haiti-hash 1.0.1 → 1.2.0
Sign up to get free protection for your applications and to get access to all the features.
- checksums.yaml +4 -4
- data/bin/haiti +2 -6
- data/data/commons.json +29 -0
- data/data/prototypes.json +1178 -114
- data/lib/haiti.rb +7 -0
- data/lib/haiti/hash.rb +3 -0
- data/lib/haiti/version.rb +1 -1
- metadata +13 -9
checksums.yaml
CHANGED
@@ -1,7 +1,7 @@
|
|
1
1
|
---
|
2
2
|
SHA256:
|
3
|
-
metadata.gz:
|
4
|
-
data.tar.gz:
|
3
|
+
metadata.gz: 1c099f7e619faf1e73b462f58f0e716c34778a19d9cf218d83631b1043986311
|
4
|
+
data.tar.gz: e8c2240e8e88453596e83e29df991c72339d293395fa83876bbf5650d0c585e3
|
5
5
|
SHA512:
|
6
|
-
metadata.gz:
|
7
|
-
data.tar.gz:
|
6
|
+
metadata.gz: a091e70ebca0dff0be0874e49455028f387bb6b1acbdb88b895e063cd4770d575f16ece828237c562c44eeee8b5acf9a22bf85164b1e715bd9c93ea5602787ea
|
7
|
+
data.tar.gz: c3ccf4514ee772fb408e08b11404523667ac4f8e8442290a7e88b49fbd1b000b60cd84c834b8525e667e3a3301b0b6ee88268c735b0650436df5e0df73a2a9c4
|
data/bin/haiti
CHANGED
@@ -47,12 +47,8 @@ begin
|
|
47
47
|
next if type.extended && !args['--extended']
|
48
48
|
|
49
49
|
print Paint[type.name, :bold]
|
50
|
-
unless type.hashcat.nil? || args['--short'] || args['--john-only']
|
51
|
-
|
52
|
-
end
|
53
|
-
unless type.john.nil? || args['--short'] || args['--hashcat-only']
|
54
|
-
print Paint[" [JtR: #{type.john}]", :green]
|
55
|
-
end
|
50
|
+
print Paint[" [HC: #{type.hashcat}]", :blue] unless type.hashcat.nil? || args['--short'] || args['--john-only']
|
51
|
+
print Paint[" [JtR: #{type.john}]", :green] unless type.john.nil? || args['--short'] || args['--hashcat-only']
|
56
52
|
puts
|
57
53
|
end
|
58
54
|
end
|
data/data/commons.json
ADDED
@@ -0,0 +1,29 @@
|
|
1
|
+
[
|
2
|
+
"MD5",
|
3
|
+
"SHA-1",
|
4
|
+
"SHA-256",
|
5
|
+
"SHA-512",
|
6
|
+
"bcrypt",
|
7
|
+
"NTLM",
|
8
|
+
"NetNTLMv2",
|
9
|
+
"NetNTLMv1-VANILLA / NetNTLMv1+ESS",
|
10
|
+
"BLAKE2-512",
|
11
|
+
"SHA3-224",
|
12
|
+
"SHA3-256",
|
13
|
+
"SHA3-512",
|
14
|
+
"Keccak-256",
|
15
|
+
"Keccak-512",
|
16
|
+
"CRC-32B",
|
17
|
+
"CRC-32",
|
18
|
+
"CRC-16",
|
19
|
