{"id":483,"date":"2012-03-23T18:11:41","date_gmt":"2012-03-23T18:11:41","guid":{"rendered":"http:\/\/www.phillips321.co.uk\/?p=483"},"modified":"2012-06-04T11:33:51","modified_gmt":"2012-06-04T10:33:51","slug":"cracking-ntlm-hashes-with-your-gpu","status":"publish","type":"post","link":"https:\/\/www.phillips321.co.uk\/2012\/03\/23\/cracking-ntlm-hashes-with-your-gpu\/","title":{"rendered":"Cracking NTLM hashes with your gpu!"},"content":{"rendered":"<p>The tool we&#8217;re going to use here is <a href=\"http:\/\/hashcat.net\/oclhashcat-plus\/\" target=\"_blank\">hashcat<\/a>. I&#8217;ll be testing this using a ATI 6950 2GB GPU running on Kubuntu 64bit using <a href=\"http:\/\/support.amd.com\/us\/gpudownload\/linux\/Pages\/radeon_linux.aspx?type=2.4.1&#038;product=2.4.1.3.42&#038;lang=English\" target=\"_blank\">catalyst drivers 12.2<\/a>. Your mileage might vary depending on what card you&#8217;re using.<br \/>\nHashcat (now known as oclhashcat-plus) comes with a few different binaries depending on what architecture you&#8217;ll be running it on.<\/p>\n<ul>\n<li>nVidia 32bit &#8211; use <\/li>\n<li>nVidia 64bit &#8211; use <\/li>\n<li>ATI 32bit &#8211; use <\/li>\n<li>ATI 64bit &#8211; use <\/li>\n<\/ul>\n<p>We need to check the graphics drivers and librarys are all set up correctly so quickly trying running one of the example files.<\/p>\n<div class=\"codecolorer-container bash vibrant\" style=\"overflow:auto;white-space:nowrap;width:100%;height:300px;\"><table cellspacing=\"0\" cellpadding=\"0\"><tbody><tr><td class=\"line-numbers\"><div>1<br \/>2<br \/>3<br \/>4<br \/>5<br \/>6<br \/>7<br \/>8<br \/>9<br \/>10<br \/>11<br \/>12<br \/>13<br \/>14<br \/>15<br \/>16<br \/>17<br \/><\/div><\/td><td><div class=\"bash codecolorer\">phillips321<span class=\"sy0\">@<\/span>KubuntuDesktop:<span class=\"sy0\">\/<\/span>media<span class=\"sy0\">\/<\/span>1TB<span class=\"sy0\">\/<\/span>TABLES<span class=\"sy0\">\/<\/span>tools<span class=\"sy0\">\/<\/span>oclHashcat-plus-<span class=\"nu0\">0.07<\/span>$ .<span class=\"sy0\">\/<\/span>oclExample0.sh <br \/>\noclHashcat-plus v0.07 by atom starting...<br \/>\nHashes: <span class=\"nu0\">6494<\/span><br \/>\nUnique digests: <span class=\"nu0\">6494<\/span><br \/>\nBitmaps: <span class=\"nu0\">16<\/span> bits, <span class=\"nu0\">65536<\/span> entries, 0x0000ffff mask, <span class=\"nu0\">262144<\/span> bytes<br \/>\nRules: <span class=\"nu0\">64<\/span><br \/>\nGPU-Loops: <span class=\"nu0\">128<\/span><br \/>\nGPU-Accel: <span class=\"nu0\">40<\/span><br \/>\nPassword lengths range: <span class=\"nu0\">1<\/span> - <span class=\"nu0\">15<\/span><br \/>\nPlatform: AMD compatible platform found<br \/>\nWatchdog: Temperature limit <span class=\"kw1\">set<\/span> to 90c<br \/>\nDevice <span class=\"co0\">#1: Cayman, 2048MB, 0Mhz, 22MCU<\/span><br \/>\nDevice <span class=\"co0\">#1: Allocating 132MB host-memory<\/span><br \/>\nDevice <span class=\"co0\">#1: Kernel .\/kernels\/4098\/m0000_a0.Cayman.64.kernel (1132724 bytes)<\/span><br \/>\n<span class=\"co4\">HW.Monitor.