haiti-hash 1.0.1 → 1.2.0

Sign up to get free protection for your applications and to get access to all the features.
checksums.yaml CHANGED
@@ -1,7 +1,7 @@
1
1
  ---
2
2
  SHA256:
3
- metadata.gz: 779be0ecdc21676fca161e91945328e5ed880af478df7e2d039b132441bae1e8
4
- data.tar.gz: 9cf4f8a7e66128a0f77f9ac6efd6bd8a863043ed24a7bce3310d10325d047632
3
+ metadata.gz: 1c099f7e619faf1e73b462f58f0e716c34778a19d9cf218d83631b1043986311
4
+ data.tar.gz: e8c2240e8e88453596e83e29df991c72339d293395fa83876bbf5650d0c585e3
5
5
  SHA512:
6
- metadata.gz: aef3eff34ae114fb97f368f2b88af06e1111e47147270a7dfb04ad1f8f1de6e8884955940cf4b7a0195a76587d4347fb0f6754c4015b2f333c88c91b18eadb76
7
- data.tar.gz: f5ebbcb2dee7dee6975da073007de110d7d9edaaca3562e8a0549980bf9104a82eb0a32cc288b67f8520d21ad64cd3267b4cb36504e00327aaeb9a0d2f223e08
6
+ metadata.gz: a091e70ebca0dff0be0874e49455028f387bb6b1acbdb88b895e063cd4770d575f16ece828237c562c44eeee8b5acf9a22bf85164b1e715bd9c93ea5602787ea
7
+ data.tar.gz: c3ccf4514ee772fb408e08b11404523667ac4f8e8442290a7e88b49fbd1b000b60cd84c834b8525e667e3a3301b0b6ee88268c735b0650436df5e0df73a2a9c4
data/bin/haiti CHANGED
@@ -47,12 +47,8 @@ begin
47
47
  next if type.extended && !args['--extended']
48
48
 
49
49
  print Paint[type.name, :bold]
50
- unless type.hashcat.nil? || args['--short'] || args['--john-only']
51
- print Paint[" [HC: #{type.hashcat}]", :blue]
52
- end
53
- unless type.john.nil? || args['--short'] || args['--hashcat-only']
54
- print Paint[" [JtR: #{type.john}]", :green]
55
- end
50
+ print Paint[" [HC: #{type.hashcat}]", :blue] unless type.hashcat.nil? || args['--short'] || args['--john-only']
51
+ print Paint[" [JtR: #{type.john}]", :green] unless type.john.nil? || args['--short'] || args['--hashcat-only']
56
52
  puts
57
53
  end
58
54
  end
data/data/commons.json ADDED
@@ -0,0 +1,29 @@
1
+ [
2
+ "MD5",
3
+ "SHA-1",
4
+ "SHA-256",
5
+ "SHA-512",
6
+ "bcrypt",
7
+ "NTLM",
8
+ "NetNTLMv2",
9
+ "NetNTLMv1-VANILLA / NetNTLMv1+ESS",
10
+ "BLAKE2-512",
11
+ "SHA3-224",
12
+ "SHA3-256",
13
+ "SHA3-512",
14
+ "Keccak-256",
15
+ "Keccak-512",
16
+ "CRC-32B",
17
+ "CRC-32",
18
+ "CRC-16",
19
+ "CRC-64",
20
+ "GOST R 34.11-94",
21
+ "Apache MD5",
22
+ "MD5(APR)",
23
+ "md5apr1",
24
+ "Domain Cached Credentials",
25
+ "Domain Cached Credentials 2",
26
+ "LM",
27
+ "RIPEMD-160",
28
+ "scrypt"
29
+ ]
data/data/prototypes.json CHANGED
@@ -99,13 +99,18 @@
99
99
  ]
100
100
  },
101
101
  {
102
- "regex": "^(\\$crc32\\$[a-f0-9]{8}.)?[a-f0-9]{8}$",
102
+ "regex": "^(\\$crc32\\$)?([a-f0-9]{8}.)?[a-f0-9]{8}$",
103
103
  "modes": [
104
104
  {
105
105
  "john": "crc32",
106
- "hashcat": null,
106
+ "hashcat": 11500,
107
107
  "extended": false,
108
- "name": "CRC-32"
108
+ "name": "CRC-32",
109
+ "samples": [
110
+ "c762de4a:00000000",
111
+ "$crc32$00000000.fa455f6b",
112
+ "$crc32$4ff4f23f.ce6eb863"
113
+ ]
109
114
  }
110
115
  ]
111
116
  },
@@ -116,7 +121,12 @@
116
121
  "john": "bfegg",
117
122
  "hashcat": null,
118
123
  "extended": false,
119
- "name": "Eggdrop IRC Bot"
124
+ "name": "Eggdrop IRC Bot",
125
+ "samples": [
126
+ "+9F93o1OxwgK1",
127
+ "+C/.8o.Wuph9.",
128
+ "+Obytd.zXYjH/"
129
+ ]
120
130
  }
121
131
  ]
122
132
  },
@@ -127,19 +137,34 @@
127
137
  "john": "descrypt",
128
138
  "hashcat": 1500,
129
139
  "extended": false,
130
- "name": "DES(Unix)"
140
+ "name": "DES(Unix)",
141
+ "samples": [
142
+ "CCNf8Sbh3HDfQ",
143
+ "CCX.K.MFy4Ois",
144
+ "CC4rMpbg9AMZ."
145
+ ]
131
146
  },
132
147
  {
133
148
  "john": "descrypt",
134
149
  "hashcat": 1500,
135
150
  "extended": false,
136
- "name": "Traditional DES"
151
+ "name": "Traditional DES",
152
+ "samples": [
153
+ "CCNf8Sbh3HDfQ",
154
+ "CCX.K.MFy4Ois",
155
+ "CC4rMpbg9AMZ."
156
+ ]
137
157
  },
138
158
  {
139
159
  "john": "descrypt",
140
160
  "hashcat": 1500,
141
161
  "extended": false,
142
- "name": "DEScrypt"
162
+ "name": "DEScrypt",
163
+ "samples": [
164
+ "CCNf8Sbh3HDfQ",
165
+ "CCX.K.MFy4Ois",
166
+ "CC4rMpbg9AMZ."
167
+ ]
143
168
  }
144
169
  ]
145
170
  },
@@ -152,12 +177,6 @@
152
177
  "extended": false,
153
178
  "name": "MySQL323"
154
179
  },
155
- {
156
- "john": null,
157
- "hashcat": 3100,
158
- "extended": false,
159
- "name": "DES(Oracle)"
160
- },
161
180
  {
162
181
  "john": null,
163
182
  "hashcat": 5100,
@@ -166,21 +185,38 @@
166
185
  },
167
186
  {
168
187
  "john": null,
169
- "hashcat": 3100,
188
+ "hashcat": null,
170
189
  "extended": false,
171
- "name": "Oracle 7-10g"
190
+ "name": "FNV-164"
172
191
  },
173
192
  {
174
193
  "john": null,
175
194
  "hashcat": null,
176
195
  "extended": false,
177
- "name": "FNV-164"
196
+ "name": "CRC-64"
197
+ }
198
+ ]
199
+ },
200
+ {
201
+ "regex": "^[a-f0-9]{16}:[a-f0-9]{0,30}$",
202
+ "modes": [
203
+ {
204
+ "john": null,
205
+ "hashcat": 3100,
206
+ "extended": false,
207
+ "name": "DES(Oracle)",
208
+ "samples": [
209
+ "792FCB0AE31D8489:7284616727"
210
+ ]
178
211
  },
179
212
  {
180
213
  "john": null,
181
- "hashcat": null,
214
+ "hashcat": 3100,
182
215
  "extended": false,
183
- "name": "CRC-64"
216
+ "name": "Oracle 7-10g",
217
+ "samples": [
218
+ "792FCB0AE31D8489:7284616727"
219
+ ]
184
220
  }
185
221
  ]
186
222
  },
@@ -192,6 +228,12 @@
192
228
  "hashcat": 2400,
193
229
  "extended": false,
194
230
  "name": "Cisco-PIX(MD5)"
231
+ },
232
+ {
233
+ "john": "dynamic_19",
234
+ "hashcat": 2400,
235
+ "extended": true,
236
+ "name": "md5($pass)"
195
237
  }
196
238
  ]
197
239
  },
@@ -211,9 +253,14 @@
211
253
  "modes": [
212
254
  {
213
255
  "john": "bsdicrypt",
214
- "hashcat": null,
256
+ "hashcat": 12400,
215
257
  "extended": false,
216
- "name": "BSDi Crypt"
258
+ "name": "BSDi Crypt",
259
+ "samples": [
260
+ "_GW..8841inaTltazRsQ",
261
+ "_J9..XXXXsqM/YSSP..Y",
262
+ "_J9..SDSD5YGyRCr4W4c"
263
+ ]
217
264
  }
218
265
  ]
219
266
  },
@@ -224,7 +271,25 @@
224
271
  "john": null,
225
272
  "hashcat": null,
226
273
  "extended": false,
227
- "name": "CRC-96(ZIP)"
274
+ "name": "CRC-96 (ZIP)"
275
+ },
276
+ {
277
+ "john": null,
278
+ "hashcat": 20500,
279
+ "extended": false,
280
+ "name": "PKZIP Master Key",
281
+ "samples": [
282
+ "f1eff5c0368d10311dcfc419"
283
+ ]
284
+ },
285
+ {
286
+ "john": null,
287
+ "hashcat": 20510,
288
+ "extended": false,
289
+ "name": "PKZIP Master Key (6 byte optimization)",
290
+ "samples": [
291
+ "f1eff5c0368d10311dcfc419"
292
+ ]
228
293
  }
229
294
  ]
230
295
  },
@@ -257,7 +322,11 @@
257
322
  "john": "raw-md5",
258
323
  "hashcat": 0,
259
324
  "extended": false,
260
- "name": "MD5"
325
+ "name": "MD5",
326
+ "samples": [
327
+ "8743b52063cd84097a65d1633f5c74f5",
328
+ "098F6BCD4621D373CADE4E832627B4F6"
329
+ ]
261
330
  },
262
331
  {
263
332
  "john": "raw-md4",
@@ -278,16 +347,22 @@
278
347
  "name": "LM"
279
348
  },
280
349
  {
281
- "john": "ripemd-128",
350
+ "john": "haval-128-4",