+
"CRC-64",
|
20
|
+
"GOST R 34.11-94",
|
21
|
+
"Apache MD5",
|
22
|
+
"MD5(APR)",
|
23
|
+
"md5apr1",
|
24
|
+
"Domain Cached Credentials",
|
25
|
+
"Domain Cached Credentials 2",
|
26
|
+
"LM",
|
27
|
+
"RIPEMD-160",
|
28
|
+
"scrypt"
|
29
|
+
]
|
data/data/prototypes.json
CHANGED
@@ -99,13 +99,18 @@
|
|
99
99
|
]
|
100
100
|
},
|
101
101
|
{
|
102
|
-
"regex": "^(\\$crc32\\$[a-f0-9]{8}.)?[a-f0-9]{8}$",
|
102
|
+
"regex": "^(\\$crc32\\$)?([a-f0-9]{8}.)?[a-f0-9]{8}$",
|
103
103
|
"modes": [
|
104
104
|
{
|
105
105
|
"john": "crc32",
|
106
|
-
"hashcat":
|
106
|
+
"hashcat": 11500,
|
107
107
|
"extended": false,
|
108
|
-
"name": "CRC-32"
|
108
|
+
"name": "CRC-32",
|
109
|
+
"samples": [
|
110
|
+
"c762de4a:00000000",
|
111
|
+
"$crc32$00000000.fa455f6b",
|
112
|
+
"$crc32$4ff4f23f.ce6eb863"
|
113
|
+
]
|
109
114
|
}
|
110
115
|
]
|
111
116
|
},
|
@@ -116,7 +121,12 @@
|
|
116
121
|
"john": "bfegg",
|
117
122
|
"hashcat": null,
|
118
123
|
"extended": false,
|
119
|
-
"name": "Eggdrop IRC Bot"
|
124
|
+
"name": "Eggdrop IRC Bot",
|
125
|
+
"samples": [
|
126
|
+
"+9F93o1OxwgK1",
|
127
|
+
"+C/.8o.Wuph9.",
|
128
|
+
"+Obytd.zXYjH/"
|
129
|
+
]
|
120
130
|
}
|
121
131
|
]
|
122
132
|
},
|
@@ -127,19 +137,34 @@
|
|
127
137
|
"john": "descrypt",
|
128
138
|
"hashcat": 1500,
|
129
139
|
"extended": false,
|
130
|
-
"name": "DES(Unix)"
|
140
|
+
"name": "DES(Unix)",
|
141
|
+
"samples": [
|
142
|
+
"CCNf8Sbh3HDfQ",
|
143
|
+
"CCX.K.MFy4Ois",
|
144
|
+
"CC4rMpbg9AMZ."
|
145
|
+
]
|
131
146
|
},
|
132
147
|
{
|
133
148
|
"john": "descrypt",
|
134
149
|
"hashcat": 1500,
|
135
150
|
"extended": false,
|
136
|
-
"name": "Traditional DES"
|
151
|
+
"name": "Traditional DES",
|
152
|
+
"samples": [
|
153
|
+
"CCNf8Sbh3HDfQ",
|
154
|
+
"CCX.K.MFy4Ois",
|
155
|
+
"CC4rMpbg9AMZ."
|
156
|
+
]
|
137
157
|
},
|
138
158
|
{
|
139
159
|
"john": "descrypt",
|
140
160
|
"hashcat": 1500,
|
141
161
|
"extended": false,
|
142
|
-
"name": "DEScrypt"
|
162
|
+
"name": "DEScrypt",
|
163
|
+
"samples": [
|
164
|
+
"CCNf8Sbh3HDfQ",
|
165
|
+
"CCX.K.MFy4Ois",
|
166
|
+
"CC4rMpbg9AMZ."
