 Mar 2019 @ 11:47:19

Was vetronexe's idea:

53k MD5sub8-24MD5x01 found

MD5sub8-24MD5x01 000008f5d55ec65fc18988e182b8643b:19880327qaz
MD5sub8-24MD5x01 00001dc6e7674ec5348b043e5bfe46d1:0532sop
MD5sub8-24MD5x01 000091560bac5d42b57f7b02de4f5456:panlei
MD5sub8-24MD5x01 000136156b99e78d9a0bc7f5fcbf2845:jinshen123
MD5sub8-24MD5x01 00055c64207bf520656d81b08d426f0b:zibang123


md5(19880327qaz) = b80816b2713afd7f93cbc53774426703
md5(713afd7f93cbc537) = 000008f5d55ec65fc18988e182b8643b

There's a bunch of other algo's in the 32hex list but pretty sure the most in there will still be vbulletin


My haschat stuff (rules, scripts): https://github.com/theherp/Hashcat-stuff
BTC: 3C2h4xscGRq7XfZLicoVjRVkYrqqJ1Urc5

Avatar
blandyuk
Admin / Owner
Status: Trusted
Joined: Tue, 05 Jul 2011
Posts: 3186
Team: HashKiller
Reputation: 4152 Reputation
Offline
Mon, 04 Mar 2019 @ 14:13:02

Ah yes, testing and I'm getting hits also. I'll get the algo added...


Please read the forum rules | Please read the paid section rules
I accept private hash lists, with forum donations only.
BTC: 15qF9WUeFUD63ishxyAMiEgGqTcYzk4j9b
GPU Power: 9x GTX 1070 + 4x GTX 1080

Avatar
blandyuk
Admin / Owner
Status: Trusted
Joined: Tue, 05 Jul 2011
Posts: 3186
Team: HashKiller
Reputation: 4152 Reputation
Offline
Mon, 04 Mar 2019 @ 15:58:46

OK added this algo as: md5(md5($pass).substr(8,16))


Please read the forum rules | Please read the paid section rules
I accept private hash lists, with forum donations only.
BTC: 15qF9WUeFUD63ishxyAMiEgGqTcYzk4j9b
GPU Power: 9x GTX 1070 + 4x GTX 1080

Avatar
blandyuk
Admin / Owner
Status: Trusted
Joined: Tue, 05 Jul 2011
Posts: 3186
Team: HashKiller
Reputation: 4152 Reputation
Offline
Mon, 04 Mar 2019 @ 19:17:13

Found some more algos:

md5(md5(md5($pass)).:.$pass)

Examples:

50fda03bf9e3c65bb51e9517181bd14b:20101124095345
77721571364dbf6635536bdbb04467a3:76c8akPynX
583a1ea4d31ff1710ba0c33192d28b1d:84959484660
1334f08d53320abd406df714da40ae5f:20101102014914
1213cc3964ba610d3b17d60276070665:8b12bac32def72f8423c03b7de2cfd9fW#4

Notice the last one, vBulletin < v3.8.5. The hash:8b12bac32def72f8423c03b7de2cfd is MD5 pakinako

vb3 = md5(md5($pass).$salt)

So algo for that one is:

md5(md5(md5(md5(md5($pass).$salt))).:.md5(md5($pass).$salt))

CRAAAAAZY!

OK and another:

4f63ba4b3f28b0a21468eafa62098c96:OWIxYzkzYTY4NjRjMzllNDg0MTdlZTQ4NmI4M2MzODc=

Base64 is actually a 32hex hash: 9b1c93a6864c39e48417ee486b83c387 which is MD5: 6339

So, algo is md5(md5(md5($pass)).:.$pass) but password is first MD5 hashed and the 16 bytes are converted to hex, then the 32 hex converted to Base64. Then the main algo.

OK and more:

4e0dea24799216157095a37bd473eb4a:290324ebedee17e796b7bfd0e07d15ce4a12e38e
Looks to be just SHA1.

105c291121602fc00177d232c81bfb61:*4BD2C97FEC8101D94EA4F638AA0471A74211DD26
Looks like MySQL5 with the * in.

Fairly sure some people just make this shit up!


Please read the forum rules | Please read the paid section rules
I accept private hash lists, with forum donations only.
BTC: 15qF9WUeFUD63ishxyAMiEgGqTcYzk4j9b
GPU Power: 9x GTX 1070 + 4x GTX 1080

Avatar
dipeperon

Status: n/a
Joined: Tue, 03 Apr 2018
Posts: 337
Team:
Reputation: 401 Reputation
Offline
Tue, 05 Mar 2019 @ 17:12:10

It might be worth making a seperate left list for dewolla uploads which are ALL emails only since he uploads tons of them.