282
351
  "hashcat": null,
283
352
  "extended": false,
284
- "name": "RIPEMD-128"
353
+ "name": "Haval-128 (4 rounds)"
285
354
  },
286
355
  {
287
- "john": "haval-128-4",
356
+ "john": "dynamic_160",
357
+ "hashcat": null,
358
+ "extended": false,
359
+ "name": "Haval-128 (3 rounds)"
360
+ },
361
+ {
362
+ "john": "dynamic_180",
288
363
  "hashcat": null,
289
364
  "extended": false,
290
- "name": "Haval-128"
365
+ "name": "Haval-128 (5 rounds)"
291
366
  },
292
367
  {
293
368
  "john": null,
@@ -326,37 +401,40 @@
326
401
  "name": "ZipMonster"
327
402
  },
328
403
  {
329
- "john": null,
330
- "hashcat": 11000,
404
+ "john": "dynamic_3",
405
+ "hashcat": 3500,
331
406
  "extended": true,
332
- "name": "PrestaShop"
407
+ "name": "md5(md5(md5($pass)))",
408
+ "samples": [
409
+ "9882d0778518b095917eb589f6998441"
410
+ ]
333
411
  },
334
412
  {
335
- "john": null,
336
- "hashcat": 3500,
413
+ "john": "dynamic_2",
414
+ "hashcat": null,
337
415
  "extended": true,
338
- "name": "md5(md5(md5($pass)))"
416
+ "name": "md5(md5($pass))"
339
417
  },
340
418
  {
341
419
  "john": null,
342
420
  "hashcat": 4300,
343
421
  "extended": true,
344
- "name": "md5(strtoupper(md5($pass)))"
422
+ "name": "md5(uppercase(md5($pass)))"
345
423
  },
346
424
  {
347
- "john": null,
425
+ "john": "dynamic_22",
348
426
  "hashcat": 4400,
349
427
  "extended": true,
350
428
  "name": "md5(sha1($pass))"
351
429
  },
352
430
  {
353
- "john": null,
431
+ "john": "dynamic_1",
354
432
  "hashcat": 10,
355
433
  "extended": true,
356
434
  "name": "md5($pass.$salt)"
357
435
  },
358
436
  {
359
- "john": null,
437
+ "john": "dynamic_4",
360
438
  "hashcat": 20,
361
439
  "extended": true,
362
440
  "name": "md5($salt.$pass)"
@@ -386,13 +464,16 @@
386
464
  "name": "HMAC-MD5 (key = $salt)"
387
465
  },
388
466
  {
389
- "john": null,
467
+ "john": "dynamic_8",
390
468
  "hashcat": 3610,
391
469
  "extended": true,
392
- "name": "md5(md5($salt).$pass)"
470
+ "name": "md5(md5($salt).$pass)",
471
+ "samples": [
472
+ "7b57255a15958ef898543ea6cc3313bc:1234"
473
+ ]
393
474
  },
394
475
  {
395
- "john": null,
476
+ "john": "dynamic_9",
396
477
  "hashcat": 3710,
397
478
  "extended": true,
398
479
  "name": "md5($salt.md5($pass))"
@@ -401,28 +482,49 @@
401
482
  "john": null,
402
483
  "hashcat": 3720,
403
484
  "extended": true,
404
- "name": "md5($pass.md5($salt))"
485
+ "name": "md5($pass.md5($salt))",
486
+ "samples": [
487
+ "10ce488714fdbde9453670e0e4cbe99c:1234"
488
+ ]
405
489
  },
406
490
  {
407
- "john": null,
491
+ "john": "dynamic_5",
408
492
  "hashcat": 3810,
409
493
  "extended": true,
410
494
  "name": "md5($salt.$pass.$salt)"
411
495
  },
412
496
  {
413
- "john": null,
497
+ "john": "dynamic_14",
498
+ "hashcat": null,
499
+ "extended": true,
500
+ "name": "md5($salt.md5($pass).$salt)"
501
+ },
502
+ {
503
+ "john": "dynamic_13",
414
504
  "hashcat": 3910,
415
505
  "extended": true,
416
506
  "name": "md5(md5($pass).md5($salt))"
417
507
  },
418
508
  {
419
- "john": null,
509
+ "john": "dynamic_12",
510
+ "hashcat": null,
511
+ "extended": true,
512
+ "name": "md5(md5($salt).md5($pass))"
513
+ },
514
+ {
515
+ "john": "dynamic_6",
516
+ "hashcat": null,
517
+ "extended": true,
518
+ "name": "md5(md5($pass).$salt)"
519
+ },
520
+ {
521
+ "john": "dynamic_10",
420
522
  "hashcat": 4010,
421
523
  "extended": true,
422
524
  "name": "md5($salt.md5($salt.$pass))"
423
525
  },
424
526
  {
425
- "john": null,
527
+ "john": "dynamic_11",
426
528
  "hashcat": 4110,
427
529
  "extended": true,
428
530
  "name": "md5($salt.md5($pass.$salt))"
@@ -431,7 +533,109 @@
431
533
  "john": null,
432
534
  "hashcat": 4210,
433
535
  "extended": true,
434
- "name": "md5($username.0.$pass)"
536
+ "name": "md5($username.0.$pass)",
537
+ "samples": [
538
+ "09ea048c345ad336ebe38ae5b6c4de24:1234"
539
+ ]
540
+ },
541
+ {
542
+ "john": "dynamic_15",
543
+ "hashcat": null,
544
+ "extended": true,
545
+ "name": "md5($username.md5($pass).$salt)"
546
+ },
547
+ {
548
+ "john": "dynamic_16",
549
+ "hashcat": null,
550
+ "extended": true,
551
+ "name": "md5(md5(md5($pass).$salt).$salt2)"
552
+ },
553
+ {
554
+ "john": "dynamic_18",
555
+ "hashcat": null,
556
+ "extended": true,
557
+ "name": "md5($salt.Y.$pass.0xF7.$salt)"
558
+ },
559
+ {
560
+ "john": "dynamic_29",
561
+ "hashcat": null,
562
+ "extended": true,
563
+ "name": "md5(utf16($pass))"
564
+ },
565
+ {
566
+ "john": "dynamic_31",
567
+ "hashcat": null,
568
+ "extended": true,
569
+ "name": "md4($salt.$pass)"
570
+ },
571
+ {
572
+ "john": "dynamic_32",
573
+ "hashcat": null,
574
+ "extended": true,
575
+ "name": "md4($pass.$salt)"
576
+ },
577
+ {
578
+ "john": "dynamic_33",
579
+ "hashcat": null,
580
+ "extended": true,
581
+ "name": "md4(utf16($pass))"
582
+ },
583
+ {
584
+ "john": "dynamic_34",
585
+ "hashcat": null,
586
+ "extended": true,
587
+ "name": "md5(md4($pass))"
588
+ },
589
+ {
590
+ "john": "dynamic_39",
591
+ "hashcat": null,
592
+ "extended": true,
593
+ "name": "md5($salt.pad16($pass))"
594
+ }
595
+ ]
596
+ },
597
+ {
598
+ "regex": "^[a-f0-9]{32}:.{56}$",
599
+ "modes": [
600
+ {
601
+ "john": null,
602
+ "hashcat": 11000,
603
+ "extended": false,
604
+ "name": "PrestaShop",
605
+ "samples": [
606
+ "f22cade043e7214200206dbffca49fd9:27167508161455764247627144160038845437138252877014827848",
607
+ "810e3d12f0f10777a679d9ca1ad7a8d9:M2uZ122bSHJ4Mi54tXGY0lqcv1r28mUluSkyw37ou5oia4i239ujqw0l"
608
+ ]
609
+ }
610
+ ]
611
+ },
612
+ {
613
+ "regex": "^(\\$netmd5\\$)?([a-f0-9]{88,96}\\$)?[a-f0-9]{32}$",
614
+ "modes": [
615
+ {
616
+ "john": "net-md5",
617
+ "hashcat": null,
618
+ "extended": false,
619
+ "name": "Keyed MD5: RIPv2, OSPF, BGP, SNMPv2",
620
+ "samples": [
621
+ "02020000ffff0003002c01145267d48d000000000000000000020000ac100100ffffff000000000000000001ffff0001$1e372a8a233c6556253a0909bc3dcce6",
622
+ "$netmd5$0201002cac1001010000000000000002000001105267ff8fffffff00000a0201000000280000000000000000$445ecbb27272bd791a757a6c85856150"
623
+ ]
624
+ }
625
+ ]
626
+ },
627
+ {
628
+ "regex": "^(\\$ripemd\\$)?[a-f0-9]{32}(:.+)?$",
629
+ "modes": [
630
+ {
631
+ "john": "ripemd-128",
632
+ "hashcat": null,
633
+ "extended": false,
634
+ "name": "RIPEMD-128",
635
+ "samples": [
636
+ "cdf26213a150dc3ecb610f18f6b38b46",
637
+ "$ripemd$cdf26213a150dc3ecb610f18f6b38b46"
638
+ ]
435
639
  }
436
640
  ]
437
641
  },
@@ -611,7 +815,7 @@
611
815
  {
612
816
  "john": null,
613
817
  "hashcat": 1600,
614
- "extended": true,
818
+ "extended": false,
615
819
  "name": "md5apr1"
616
820
  }
617
821
  ]
@@ -628,13 +832,16 @@
628
832
  ]
629
833
  },
630
834
  {
631
- "regex": "^[a-f0-9]{32}:[a-f0-9]{32}$",
835
+ "regex": "^[a-f0-9]{32}:.+$",
632
836
  "modes": [
633
837
  {
634
838
  "john": null,
635
839
  "hashcat": 3721,
636
840
  "extended": false,