#<\/span><span class=\"nu0\">1<\/span>: &nbsp;<span class=\"nu0\">0<\/span><span class=\"sy0\">%<\/span> GPU, 46c Temp<br \/>\nStarted: Fri Mar <span class=\"nu0\">23<\/span> <span class=\"nu0\">17<\/span>:<span class=\"nu0\">16<\/span>:<span class=\"nu0\">17<\/span> <span class=\"nu0\">2012<\/span><br \/>\nStopped: Fri Mar <span class=\"nu0\">23<\/span> <span class=\"nu0\">17<\/span>:<span class=\"nu0\">16<\/span>:<span class=\"nu0\">20<\/span> <span class=\"nu0\">2012<\/span><\/div><\/td><\/tr><\/tbody><\/table><\/div>\n<p>Looks like things are working fine \ud83d\ude42<br \/>\nAs we have a pwdump output style we need to cut this down to only show the NTLM hash.<br \/>\n<em>username:userid:lmhash:ntlmhash:::<\/em><\/p>\n<div class=\"codecolorer-container bash vibrant\" style=\"overflow:auto;white-space:nowrap;width:100%;\"><table cellspacing=\"0\" cellpadding=\"0\"><tbody><tr><td class=\"line-numbers\"><div>1<br \/>2<br \/>3<br \/><\/div><\/td><td><div class=\"bash codecolorer\"><span class=\"kw2\">cat<\/span> hash.txt<br \/>\nAdministrator:<span class=\"nu0\">500<\/span>:1d9321d6da8213bdc4482861fc3ea9db:80290fc9b3c2b233769aa9d6ced8bc86:::<br \/>\n<span class=\"kw2\">cat<\/span> hash.txt <span class=\"sy0\">|<\/span> <span class=\"kw2\">cut<\/span> -d: <span class=\"re5\">-f4<\/span> <span class=\"sy0\">&gt;<\/span> hash.ntlm.txt<\/div><\/td><\/tr><\/tbody><\/table><\/div>\n<p>And now to use oclHashcat to crack the NTLM<\/p>\n<div class=\"codecolorer-container bash vibrant\" style=\"overflow:auto;white-space:nowrap;width:100%;height:300px;\"><table cellspacing=\"0\" cellpadding=\"0\"><tbody><tr><td class=\"line-numbers\"><div>1<br \/>2<br \/>3<br \/>4<br \/>5<br \/>6<br \/>7<br \/>8<br \/>9<br \/>10<br \/>11<br \/>12<br \/>13<br \/>14<br \/>15<br \/>16<br \/>17<br \/>18<br \/>19<br \/>20<br \/>21<br \/>22<br \/>23<br \/>24<br \/>25<br \/>26<br \/>27<br \/>28<br \/>29<br \/><\/div><\/td><td><div class=\"bash codecolorer\">$ .<span class=\"sy0\">\/<\/span>oclHashcat-plus64.bin <span class=\"re5\">-m<\/span> <span class=\"nu0\">1000<\/span> hash.ntlm.txt darkc0de.lst <br \/>\noclHashcat-plus v0.07 by atom starting...<br \/>\nHashes: <span class=\"nu0\">1<\/span><br \/>\nUnique digests: <span class=\"nu0\">1<\/span><br \/>\nBitmaps: <span class=\"nu0\">8<\/span> bits, <span class=\"nu0\">256<\/span> entries, 0x000000ff mask, <span class=\"nu0\">1024<\/span> bytes<br \/>\nRules: <span class=\"nu0\">1<\/span><br \/>\nGPU-Loops: <span class=\"nu0\">128<\/span><br \/>\nGPU-Accel: <span class=\"nu0\">40<\/span><br \/>\nPassword lengths range: <span class=\"nu0\">1<\/span> - <span class=\"nu0\">15<\/span><br \/>\nPlatform: AMD compatible platform found<br \/>\nWatchdog: Temperature limit <span class=\"kw1\">set<\/span> to 90c<br \/>\nDevice <span class=\"co0\">#1: Cayman, 2048MB, 0Mhz, 22MCU<\/span><br \/>\nDevice <span class=\"co0\">#1: Allocating 132MB host-memory<\/span><br \/>\nDevice <span class=\"co0\">#1: Kernel .