|
|
@ -5,7 +5,7 @@ summary: >
|
|
|
|
when you can't think of a password for a specific service (or (zip)file). This
|
|
|
|
when you can't think of a password for a specific service (or (zip)file). This
|
|
|
|
is how I recover most of them.
|
|
|
|
is how I recover most of them.
|
|
|
|
date: 2024-09-08T22:49:01+0200
|
|
|
|
date: 2024-09-08T22:49:01+0200
|
|
|
|
#lastmod:
|
|
|
|
lastmod: 2024-10-13T09:19:41+0000
|
|
|
|
coverCaption: Cover image by [jaydeep_](https://pixabay.com/illustrations/hacking-cybercrime-cybersecurity-3112539/).
|
|
|
|
coverCaption: Cover image by [jaydeep_](https://pixabay.com/illustrations/hacking-cybercrime-cybersecurity-3112539/).
|
|
|
|
categories:
|
|
|
|
categories:
|
|
|
|
- computerstuff
|
|
|
|
- computerstuff
|
|
|
@ -374,3 +374,104 @@ found a working routine for now...
|
|
|
|
|
|
|
|
|
|
|
|
[john]: https://www.openwall.com/john/
|
|
|
|
[john]: https://www.openwall.com/john/
|
|
|
|
[hashcat]: https://hashcat.net/hashcat/
|
|
|
|
[hashcat]: https://hashcat.net/hashcat/
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
## Update: Laptop comparisons
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
_Updated on October 13, 2024_
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
{{< alert circle-info >}}
|
|
|
|
|
|
|
|
The results can probably increased by using a high-end tower PC with one or more
|
|
|
|
|
|
|
|
graphic cards.
|
|
|
|
|
|
|
|
{{< /alert >}}
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
{{< alert triangle-exclamation >}}
|
|
|
|
|
|
|
|
Notice the units in the following tables (like <kbd>H/s</kbd>,
|
|
|
|
|
|
|
|
<kbd>kH/s</kbd> or <kbd>MH/s</kbd>)!
|
|
|
|
|
|
|
|
{{< /alert >}}
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
Below you see a short comparison between my **Lenovo X1 Carbon (Gen7; i7-8665U)**
|
|
|
|
|
|
|
|
and my **Tuxedo Polaris 17 (Ryzen 7 4800H)** with **integrated NVIDIA GeForce RTX 2060**.
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
{{< alert circle-info >}}
|
|
|
|
|
|
|
|
Only CUDA was used on the Polaris, no CPU was involved. I am not sure if there is any
|
|
|
|
|
|
|
|
progress for OpenCL on AMD CPUs (I haven't looked into this as it's not relevant for me).
|
|
|
|
|
|
|
|
{{< /alert >}}
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
### WPA-PBKDF2-PMKID+EAPOL
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
| hash mode | command line | X1 Carbon | Polaris 17 |
|
|
|
|
|
|
|
|
| --------- | ---------------------------- | --------- | ---------- |
|
|
|
|
|
|
|
|
| 22000 | `hashcat -m 22000 -D 1,2 -b` | 17178 H/s | 152.9 kH/s |
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
### WPA-PMKID-PBKDF2
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
Deprecated in favor of mode 22000 (see above):
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
> The plugin 16800 is deprecated and was replaced with plugin 22000.
|
|
|
|
|
|
|
|
> For more details, please read: https://hashcat.net/forum/thread-10253.html
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
| hash mode | command line | X1 Carbon | Polaris 17 |
|
|
|
|
|
|
|
|
| --------- | ---------------------------- | --------- | ---------- |
|
|
|
|
|
|
|
|
| 16800 | `hashcat -m 16800 -D 1,2 -b` | 16930 H/s | 146.7 kH/s |
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
### WPA-EAPOL-PBKDF2
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
Deprecated in favor of mode 22000 (see above above):
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
> The plugin 2500 is deprecated and was replaced with plugin 22000.
|
|
|
|
|
|
|
|
> For more details, please read: https://hashcat.net/forum/thread-10253.html
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
| hash mode | command line | X1 Carbon | Polaris 17 |
|
|
|
|
|
|
|
|
| --------- | --------------------------- | --------- | ---------- |
|
|
|
|
|
|
|
|
| 2500 | `hashcat -m 2500 -D 1,2 -b` | 15865 H/s | 152.0 kH/s |
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
### PKZIP (Compressed Multi-File)
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
Expect some OpenCL issues! Only the CPU was used on the X1 Carbon and the
|
|
|
|
|
|
|
|
Tuxedo Polaris wasn't able to finish the session.
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
| hash mode | command line | X1 Carbon | Polaris 17 |
|
|
|
|
|
|
|
|
| --------- | ---------------------------- | ------------ | ----------- |
|
|
|
|
|
|
|
|
| 17220 | `hashcat -m 17220 -D 1,2 -b` | 64116.2 kH/s | N/A (error) |
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
The X1 Carbon displayed the following warning:
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
> ```console
|
|
|
|
|
|
|
|
> -------------------------------------------------
|
|
|
|
|
|
|
|
> * Hash-Mode 17220 (PKZIP (Compressed Multi-File))
|
|
|
|
|
|
|
|
> -------------------------------------------------
|
|
|
|
|
|
|
|
>
|
|
|
|
|
|
|
|
> * Device #2: Skipping (hash-mode 17220)
|
|
|
|
|
|
|
|
> This is due to a known OpenCL runtime and/or device driver issue (not a hashcat issue)
|
|
|
|
|
|
|
|
> You can use --force to override, but do not report related errors.
|
|
|
|
|
|
|
|
> ```
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
The Polaris aborted with a few of these error messages:
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
> ```console
|
|
|
|
|
|
|
|
> clEnqueueNDRangeKernel(): CL_OUT_OF_HOST_MEMORY
|
|
|
|
|
|
|
|
> ```
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
### MD5
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
| hash mode | command line | X1 Carbon | Polaris 17 |
|
|
|
|
|
|
|
|
| --------- | ------------------------ | ----------- | ----------- |
|
|
|
|
|
|
|
|
| 0 | `hashcat -m 0 -D 1,2 -b` | 1224.0 MH/s | 9527.4 MH/s |
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
### SHA1
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
| hash mode | command line | X1 Carbon | Polaris 17 |
|
|
|
|
|
|
|
|
| --------- | -------------------------- | ---------- | ----------- |
|
|
|
|
|
|
|
|
| 100 | `hashcat -m 100 -D 1,2 -b` | 317.9 MH/s | 3029.0 MH/s |
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
### SHA2-512
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
| hash mode | command line | X1 Carbon | Polaris 17 |
|
|
|
|
|
|
|
|
| --------- | --------------------------- | ------------ | ---------- |
|
|
|
|
|
|
|
|
| 1700 | `hashcat -m 1700 -D 1,2 -b` | 42721.2 kH/s | 442.4 MH/s |
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
### SHA3-512
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
| hash mode | command line | X1 Carbon | Polaris 17 |
|
|
|
|
|
|
|
|
| --------- | ---------------------------- | ------------ | ---------- |
|
|
|
|
|
|
|
|
| 17600 | `hashcat -m 17600 -D 1,2 -b` | 36062.7 kH/s | 277.2 MH/s |
|
|
|
|