May 25, 2017, 07:08:27 AM
Welcome, Guest. Please login or register.

telnet towel.blinkenlights.nl

Author Topic: Some Custom builds with Hashcat benchmarks  (Read 3805 times)

Offline zerocool

  • Top Hat Member
  • Experienced
  • ********
  • Posts: 223
  • Internets: +26/-3
Re: Some Custom builds with Hashcat benchmarks
« Reply #15 on: June 18, 2015, 03:22:08 AM »
As far as being worth it is up to you. How often do you find yourself cracking hashes and would it be worth the money to you.. they also have nice free online hash cracking services like http://www.hashkiller.co.uk/.. but it is limited.

How long to crack ?  ... It takes me under 2 min to run the Rockyou.txt list  and under an hour to go through a 200gb folder of dictionaries. But if the password isnt in the dictionaries  then no luck. With hashcat you can bruteforce and so on but it can take more time. the only bruteforce i have done so far was for a WPA 10 digit password that took under 2 min.. i think Ch3rn0byl did it around the same time also with his machine.


WPA 10 digit password that took under 2 mins OMG how much to rent that beast?
What about 8  A_Z you tried that yet, would like to know results from that ?
https://forum.hashkiller.co.uk/ IS just go there cracking as many hash's as people post.


Offline H4v0K

  • Administrator
  • Elite
  • *****
  • Posts: 1016
  • Internets: +986/-1
Re: Some Custom builds with Hashcat benchmarks
« Reply #16 on: June 18, 2015, 04:01:42 AM »
As far as being worth it is up to you. How often do you find yourself cracking hashes and would it be worth the money to you.. they also have nice free online hash cracking services like http://www.hashkiller.co.uk/.. but it is limited.

How long to crack ?  ... It takes me under 2 min to run the Rockyou.txt list  and under an hour to go through a 200gb folder of dictionaries. But if the password isnt in the dictionaries  then no luck. With hashcat you can bruteforce and so on but it can take more time. the only bruteforce i have done so far was for a WPA 10 digit password that took under 2 min.. i think Ch3rn0byl did it around the same time also with his machine.


WPA 10 digit password that took under 2 mins OMG how much to rent that beast?
What about 8  A_Z you tried that yet, would like to know results from that ?
https://forum.hashkiller.co.uk/ IS just go there cracking as many hash's as people post.


lol It was just luck. usually you dont know what the password is but in that case we knew it was only 10 digits so that narrowed it down and made it easy..

ive tried the other combos for bruteforce but never let them run very long . im too impatient :o

Offline zerocool

  • Top Hat Member
  • Experienced
  • ********
  • Posts: 223
  • Internets: +26/-3
Re: Some Custom builds with Hashcat benchmarks
« Reply #17 on: June 18, 2015, 05:14:26 AM »
Still it would be good to see the stat's on different mask's with hashcat, Something for the weekend for you to do lol.
Most keys are the default keyspace these day's over 90% of people wouldn't know how to change the key or even access the router.

DEfault key spaces
Code: [Select]
2WIREXXX - [0-9] Length 10 (Common AT&T DSL routers in the USA.)
3Wireless Modem XXXX - [0-9A-F] (first 4 digits of ESSID then 4 x [0-9A-F]) Length 8
ATT?d?d?d - [0-9] Length 10
belkin.xxx - [2-9a-f] length 8
Belkin.XXXX - [0-9a-f] Length 8
belkin.XXXX - [2-9a-f] length 8
Belkin_XXXXXX - [0-9A-F] Length 8
BrightBox - 3 Words separated by "-" Example dizzy-tool-cat Lengths 3-4-5 or any combination.
BTHomeHub1XXXX - [0-9a-f] (Broken algorithm) Length 10
BTHomeHub2XXXX - [2-9a-f] (0 and 1 omitted) Length 10
BTHub3 - [2-9a-f] (0 and 1 omitted) Length 10
BTHub4 - [2-9a-f] (0 and 1 omitted) Length 10
CenturyLinkXXXX - [0-9a-f] Length 14
DJAWEB_xxxxx - [0-9] Length 10
Domino-XXXX - [0-9A-F] Length 8
E583x-xxxx - [0-9] Length 8
E583x-xxxxx - [0-9A-F] Length 8
EasyBox-xxxxxx - [0-9A-F] Length 9
EE-BrightBox - 3 Words separated by "-" Example dizzy-tool-cat Lengths 3-4-5 or any combination.
FRITZ!Box Fon WLAN xxxx - [0-9] Length 16
Iphone 5 lower alpha + 4 numbers Example hello1234
Keenetic-XXXX - [a-zA-Z0-9] Length 8
Livebox-XXXX - Impossible
mifi2 - [A-Z0-9] Length 13
MobileWifi-xxxx - [0-9] Length 8
NETGEARXX - Adjective + Noun + 3 Digits SSID: NETGEAR37 KEY: vastcoconut260
ONOXXXX - [0-9] Length 10
Orange - ?d?l?d?l?l?d - [0-9a-f] Length 8
Orange - ?u?u?d?u?d?d - [0-9A-F] Length 12
Orange-XXXX - [2345679ACEF] Length 8
Plusnet Broadband UK - [a-zA-Z0-9] Length 64
PlusnetWireless-XXXXXX - [0-9A-F] Length 10
SKYXXXXX - [A-Z] Length 8
SpeedTouchXXXXXX - [0-9a-f] Length 10 (Broken algorithm)
SSID: NETGEAR37 KEY: Adjective + Noun + 3 Digits Example vastcoconut260
TALKTALK-XXXXXX - [ABCDEFGHJKMNPQRTUVWXY346789] (ILOSZ0125 omitted) Length 8
Technicolor-Router [0-9A-F] Length 10
Thomson - [0-9A-F] Length 10
ThomsonXXXXXX - [0-9a-f] Length 10
TNCAP-XXXX [0-9A-F] Length 10
TNCAPXXXXXX - [0-9A-F] Length 10
TP-LINK_xxxxxx - [0-9A-F] Length 8
UNITE-XXXX - [0-9] Length 8
UPCXXXXXXX - [A-Z] Length 8
Verizon MIFIXXXX XXXX - [0-9] Length 11
Virgin Media - [abcdefghjklmnpqrstuvwxyz] (0 and i omitted) Length 8
Virgin Mobile - MiFiXXXX XXX - [0-9] Length 11
VMXXXXXXX 2G - [abcdefghjklmnpqrstuvwxyz] (0 and i omitted) Length 8
VMXXXXXXX 5G - [abcdefghjklmnpqrstuvwxyz] (0 and i omitted) Length 8
ZyXELXXXXXX - [0-9A-Z] Length 13

Took from here
Code: [Select]
https://forum.hashkiller.co.uk/topic-view.aspx?t=2715&m=56710#56710


Offline H4v0K

  • Administrator
  • Elite
  • *****
  • Posts: 1016
  • Internets: +986/-1
Re: Some Custom builds with Hashcat benchmarks
« Reply #18 on: June 18, 2015, 05:23:27 AM »
Still it would be good to see the stat's on different mask's with hashcat, Something for the weekend for you to do lol.
Most keys are the default keyspace these day's over 90% of people wouldn't know how to change the key or even access the router.