\/kernels\/4098\/m1000_a0.Cayman.64.kernel (1100676 bytes)<\/span><br \/>\nScanning dictionary darkc0de.lst: <span class=\"nu0\">1047587<\/span> bytes <span class=\"br0\">&#40;<\/span><span class=\"nu0\">5.83<\/span><span class=\"sy0\">%<\/span><span class=\"br0\">&#41;<\/span>, <span class=\"nu0\">95782<\/span> words,Scanned dictionary darkc0de.lst: <span class=\"nu0\">17975864<\/span> bytes, <span class=\"nu0\">1707658<\/span> words, <span class=\"nu0\">1707658<\/span> keyspace, starting attack...<br \/>\n80290fc9b3c2b233769aa9d6ced8bc86:hacmebank<br \/>\nStatus.......: Cracked<br \/>\nInput.Mode...: File <span class=\"br0\">&#40;<\/span>darkc0de.lst<span class=\"br0\">&#41;<\/span><br \/>\nHash.Target..: 80290fc9b3c2b233769aa9d6ced8bc86<br \/>\nHash.Type....: NTLM<br \/>\nTime.Running.: <span class=\"nu0\">0<\/span> secs<br \/>\nTime.Util....: 957.9ms<span class=\"sy0\">\/<\/span>0.0ms Real<span class=\"sy0\">\/<\/span>CPU, <span class=\"nu0\">0.0<\/span><span class=\"sy0\">%<\/span> idle<br \/>\nSpeed........: &nbsp;1031.3k c<span class=\"sy0\">\/<\/span>s Real, 42049.4k c<span class=\"sy0\">\/<\/span>s GPU<br \/>\nRecovered....: <span class=\"nu0\">1<\/span><span class=\"sy0\">\/<\/span><span class=\"nu0\">1<\/span> Digests, <span class=\"nu0\">1<\/span><span class=\"sy0\">\/<\/span><span class=\"nu0\">1<\/span> Salts<br \/>\nProgress.....: <span class=\"nu0\">1044861<\/span><span class=\"sy0\">\/<\/span><span class=\"nu0\">1707658<\/span> <span class=\"br0\">&#40;<\/span><span class=\"nu0\">61.19<\/span><span class=\"sy0\">%<\/span><span class=\"br0\">&#41;<\/span><br \/>\nRejected.....: <span class=\"nu0\">56955<\/span><span class=\"sy0\">\/<\/span><span class=\"nu0\">1044861<\/span> <span class=\"br0\">&#40;<\/span><span class=\"nu0\">5.45<\/span><span class=\"sy0\">%<\/span><span class=\"br0\">&#41;<\/span><br \/>\n<span class=\"co4\">HW.Monitor.#<\/span><span class=\"nu0\">1<\/span>: &nbsp;<span class=\"nu0\">0<\/span><span class=\"sy0\">%<\/span> GPU, 45c Temp<br \/>\nStarted: Fri Mar <span class=\"nu0\">23<\/span> <span class=\"nu0\">17<\/span>:<span class=\"nu0\">28<\/span>:<span class=\"nu0\">43<\/span> <span class=\"nu0\">2012<\/span><br \/>\nStopped: Fri Mar <span class=\"nu0\">23<\/span> <span class=\"nu0\">17<\/span>:<span class=\"nu0\">28<\/span>:<span class=\"nu0\">44<\/span> <span class=\"nu0\">2012<\/span><\/div><\/td><\/tr><\/tbody><\/table><\/div>\n<p>That&#8217;s great and all but what if we wanted to crack using a bruteforce attempt? Well we need to tell Hashcat how we want to bruteforce. Instead of using a dictionary file we must create a mask such as the following examples:<\/p>\n<ul>\n<li>?l?l?l?l?l?l?l?l &#8211; 8char lowercase password<\/li>\n<li>-1 ?l?u? ?1?1?1?1?1?1?1?1 &#8211; 8char upper or lowercase password<\/li>\n<li>-1 ?l?u?d?s ?1?1?1?1?1?1?1?1 &#8211; 8char upper,lower,digits,special password<\/li>\n<\/ul>\n<p>In order to create your own masks you;; need to understand the following:<\/p>\n<ul>\n<li>?l is all lower case letters from a to z<\/li>\n<li>?u is all upper case letters from a to z<\/li>\n<li>?d is all digits from 0-9<\/li>\n<li>?s is all special characters on a standard keyboard<\/li>\n<li>?h is all ISO-8859 characters or \u201cHEX\u201d characters<\/li>\n<li>?D is all 8-bit characters from the German alphabet<\/li>\n<li>?F is all 8-bit characters from the