637
- "name": "WebEdition CMS"
841
+ "name": "WebEdition CMS",
842
+ "samples": [
843
+ "fa01af9f0de5f377ae8befb03865178e:5678"
844
+ ]
638
845
  }
639
846
  ]
640
847
  },
@@ -687,16 +894,22 @@
687
894
  "name": "Double SHA-1"
688
895
  },
689
896
  {
690
- "john": "ripemd-160",
691
- "hashcat": 6000,
897
+ "john": "dynamic_190",
898
+ "hashcat": null,
692
899
  "extended": false,
693
- "name": "RIPEMD-160"
900
+ "name": "Haval-160 (3 rounds)"
694
901
  },
695
902
  {
696
- "john": null,
903
+ "john": "dynamic_200",
904
+ "hashcat": null,
905
+ "extended": false,
906
+ "name": "Haval-160 (4 rounds)"
907
+ },
908
+ {
909
+ "john": "dynamic_210",
697
910
  "hashcat": null,
698
911
  "extended": false,
699
- "name": "Haval-160"
912
+ "name": "Haval-160 (5 rounds)"
700
913
  },
701
914
  {
702
915
  "john": null,
@@ -714,7 +927,10 @@
714
927
  "john": "raw-sha1-linkedin",
715
928
  "hashcat": 190,
716
929
  "extended": false,
717
- "name": "LinkedIn"
930
+ "name": "LinkedIn",
931
+ "samples": [
932
+ "b89eaac7e61417341b710b727768294d0e6a277b"
933
+ ]
718
934
  },
719
935
  {
720
936
  "john": null,
@@ -729,31 +945,52 @@
729
945
  "name": "Skein-512(160)"
730
946
  },
731
947
  {
732
- "john": null,
948
+ "john": "dynamic_35",
733
949
  "hashcat": null,
734
950
  "extended": true,
735
951
  "name": "MangosWeb Enhanced CMS"
736
952
  },
953
+ {
954
+ "john": "dynamic_36",
955
+ "hashcat": null,
956
+ "extended": true,
957
+ "name": "MangosWeb Enhanced CMS v2"
958
+ },
959
+ {
960
+ "john": "dynamic_35",
961
+ "hashcat": null,
962
+ "extended": true,
963
+ "name": "sha1(uppercase($username).:.$pass)"
964
+ },
965
+ {
966
+ "john": "dynamic_36",
967
+ "hashcat": null,
968
+ "extended": true,
969
+ "name": "sha1($username.:.$pass)"
970
+ },
737
971
  {
738
972
  "john": null,
739
973
  "hashcat": 4600,
740
974
  "extended": true,
741
- "name": "sha1(sha1(sha1($pass)))"
975
+ "name": "sha1(sha1(sha1($pass)))",
976
+ "samples": [
977
+ "dc57f246485e62d99a5110afc9264b4ccbfcf3cc"
978
+ ]
742
979
  },
743
980
  {
744
- "john": null,
981
+ "john": "dynamic_23",
745
982
  "hashcat": 4700,
746
983
  "extended": true,
747
984
  "name": "sha1(md5($pass))"
748
985
  },
749
986
  {
750
- "john": null,
987
+ "john": "dynamic_24",
751
988
  "hashcat": 110,
752
989
  "extended": true,
753
990
  "name": "sha1($pass.$salt)"
754
991
  },
755
992
  {
756
- "john": null,
993
+ "john": "dynamic_25",
757
994
  "hashcat": 120,
758
995
  "extended": true,
759
996
  "name": "sha1($salt.$pass)"
@@ -787,23 +1024,84 @@
787
1024
  "hashcat": 4710,
788
1025
  "extended": true,
789
1026
  "name": "sha1($salt.$pass.$salt)"
1027
+ },
1028
+ {
1029
+ "john": "dynamic_37",
1030
+ "hashcat": null,
1031
+ "extended": true,
1032
+ "name": "SMF"
1033
+ },
1034
+ {
1035
+ "john": "dynamic_37",
1036
+ "hashcat": null,
1037
+ "extended": true,
1038
+ "name": "sha1(lowercase($username).$pass)"
1039
+ },
1040
+ {
1041
+ "john": "dynamic_38",
1042
+ "hashcat": null,
1043
+ "extended": true,
1044
+ "name": "Wolt3BB"
1045
+ },
1046
+ {
1047
+ "john": "dynamic_38",
1048
+ "hashcat": null,
1049
+ "extended": true,
1050
+ "name": "sha1($salt.sha1($salt.sha1($pass)))"
1051
+ },
1052
+ {
1053
+ "john": "dynamic_40",
1054
+ "hashcat": null,
1055
+ "extended": true,
1056
+ "name": "net-sha1"
1057
+ },
1058
+ {
1059
+ "john": "dynamic_40",
1060
+ "hashcat": null,
1061
+ "extended": true,
1062
+ "name": "sha1($salt.pad20($pass))"
1063
+ }
1064
+ ]
1065
+ },
1066
+ {
1067
+ "regex": "^(\\$ripemd\\$)?[a-f0-9]{40}(:.+)?$",
1068
+ "modes": [
1069
+ {
1070
+ "john": "ripemd-160",
1071
+ "hashcat": 6000,
1072
+ "extended": false,
1073
+ "name": "RIPEMD-160",
1074
+ "samples": [
1075
+ "9c1185a5c5e9fc54612808977ee8f548b2258d31",
1076
+ "$ripemd$9c1185a5c5e9fc54612808977ee8f548b2258d31",
1077
+ "012cb9b334ec1aeb71a9c8ce85586082467f7eb6"
1078
+ ]
790
1079
  }
791
1080
  ]
792
1081
  },
793
1082
  {
794
- "regex": "^\\*[a-f0-9]{40}$",
1083
+ "regex": "^(\\*)?[a-f0-9]{40}$",
795
1084
  "modes": [
796
1085
  {
797
1086
  "john": "mysql-sha1",
798
1087
  "hashcat": 300,
799
1088
  "extended": false,
800
- "name": "MySQL5.x"
1089
+ "name": "MySQL5.x",
1090
+ "samples": [
1091
+ "*2c905879f74f28f8570989947d06a8429fb943e6",
1092
+ "*A8A397146B1A5F8C8CF26404668EFD762A1B7B82"
1093
+ ]
801
1094
  },
802
1095
  {
803
1096
  "john": "mysql-sha1",
804
1097
  "hashcat": 300,
805
1098
  "extended": false,
806
- "name": "MySQL4.1"
1099
+ "name": "MySQL4.1",
1100
+ "samples": [
1101
+ "*5AD8F88516BD021DD43F171E2C785C69F8E54ADB",
1102
+ "*be1bdec0aa74b4dcb079943e70528096cca985f8",
1103
+ "fcf7c1b8749cf99d88e5f34271d636178fb5d130"
1104
+ ]
807
1105
  }
808
1106
  ]
809
1107
  },
@@ -856,10 +1154,22 @@
856
1154
  "regex": "^[a-f0-9]{48}$",
857
1155
  "modes": [
858
1156
  {
859
- "john": null,
1157
+ "john": "dynamic_220",
1158
+ "hashcat": null,
1159
+ "extended": false,
1160
+ "name": "Haval-192 (3 rounds)"
1161
+ },
1162
+ {
1163
+ "john": "dynamic_230",
1164
+ "hashcat": null,
1165
+ "extended": false,
1166
+ "name": "Haval-192 (4 rounds)"
1167
+ },
1168
+ {
1169
+ "john": "dynamic_240",
860
1170
  "hashcat": null,
861
1171
  "extended": false,
862
- "name": "Haval-192"
1172
+ "name": "Haval-192 (5 rounds)"
863
1173
  },
864
1174
  {
865
1175
  "john": "tiger",
@@ -950,7 +1260,10 @@
950
1260
  "john": "sunmd5",
951
1261
  "hashcat": 3300,
952
1262
  "extended": false,
953
- "name": "Sun MD5 Crypt"
1263
+ "name": "Sun MD5 Crypt",
1264
+ "samples": [
1265
+ "$md5$rounds=904$iPPKEBnEkp3JV8uX$0L6m7rOFTVFn.SGqo2M9W1"
1266
+ ]
954
1267
  }
955
1268
  ]
956
1269
  },
@@ -959,24 +1272,84 @@
959
1272
  "modes": [
960
1273
  {
961
1274
  "john": "raw-sha224",
962
- "hashcat": null,
1275
+ "hashcat": 1300,
963
1276
  "extended": false,
964
1277
  "name": "SHA-224"
965
1278
  },
966
1279
  {
967
- "john": null,
1280
+ "john": "dynamic_51",
1281
+ "hashcat": null,
1282
+ "extended": true,
1283
+ "name": "sha224($salt.$pass)"
1284
+ },
1285
+ {
1286
+ "john": "dynamic_52",
1287
+ "hashcat": null,
1288
+ "extended": true,
1289
+ "name": "sha224($pass.$salt)"
1290
+ },
1291
+ {
1292
+ "john": "dynamic_53",
1293
+ "hashcat": null,
1294
+ "extended": true,
1295
+ "name": "sha224(sha224($pass))"
1296
+ },
1297
+ {
1298
+ "john": "dynamic_54",
1299
+ "hashcat": null,
1300
+ "extended": true,
1301
+ "name": "sha224(sha224_raw($pass))"
1302
+ },
1303
+ {
1304
+ "john": "dynamic_55",
1305
+ "hashcat": null,
1306
+ "extended": true,
1307
+ "name": "sha224(sha224($pass).$salt)"
1308
+ },
1309
+ {
1310
+ "john": "dynamic_56",
1311
+ "hashcat": null,
1312
+ "extended": true,
1313
+ "name": "sha224($salt.sha224($pass))"
1314
+ },
1315
+ {
1316
+ "john": "dynamic_57",
1317
+ "hashcat": null,
1318
+ "extended": true,
1319
+ "name": "sha224(sha224($salt).sha224($pass))"
1320
+ },
1321
+ {
1322