|
167
|
+
]
|
143
168
|
}
|
144
169
|
]
|
145
170
|
},
|
@@ -152,12 +177,6 @@
|
|
152
177
|
"extended": false,
|
153
178
|
"name": "MySQL323"
|
154
179
|
},
|
155
|
-
{
|
156
|
-
"john": null,
|
157
|
-
"hashcat": 3100,
|
158
|
-
"extended": false,
|
159
|
-
"name": "DES(Oracle)"
|
160
|
-
},
|
161
180
|
{
|
162
181
|
"john": null,
|
163
182
|
"hashcat": 5100,
|
@@ -166,21 +185,38 @@
|
|
166
185
|
},
|
167
186
|
{
|
168
187
|
"john": null,
|
169
|
-
"hashcat":
|
188
|
+
"hashcat": null,
|
170
189
|
"extended": false,
|
171
|
-
"name": "
|
190
|
+
"name": "FNV-164"
|
172
191
|
},
|
173
192
|
{
|
174
193
|
"john": null,
|
175
194
|
"hashcat": null,
|
176
195
|
"extended": false,
|
177
|
-
"name": "
|
196
|
+
"name": "CRC-64"
|
197
|
+
}
|
198
|
+
]
|
199
|
+
},
|
200
|
+
{
|
201
|
+
"regex": "^[a-f0-9]{16}:[a-f0-9]{0,30}$",
|
202
|
+
"modes": [
|
203
|
+
{
|
204
|
+
"john": null,
|
205
|
+
"hashcat": 3100,
|
206
|
+
"extended": false,
|
207
|
+
"name": "DES(Oracle)",
|
208
|
+
"samples": [
|
209
|
+
"792FCB0AE31D8489:7284616727"
|
210
|
+
]
|
178
211
|
},
|
179
212
|
{
|
180
213
|
"john": null,
|
181
|
-
"hashcat":
|
214
|
+
"hashcat": 3100,
|
182
215
|
"extended": false,
|
183
|
-
"name": "
|
216
|
+
"name": "Oracle 7-10g",
|
217
|
+
"samples": [
|
218
|
+
"792FCB0AE31D8489:7284616727"
|
219
|
+
]
|
184
220
|
}
|
185
221
|
]
|
186
222
|
},
|
@@ -192,6 +228,12 @@
|
|
192
228
|
"hashcat": 2400,
|
193
229
|
"extended": false,
|
194
230
|
"name": "Cisco-PIX(MD5)"
|
231
|
+
},
|
232
|
+
{
|
233
|
+
"john": "dynamic_19",
|
234
|
+
"hashcat": 2400,
|
235
|
+
"extended": true,
|
236
|
+
"name": "md5($pass)"
|
195
237
|
}
|
196
238
|
]
|
197
239
|
},
|
@@ -211,9 +253,14 @@
|
|
211
253
|
"modes": [
|
212
254
|
{
|
213
255
|
"john": "bsdicrypt",
|
214
|
-
"hashcat":
|
256
|
+
"hashcat": 12400,
|
215
257
|
"extended": false,
|
216
|
-
"name": "BSDi Crypt"
|
258
|
+
"name": "BSDi Crypt",
|
259
|
+
"samples": [
|
260
|
+
"_GW..8841inaTltazRsQ",
|
261
|
+
"_J9..XXXXsqM/YSSP..Y",
|
262
|
+
"_J9..SDSD5YGyRCr4W4c"
|
263
|
+
]
|
217
264
|
}
|
218
265
|
]
|
219
266
|
},
|
@@ -224,7 +271,25 @@
|
|
224
271
|
"john": null,
|
225
272
|
"hashcat": null,
|
226
273
|
"extended": false,
|
227
|
-
"name": "CRC-96(ZIP)"
|
274
|
+
"name": "CRC-96 (ZIP)"
|
275
|
+
},
|
276
|
+
{
|
277
|
+
"john": null,
|
278
|
+
"hashcat": 20500,
|
279
|
+
"extended": false,
|
280
|
+
"name": "PKZIP Master Key",
|
281
|
+
"samples": [
|
282
|
+
"f1eff5c0368d10311dcfc419"
|
283
|
+
]
|
284
|
+
},
|
285
|
+
{
|
286
|
+
"john": null,
|
287
|
+
"hashcat": 20510,
|
288
|
+
"extended": false,
|
289
|
+
"name": "PKZIP Master Key (6 byte optimization)",
|
290
|
+
"samples": [
|
291