French alphabet<\/li>\n<li>?R is all 8-bit characters from the Russian alphabet<\/li>\n<li>-1 abcdABCD -2 1234 is a custom range used like so ?2?2?2?2?1?1?1?1<\/li>\n<\/ul>\n<p>Here&#8217;s a demo of cracking the password hash with a bruteforce setting a 9 character password using only lowercase letters (I&#8217;ve used the flag 2 in this example as ONE looks like a lowercase L)<\/p>\n<div class=\"codecolorer-container bash vibrant\" style=\"overflow:auto;white-space:nowrap;width:100%;height:300px;\"><table cellspacing=\"0\" cellpadding=\"0\"><tbody><tr><td class=\"line-numbers\"><div>1<br \/>2<br \/>3<br \/>4<br \/>5<br \/>6<br \/>7<br \/>8<br \/>9<br \/>10<br \/>11<br \/>12<br \/>13<br \/>14<br \/>15<br \/>16<br \/>17<br \/>18<br \/>19<br \/>20<br \/>21<br \/>22<br \/>23<br \/>24<br \/>25<br \/>26<br \/>27<br \/><\/div><\/td><td><div class=\"bash codecolorer\"><span class=\"co4\">phillips321@KubuntuDesktop:$ <\/span>.<span class=\"sy0\">\/<\/span>oclHashcat-plus64.bin <span class=\"re5\">-a<\/span> <span class=\"nu0\">3<\/span> <span class=\"re5\">-m<\/span> <span class=\"nu0\">1000<\/span> hash.ntlm.txt <span class=\"re5\">-1<\/span> ?l ?<span class=\"nu0\">2<\/span>?<span class=\"nu0\">2<\/span>?<span class=\"nu0\">2<\/span>?<span class=\"nu0\">2<\/span>?<span class=\"nu0\">2<\/span>?<span class=\"nu0\">2<\/span>?<span class=\"nu0\">2<\/span>?<span class=\"nu0\">2<\/span>?<span class=\"nu0\">2<\/span><br \/>\noclHashcat-plus v0.07 by atom starting...<br \/>\nHashes: <span class=\"nu0\">1<\/span><br \/>\nUnique digests: <span class=\"nu0\">1<\/span><br \/>\nBitmaps: <span class=\"nu0\">8<\/span> bits, <span class=\"nu0\">256<\/span> entries, 0x000000ff mask, <span class=\"nu0\">1024<\/span> bytes<br \/>\nGPU-Loops: <span class=\"nu0\">128<\/span><br \/>\nGPU-Accel: <span class=\"nu0\">40<\/span><br \/>\nPassword lengths range: <span class=\"nu0\">1<\/span> - <span class=\"nu0\">15<\/span><br \/>\nPlatform: AMD compatible platform found<br \/>\nWatchdog: Temperature limit <span class=\"kw1\">set<\/span> to 90c<br \/>\nDevice <span class=\"co0\">#1: Cayman, 2048MB, 0Mhz, 22MCU<\/span><br \/>\nDevice <span class=\"co0\">#1: Allocating 132MB host-memory<\/span><br \/>\nDevice <span class=\"co0\">#1: Kernel .\/kernels\/4098\/m1000_a3.Cayman.64.kernel (190388 bytes)<\/span><br \/>\n80290fc9b3c2b233769aa9d6ced8bc86:hacmebank<br \/>\nStatus.......: Cracked<br \/>\nInput.Mode...: Mask <span class=\"br0\">&#40;<\/span>?<span class=\"nu0\">1<\/span>?<span class=\"nu0\">1<\/span>?<span class=\"nu0\">1<\/span>?<span class=\"nu0\">1<\/span>?<span class=\"nu0\">1<\/span>?<span class=\"nu0\">1<\/span>?<span class=\"nu0\">1<\/span>?