This wasn’t terribly fast, so I was hoping that rockyou+best64 alone would crack the hash. Hashcat was successfully running, and trying about 119,000 hashes a second.
Usage of /: 26.5% of 7.69GB Users logged in: 0 System information as of Mon Apr 20 21:01: Warning: Permanently added '5.6.7.8' (ECDSA) to the list of known hosts. The authenticity of host '5.6.7.8 (5.6.7.8)' can't be established.ĮCDSA key fingerprint is SHA256:LvvA+Fdfnoe4FokT7m6WTDjZlQNx0JwI+WwjRb+qdMQ.Īre you sure you want to continue connecting (yes/no)? yes 2-3-4: ~/tools/Rook$ ssh -i ~/.ssh/rook-crackingPrivate.pem 8 Īws_spot_instance_request.rook-spot (remote-exec): nohup: appending output to '/home/ubuntu/nohup.out'Īws_spot_instance_request.rook-spot: Creation complete after 4m19s Īpply complete! Resources: 1 added, 0 changed, 0 destroyed.Īfter Rook created my interface, I connected to it to check the status. Īws_spot_instance_request.rook-spot: Refreshing state. terraform apply -var=identity=rook-crackingPrivate -var=hashmode=12500 -var=itype=p3.16xlarge -var=sshkeyfile=/home/ubuntu/.ssh/rook-crackingPrivate.pem -var=spotprice=9.07Īws_security_group.rook_security: Refreshing state. Creating Rook instance to crack passwords with an AWS p3.16xlarge instance. Bidding for spot instance at max price of 9.07. Terraform AWS instances for cracking hashes : ~/tools/Rook$ python rook.py -t p3.16xlarge -f /home/ubuntu/hashes/k2.txt -m 12500 -i rook-crackingPrivate -s /home/ubuntu/.ssh/rook-crackingPrivate.pem -spot 9.07 -debug
With the hashes in hand, it was time to kick off Rook. Note that this is the un-redacted hash, so feel free to follow along at home! : ~/tools/johntheripper/run#. Get Your NordVPN Offer Now!įirst, I used rar2john to extract the password hash from the archive. This was likely only a video file related to my old Day of Defeat team, but I still wanted to check.Īfter a little bit of research, I found a technique for obtaining and cracking these hashes using hashcat. While cleaning up my new NAS, I came across a password protected RAR archive. If you didn’t see my last post, I have been using Rook for cloud password cracking. To demo some more of Rook’s capabilities, I will show how to crack RAR passwords using hashcat.
0 kommentar(er)