+ "john": "dynamic_58",
1323
+ "hashcat": null,
1324
+ "extended": true,
1325
+ "name": "sha224(sha224($pass).sha224($pass))"
1326
+ },
1327
+ {
1328
+ "john": "dynamic_250",
968
1329
  "hashcat": null,
969
1330
  "extended": false,
970
- "name": "Haval-224"
1331
+ "name": "Haval-224 (3 rounds)"
971
1332
  },
972
1333
  {
973
- "john": null,
1334
+ "john": "dynamic_260",
1335
+ "hashcat": null,
1336
+ "extended": false,
1337
+ "name": "Haval-224 (4 rounds)"
1338
+ },
1339
+ {
1340
+ "john": "dynamic_270",
1341
+ "hashcat": null,
1342
+ "extended": false,
1343
+ "name": "Haval-224 (5 rounds)"
1344
+ },
1345
+ {
1346
+ "john": "dynamic_370",
974
1347
  "hashcat": 17300,
975
1348
  "extended": false,
976
1349
  "name": "SHA3-224"
977
1350
  },
978
1351
  {
979
- "john": null,
1352
+ "john": "dynamic_430",
980
1353
  "hashcat": 17700,
981
1354
  "extended": false,
982
1355
  "name": "Keccak-224"
@@ -992,6 +1365,18 @@
992
1365
  "hashcat": null,
993
1366
  "extended": false,
994
1367
  "name": "Skein-512(224)"
1368
+ },
1369
+ {
1370
+ "john": "dynamic_330",
1371
+ "hashcat": null,
1372
+ "extended": false,
1373
+ "name": "Skein-224"
1374
+ },
1375
+ {
1376
+ "john": null,
1377
+ "hashcat": null,
1378
+ "extended": false,
1379
+ "name": "BLAKE2-224"
995
1380
  }
996
1381
  ]
997
1382
  },
@@ -1094,19 +1479,35 @@
1094
1479
  "name": "SHA-256"
1095
1480
  },
1096
1481
  {
1097
- "john": null,
1482
+ "john": "dynamic_140",
1098
1483
  "hashcat": null,
1099
1484
  "extended": false,
1100
- "name": "RIPEMD-256"
1485
+ "name": "RIPEMD-256",
1486
+ "samples": [
1487
+ "1419109aa0de60e6ba0b6d2b2f602c13b07e97b5ffc85b6be2297badc699262f",
1488
+ "f156e6c20042057840f3251ee041596d89fde06c2505f61764ad1c03c2fc1375"
1489
+ ]
1101
1490
  },
1102
1491
  {
1103
1492
  "john": "haval-256-3",
1104
1493
  "hashcat": null,
1105
1494
  "extended": false,
1106
- "name": "Haval-256"
1495
+ "name": "Haval-256 (3 rounds)"
1107
1496
  },
1108
1497
  {
1109
- "john": "gost",
1498
+ "john": "dynamic_290",
1499
+ "hashcat": null,
1500
+ "extended": false,
1501
+ "name": "Haval-256 (4 rounds)"
1502
+ },
1503
+ {
1504
+ "john": "dynamic_300",
1505
+ "hashcat": null,
1506
+ "extended": false,
1507
+ "name": "Haval-256 (5 rounds)"
1508
+ },
1509
+ {
1510
+ "john": "gost",
1110
1511
  "hashcat": 6900,
1111
1512
  "extended": false,
1112
1513
  "name": "GOST R 34.11-94"
@@ -1118,7 +1519,7 @@
1118
1519
  "name": "GOST CryptoPro S-Box"
1119
1520
  },
1120
1521
  {
1121
- "john": null,
1522
+ "john": "dynamic_380",
1122
1523
  "hashcat": 17400,
1123
1524
  "extended": false,
1124
1525
  "name": "SHA3-256"
@@ -1148,13 +1549,13 @@
1148
1549
  "name": "Ventrilo"
1149
1550
  },
1150
1551
  {
1151
- "john": null,
1552
+ "john": "dynamic_62",
1152
1553
  "hashcat": 1410,
1153
1554
  "extended": true,
1154
1555
  "name": "sha256($pass.$salt)"
1155
1556
  },
1156
1557
  {
1157
- "john": null,
1558
+ "john": "dynamic_61",
1158
1559
  "hashcat": 1420,
1159
1560
  "extended": true,
1160
1561
  "name": "sha256($salt.$pass)"
@@ -1182,6 +1583,54 @@
1182
1583
  "hashcat": 1460,
1183
1584
  "extended": true,
1184
1585
  "name": "HMAC-SHA256 (key = $salt)"
1586
+ },
1587
+ {
1588
+ "john": "dynamic_63",
1589
+ "hashcat": null,
1590
+ "extended": true,
1591
+ "name": "sha256(sha256($pass))"
1592
+ },
1593
+ {
1594
+ "john": "dynamic_64",
1595
+ "hashcat": null,
1596
+ "extended": true,
1597
+ "name": "sha256(sha256_raw($pass))"
1598
+ },
1599
+ {
1600
+ "john": "dynamic_65",
1601
+ "hashcat": null,
1602
+ "extended": true,
1603
+ "name": "sha256(sha256($pass).$salt)"
1604
+ },
1605
+ {
1606
+ "john": "dynamic_66",
1607
+ "hashcat": null,
1608
+ "extended": true,
1609
+ "name": "sha256($salt.sha256($pass))"
1610
+ },
1611
+ {
1612
+ "john": "dynamic_67",
1613
+ "hashcat": null,
1614
+ "extended": true,
1615
+ "name": "sha256(sha256($salt).sha256($pass))"
1616
+ },
1617
+ {
1618
+ "john": "dynamic_68",
1619
+ "hashcat": null,
1620
+ "extended": true,
1621
+ "name": "sha256(sha256($pass).sha256($pass))"
1622
+ },
1623
+ {
1624
+ "john": "dynamic_320",
1625
+ "hashcat": null,
1626
+ "extended": false,
1627
+ "name": "PANAMA"
1628
+ },
1629
+ {
1630
+ "john": null,
1631
+ "hashcat": null,
1632
+ "extended": false,
1633
+ "name": "BLAKE2-256"
1185
1634
  }
1186
1635
  ]
1187
1636
  },
@@ -1250,10 +1699,14 @@
1250
1699
  "regex": "^[a-f0-9]{80}$",
1251
1700
  "modes": [
1252
1701
  {
1253
- "john": null,
1702
+ "john": "dynamic_150",
1254
1703
  "hashcat": null,
1255
1704
  "extended": false,
1256
- "name": "RIPEMD-320"
1705
+ "name": "RIPEMD-320",
1706
+ "samples": [
1707
+ "303aa1dcb731cd4e4bff2a60971eb7376c6c47cb59947c804776d115470183c8cc2e487337b45412",
1708
+ "3c616c27aa7539c4726388c9e047aa4ea089dd739b3cfc470e964ea12e479da3cce437b9daa90214"
1709
+ ]
1257
1710
  }
1258
1711
  ]
1259
1712
  },
@@ -1289,13 +1742,13 @@
1289
1742
  "name": "SHA-384"
1290
1743
  },
1291
1744
  {
1292
- "john": null,
1745
+ "john": "dynamic_390",
1293
1746
  "hashcat": 17500,
1294
1747
  "extended": false,
1295
1748
  "name": "SHA3-384"
1296
1749
  },
1297
1750
  {
1298
- "john": null,
1751
+ "john": "dynamic_440",
1299
1752
  "hashcat": 17900,
1300
1753
  "extended": false,
1301
1754
  "name": "Keccak-384"
@@ -1311,6 +1764,66 @@
1311
1764
  "hashcat": null,
1312
1765
  "extended": false,
1313
1766
  "name": "Skein-1024(384)"
1767
+ },
1768
+ {
1769
+ "john": "dynamic_71",
1770
+ "hashcat": null,
1771
+ "extended": true,
1772
+ "name": "sha384($salt.$pass)"
1773
+ },
1774
+ {
1775
+ "john": "dynamic_72",
1776
+ "hashcat": null,
1777
+ "extended": true,
1778
+ "name": "sha384($pass.$salt)"
1779
+ },
1780
+ {
1781
+ "john": "dynamic_73",
1782
+ "hashcat": null,
1783
+ "extended": true,
1784
+ "name": "sha384(sha384($pass))"
1785
+ },
1786
+ {
1787
+ "john": "dynamic_74",
1788
+ "hashcat": null,
1789
+ "extended": true,
1790
+ "name": "sha384(sha384_raw($pass))"
1791
+ },
1792
+ {
1793
+ "john": "dynamic_75",
1794
+ "hashcat": null,
1795
+ "extended": true,
1796
+ "name": "sha384(sha384($pass).$salt)"
1797
+ },
1798
+ {
1799
+ "john": "dynamic_76",
1800
+ "hashcat": null,
1801
+ "extended": true,
1802
+ "name": "sha384($salt.sha384($pass))"
1803
+ },
1804
+ {
1805
+ "john": "dynamic_77",
1806
+ "hashcat": null,
1807
+ "extended": true,
1808
+ "name": "sha384(sha384($salt).sha384($pass))"
1809
+ },
1810
+ {
1811
+ "john": "dynamic_78",
1812
+ "hashcat": null,
1813
+ "extended": true,
1814
+ "name": "sha384(sha384($pass).sha384($pass))"
1815
+ },
1816
+ {
1817
+ "john": "dynamic_350",
1818
+ "hashcat": null,
1819
+ "extended": true,
1820
+ "name": "Skein-384"
1821
+ },
1822
+ {
1823
+ "john": null,
1824
+ "hashcat": null,
1825
+ "extended": false,
1826
+ "name": "BLAKE2-384"
1314
1827
  }
1315
1828
  ]
1316
1829
  },
@@ -1349,7 +1862,12 @@
1349
1862
  "john": "raw-sha512",
1350