<span class=\"nu0\">1<\/span>?l<span class=\"br0\">&#41;<\/span><br \/>\nHash.Target..: 80290fc9b3c2b233769aa9d6ced8bc86<br \/>\nHash.Type....: NTLM<br \/>\nTime.Running.: <span class=\"nu0\">10<\/span> mins, <span class=\"nu0\">8<\/span> secs<br \/>\nTime.Util....: 544806.8ms<span class=\"sy0\">\/<\/span>18270.3ms Real<span class=\"sy0\">\/<\/span>CPU, <span class=\"nu0\">3.5<\/span><span class=\"sy0\">%<\/span> idle<br \/>\nSpeed........: &nbsp;4019.6M c<span class=\"sy0\">\/<\/span>s Real, &nbsp;4117.4M c<span class=\"sy0\">\/<\/span>s GPU<br \/>\nRecovered....: <span class=\"nu0\">1<\/span><span class=\"sy0\">\/<\/span><span class=\"nu0\">1<\/span> Digests, <span class=\"nu0\">1<\/span><span class=\"sy0\">\/<\/span><span class=\"nu0\">1<\/span> Salts<br \/>\nProgress.....: <span class=\"nu0\">2189932462080<\/span><span class=\"sy0\">\/<\/span><span class=\"nu0\">5429503678976<\/span> <span class=\"br0\">&#40;<\/span><span class=\"nu0\">40.33<\/span><span class=\"sy0\">%<\/span><span class=\"br0\">&#41;<\/span><br \/>\nRejected.....: <span class=\"nu0\">0<\/span><span class=\"sy0\">\/<\/span><span class=\"nu0\">2189932462080<\/span> <span class=\"br0\">&#40;<\/span><span class=\"nu0\">0.00<\/span><span class=\"sy0\">%<\/span><span class=\"br0\">&#41;<\/span><br \/>\n<span class=\"co4\">HW.Monitor.#<\/span><span class=\"nu0\">1<\/span>: <span class=\"nu0\">77<\/span><span class=\"sy0\">%<\/span> GPU, 85c Temp<br \/>\nStarted: Fri Mar <span class=\"nu0\">23<\/span> <span class=\"nu0\">17<\/span>:<span class=\"nu0\">44<\/span>:<span class=\"nu0\">58<\/span> <span class=\"nu0\">2012<\/span><br \/>\nStopped: Fri Mar <span class=\"nu0\">23<\/span> <span class=\"nu0\">17<\/span>:<span class=\"nu0\">55<\/span>:07 <span class=\"nu0\">2012<\/span><\/div><\/td><\/tr><\/tbody><\/table><\/div>\n<p>Bingo&#8230; PASSWORD FOUND \ud83d\ude42<\/p>\n<p>Just to make you guys realise the speed difference when using a GPU as a cracking platform i have performed a comparison against the cracking the same an 8 character hash using a CPU (AMD x6 1055T @3.8GHz) &#8211; 104minutes on the CPU.<br \/>\n<em>user1:7:7b0662e4590e238a417eaf50cfac29c3:0c341d2d5793a3afafc76f8bc3bd56a1:::<\/em><\/p>\n<div class=\"codecolorer-container bash vibrant\" style=\"overflow:auto;white-space:nowrap;width:100%;\"><table cellspacing=\"0\" cellpadding=\"0\"><tbody><tr><td class=\"line-numbers\"><div>1<br \/>2<br \/>3<br \/>4<br \/>5<br \/>6<br \/>7<br \/>8<br \/>9<br \/>10<br \/>11<br \/>12<br \/><\/div><\/td><td><div class=\"bash codecolorer\">$ <span class=\"sy0\">\/<\/span>hashcat-cli64.bin <span class=\"re5\">-a<\/span> <span class=\"nu0\">3<\/span> <span class=\"re5\">-m<\/span> <span class=\"nu0\">1000<\/span> hash.ntlm.txt ?l?l?l?l?l?l?l?l <span class=\"re5\">--pw-min<\/span>=<span class=\"nu0\">8<\/span><br \/>\nInitializing hashcat v0.39 by atom with <span class=\"nu0\">8<\/span> threads and 32mb segment-size...<br \/>\nNOTE: press enter <span class=\"kw1\">for<\/span> status-screen<br \/>\nAdded hashes from <span class=\"kw2\">file<\/span> hash.ntlm.txt: <span class=\"nu0\">1<\/span> <span class=\"br0\">&#40;<\/span><span class=\"nu0\">1<\/span> salts<span class=\"br0\">&#41;<\/span><br \/>\nActivating quick-digest mode <span class=\"kw1\">for<\/span> single-hash<br \/>\nInput.Mode: Mask <span class=\"br0\">&#40;<\/span>?l?l?l?l?l?l?l?l<span class=\"br0\">&#41;<\/span><br \/>\nIndex.....: <span class=\"nu0\">0<\/span><span class=\"sy0\">\/<\/span><span class=\"nu0\">1<\/span> <span class=\"br0\">&#40;<\/span>segment<span class=\"br0\">&#41;<\/span>, <span