|
+
"f1eff5c0368d10311dcfc419"
|
292
|
+
]
|
228
293
|
}
|
229
294
|
]
|
230
295
|
},
|
@@ -257,7 +322,11 @@
|
|
257
322
|
"john": "raw-md5",
|
258
323
|
"hashcat": 0,
|
259
324
|
"extended": false,
|
260
|
-
"name": "MD5"
|
325
|
+
"name": "MD5",
|
326
|
+
"samples": [
|
327
|
+
"8743b52063cd84097a65d1633f5c74f5",
|
328
|
+
"098F6BCD4621D373CADE4E832627B4F6"
|
329
|
+
]
|
261
330
|
},
|
262
331
|
{
|
263
332
|
"john": "raw-md4",
|
@@ -278,16 +347,22 @@
|
|
278
347
|
"name": "LM"
|
279
348
|
},
|
280
349
|
{
|
281
|
-
"john": "
|
350
|
+
"john": "haval-128-4",
|
282
351
|
"hashcat": null,
|
283
352
|
"extended": false,
|
284
|
-
"name": "
|
353
|
+
"name": "Haval-128 (4 rounds)"
|
285
354
|
},
|
286
355
|
{
|
287
|
-
"john": "
|
356
|
+
"john": "dynamic_160",
|
357
|
+
"hashcat": null,
|
358
|
+
"extended": false,
|
359
|
+
"name": "Haval-128 (3 rounds)"
|
360
|
+
},
|
361
|
+
{
|
362
|
+
"john": "dynamic_180",
|
288
363
|
"hashcat": null,
|
289
364
|
"extended": false,
|
290
|
-
"name": "Haval-128"
|
365
|
+
"name": "Haval-128 (5 rounds)"
|
291
366
|
},
|
292
367
|
{
|
293
368
|
"john": null,
|
@@ -326,37 +401,40 @@
|
|
326
401
|
"name": "ZipMonster"
|
327
402
|
},
|
328
403
|
{
|
329
|
-
"john":
|
330
|
-
"hashcat":
|
404
|
+
"john": "dynamic_3",
|
405
|
+
"hashcat": 3500,
|
331
406
|
"extended": true,
|
332
|
-
"name": "
|
407
|
+
"name": "md5(md5(md5($pass)))",
|
408
|
+
"samples": [
|
409
|
+
"9882d0778518b095917eb589f6998441"
|
410
|
+
]
|
333
411
|
},
|
334
412
|
{
|
335
|
-
"john":
|
336
|
-
"hashcat":
|
413
|
+
"john": "dynamic_2",
|
414
|
+
"hashcat": null,
|
337
415
|
"extended": true,
|
338
|
-
"name": "md5(md5(
|
416
|
+
"name": "md5(md5($pass))"
|
339
417
|
},
|
340
418
|
{
|
341
419
|
"john": null,
|
342
420
|
"hashcat": 4300,
|
343
421
|
"extended": true,
|
344
|
-
"name": "md5(
|
422
|
+
"name": "md5(uppercase(md5($pass)))"
|
345
423
|
},
|
346
424
|
{
|
347
|
-
"john":
|
425
|
+
"john": "dynamic_22",
|
348
426
|
"hashcat": 4400,
|
349
427
|
"extended": true,
|
350
428
|
"name": "md5(sha1($pass))"
|
351
429
|
},
|
352
430
|
{
|
353
|
-
"john":
|
431
|
+
"john": "dynamic_1",
|
354
432
|
"hashcat": 10,
|
355
433
|
"extended": true,
|
356
434
|
"name": "md5($pass.$salt)"
|
357
435
|
},
|
358
436
|
{
|
359
|
-
"john":
|
437
|
+
"john": "dynamic_4",
|
360
438
|
"hashcat": 20,
|
361
439
|
"extended": true,
|
362
440
|
"name": "md5($salt.$pass)"
|
@@ -386,13 +464,16 @@
|
|
386
464
|
"name": "HMAC-MD5 (key = $salt)"
|
387
465
|
},
|
388
466
|
{
|
389
|
-
"john":
|
467
|
+
"john": "dynamic_8",
|
390
468
|
"hashcat": 3610,
|
391
469
|
"extended": true,
|
392
|
-
"name": "md5(md5($salt).$pass)"
|
470
|
+