1863
  "hashcat": 1700,
1351
1864
  "extended": false,
1352
- "name": "SHA-512"
1865
+ "name": "SHA-512",
1866
+ "samples": [
1867
+ "f342aae82952db35b8e02c30115e3deed3d80fdfdadacab336f0ba51ac54e297291fa1d6b201d69a2bd77e2535280f17a54fa1e527abc6e2eddba79ad3be11c0",
1868
+ "7aba4411846c61b08b0f2282a8a4600232ace4dd96593c755ba9c9a4e7b780b8bdc437b5c55574b3e8409c7b511032f98ef120e25467678f0458643578eb60ff",
1869
+ "12b03226a6d8be9c6e8cd5e55dc6c7920caaa39df14aab92d5e3ea9340d1c8a4d3d0b8e4314f1f6ef131ba4bf1ceb9186ab87c801af0d5c95b1befb8cedae2b9"
1870
+ ]
1353
1871
  },
1354
1872
  {
1355
1873
  "john": "whirlpool",
@@ -1375,6 +1893,12 @@
1375
1893
  "extended": false,
1376
1894
  "name": "SHA3-512"
1377
1895
  },
1896
+ {
1897
+ "john": "dynamic_400",
1898
+ "hashcat": 17600,
1899
+ "extended": false,
1900
+ "name": "SHA3-512"
1901
+ },
1378
1902
  {
1379
1903
  "john": "raw-keccak",
1380
1904
  "hashcat": 18000,
@@ -1383,9 +1907,9 @@
1383
1907
  },
1384
1908
  {
1385
1909
  "john": "raw-blake2",
1386
- "hashcat": 600,
1910
+ "hashcat": null,
1387
1911
  "extended": false,
1388
- "name": "Blake2"
1912
+ "name": "BLAKE2-512"
1389
1913
  },
1390
1914
  {
1391
1915
  "john": "skein-512",
@@ -1400,13 +1924,13 @@
1400
1924
  "name": "Skein-1024(512)"
1401
1925
  },
1402
1926
  {
1403
- "john": null,
1927
+ "john": "dynamic_82",
1404
1928
  "hashcat": 1710,
1405
1929
  "extended": true,
1406
1930
  "name": "sha512($pass.$salt)"
1407
1931
  },
1408
1932
  {
1409
- "john": null,
1933
+ "john": "dynamic_81",
1410
1934
  "hashcat": 1720,
1411
1935
  "extended": true,
1412
1936
  "name": "sha512($salt.$pass)"
@@ -1434,9 +1958,51 @@
1434
1958
  "hashcat": 1760,
1435
1959
  "extended": true,
1436
1960
  "name": "HMAC-SHA512 (key = $salt)"
1961
+ },
1962
+ {
1963
+ "john": "dynamic_83",
1964
+ "hashcat": null,
1965
+ "extended": true,
1966
+ "name": "sha512(sha512($pass))"
1967
+ },
1968
+ {
1969
+ "john": "dynamic_85",
1970
+ "hashcat": null,
1971
+ "extended": true,
1972
+ "name": "sha512(sha512($pass).$salt)"
1973
+ },
1974
+ {
1975
+ "john": "dynamic_86",
1976
+ "hashcat": null,
1977
+ "extended": true,
1978
+ "name": "sha512($salt.sha512($pass))"
1979
+ },
1980
+ {
1981
+ "john": "dynamic_87",
1982
+ "hashcat": null,
1983
+ "extended": true,
1984
+ "name": "sha512(sha512($salt).sha512($pass))"
1985
+ },
1986
+ {
1987
+ "john": "dynamic_88",
1988
+ "hashcat": null,
1989
+ "extended": true,
1990
+ "name": "sha512(sha512($pass).sha512($pass))"
1437
1991
  }
1438
1992
  ]
1439
1993
  },
1994
+ {
1995
+ "regex": "^\\$BLAKE2\\$[a-f0-9]{128}$",
1996
+ "modes": [
1997
+ {
1998
+ "john": "raw-blake2",
1999
+ "hashcat": 600,
2000
+ "extended": false,
2001
+ "name": "BLAKE2-512"
2002
+ }
2003
+ ]
2004
+ },
2005
+
1440
2006
  {
1441
2007
  "regex": "^[a-f0-9]{136}$",
1442
2008
  "modes": [
@@ -1452,16 +2018,24 @@
1452
2018
  "regex": "^0x0200[a-f0-9]{136}$",
1453
2019
  "modes": [
1454
2020
  {
1455
- "john": "msql12",
2021
+ "john": "mssql12",
1456
2022
  "hashcat": 1731,
1457
2023
  "extended": false,
1458
- "name": "MSSQL(2012)"
2024
+ "name": "MSSQL(2012)",
2025
+ "samples": [
2026
+ "0x0200F733058A07892C5CACE899768F89965F6BD1DED7955FE89E1C9A10E27849B0B213B5CE92CC9347ECCB34C3EFADAF2FD99BFFECD8D9150DD6AACB5D409A9D2652A4E0AF16",
2027
+ "0x0200AB3E1F9028A739EEF62ABF672427276A32D5EDD349E638E7F2CD81DAA247CFE20EE4E3B0A30B2D0AE3C3FA010E61752F1BF45E045041F1B988C083C7F118527E3E5F0562"
2028
+ ]
1459
2029
  },
1460
2030
  {
1461
- "john": "msql12",
2031
+ "john": "mssql12",
1462
2032
  "hashcat": 1731,
1463
2033
  "extended": false,
1464
- "name": "MSSQL(2014)"
2034
+ "name": "MSSQL(2014)",
2035
+ "samples": [
2036
+ "0x02003788006711b2e74e7d8cb4be96b1d187c962c5591a02d5a6ae81b3a4a094b26b7877958b26733e45016d929a756ed30d0a5ee65d3ce1970f9b7bf946e705c595f07625b1",
2037
+ "0x02006BF4AB05873FF0C8A4AFD1DC5912CBFDEF62E0520A3353B04E1184F05C873C9C76BBADDEAAC1E9948C7B6ABFFD62BFEFD7139F17F6AFE10BE0FEE7A178644623067C2423"
2038
+ ]
1465
2039
  }
1466
2040
  ]
1467
2041
  },
@@ -1575,9 +2149,12 @@
1575
2149
  "modes": [
1576
2150
  {
1577
2151
  "john": null,
1578
- "hashcat": null,
2152
+ "hashcat": 20711,
1579
2153
  "extended": false,
1580
- "name": "Minecraft(AuthMe Reloaded)"
2154
+ "name": "Minecraft (AuthMe Reloaded sha256)",
2155
+ "samples": [
2156
+ "$SHA$7218532375810603$bfede293ecf6539211a7305ea218b9f3f608953130405cda9eaba6fb6250f824"
2157
+ ]
1581
2158
  }
1582
2159
  ]
1583
2160
  },
@@ -1665,7 +2242,95 @@
1665
2242
  "john": "krb5pa-md5",
1666
2243
  "hashcat": 7500,
1667
2244
  "extended": false,
1668
- "name": "Kerberos 5 AS-REQ Pre-Auth"
2245
+ "name": "Kerberos 5 AS-REQ Pre-Auth etype 23"
2246
+ }
2247
+ ]
2248
+ },
2249
+ {
2250
+ "regex": "^\\$krb5tgs\\$23\\$\\*[^*]*\\*\\$[a-f0-9]{32}\\$[a-f0-9]{64,40960}$",
2251
+ "modes": [
2252
+ {
2253
+ "john": "krb5tgs",
2254
+ "hashcat": 13100,
2255
+ "extended": false,
2256
+ "name": "Kerberos 5 TGS-REP etype 23"
2257
+ }
2258
+ ]
2259
+ },
2260
+ {
2261
+ "regex": "^\\$krb5asrep\\$23\\$[^:]+:[a-f0-9]{32,32}\\$[a-f0-9]{64,40960}$",
2262
+ "modes": [
2263
+ {
2264
+ "john": "krb5asrep",
2265
+ "hashcat": 18200,
2266
+ "extended": false,
2267
+ "name": "Kerberos 5 AS-REP etype 23"
2268
+ }
2269
+ ]
2270
+ },
2271
+ {
2272
+ "regex": "^\\$krb5asrep\\$18\\$[^:]+:[a-f0-9]{32,32}\\$[a-f0-9]{64,40960}$",
2273
+ "modes": [
2274
+ {
2275
+ "john": "krb5asrep",
2276
+ "hashcat": null,
2277
+ "extended": false,
2278
+ "name": "Kerberos 5 AS-REP etype 18"
2279
+ }
2280
+ ]
2281
+ },
2282
+ {
2283
+ "regex": "^\\$krb5asrep\\$17\\$[^:]+:[a-f0-9]{32,32}\\$[a-f0-9]{64,40960}$",
2284
+ "modes": [
2285
+ {
2286
+ "john": "krb5asrep",
2287
+ "hashcat": null,
2288
+ "extended": false,
2289
+ "name": "Kerberos 5 AS-REP etype 17"
2290
+ }
2291
+ ]
2292
+ },
2293
+ {
2294
+ "regex": "^\\$krb5tgs\\$17\\$[^$]{1,512}\\$[^$]{1,512}\\$[^$]{1,4}?\\$?[a-f0-9]{1,32}\\$[a-f0-9]{64,40960}$",
2295
+ "modes": [
2296
+ {
2297
+ "john": null,
2298
+ "hashcat": 19600,
2299
+ "extended": false,
2300
+ "name": "Kerberos 5 TGS-REP etype 17 (AES128-CTS-HMAC-SHA1-96)"
2301
+ }
2302
+ ]
2303
+ },
2304
+ {
2305
+ "regex": "^\\$krb5tgs\\$18\\$[^$]{1,512}\\$[^$]{1,512}\\$[^$]{1,4}?\\$?[a-f0-9]{1,32}\\$[a-f0-9]{64,40960}$",
2306
+ "modes": [
2307
+ {
2308
+ "john": null,
2309
+ "hashcat": 19700,
2310
+ "extended": false,
2311
+ "name": "Kerberos 5 TGS-REP etype 18 (AES256-CTS-HMAC-SHA1-96)"
2312
+ }
2313
+ ]
2314
+ },
2315
+ {
2316
+ "regex": "^\\$krb5pa\\$17\\$[^$]{1,512}\\$[^$]{1,512}\\$[a-f0-9]{104,112}$",
2317
+ "modes": [
2318
+ {
2319
+ "john": "krb5pa-sha1",
2320
+ "hashcat": 19800,
2321
+ "extended": false,
2322
+ "name": "Kerberos 5 AS-REQ Pre-Auth etype 17"
2323
+ }
2324
+ ]
2325
+ },
2326
+ {
2327
+ "regex": "^\\$krb5pa\\$18\\$[^$]{1,512}\\$[^$]{1,512}\\$[a-f0-9]{104,112}$",
2328
+ "modes": [
2329
+ {
2330