DEfault key spaces
Code: [Select]
2WIREXXX - [0-9] Length 10 (Common AT&T DSL routers in the USA.)
3Wireless Modem XXXX - [0-9A-F] (first 4 digits of ESSID then 4 x [0-9A-F]) Length 8
ATT?d?d?d - [0-9] Length 10
belkin.xxx - [2-9a-f] length 8
Belkin.XXXX - [0-9a-f] Length 8
belkin.XXXX - [2-9a-f] length 8
Belkin_XXXXXX - [0-9A-F] Length 8
BrightBox - 3 Words separated by "-" Example dizzy-tool-cat Lengths 3-4-5 or any combination.
BTHomeHub1XXXX - [0-9a-f] (Broken algorithm) Length 10
BTHomeHub2XXXX - [2-9a-f] (0 and 1 omitted) Length 10
BTHub3 - [2-9a-f] (0 and 1 omitted) Length 10
BTHub4 - [2-9a-f] (0 and 1 omitted) Length 10
CenturyLinkXXXX - [0-9a-f] Length 14
DJAWEB_xxxxx - [0-9] Length 10
Domino-XXXX - [0-9A-F] Length 8
E583x-xxxx - [0-9] Length 8
E583x-xxxxx - [0-9A-F] Length 8
EasyBox-xxxxxx - [0-9A-F] Length 9
EE-BrightBox - 3 Words separated by "-" Example dizzy-tool-cat Lengths 3-4-5 or any combination.
FRITZ!Box Fon WLAN xxxx - [0-9] Length 16
Iphone 5 lower alpha + 4 numbers Example hello1234
Keenetic-XXXX - [a-zA-Z0-9] Length 8
Livebox-XXXX - Impossible
mifi2 - [A-Z0-9] Length 13
MobileWifi-xxxx - [0-9] Length 8
NETGEARXX - Adjective + Noun + 3 Digits SSID: NETGEAR37 KEY: vastcoconut260
ONOXXXX - [0-9] Length 10
Orange - ?d?l?d?l?l?d - [0-9a-f] Length 8
Orange - ?u?u?d?u?d?d - [0-9A-F] Length 12
Orange-XXXX - [2345679ACEF] Length 8
Plusnet Broadband UK - [a-zA-Z0-9] Length 64
PlusnetWireless-XXXXXX - [0-9A-F] Length 10
SKYXXXXX - [A-Z] Length 8
SpeedTouchXXXXXX - [0-9a-f] Length 10 (Broken algorithm)
SSID: NETGEAR37 KEY: Adjective + Noun + 3 Digits Example vastcoconut260
TALKTALK-XXXXXX - [ABCDEFGHJKMNPQRTUVWXY346789] (ILOSZ0125 omitted) Length 8
Technicolor-Router [0-9A-F] Length 10
Thomson - [0-9A-F] Length 10
ThomsonXXXXXX - [0-9a-f] Length 10
TNCAP-XXXX [0-9A-F] Length 10
TNCAPXXXXXX - [0-9A-F] Length 10
TP-LINK_xxxxxx - [0-9A-F] Length 8
UNITE-XXXX - [0-9] Length 8
UPCXXXXXXX - [A-Z] Length 8
Verizon MIFIXXXX XXXX - [0-9] Length 11
Virgin Media - [abcdefghjklmnpqrstuvwxyz] (0 and i omitted) Length 8
Virgin Mobile - MiFiXXXX XXX - [0-9] Length 11
VMXXXXXXX 2G - [abcdefghjklmnpqrstuvwxyz] (0 and i omitted) Length 8
VMXXXXXXX 5G - [abcdefghjklmnpqrstuvwxyz] (0 and i omitted) Length 8
ZyXELXXXXXX - [0-9A-Z] Length 13

Took from here
Code: [Select]
https://forum.hashkiller.co.uk/topic-view.aspx?t=2715&m=56710#56710

Yea it would . when i get time i need to get back into it , there is alot to learn with cracking and hashcat . I still need to get my 7 gpu set up done to see if its faster . 

Offline yashar26

  • Top Hat Member
  • Elite
  • ********
  • Posts: 584
  • Internets: +76/-2
  • Sec+, CEH v8, eCPPT Gold, eWAPT
Re: Some Custom builds with Hashcat benchmarks
« Reply #19 on: June 18, 2015, 05:37:41 AM »
Quote
I still need to get my 7 gpu set up done to see if its faster .  [/color]

I love it when you talk dirty. Get those bad boys setup quick!

Offline TAPE

  • Top Hat Member Moderator
  • Elite
  • ********
  • Posts: 1247
  • Internets: +192/-0
Re: Some Custom builds with Hashcat benchmarks
« Reply #20 on: June 18, 2015, 11:25:15 AM »
Quote from: H4v0K
Yea it would . when i get time i need to get back into it , there is alot to learn with cracking and hashcat . I still need to get my 7 gpu set up done to see if its faster . 


Good God man... running that for an hour would probably power my whole house for a year..


You would need a separate group (not sure how you call that in english) to allow for the power.. 

Take all the advice you like and then tell everyone to **** off and do your own thing -- Gitsnik

Offline H4v0K

  • Administrator
  • Elite
  • *****
  • Posts: 1016
  • Internets: +986/-1
Re: Some Custom builds with Hashcat benchmarks
« Reply #21 on: June 18, 2015, 11:47:10 AM »
Quote from: H4v0K
Yea it would . when i get time i need to get back into it , there is alot to learn with cracking and hashcat . I still need to get my 7 gpu set up done to see if its faster . 



Good God man... running that for an hour would probably power my whole house for a year..