And btw: there's a small amount of duplicates in the left lists


My haschat stuff (rules, scripts): https://github.com/theherp/Hashcat-stuff
BTC: 3C2h4xscGRq7XfZLicoVjRVkYrqqJ1Urc5

Avatar
blandyuk
Admin / Owner
Status: Trusted
Joined: Tue, 05 Jul 2011
Posts: 3186
Team: HashKiller
Reputation: 4152 Reputation
Offline
Wed, 06 Mar 2019 @ 09:07:47

Yes, I've added another export which is emails only so this will be available on the next export tomorrow.

The duplicates I'm sorting so don't worry


Please read the forum rules | Please read the paid section rules
I accept private hash lists, with forum donations only.
BTC: 15qF9WUeFUD63ishxyAMiEgGqTcYzk4j9b
GPU Power: 9x GTX 1070 + 4x GTX 1080

Avatar
Kingadasouth96

Status: n/a
Joined: Sun, 14 May 2017
Posts: 89
Team: Kings Merry Men
Reputation: 99 Reputation
Offline
Thu, 07 Mar 2019 @ 16:48:45

Haven't been on for a while, I like the new look.!


14BnLG9K3dGJCByngQQ19wAW9c8NqBgeMy
+ Rep if I have helped you
Join my team

Avatar
blandyuk
Admin / Owner
Status: Trusted
Joined: Tue, 05 Jul 2011
Posts: 3186
Team: HashKiller
Reputation: 4152 Reputation
Offline
Thu, 07 Mar 2019 @ 17:01:57

OK I've added exporting all email-based passwords separately now so you can download:

https://hashkiller.co.uk/ListManager/Download

email_only-dict.7z [735.56 MB]

Crazy amounts in there!


Please read the forum rules | Please read the paid section rules
I accept private hash lists, with forum donations only.
BTC: 15qF9WUeFUD63ishxyAMiEgGqTcYzk4j9b
GPU Power: 9x GTX 1070 + 4x GTX 1080

Avatar
CrypticError

Status: Cracker
Joined: Tue, 03 Apr 2018
Posts: 347
Team: Hashdog
Reputation: 497 Reputation
Offline
Thu, 07 Mar 2019 @ 21:45:21

Typo on the new notice?

NOTE: Why not use out List Manager ---> ot <---- crack your lists? Its easy and enables better management.


+rep if I helped, thanks. Means a lot when I'm using power in China to crack hashes!

Hardware: 5x Titan X, 1x i7 4770k

Avatar
raelleb

Status: n/a
Joined: Fri, 23 Aug 2013
Posts: 249
Team: Cendana.Inc
Reputation: 11 Reputation
Offline
Wed, 13 Mar 2019 @ 11:20:36

what Algorithm for MySQL323 on "../ListManager" I don't see Algorithm for MySQL323.

Thanks


Avatar
dipeperon

Status: n/a
Joined: Tue, 03 Apr 2018
Posts: 337
Team:
Reputation: 401 Reputation
Offline
Thu, 14 Mar 2019 @ 23:35:19

Is it possible to get the old found & left lists from the list manager?

Even if they're not kept up to date it would still help


My haschat stuff (rules, scripts): https://github.com/theherp/Hashcat-stuff
BTC: 3C2h4xscGRq7XfZLicoVjRVkYrqqJ1Urc5

Avatar
s3in!c
Moderator
Status: Elite
Joined: Wed, 10 Apr 2013
Posts: 887
Team:
Reputation: 1275 Reputation
Offline
Fri, 15 Mar 2019 @ 13:39:12

The filenames when downloading from the hashkiller list manager are like tmpXXXX.tmp, can this be changed to something useful, like the archives are named. e.g. (list-id)_found.txt?


+Rep if I helped

Hashes.org - Powerful Community Password Recovery
Hashtopolis - Hashcat distributed cracking tool

BTC: 1VTuiKrNoytU1PvYrF3J7VapQ9oPg93Jn

Avatar
liff
Moderator
Status: Trusted
Joined: Thu, 28 Jul 2016
Posts: 2093
Team:
Reputation: 6721 Reputation
Offline
Fri, 15 Mar 2019 @ 15:03:30

This one is a bit trivial and most likely is only my weird preference, but it would be nice if there was a monospaced font used on List Tool. Not sure if there's anyone else that thinks the same though.


XMPP: liff@xmpp.is

Avatar
s3in!c
Moderator
Status: Elite
Joined: Wed, 10 Apr 2013
Posts: 887
Team:
Reputation: 1275 Reputation
Offline
Fri, 15 Mar 2019 @ 15:06:11

liff said:

This one is a bit trivial and most likely is only my weird preference, but it would be nice if there was a monospaced font used on List Tool. Not sure if there's anyone else that thinks the same though.