+ "john": "krb5pa-sha1",
2331
+ "hashcat": 19900,
2332
+ "extended": false,
2333
+ "name": "Kerberos 5 AS-REQ Pre-Auth etype 18"
1669
2334
  }
1670
2335
  ]
1671
2336
  },
@@ -1685,9 +2350,12 @@
1685
2350
  "modes": [
1686
2351
  {
1687
2352
  "john": null,
1688
- "hashcat": 7600,
2353
+ "hashcat": 4521,
1689
2354
  "extended": false,
1690
- "name": "Redmine Project Management Web App"
2355
+ "name": "Redmine",
2356
+ "samples": [
2357
+ "c18e826af2a78c7b9b7261452613233417e65817:28246535720688452723483475753333"
2358
+ ]
1691
2359
  }
1692
2360
  ]
1693
2361
  },
@@ -1731,7 +2399,10 @@
1731
2399
  "john": null,
1732
2400
  "hashcat": 123,
1733
2401
  "extended": false,
1734
- "name": "EPi"
2402
+ "name": "EPi",
2403
+ "samples": [
2404
+ "0x326C6D7B4E4F794B79474E36704F35723958397163735263516265456E31 0xAFC55E260B8F45C0C6512BCE776C1AD8312B56E6"
2405
+ ]
1735
2406
  }
1736
2407
  ]
1737
2408
  },
@@ -1787,6 +2458,12 @@
1787
2458
  "hashcat": 2410,
1788
2459
  "extended": false,
1789
2460
  "name": "Cisco-ASA(MD5)"
2461
+ },
2462
+ {
2463
+ "john": "dynamic_20",
2464
+ "hashcat": 2410,
2465
+ "extended": true,
2466
+ "name": "md5($pass.$salt)"
1790
2467
  }
1791
2468
  ]
1792
2469
  },
@@ -1839,9 +2516,13 @@
1839
2516
  "modes": [
1840
2517
  {
1841
2518
  "john": "sha1crypt",
1842
- "hashcat": null,
2519
+ "hashcat": 15100,
1843
2520
  "extended": false,
1844
- "name": "SHA-1 Crypt"
2521
+ "name": "SHA-1 Crypt (Juniper/NetBSD)",
2522
+ "samples": [
2523
+ "$sha1$20000$75552156$HhYMDdaEHiK3eMIzTldOFPnw.s2Q",
2524
+ "$sha1$64000$wnUR8T1U$azjCegpOIk0FjE61qzGWhdkpuMRL"
2525
+ ]
1845
2526
  }
1846
2527
  ]
1847
2528
  },
@@ -1879,24 +2560,37 @@
1879
2560
  ]
1880
2561
  },
1881
2562
  {
1882
- "regex": "^\\$pbkdf2(-sha1)?\\$[0-9]+\\$[a-z0-9\\/.]+\\$[a-z0-9\\/.]{27}$",
2563
+ "regex": "^\\$pbkdf2(-hmac)?(-sha1)?\\$([0-9]{1,6}\\$[a-z0-9\\/.]+\\$[a-z0-9\\/.]+|[0-9]{1,6}\\.[a-f0-9]+\\.[a-f0-9]{40})$",
1883
2564
  "modes": [
1884
2565
  {
1885
- "john": null,
1886
- "hashcat": null,
2566
+ "john": "pbkdf2-hmac-sha1",
2567
+ "hashcat": 20400,
1887
2568
  "extended": false,
1888
- "name": "PBKDF2-SHA1(Generic)"
2569
+ "name": "PBKDF2-SHA1 (Generic)",
2570
+ "samples": [
2571
+ "$pbkdf2$131000$r5WythYixPgfQ2jt3buXcg$8Kdr.QQEOaZIXNOrrru36I/.6Po",
2572
+ "$pbkdf2-hmac-sha1$1000.fd11cde0.27de197171e6d49fc5f55c9ef06c0d8751cd7250",
2573
+ "$pbkdf2-hmac-sha1$1000$6926d45e$231c561018a4cee662df7cd4a8206701c5806af9",
2574
+ "$pbkdf2-hmac-sha1$1000.6834476f733353333654315a5a31494f.1932a843a69dc1e38a29d2691a7abf27ecaa6d55",
2575
+ "$pbkdf2-hmac-sha1$1000.3031323334353637383930313233343536373839303132333435363738393031323334353637383930313233343536373839303132333435363738393031323334353637383930313233343536373839303132333435363738393031323334353637383930313233343536373839303132333435363738393031323334353637383930313233343536373839303132333435363738393031323334353637383930313233343536373839303132333435363738.8f7c89f74233f78f6c8ace00696cf6ed09ae43f4"
2576
+ ]
1889
2577
  }
1890
2578
  ]
1891
2579
  },
1892
2580
  {
1893
- "regex": "^\\$pbkdf2-sha256\\$[0-9]+\\$[a-z0-9\\/.]+\\$[a-z0-9\\/.]{43}$",
2581
+ "regex": "^\\$pbkdf2-sha256\\$[0-9]{1,6}\\$[a-z0-9\\/.]+\\$[a-z0-9\\/.]+$",
1894
2582
  "modes": [
1895
2583
  {
1896
2584
  "john": "pbkdf2-hmac-sha256",
1897
- "hashcat": null,
2585
+ "hashcat": 20300,
1898
2586
  "extended": false,
1899
- "name": "PBKDF2-SHA256(Generic)"
2587
+ "name": "PBKDF2-SHA256 (Generic)",
2588
+ "samples": [
2589
+ "$pbkdf2-sha256$29000$x9h7j/Ge8x6DMEao1VqrdQ$kra3R1wEnY8mPdDWOpTqOTINaAmZvRMcYd8u5OBQP9A",
2590
+ "$pbkdf2-sha256$1000$b1dWS2dab3dKQWhPSUg3cg$UY9j5wlyxtsJqhDKTqua8Q3fMp0ojc2pOnErzr8ntLE",
2591
+ "$pbkdf2-sha256$12000$fK8VAoDQuvees5ayVkpp7Q$xfzKAoBR/Iaa68tjn.O8KfGxV.zdidcqEeDoTFvDz2A",
2592
+ "$pbkdf2-sha256$12000$MDEyMzQ1Njc4OTAxMjM0NTY3ODkwMTIzNDU2Nzg5MDEyMzQ1Njc4OTAxMjM0NTY3ODkwMTIzNDU2Nzg5MDEyMzQ1Njc4OTAxMjM0NTY3ODkwMTIzNDU2Nzg5MDEyMzQ1Njc4OTAxMjM0NTY3ODkwMTIzNDU2Nzg5MDEyMzQ1Njc4OTAxMjM0NTY3ODkwMTIzNDU2Nzg5MDEyMzQ1Njc4OTAxMjM0NTY3ODkwMTIzNDU2Nzg$94Z71JhWYUP2E0IrQrexc8AMhHzVB4bwkxh7n0FCnns"
2593
+ ]
1900
2594
  }
1901
2595
  ]
1902
2596
  },
@@ -2028,7 +2722,7 @@
2028
2722
  "john": "django",
2029
2723
  "hashcat": 10000,
2030
2724
  "extended": false,
2031
- "name": "Django(PBKDF2-HMAC-SHA256)"
2725
+ "name": "Django (PBKDF2-HMAC-SHA256)"
2032
2726
  }
2033
2727
  ]
2034
2728
  },
@@ -2146,7 +2840,7 @@
2146
2840
  "regex": "^\\$office\\$\\*2010\\*[0-9]{6}\\*[0-9]{3}\\*[0-9]{2}\\*[a-z0-9]{32}\\*[a-z0-9]{32}\\*[a-z0-9]{64}$",
2147
2841
  "modes": [
2148
2842
  {
2149
- "john": null,
2843
+ "john": "office",
2150
2844
  "hashcat": 9500,
2151
2845
  "extended": false,
2152
2846
  "name": "Microsoft Office 2010"
@@ -2157,10 +2851,21 @@
2157
2851
  "regex": "^\\$office\\$\\*2013\\*[0-9]{6}\\*[0-9]{3}\\*[0-9]{2}\\*[a-z0-9]{32}\\*[a-z0-9]{32}\\*[a-z0-9]{64}$",
2158
2852
  "modes": [
2159
2853
  {
2160
- "john": null,
2854
+ "john": "office",
2161
2855
  "hashcat": 9600,
2162
2856
  "extended": false,
2163
- "name": "Microsoft Office 2013"
2857
+ "name": "Microsoft Office 2013 - 2019"
2858
+ }
2859
+ ]
2860
+ },
2861
+ {
2862
+ "regex": "^\\$office\\$2016\\$[0-9]\\$[0-9]{6}\\$[^$]{24}\\$[^$]{88}$",
2863
+ "modes": [
2864
+ {
2865
+ "john": null,
2866
+ "hashcat": 25300,
2867
+ "extended": false,
2868
+ "name": "Microsoft Office 2016 - SheetProtection"
2164
2869
  }
2165
2870
  ]
2166
2871
  },
@@ -2202,19 +2907,19 @@
2202
2907
  "regex": "^\\$oldoffice\\$[34]\\*[a-f0-9]{32}\\*[a-f0-9]{32}\\*[a-f0-9]{40}$",
2203
2908
  "modes": [
2204
2909
  {
2205
- "john": null,
2910
+ "john": "oldoffice",
2206
2911
  "hashcat": 9800,
2207
2912
  "extended": false,
2208
2913
  "name": "Microsoft Office \u2264 2003 (SHA1+RC4)"
2209
2914
  },
2210
2915
  {
2211
- "john": null,
2916
+ "john": "oldoffice",
2212
2917
  "hashcat": 9810,
2213
2918
  "extended": false,
2214
2919
  "name": "Microsoft Office \u2264 2003 (SHA1+RC4) collider-mode #1"
2215
2920
  },
2216
2921
  {
2217
- "john": null,
2922
+ "john": "oldoffice",
2218
2923
  "hashcat": 9820,
2219
2924
  "extended": false,
2220
2925
  "name": "Microsoft Office \u2264 2003 (SHA1+RC4) collider-mode #2"
@@ -2349,7 +3054,10 @@
2349
3054
  "john": null,
2350
3055
  "hashcat": 10900,
2351
3056
  "extended": false,
2352
- "name": "PBKDF2-HMAC-SHA256(PHP)"
3057
+ "name": "PBKDF2-HMAC-SHA256 (PHP)",
3058
+ "samples": [
3059
+ "sha256:1000:NjI3MDM3:vVfavLQL9ZWjg8BUMq6/FB8FtpkIGWYk"
3060
+ ]
2353
3061
  }
2354
3062
  ]
2355
3063
  },
@@ -2376,7 +3084,35 @@
2376
3084
  ]
2377
3085
  },
2378
3086
  {
2379
- "regex": "^\\$pdf\\$[24]\\*[34]\\*128\\*[0-9\\-]{1,5}\\*1\\*(16|32)\\*[a-f0-9]{32,64}\\*32\\*[a-f0-9]{64}\\*(8|16|32)\\*[a-f0-9]{16,64}$",
3087
+ "regex": "^\\$pdf\\$1\\*2\\*[0-9]{2}\\*[-0-9]{1,6}\\*[0-9]\\*[0-9]{2}\\*[a-f0-9]{32}\\*[0-9]{2}\\*[a-f0-9]{64}\\*[0-9]{2}\\*[a-f0-9]{64}$",