"name": "md5(md5($salt).$pass)",
|
471
|
+
"samples": [
|
472
|
+
"7b57255a15958ef898543ea6cc3313bc:1234"
|
473
|
+
]
|
393
474
|
},
|
394
475
|
{
|
395
|
-
"john":
|
476
|
+
"john": "dynamic_9",
|
396
477
|
"hashcat": 3710,
|
397
478
|
"extended": true,
|
398
479
|
"name": "md5($salt.md5($pass))"
|
@@ -401,28 +482,49 @@
|
|
401
482
|
"john": null,
|
402
483
|
"hashcat": 3720,
|
403
484
|
"extended": true,
|
404
|
-
"name": "md5($pass.md5($salt))"
|
485
|
+
"name": "md5($pass.md5($salt))",
|
486
|
+
"samples": [
|
487
|
+
"10ce488714fdbde9453670e0e4cbe99c:1234"
|
488
|
+
]
|
405
489
|
},
|
406
490
|
{
|
407
|
-
"john":
|
491
|
+
"john": "dynamic_5",
|
408
492
|
"hashcat": 3810,
|
409
493
|
"extended": true,
|
410
494
|
"name": "md5($salt.$pass.$salt)"
|
411
495
|
},
|
412
496
|
{
|
413
|
-
"john":
|
497
|
+
"john": "dynamic_14",
|
498
|
+
"hashcat": null,
|
499
|
+
"extended": true,
|
500
|
+
"name": "md5($salt.md5($pass).$salt)"
|
501
|
+
},
|
502
|
+
{
|
503
|
+
"john": "dynamic_13",
|
414
504
|
"hashcat": 3910,
|
415
505
|
"extended": true,
|
416
506
|
"name": "md5(md5($pass).md5($salt))"
|
417
507
|
},
|
418
508
|
{
|
419
|
-
"john":
|
509
|
+
"john": "dynamic_12",
|
510
|
+
"hashcat": null,
|
511
|
+
"extended": true,
|
512
|
+
"name": "md5(md5($salt).md5($pass))"
|
513
|
+
},
|
514
|
+
{
|
515
|
+
"john": "dynamic_6",
|
516
|
+
"hashcat": null,
|
517
|
+
"extended": true,
|
518
|
+
"name": "md5(md5($pass).$salt)"
|
519
|
+
},
|
520
|
+
{
|
521
|
+
"john": "dynamic_10",
|
420
522
|
"hashcat": 4010,
|
421
523
|
"extended": true,
|
422
524
|
"name": "md5($salt.md5($salt.$pass))"
|
423
525
|
},
|
424
526
|
{
|
425
|
-
"john":
|
527
|
+
"john": "dynamic_11",
|
426
528
|
"hashcat": 4110,
|
427
529
|
"extended": true,
|
428
530
|
"name": "md5($salt.md5($pass.$salt))"
|
@@ -431,7 +533,109 @@
|
|
431
533
|
"john": null,
|
432
534
|
"hashcat": 4210,
|
433
535
|
"extended": true,
|
434
|
-
"name": "md5($username.0.$pass)"
|
536
|
+
"name": "md5($username.0.$pass)",
|
537
|
+
"samples": [
|
538
|
+
"09ea048c345ad336ebe38ae5b6c4de24:1234"
|
539
|
+
]
|
540
|
+
},
|
541
|
+
{
|
542
|
+
"john": "dynamic_15",
|
543
|
+
"hashcat": null,
|
544
|
+
"extended": true,
|
545
|
+
"name": "md5($username.md5($pass).$salt)"
|
546
|
+
},
|
547
|
+
{
|
548
|
+
"john": "dynamic_16",
|
549
|
+
"hashcat": null,
|
550
|
+
"extended": true,
|
551
|
+
"name": "md5(md5(md5($pass).$salt).$salt2)"
|
552
|
+
},
|
553
|
+
{
|
554
|
+
"john": "dynamic_18",
|
555
|
+
"hashcat": null,
|
556
|
+
"extended": true,
|
557
|
+
"name": "md5($salt.Y.$pass.0xF7.$salt)"
|
558
|
+
},
|
559
|
+
{
|
560
|
+
"john": "dynamic_29",
|
561
|
+
"hashcat": null,
|
562
|
+
"extended": true,
|