class=\"nu0\">208827064576<\/span> <span class=\"br0\">&#40;<\/span>words<span class=\"br0\">&#41;<\/span>, <span class=\"nu0\">0<\/span> <span class=\"br0\">&#40;<\/span>bytes<span class=\"br0\">&#41;<\/span><br \/>\nRecovered.: <span class=\"nu0\">0<\/span><span class=\"sy0\">\/<\/span><span class=\"nu0\">1<\/span> hashes, <span class=\"nu0\">0<\/span><span class=\"sy0\">\/<\/span><span class=\"nu0\">1<\/span> salts<br \/>\nSpeed<span class=\"sy0\">\/<\/span>sec.: - plains, 32.52M words<br \/>\nProgress..: <span class=\"nu0\">5410536168<\/span><span class=\"sy0\">\/<\/span><span class=\"nu0\">208827064576<\/span> <span class=\"br0\">&#40;<\/span><span class=\"nu0\">2.59<\/span><span class=\"sy0\">%<\/span><span class=\"br0\">&#41;<\/span><br \/>\nRunning...: 00:00:02:<span class=\"nu0\">47<\/span><br \/>\nEstimated.: 00:01:<span class=\"nu0\">44<\/span>:<span class=\"nu0\">14<\/span><\/div><\/td><\/tr><\/tbody><\/table><\/div>\n<p>Compared to <strong>38 seconds<\/strong> on the GPU \ud83d\ude42<\/p>\n<div class=\"codecolorer-container bash vibrant\" style=\"overflow:auto;white-space:nowrap;width:100%;height:300px;\"><table cellspacing=\"0\" cellpadding=\"0\"><tbody><tr><td class=\"line-numbers\"><div>1<br \/>2<br \/>3<br \/>4<br \/>5<br \/>6<br \/>7<br \/>8<br \/>9<br \/>10<br \/>11<br \/>12<br \/>13<br \/>14<br \/>15<br \/>16<br \/>17<br \/>18<br \/>19<br \/>20<br \/>21<br \/>22<br \/>23<br \/>24<br \/>25<br \/>26<br \/><\/div><\/td><td><div class=\"bash codecolorer\">$ .<span class=\"sy0\">\/<\/span>oclHashcat-plus64.bin <span class=\"re5\">-a<\/span> <span class=\"nu0\">3<\/span> <span class=\"re5\">-m<\/span> <span class=\"nu0\">1000<\/span> hash.ntlm.txt ?l?l?l?l?l?l?l?l <span class=\"re5\">--perm-min<\/span>=<span class=\"nu0\">8<\/span><br \/>\noclHashcat-plus v0.07 by atom starting...<br \/>\nHashes: <span class=\"nu0\">1<\/span><br \/>\nUnique digests: <span class=\"nu0\">1<\/span><br \/>\nBitmaps: <span class=\"nu0\">8<\/span> bits, <span class=\"nu0\">256<\/span> entries, 0x000000ff mask, <span class=\"nu0\">1024<\/span> bytes<br \/>\nGPU-Loops: <span class=\"nu0\">128<\/span><br \/>\nGPU-Accel: <span class=\"nu0\">40<\/span><br \/>\nPassword lengths range: <span class=\"nu0\">1<\/span> - <span class=\"nu0\">15<\/span><br \/>\nPlatform: AMD compatible platform found<br \/>\nWatchdog: Temperature limit <span class=\"kw1\">set<\/span> to 90c<br \/>\nDevice <span class=\"co0\">#1: Cayman, 2048MB, 0Mhz, 22MCU<\/span><br \/>\nDevice <span class=\"co0\">#1: Allocating 132MB host-memory<\/span><br \/>\nDevice <span class=\"co0\">#1: Kernel .\/kernels\/4098\/m1000_a3.Cayman.64.kernel (190388 bytes)<\/span><br \/>\nStatus.......: Cracked<br \/>\nInput.Mode...: Mask <span class=\"br0\">&#40;<\/span>?l?l?l?l?l?l?l?l<span class=\"br0\">&#41;<\/span><br \/>\nHash.Target..: 0c341d2d5793a3afafc76f8bc3bd56a1<br \/>\nHash.Type....: NTLM<br \/>\nTime.Running.: <span class=\"nu0\">38<\/span> secs<br \/>\nTime.Util....: 38030.1ms<span class=\"sy0\">\/<\/span>1175.7ms Real<span class=\"sy0\">\/<\/span>CPU, <span class=\"nu0\">3.2<\/span><span class=\"sy0\">%<\/span> idle<br \/>\nSpeed........: &nbsp;4033.0M c<span class=\"sy0\">\/<\/span>s Real, &nbsp;4144.3M c<span class=\"sy0\">\/<\/span>s GPU<br \/>\nRecovered....: <span class=\"nu0\">1<\/span><span class=\"sy0\">\/<\/span><span class=\"nu0\">1<\/span> Digests, <span class=\"nu0\">1<\/span><span class=\"sy0\">\/<\/span><span class=\"nu0\">1<\/span> Salts<br \/>\nProgress.....: <span class=\"nu0\">153374228480<\/span><span class=\"sy0\">\/<\/span><span class=\"nu0\">208827064576<\/span> <span class=\"br0\">&#40;<\/span><span class=\"nu0\">73.45<\/span><span class=\"sy0\">%<\/span><span class=\"br0\">&#41;<\/span><br \/>\nRejected.....: <span class=\"nu0\">0<\/span><span class=\"sy0\">\/<\/span><span class=\"nu0\">153374228480<\/span> <span class=\"br0\">&#40;<\/span><span class=\"nu0\">0.00<\/span><span class=\"sy0\">%<\/span><span class=\"br0\">&#41;<\/span><br \/>\n<span class=\"co4\">HW.Monitor.#<\/span><span class=\"nu0\">1<\/span>: <span class=\"nu0\">77<\/span><span class=\"sy0\">%<\/span> GPU, 54c Temp<br \/>\nStarted: Sun Mar <span class=\"nu0\">25<\/span> <span class=\"nu0\">13<\/span>:<span class=\"nu0\">29<\/span>:<span class=\"nu0\">40<\/span> <span class=\"nu0\">2012<\/span><br \/>\nStopped: Sun Mar <span class=\"nu0\">25<\/span> <span class=\"nu0\">13<\/span>:<span class=\"nu0\">30<\/span>:<span class=\"nu0\">18<\/span> <span class=\"nu0\">2012<\/span><\/div><\/td><\/tr><\/tbody><\/table><\/div>\n","protected":false},"excerpt":{"rendered":"<p>The tool we&#8217;re going to use here is hashcat. I&#8217;ll be testing this using a ATI 6950 2GB GPU running on Kubuntu 64bit using catalyst drivers 12.2. Your mileage might vary depending on what card you&#8217;re using. Hashcat (now known as oclhashcat-plus) comes with a few different binaries depending on what architecture you&#8217;ll be running [&hellip;]<\/p>\n","protected":false},"author":1,"featured_media":0,"comment_status":"open","ping_status":"open","sticky":false,"template":"","format":"standard","meta":[],"categories":[1],"tags":[182,187,188,186,189],"_links":{"self":[{"href":"https:\/\/www.phillips321.co.uk\/wp-json\/wp\/v2\/posts\/483"}],"collection":[{"href":"https:\/\/www.phillips321.co.uk\/wp-json\/wp\/v2\/posts"}],"about":[{"href":"https:\/\/www.phillips321.co.uk\/wp-json\/wp\/v2\/types\/post"}],"author":[{"embeddable":true,"href":"https:\/\/www.phillips321.co.uk\/wp-json\/wp\/v2\/users\/1"}],"replies":[{"embeddable":true,"href":"https:\/\/www.phillips321.co.uk\/wp-json\/wp\/v2\/comments?post=483"}],"version-history":[{"count":12,"href":"https:\/\/www.phillips321.co.uk\/wp-json\/wp\/v2\/posts\/483\/revisions"}],"predecessor-version":[{"id":717,"href":"https:\/\/www.phillips321.co.uk\/wp-json\/wp\/v2\/posts\/483\/revisions\/717"}],"wp:attachment":[{"href":"https:\/\/www.phillips321.co.uk\/wp-json\/wp\/v2\/media?parent=483"}],"wp:term":[{"taxonomy":"category","embeddable":true,"href":"https:\/\/www.phillips321.co.uk\/wp-json\/wp\/v2\/categories?post=483"},{"taxonomy":"post_tag","embeddable":true,"href":"https:\/\/www.phillips321.co.uk\/wp-json\/wp\/v2\/tags?post=483"}],"curies":[{"name":"wp","href":"https:\/\/api.w.org\/{rel}","templated":true}]}}