3088
+ "modes": [
3089
+ {
3090
+ "john": "pdf",
3091
+ "hashcat": 10400,
3092
+ "extended": false,
3093
+ "name": "PDF 1.1 - 1.3 (Acrobat 2 - 4)"
3094
+ },
3095
+ {
3096
+ "john": "pdf",
3097
+ "hashcat": 10410,
3098
+ "extended": false,
3099
+ "name": "PDF 1.1 - 1.3 (Acrobat 2 - 4), collider #1"
3100
+ }
3101
+ ]
3102
+ },
3103
+ {
3104
+ "regex": "^\\$pdf\\$1\\*2\\*[0-9]{2}\\*[-0-9]{1,6}\\*[0-9]\\*[0-9]{2}\\*[a-f0-9]{32}\\*[0-9]{2}\\*[a-f0-9]{64}\\*[0-9]{2}\\*[a-f0-9]{64}:[a-f0-9]{10}$",
3105
+ "modes": [
3106
+ {
3107
+ "john": "pdf",
3108
+ "hashcat": 10420,
3109
+ "extended": false,
3110
+ "name": "PDF 1.1 - 1.3 (Acrobat 2 - 4), collider #2"
3111
+ }
3112
+ ]
3113
+ },
3114
+ {
3115
+ "regex": "^\\$pdf\\$[24]\\*[34]\\*128\\*[0-9\\-]{1,6}\\*1\\*(16|32)\\*[a-f0-9]{32,64}\\*32\\*[a-f0-9]{64}\\*(8|16|32)\\*[a-f0-9]{16,64}$",
2380
3116
  "modes": [
2381
3117
  {
2382
3118
  "john": "pdf",
@@ -2385,5 +3121,333 @@
2385
3121
  "name": "PDF 1.4 - 1.6 (Acrobat 5 - 8)"
2386
3122
  }
2387
3123
  ]
3124
+ },
3125
+ {
3126
+ "regex": "^\\$pdf\\$5\\*[5|6]\\*[0-9]{3}\\*[-0-9]{1,6}\\*[0-9]\\*[0-9]{1,4}\\*[a-f0-9]{0,1024}\\*[0-9]{1,4}\\*[a-f0-9]{0,1024}\\*[0-9]{1,4}\\*[a-f0-9]{0,1024}\\*[0-9]{1,4}\\*[a-f0-9]{0,1024}\\*[0-9]{1,4}\\*[a-f0-9]{0,1024}$",
3127
+ "modes": [
3128
+ {
3129
+ "john": "pdf",
3130
+ "hashcat": 10600,
3131
+ "extended": false,
3132
+ "name": "PDF 1.7 Level 3 (Acrobat 9)"
3133
+ },
3134
+ {
3135
+ "john": "pdf",
3136
+ "hashcat": 10700,
3137
+ "extended": false,
3138
+ "name": "PDF 1.7 Level 8 (Acrobat 10 - 11)"
3139
+ }
3140
+ ]
3141
+ },
3142
+ {
3143
+ "regex": "^\\$bitcoin\\$[0-9]{2,4}\\$[a-f0-9$]{250,360}$",
3144
+ "modes": [
3145
+ {
3146
+ "john": "bitcoin",
3147
+ "hashcat": 11300,
3148
+ "extended": false,
3149
+ "name": "Bitcoin/Litecoin Wallet",
3150
+ "samples": [
3151
+ "$bitcoin$96$c265931309b4a59307921cf054b4ec6b6e4554369be79802e94e16477645777d948ae1d375191831efc78e5acd1f0443$16$8017214013543185$200460$96$480008005625057442352316337722323437108374245623701184230273883222762730232857701607167815448714$66$014754433300175043011633205413774877455616682000536368706315333388",
3152
+ "$bitcoin$96$c265931309b4a59307921cf054b4ec6b6e4554369be79802e94e16477645777d948ae1d375191831efc78e5acd1f0443$16$8017214013543185$200460$96$480008005625057442352316337722323437108374245623701184230273883222762730232857701607167815448714$66$014754433300175043011633205413774877455616682000536368706315333388",
3153
+ "$bitcoin$96$a8d2a30b9a5419934cbb7cb0727ddc16c4bebdbf30d7e099ca35f2b1b7ba04cc42eb5b865bff8f65fc6ba9e15428d84f$16$872581181d72f577$128205$96$0a8d43558ed2b55f4a53491df66e6a71003db4588d11dc0a88b976122c2849a74c2bfaace36424cf029795db6fd2c78f$130$04ff53a6f68eab1c52e5b561b4616edb5bed4d7510cdb4931c8da68732a86d86f3a3f7de266f17c8d03e02ebe8e2c86e2f5de0007217fd4aaf5742ca7373113060"
3154
+ ]
3155
+ }
3156
+ ]
3157
+ },
3158
+ {
3159
+ "regex": "^\\$ethereum\\$[a-z0-9*]{150,1400}$",
3160
+ "modes": [
3161
+ {
3162
+ "john": "ethereum-presale-opencl",
3163
+ "hashcat": 16300,
3164
+ "extended": false,
3165
+ "name": "Ethereum Presale Wallet"
3166
+ }
3167
+ ]
3168
+ },
3169
+ {
3170
+ "regex": "^\\$ethereum\\$[a-z0-9*]{150,250}$",
3171
+ "modes": [
3172
+ {
3173
+ "john": "Ethereum Wallet",
3174
+ "hashcat": 15600,
3175
+ "extended": false,
3176
+ "name": "ethereum-opencl"
3177
+ }
3178
+ ]
3179
+ },
3180
+ {
3181
+ "regex": "^\\$monero\\$(0)\\*[a-f0-9]{32,4096}$",
3182
+ "modes": [
3183
+ {
3184
+ "john": "monero",
3185
+ "hashcat": null,
3186
+ "extended": false,
3187
+ "name": "monero Wallet"
3188
+ }
3189
+ ]
3190
+ },
3191
+ {
3192
+ "regex": "^\\$ab\\$[0-9]{1}\\*[0-9]{1}\\*[0-9]{1,6}\\*[a-f0-9]{128}\\*[a-f0-9]{128}\\*[a-f0-9]{32}\\*[a-f0-9]{192}$",
3193
+ "modes": [
3194
+ {
3195
+ "john": "AndroidBackup",
3196
+ "hashcat": 18900,
3197
+ "extended": false,
3198
+ "name": "Android Backup"
3199
+ }
3200
+ ]
3201
+ },
3202
+ {
3203
+ "regex": "^\\$zip2\\$\\*[0-9]{1}\\*[0-9]{1}\\*[0-9]{1}\\*[a-f0-9]{16,32}\\*[a-f0-9]{1,6}\\*[a-f0-9]{1,6}\\*[a-f0-9]{0,16384}\\*[a-f0-9]{20}\\*\\$\/zip2\\$$",
3204
+ "modes": [
3205
+ {
3206
+ "john": "zip",
3207
+ "hashcat": 13600,
3208
+ "extended": false,
3209
+ "name": "WinZip"
3210
+ }
3211
+ ]
3212
+ },
3213
+ {
3214
+ "regex": "^\\$itunes_backup\\$\\*[0-9]{1,2}\\*[a-f0-9]{80}\\*[0-9]{1,6}\\*[a-f0-9]{40}\\*[0-9]{0,10}\\*[a-f0-9]{0,40}$",
3215
+ "modes": [
3216
+ {
3217
+ "john": "itunes-backup",
3218
+ "hashcat": 14700,
3219
+ "extended": false,
3220
+ "name": "iTunes backup < 10.0"
3221
+ },
3222
+ {
3223
+ "john": "itunes-backup",
3224
+ "hashcat": 14800,
3225
+ "extended": false,
3226
+ "name": "iTunes backup >= 10.0"
3227
+ }
3228
+ ]
3229
+ },
3230
+ {
3231
+ "regex": "^\\$telegram\\$0\\*[a-f0-9]{64}\\*[0-9]{32}$",
3232
+ "modes": [
3233
+ {
3234
+ "john": null,
3235
+ "hashcat": 22301,
3236
+ "extended": false,
3237
+ "name": "Telegram Mobile App Passcode (SHA256)"
3238
+ }
3239
+ ]
3240
+ },
3241
+ {
3242
+ "regex": "^\\$telegram\\$1\\*4000\\*[a-f0-9]{64}\\*[a-f0-9]{576}$",
3243
+ "modes": [
3244
+ {
3245
+ "john": "telegram",
3246
+ "hashcat": null,
3247
+ "extended": false,
3248
+ "name": "Telegram Desktop 1.3.9"
3249
+ }
3250
+ ]
3251
+ },
3252
+ {
3253
+ "regex": "^\\$telegram\\$2\\*100000\\*[a-f0-9]{64}\\*[a-f0-9]{576}$",
3254
+ "modes": [
3255
+ {
3256
+ "john": "telegram",
3257
+ "hashcat": null,
3258
+ "extended": false,
3259
+ "name": "Telegram Desktop \u2265 2.1.14-beta / 2.2.0"
3260
+ }
3261
+ ]
3262
+ },
3263
+ {
3264
+ "regex": "^\\$7z\\$[0-9]{1,3}\\$[0-9]{1,2}\\$[0-9]{1}\\$[^$]{0,64}\\$[0-9]{1,2}\\$[a-f0-9]{32}\\$[0-9]{1,10}\\$[0-9]{1,6}\\$[0-9]{1,6}\\$[a-f0-9]{2,}$",
3265
+ "modes": [
3266
+ {
3267
+ "john": "7z",
3268
+ "hashcat": 11600,
3269
+ "extended": false,
3270
+ "name": "7-zip"
3271
+ }
3272
+ ]
3273
+ },
3274
+ {
3275
+ "regex": "^\\$zip3\\$\\*[0-9]\\*[0-9]\\*128\\*[0-9]\\*[a-f0-9]{0,32}\\*[a-f0-9]{288}\\*[0-9]\\*[0-9]\\*[0-9]\\*[^\\s]{0,64}$",
3276
+ "modes": [
3277
+ {
3278
+ "john": "securezip",
3279
+ "hashcat": 23001,
3280
+ "extended": false,
3281
+ "name": "SecureZIP AES-128"
3282
+ }
3283
+ ]
3284
+ },
3285
+ {
3286
+ "regex": "^\\$zip3\\$\\*[0-9]\\*[0-9]\\*192\\*[0-9]\\*[a-f0-9]{0,32}\\*[a-f0-9]{288}\\*[0-9]\\*[0-9]\\*[0-9]\\*[^\\s]{0,64}$",
3287
+ "modes": [
3288
+ {
3289
+ "john": "securezip",
3290
+ "hashcat": 23002,
3291
+ "extended": false,
3292
+ "name": "SecureZIP AES-192"
3293
+ }
3294
+ ]
3295
+ },
3296
+ {
3297
+ "regex": "^\\$zip3\\$\\*[0-9]\\*[0-9]\\*256\\*[0-9]\\*[a-f0-9]{0,32}\\*[a-f0-9]{288}\\*[0-9]\\*[0-9]\\*[0-9]\\*[^\\s]{0,64}$",
3298
+ "modes": [
3299
+ {
3300
+ "john": "securezip",
3301
+ "hashcat": 23003,
3302
+ "extended": false,
3303
+ "name": "SecureZIP AES-256"
3304
+ }
3305
+ ]
3306
+ },
3307
+ {
3308
+ "regex": "^\\$pkzip2?\\$[a-f0-9\\*]+\\$\/pkzip2?\\$$",
3309
+ "modes": [
3310
+ {
3311
+ "john": "pkzip",
3312
+ "hashcat": null,
3313
+ "extended": false,
3314
+ "name": "PKZIP"
3315
+ }
3316
+ ]
3317
+ },
3318
+ {
3319
+ "regex": "^\\$argon2d\\$v=19\\$m=[0-9]{1,6},t=[0-9]{1,2},p=[0-9]{1,2}\\$[^$]+\\$[^\\s]{6,}$",
3320
+ "modes": [
3321
+ {
3322
+ "john": "argon2",
3323
+ "hashcat": null,
3324
+ "extended": false,
3325
+ "name": "argon2d",
3326
+ "samples": [
3327
+ "$argon2d$v=19$m=4096,t=3,p=1$ZGFtYWdlX2RvbmU$w9w3s5/zV8+PcAZlJhnTCOE+vBkZssmZf6jOq3dKv50",
3328
+ "$argon2d$v=19$m=4096,t=3,p=1$c2hvcnRfc2FsdA$zMrTcOAOUje6UqObRVh84Pe1K6gumcDqqGzRM0ILzYmj",
3329
+ "$argon2d$v=19$m=16384,t=3,p=1$c2hvcnRfc2FsdA$TLSTPihIo+5F67Y1vJdfWdB9",
3330
+ "$argon2d$v=19$m=16384,t=4,p=3$YW5vdGhlcl9zYWx0$yw93eMxC8REPAwbQ0e/q43jR9+RI9HI/DHP75uzm7tQfjU734oaI3dzcMWjYjHzVQD+J4+MG+7oyD8dN/PtnmPCZs+UZ67E+rkXJ/wTvY4WgXgAdGtJRrAGxhy4rD7d5G+dCpqhrog"
3331
+ ]
3332
+ }
3333
+ ]
3334
+ },
3335
+ {
3336
+ "regex": "^\\$argon2i\\$v=19\\$m=[0-9]{1,6},t=[0-9]{1,2},p=[0-9]{1,2}\\$[^$]+\\$[^\\s]{6,}$",
3337
+ "modes": [
3338
+ {
3339
+ "john": "argon2",
3340
+ "hashcat": null,
3341
+ "extended": false,
3342
+ "name": "argon2i",
3343
+ "samples": [
3344
+ "$argon2i$v=19$m=4096,t=3,p=1$ZGFtYWdlX2RvbmU$N59QwnpxDQZRj1/cO6bqm408dD6Z2Z9LKYpwFJSPVKA",
3345
+ "$argon2i$v=19$m=4096,t=3,p=1$c2hvcnRfc2FsdA$1l4kAwUdAApoCbFH7ghBEf7bsdrOQzE4axIJ3PV0Ncrd",
3346
+ "$argon2i$v=19$m=16384,t=3,p=1$c2hvcnRfc2FsdA$vvjDVog22A5x9eljmB+2yC8y",
3347
+ "$argon2i$v=19$m=16384,t=4,p=3$YW5vdGhlcl9zYWx0$K7unxwO5aeuZCpnIJ06FMCRKod3eRg8oIRzQrK3E6mGbyqlTvvl47jeDWq/5drF1COJkEF9Ty7FWXJZHa+vqlf2YZGp/4qSlAvKmdtJ/6JZU32iQItzMRwcfujHE+PBjbL5uz4966A"
3348
+ ]
3349
+ }
3350
+ ]
3351
+ },
3352
+ {
3353
+ "regex": "^\\$argon2id\\$v=19\\$m=[0-9]{1,6},t=[0-9]{1,2},p=[0-9]{1,2}\\$[^$]+\\$[^\\s]{6,}$",
3354
+ "modes": [
3355
+ {
3356
+ "john": null,
3357
+ "hashcat": null,
3358
+ "extended": false,
3359
+ "name": "argon2id"
3360
+ }
3361
+ ]
3362
+ },
3363
+ {
3364
+ "regex": "^\\$axcrypt\\$\\*2\\*[0-9]{1,7}\\*[a-f0-9]{128}\\*[a-f0-9]{288}\\*[0-9]{1,7}\\*[a-f0-9]{64}$",
3365
+ "modes": [
3366
+ {
3367
+ "john": "axcrypt",
3368
+ "hashcat": 23500,
3369
+ "extended": false,
3370
+ "name": "AxCrypt 2",
3371
+ "samples": [
3372
+ "$axcrypt$*2*10000*6d44c6d19076bce9920c5fb76b246c161926ce65abb93ec2003919d78898aadd5bc6e5754201ff25d681ad89fa2861d20ef7c3fd7bde051909dfef8adcb50491*68f78a1b80291a42b2a117d6209d3eb3541a8d47ed6b970b2b8294b2bc78347fc2b494a0599f8cba6d45e88fd8fbc5b4dd7e888f6c9543e679489de132167222e130d5925278693ad8599284705fdf99360b2199ed0005be05867b9b7aa6bb4be76f5f979819eb27cf590a47d81830575b2af09dda756360c844b89c7dcec099cfdd27d2d0c95d24f143405f303e4843*1000*debdeb8ea7b9800b01855de09b105fdb8840efc1f67dc742283d13a5570165f8",
3373
+ "$axcrypt$*2*28200*96fca6b5aff19cb540125e6452f1ab6e1cbf7097ad75326e7aa1726f687ed18e66a63295d735f458a138901be41d95d29ff760c7c4b4178320251f2ab0ecabd8*d1d90c425fd8e2d20b2aa7ef6f3ab9dcefad84917f9e07f65f8da61e7e84f490ba8007179718ce0033cbc887177c2b51ed00e88155741960ab667a5328f305969518bc436ee1ba28126a5be79b0b90f8a9c8a438cba9d0e59c0b6573cde124a8300a6fb01ff857485d302285f1eacd7f08d9cc70ec9fdf412b60bc5a728b5108ef8bda24caee5ab7cc4376951c080c6d*1000*fead8792ea352979ab19e7b287bf709f39df0706a7e460b5271d1ebc71014b3b",
3374
+ "$axcrypt$*2*23652*8817291e0611409390c50a8bdc99a98bf56d393174d7c177082391f7919ed392a701783790ad2eed49139ede2b1546dc4a9aaa142e2b2530b4c82cff03df18b1*2561a0c3f5e166c7273ea6fb59592a58b8d8235a379c82de39fc6d674291b6a25a268732c34eab1b092166ca4f9ef9e383325b90633896890f7dca4d29876ec5bb232ff89c8130aad917f93d9228a091a9996e1f14d4b130b5aad7516c11aa9143730d7b0ec8168b4d83bdd0ca1a9a36784572b9db992bd13289ecd577a421ded0576801e88c7275b2d5fa8eb7e540cb*1000*3dc38e68204a7060c3cd616ffcf6df17dbbb3c199e67ea85c7e29751b9ea2fc2"
3375
+ ]
3376
+ }
3377
+ ]
3378
+ },
3379
+ {
3380
+ "regex": "^\\$axcrypt\\$\\*1\\*[0-9]{1,7}\\*[a-f0-9]{32}\\*[a-f0-9]{48}(?:\\*[a-z0-9]+)?$",
3381
+ "modes": [
3382
+ {
3383
+ "john": "axcrypt",
3384
+ "hashcat": null,
3385
+ "extended": false,
3386
+ "name": "AxCrypt 1",
3387
+ "samples": [
3388
+ "$axcrypt$*1*1337*0fd9e7e2f907f480f8af162564f8f94b*af10c88878ba4e2c89b12586f93b7802453121ee702bc362",
3389
+ "$axcrypt$*1*31014*3408ae91dddc0b1750ed4223fd843364*1cc0f8fa8d89f44d284d0562ac7e93848c86ce9605907129",
3390
+ "$axcrypt$*1*20000*efd759ae68ae7edd709b9e1c2166d0f7*dcf4c1279b8e4d39475925b17f698c3ce39e9e7d82917272*68656c6c6f0a",
3391
+ "$axcrypt$*1*38574*ce4f58c1e85df1ea921df6d6c05439b4*3278c3c730f7887b1008e852e59997e2196710a5c6bc1813*66664a6b2074434a4520374d73592055626979204a6b755520736d6b4b20394e694a205548444320524578562065674b33202f42593d"
3392
+ ]
3393
+ }
3394
+ ]
3395
+ },
3396
+ {
3397
+ "regex": "^\\$rar5\\$[0-9]{2}\\$[a-f0-9]{32}\\$[0-9]{2}\\$[a-f0-9]{32}\\$[0-9]{1}\\$[a-f0-9]{16}$",
3398
+ "modes": [
3399
+ {
3400
+ "john": "rar5",
3401
+ "hashcat": 13000,
3402
+ "extended": false,
3403
+ "name": "RAR5",
3404
+ "samples": [
3405
+ "$rar5$16$38466361001011015181344360681307$15$00000000000000000000000000000000$8$cc7a30583e62676a",
3406
+ "$rar5$16$37526a0922b4adcc32f8fed5d51bb6c8$15$8955617d9b801def51d734095bb8ecdb$8$9f0b23c98ebb3653",
3407
+ "$rar5$16$ed9bd88cc649bd06bfd7dc418fcf5fbd$15$21771e718815d6f23073ea294540ce94$8$5c4361e549c999e1"
3408
+ ]
3409
+ }
3410
+ ]
3411
+ },
3412
+ {
3413
+ "regex": "^\\$RAR3\\$\\*[0-9]{1}\\*[a-f0-9]{16}\\*[a-f0-9]{8}\\*[0-9]{1,7}\\*[0-9]{1,6}\\*[0-9]{1}\\*[a-f0-9]{2,}\\*[0-9]{2}$",
3414
+ "modes": [
3415
+ {
3416
+ "john": "rar",
3417
+ "hashcat": 23700,
3418
+ "extended": false,
3419
+ "name": "RAR3 -p (Uncompressed)",
3420
+ "samples": [
3421
+ "$RAR3$*1*e54a73729887cb53*49b0a846*16*14*1*34620bcca8176642a210b1051901921e*30",
3422
+ "$RAR3$*1*c47c5bef0bbd1e98*965f1453*48*47*1*c5e987f81d316d9dcfdb6a1b27105ce63fca2c594da5aa2f6fdf2f65f50f0d66314f8a09da875ae19d6c15636b65c815*30"
3423
+ ]
3424
+ },
3425
+ {
3426
+ "john": "rar",
3427
+ "hashcat": 23800,
3428
+ "extended": false,
3429
+ "name": "RAR3 -p (Compressed)",
3430
+ "samples": [
3431
+ "$RAR3$*1*ad56eb40219c9da2*834064ce*32*13*1*eb47b1abe17a1a75bce6c92ab1cef3f4126035ea95deaf08b3f32a0c7b8078e1*33",
3432
+ "$RAR3$*1*b4eee1a48dc95d12*965f1453*64*47*1*0fe529478798c0960dd88a38a05451f9559e15f0cf20b4cac58260b0e5b56699d5871bdcc35bee099cc131eb35b9a116adaedf5ecc26b1c09cadf5185b3092e6*33"
3433
+ ]
3434
+ }
3435
+ ]
3436
+ },
3437
+ {
3438
+ "regex": "^\\$RAR3\\$\\*[0-9]{1}\\*[a-f0-9]{16}\\*[a-f0-9]{32}$",
3439
+ "modes": [
3440
+ {
3441
+ "john": "rar",
3442
+ "hashcat": 12500,
3443
+ "extended": false,
3444
+ "name": "RAR3 -hp",
3445
+ "samples": [
3446
+ "$RAR3$*0*45109af8ab5f297a*adbf6c5385d7a40373e8f77d7b89d317",
3447
+ "$RAR3$*0*7ce241baa2bd521b*3eb0017fa8843017952c53a3ac8332b6",
3448
+ "$RAR3$*0*c203c4d80a8a09dc*1f406154556d4c895a8be207fd2b5d0c"
3449
+ ]
3450
+ }
3451
+ ]
2388
3452
  }
2389
3453
  ]