You would need a separate group (not sure how you call that in english) to allow for the power..

Actually these 270s aren't that bad. when i was running 6 of them with hashcat they weren't even pulling 700 watts.  when i get a cluster of machines built im going to hook them up to a generator for power  , then take over the WORLD  .....lol :P 

Offline R4v3N

  • Administrator
  • Super Elite
  • *****
  • Posts: 3691
  • Internets: +160/-1
  • The googles and the metasploits...
    • Top-Hat-Sec
Re: Some Custom builds with Hashcat benchmarks
« Reply #22 on: June 18, 2015, 01:33:40 PM »
Dang, at least I know who to call now when wanting to crack a password.

Offline H4v0K

  • Administrator
  • Elite
  • *****
  • Posts: 1016
  • Internets: +986/-1
Re: Some Custom builds with Hashcat benchmarks
« Reply #23 on: June 18, 2015, 02:04:02 PM »
dude, i ll send you all my hashes!
and the r9 295x2 are very good for hashing but require the old 14.9 catalyst drivers to work :)
Thanks for the post I enjoyed it!

Dang, at least I know who to call now when wanting to crack a password.

haha for sure :)

Offline w33nd0x

  • Top Hat Member
  • Experienced
  • ********
  • Posts: 113
  • Internets: +19/-0
Re: Some Custom builds with Hashcat benchmarks
« Reply #24 on: June 22, 2015, 12:52:37 AM »
Far out this is thread?! That is some delicious looking machines, my crap PC is getting too old, what's the setup on that machine? Like what motherboard etc?

I don't know much about hash cracking either, would love for someone to explain it to me, like from getting the hashes to cracking them, what tools are used, how its done, and if it's worth it(like how long to crack with a setup like that?)

Hey w33nd0x,
You can use any motherboard with any processor that supports PCI-E for Graphic cards,
Till recently AMD graphic cards dominated the cracking world due to the way it was built. However now NVIDIA has come up with some awesome graphic cards that draw alot less power for a descent hash cracking rate. Its important as some hashes can take days, weeks, months.. etc.. to minimise your electricity costs it can be quite useful.

So what hash cracking apps like hashcat do, is that because a Hash is irreversible it will take a list from a dictionary or bruteforce and convert it to the same hash algorithm (MD5, MD4. SHA1, etc) and compared it to the hash you are trying to crack. Once it finds a matching Hash, it will display which password matches the one of the hash you are trying to crack.

You can also crack hashes with your CPU, but that will take much much longer. So (correct me if I am wrong guys) but Hashcat (CPU) oclhashcat (AMD gpu) cudahashcat (NVIDIA gpus) are specifically designed to each of the hardware categories mentioned.

I hope this answers your question

Cool thanks for the answers! Never really done much to do with password/hash cracking, I figure the standard-type passwords are something like n837m392 so what list would have that in it? lol. Not like someone is going to change their wifi password to "password1" or something that seems to be in pwlists. As mentioned they wouldn't even know how to access it to change it in the first place probably.

Offline Malachai

  • Top Hat Member
  • Super Elite
  • ********
  • Posts: 2800
  • Internets: +18/-7
  • #!/bin/sh Day/Night (Grey Hat)
Re: Some Custom builds with Hashcat benchmarks
« Reply #25 on: July 07, 2015, 04:53:41 PM »
Good god! what I would do with that rig. I would be downloading so many hash and stuff.

It's time to back on cracking and building password file once again.
** Dont' judge me! **

*//
  Hope that Firewall works because your SCREWED  
  //*

Offline H4v0K

  • Administrator
  • Elite
  • *****
  • Posts: 1016
  • Internets: +986/-1
Re: Some Custom builds with Hashcat benchmarks
« Reply #26 on: April 24, 2017, 04:03:50 PM »
Updated some benchmarks with 2 1080 TI'shttp://forum.top-hat-sec.com/index.php?topic=5196.0
« Last Edit: April 25, 2017, 06:03:32 AM by H4v0K »

Offline Gingerbread Man

  • *High Tech Low-life*
  • Administrator
  • Elite
  • *****
  • Posts: 926
  • Internets: +93/-0
Re: Some Custom builds with Hashcat benchmarks
« Reply #27 on: April 25, 2017, 08:55:56 AM »
So when are you going to cook us up a vanity hidden domain for the THS Hidden Service?