I can understand you, even if it's not my most OCD trigger. This thread is messed up because of a profile pic, that bugs me more
Just set a static width of profile pics..


+Rep if I helped

Hashes.org - Powerful Community Password Recovery
Hashtopolis - Hashcat distributed cracking tool

BTC: 1VTuiKrNoytU1PvYrF3J7VapQ9oPg93Jn

Avatar
liff
Moderator
Status: Trusted
Joined: Thu, 28 Jul 2016
Posts: 2093
Team:
Reputation: 6721 Reputation
Offline
Fri, 15 Mar 2019 @ 15:09:37

s3in!c said:

liff said:

This one is a bit trivial and most likely is only my weird preference, but it would be nice if there was a monospaced font used on List Tool. Not sure if there's anyone else that thinks the same though.

I can understand you, even if it's not my most OCD trigger. This thread is messed up because of a profile pic, that bugs me more
Just set a static width of profile pics..

Yeah, same thing about people posting long hashes, which messes up the thread
Example: https://forum.hashkiller.co.uk/topic-view.aspx?t=27971&m=205364#205364


XMPP: liff@xmpp.is

Avatar
dipeperon

Status: n/a
Joined: Tue, 03 Apr 2018
Posts: 337
Team:
Reputation: 401 Reputation
Offline
Mon, 18 Mar 2019 @ 21:46:28

Found 3k:

HMAC_SHA1(key = $pass, message = $pass)

However also found some where key does NOT match message, which obviously are a pain in the ass to crack.

Will run a more extensive attack to see how much I can pull out


My haschat stuff (rules, scripts): https://github.com/theherp/Hashcat-stuff
BTC: 3C2h4xscGRq7XfZLicoVjRVkYrqqJ1Urc5

Avatar
blandyuk
Admin / Owner
Status: Trusted
Joined: Tue, 05 Jul 2011
Posts: 3186
Team: HashKiller
Reputation: 4152 Reputation
Offline
Tue, 19 Mar 2019 @ 12:08:31

OK I'll get it added


Please read the forum rules | Please read the paid section rules
I accept private hash lists, with forum donations only.
BTC: 15qF9WUeFUD63ishxyAMiEgGqTcYzk4j9b
GPU Power: 9x GTX 1070 + 4x GTX 1080

Avatar
blandyuk
Admin / Owner
Status: Trusted
Joined: Tue, 05 Jul 2011
Posts: 3186
Team: HashKiller
Reputation: 4152 Reputation
Offline
Tue, 19 Mar 2019 @ 13:19:41

OK added all the below:

Code:
HMAC-MD5 (key = $pass)
HMAC-MD5 (key = $salt)
HMAC-SHA1 (key = $pass)
HMAC-SHA1 (key = $salt)
HMAC-SHA256 (key = $pass)
HMAC-SHA256 (key = $salt)
HMAC-SHA512 (key = $pass)
HMAC-SHA512 (key = $salt)
HMACMD5($pass)
HMACSHA1($pass)
HMACSHA256($pass)
HMACSHA512($pass)

You'll need HMACSHA1($pass) as this uses $pass for both the Key and Message.


Please read the forum rules | Please read the paid section rules
I accept private hash lists, with forum donations only.
BTC: 15qF9WUeFUD63ishxyAMiEgGqTcYzk4j9b
GPU Power: 9x GTX 1070 + 4x GTX 1080

Avatar
gpuhash_me

Status: Trusted
Joined: Sun, 08 Nov 2015
Posts: 785
Team: gpuhash team
Reputation: 1574 Reputation
Offline
Wed, 20 Mar 2019 @ 20:29:25

2611_left contains 11.5K of empty passwords but they not accepted by list manager


Head of cheap publicity department
Support, discounts, free offers for HK members
BTC: 1GPUHASHrfT1hbDJ8KBETkTieyNzUMwMXZ

Avatar
blandyuk
Admin / Owner
Status: Trusted
Joined: Tue, 05 Jul 2011
Posts: 3186
Team: HashKiller
Reputation: 4152 Reputation
Offline
Thu, 21 Mar 2019 @ 09:20:10

OK fixed and re-processed your list


Please read the forum rules | Please read the paid section rules
I accept private hash lists, with forum donations only.
BTC: 15qF9WUeFUD63ishxyAMiEgGqTcYzk4j9b
GPU Power: 9x GTX 1070 + 4x GTX 1080


60 Results - Page 2 of 2 -
1 2

We have a total of 184465 messages in 22854 topics.
We have a total of 20597 registered users.
Our newest registered member is fra1234567890.