563
|
+
"name": "md5(utf16($pass))"
|
564
|
+
},
|
565
|
+
{
|
566
|
+
"john": "dynamic_31",
|
567
|
+
"hashcat": null,
|
568
|
+
"extended": true,
|
569
|
+
"name": "md4($salt.$pass)"
|
570
|
+
},
|
571
|
+
{
|
572
|
+
"john": "dynamic_32",
|
573
|
+
"hashcat": null,
|
574
|
+
"extended": true,
|
575
|
+
"name": "md4($pass.$salt)"
|
576
|
+
},
|
577
|
+
{
|
578
|
+
"john": "dynamic_33",
|
579
|
+
"hashcat": null,
|
580
|
+
"extended": true,
|
581
|
+
"name": "md4(utf16($pass))"
|
582
|
+
},
|
583
|
+
{
|
584
|
+
"john": "dynamic_34",
|
585
|
+
"hashcat": null,
|
586
|
+
"extended": true,
|
587
|
+
"name": "md5(md4($pass))"
|
588
|
+
},
|
589
|
+
{
|
590
|
+
"john": "dynamic_39",
|
591
|
+
"hashcat": null,
|
592
|
+
"extended": true,
|
593
|
+
"name": "md5($salt.pad16($pass))"
|
594
|
+
}
|
595
|
+
]
|
596
|
+
},
|
597
|
+
{
|
598
|
+
"regex": "^[a-f0-9]{32}:.{56}$",
|
599
|
+
"modes": [
|
600
|
+
{
|
601
|
+
"john": null,
|
602
|
+
"hashcat": 11000,
|
603
|
+
"extended": false,
|
604
|
+
"name": "PrestaShop",
|
605
|
+
"samples": [
|
606
|
+
"f22cade043e7214200206dbffca49fd9:27167508161455764247627144160038845437138252877014827848",
|
607
|
+
"810e3d12f0f10777a679d9ca1ad7a8d9:M2uZ122bSHJ4Mi54tXGY0lqcv1r28mUluSkyw37ou5oia4i239ujqw0l"
|
608
|
+
]
|
609
|
+
}
|
610
|
+
]
|
611
|
+
},
|
612
|
+
{
|
613
|
+
"regex": "^(\\$netmd5\\$)?([a-f0-9]{88,96}\\$)?[a-f0-9]{32}$",
|
614
|
+
"modes": [
|
615
|
+
{
|
616
|
+
"john": "net-md5",
|
617
|
+
"hashcat": null,
|
618
|
+
"extended": false,
|
619
|
+
"name": "Keyed MD5: RIPv2, OSPF, BGP, SNMPv2",
|
620
|
+
"samples": [
|
621
|
+
"02020000ffff0003002c01145267d48d000000000000000000020000ac100100ffffff000000000000000001ffff0001$1e372a8a233c6556253a0909bc3dcce6",
|
622
|
+
"$netmd5$0201002cac1001010000000000000002000001105267ff8fffffff00000a0201000000280000000000000000$445ecbb27272bd791a757a6c85856150"
|
623
|
+
]
|
624
|
+
}
|
625
|
+
]
|
626
|
+
},
|
627
|
+
{
|
628
|
+
"regex": "^(\\$ripemd\\$)?[a-f0-9]{32}(:.+)?$",
|
629
|
+
"modes": [
|
630
|
+
{
|
631
|
+
"john": "ripemd-128",
|
632
|
+
"hashcat": null,
|
633
|
+
"extended": false,
|
634
|
+
"name": "RIPEMD-128",
|
635
|
+
"samples": [
|
636
|
+
"cdf26213a150dc3ecb610f18f6b38b46",
|
637
|
+
"$ripemd$cdf26213a150dc3ecb610f18f6b38b46"
|
638
|
+
]
|
435
639
|
}
|
436
640
|
]
|
437
641
|
},
|
@@ -611,7 +815,7 @@
|
|
611
815
|
{
|
612
816
|
"john": null,
|
613
817
|
"hashcat": 1600,
|
614
|
-
"extended":
|
818
|
+
"extended": false,
|
615
819
|
"name": "md5apr1"
|
616
820
|
}
|
617
821
|
]
|
@@ -628,13 +832,16 @@
|
|
628
832
|
]
|
629
833
|
},
|
630
834
|
{
|
631
|
-
"regex": "^[a-f0-9]{32}
|
835
|
+
"regex": "^[a-f0-9]{32}:.+$",
|
632
836
