phillips321.co.uk

OK, so at my work place we’ve just got some new laptops and they have a proper GPU for a change (we’ve in the past had intel GPUs). I was lucky enough (or unlucky enough) to be given the job of spec’ing these laptops and my hunt was to include a decent GPU for hash cracking. I strived for an ATI chip but with budget in mind and with the options provided we ended up with an NVidia 660M, SWEET!

So, not knowing much about NVidia’s I thought I’d have a play and see how these GPUs perform. As I train in MMA I get whacked on the head a lot so had to refresh my memory about hashcat so it made sense to blog about it in case I get hit on the head again next week!

So the fist thing to do was to find some hashes, step in KoreLogic(@CrackMeIfYouCan)! I decided to use these hashes as they looked like MD5 and would be easy to work with and there is only 2911 lines (not sure where they came from).

So the firtst thing to do was download the latest version of Hashcat, at the time of writing it was 0.09. The first thing to try is a basic wordlist attack:

This took a measly 3 seconds to rack and resulted in 157 ofg the 2312 hashes cracked.

Now that I know the cracking is working 🙂 I need to remove the cracked hashes from the list and add them to a new file in order to try some fresh attacks/dictionaries. We will add the -o cracked.txt and –remove flags

Now I will try a rule based attacked with will try 64 alterations based on each line in the wordlist. We will add the flag -r rules\best64.rule

This results in 97 more cracked passwords. Now we will try a slightly larger rule (best64 only contains 64 iterations of the original line). Trying the passwordspro.rule gets another 64 passwords: