Follow @Openwall on Twitter for new release announcements and other news
[<prev] [next>] [thread-next>] [day] [month] [year] [list]
Date: Mon, 10 Aug 2015 16:02:34 -0600
From: Matthew Smith <turbogiant76@...il.com>
To: john-users@...ts.openwall.com
Subject: a question about encrypted 7z hashes

Currently the 7z2john.py does not support 7z archives with unencrypted file
names.  However, hashcat has a utility that will do this.  I was wondering
about the compatibility between the two hashes.

Could you use a hash generated by the hashcat extractor utility with John
the Ripper?  There seem to be some differences between the two hashes.
Here is an example from a test archive:

Output from 7z2john.py:
$7z$0$19$0$1122$8$4a44f9c4689caf900000000000000000$3341692866$208$201$d8153b86f6a78ce75e042338531d9aee5368a7a26f34f24ac8dbb0677815399917c16aeb7546e4dc0
297783caf899ba3af3ecae4e2a5692436e96b1f1e0bbf8a122a17d2cc56f68193d8ab2b1c0b51b00
3087e548909aea1533cb6bf3983894bce51773c4f4d6aa175c826f151305ebb259281bdf10571cb6
fc0fe9ab629a9ec486fb6da7fec2c98ab677246a0abdade288bc8916077b7cf270b35bdea1a0e44a
ccf07686041baa55bd0ad0fae19ee2fc46ee87167606ba2cedbc7b61e970c637f6b4ddc563d64813
39775c52b653f00

Output from 7z2hashcat.pl:
$7z$0$19$0$$16$c46ee87167606ba2cedbc7b61e970c63$3341692866$16$9$7f6b4ddc563d6481
339775c52b653f00

I guess I don't understand hashes.  Shouldn't they be the same as the
password is the same?  Why are they different?  Could I use the output from
the 7z2hashcat.pl hash as input to JTR as I can't get the hash with any
available JTR tools?

I've tried everything I can think of using hashcat and just wanted to see
what I can do using JTR.  Also I can run JTR on my cpu while running
hashcat on my gpu.

Thanks for any help.

Powered by blists - more mailing lists

Confused about mailing lists and their use? Read about mailing lists on Wikipedia and check out these guidelines on proper formatting of your messages.