|
"modes": [
|
633
837
|
{
|
634
838
|
"john": null,
|
635
839
|
"hashcat": 3721,
|
636
840
|
"extended": false,
|
637
|
-
"name": "WebEdition CMS"
|
841
|
+
"name": "WebEdition CMS",
|
842
|
+
"samples": [
|
843
|
+
"fa01af9f0de5f377ae8befb03865178e:5678"
|
844
|
+
]
|
638
845
|
}
|
639
846
|
]
|
640
847
|
},
|
@@ -687,16 +894,22 @@
|
|
687
894
|
"name": "Double SHA-1"
|
688
895
|
},
|
689
896
|
{
|
690
|
-
"john": "
|
691
|
-
"hashcat":
|
897
|
+
"john": "dynamic_190",
|
898
|
+
"hashcat": null,
|
692
899
|
"extended": false,
|
693
|
-
"name": "
|
900
|
+
"name": "Haval-160 (3 rounds)"
|
694
901
|
},
|
695
902
|
{
|
696
|
-
"john":
|
903
|
+
"john": "dynamic_200",
|
904
|
+
"hashcat": null,
|
905
|
+
"extended": false,
|
906
|
+
"name": "Haval-160 (4 rounds)"
|
907
|
+
},
|
908
|
+
{
|
909
|
+
"john": "dynamic_210",
|
697
910
|
"hashcat": null,
|
698
911
|
"extended": false,
|
699
|
-
"name": "Haval-160"
|
912
|
+
"name": "Haval-160 (5 rounds)"
|
700
913
|
},
|
701
914
|
{
|
702
915
|
"john": null,
|
@@ -714,7 +927,10 @@
|
|
714
927
|
"john": "raw-sha1-linkedin",
|
715
928
|
"hashcat": 190,
|
716
929
|
"extended": false,
|
717
|
-
"name": "LinkedIn"
|
930
|
+
"name": "LinkedIn",
|
931
|
+
"samples": [
|
932
|
+
"b89eaac7e61417341b710b727768294d0e6a277b"
|
933
|
+
]
|
718
934
|
},
|
719
935
|
{
|
720
936
|
"john": null,
|
@@ -729,31 +945,52 @@
|
|
729
945
|
"name": "Skein-512(160)"
|
730
946
|
},
|
731
947
|
{
|
732
|
-
"john":
|
948
|
+
"john": "dynamic_35",
|
733
949
|
"hashcat": null,
|
734
950
|
"extended": true,
|
735
951
|
"name": "MangosWeb Enhanced CMS"
|
736
952
|
},
|
953
|
+
{
|
954
|
+
"john": "dynamic_36",
|
955
|
+
"hashcat": null,
|
956
|
+
"extended": true,
|
957
|
+
"name": "MangosWeb Enhanced CMS v2"
|
958
|
+
},
|
959
|
+
{
|
960
|
+
"john": "dynamic_35",
|
961
|
+
"hashcat": null,
|
962
|
+
"extended": true,
|
963
|
+
"name": "sha1(uppercase($username).:.$pass)"
|
964
|
+
},
|
965
|
+
{
|
966
|
+
"john": "dynamic_36",
|
967
|
+
"hashcat": null,
|
968
|
+
"extended": true,
|
969
|
+
"name": "sha1($username.:.$pass)"
|
970
|
+
},
|
737
971
|
{
|
738
972
|
"john": null,
|
739
973
|
"hashcat": 4600,
|
740
974
|
"extended": true,
|
741
|
-
"name": "sha1(sha1(sha1($pass)))"
|
975
|
+
"name": "sha1(sha1(sha1($pass)))",
|
976
|
+
"samples": [
|
977
|
+
"dc57f246485e62d99a5110afc9264b4ccbfcf3cc"
|
978
|
+
]
|
742
979
|
},
|
743
980
|
{
|
744
|
-
"john":
|
981
|
+
"john": "dynamic_23",
|
745
982
|
"hashcat": 4700,
|
746
983
|
"extended": true,
|
747
984
|
"name": "sha1(md5($pass))"
|
748
985
|
},
|
749
986
|
{
|
750
|
-
"john":
|
987
|
+
"john": "dynamic_24",
|
751
988
|
"hashcat": 110,
|
752
989
|
"extended": true,
|
753
990
|
"name": "sha1($pass.$salt)"
|
754
991
|
},
|
755
992
|
{
|
756
|
-
"john":
|
993
|
+
"john": "dynamic_25",
|
757
994
|
"hashcat": 120,
|
758
995
|
"extended": true,
|
759
996
|
"name": "sha1($salt.$pass)"
|
@@ -787,23 +1024,84 @@
|
|
787
1024
|
"hashcat": 4710,
|
788
1025
|
"extended": true,
|
789
1026
|
"name": "sha1($salt.$pass.$salt)"
|
1027
|
+
},
|
1028
|
+
{
|
1029
|
+
"john": "dynamic_37",
|
1030
|
+
"hashcat": null,
|
1031
|
+
"extended": true,
|
1032
|
+
"name": "SMF"
|
1033
|
+
},
|
1034
|
+
{
|
1035
|
+
"john": "dynamic_37",
|
1036
|
+
"hashcat": null,
|
1037
|
+
"extended": true,
|
1038
|
+
"name": "sha1(lowercase($username).$pass)"
|
1039
|
+
},
|
1040
|
+
{
|
1041
|
+
"john": "dynamic_38",
|
1042
|
+
"hashcat": null,
|
1043
|
+
"extended": true,
|
1044
|
+
"name": "Wolt3BB"
|
1045
|
+
},
|
1046
|
+
{
|
1047
|
+
"john": "dynamic_38",
|
1048
|
+
"hashcat": null,
|
1049
|
+
"extended": true,
|
1050
|
+
"name": "sha1($salt.sha1($salt.sha1($pass)))"
|
1051
|
+
},
|
1052
|
+
{
|
1053
|
+
"john": "dynamic_40",
|
1054
|
+
"hashcat": null,
|
1055
|
+
"extended": true,
|
1056
|
+
"name": "net-sha1"
|
1057
|
+
},
|
1058
|
+
{
|
1059
|
+
"john": "dynamic_40",
|
1060
|
+
"hashcat": null,
|
1061
|
+
"extended": true,
|
1062
|
+
"name": "sha1($salt.pad20($pass))"
|
1063
|
+
}
|
1064
|
+
]
|
1065
|
+
},
|
1066
|
+
{
|
1067
|
+
"regex": "^(\\$ripemd\\$)?[a-f0-9]{40}(:.+)?$",
|
1068
|
+
"modes": [
|
1069
|
+
{
|
1070
|
+
"john": "ripemd-160",
|
1071
|
+
"hashcat": 6000,
|
1072
|
+
"extended": false,
|
1073
|
+
"name": "RIPEMD-160",
|
1074
|
+
"samples": [
|
1075
|
+
"9c1185a5c5e9fc54612808977ee8f548b2258d31",
|
1076
|
+
"$ripemd$9c1185a5c5e9fc54612808977ee8f548b2258d31",
|
1077
|
+
"012cb9b334ec1aeb71a9c8ce85586082467f7eb6"
|
1078
|
+
]
|
790
1079
|
}
|
791
1080
|
]
|
792
1081
|
},
|
793
1082
|
{
|
794
|
-
"regex": "
|
1083
|
+
"regex": "^(\\*)?[a-f0-9]{40}$",
|
795
1084
|
"modes": [
|
796
1085
|
{
|
797
1086
|
"john": "mysql-sha1",
|
798
1087
|
"hashcat": 300,
|
799
1088
|
"extended": false,
|
800
|
-
"name": "MySQL5.x"
|
1089
|
+
"name": "MySQL5.x",
|
1090
|
+
"samples": [
|
1091
|
+
"*2c905879f74f28f8570989947d06a8429fb943e6",
|
1092
|
+
"*A8A397146B1A5F8C8CF26404668EFD762A1B7B82"
|
1093
|
+
]
|
801
1094
|
},
|
802
1095
|
{
|
803
1096
|
"john": "mysql-sha1",
|
804
1097
|
"hashcat": 300,
|
805
1098
|
"extended": false,
|
806
|
-
"name": "MySQL4.1"
|
1099
|
+
"name": "MySQL4.1",
|
1100
|
+
"samples": [
|
1101
|
+
"*5AD8F88516BD021DD43F171E2C785C69F8E54ADB",
|
1102
|
+
"*be1bdec0aa74b4dcb079943e70528096cca985f8",
|
1103
|
+
"fcf7c1b8749cf99d88e5f34271d636178fb5d130"
|
1104
|
+
]
|
807
1105
|
}
|
808
1106
|
]
|
809
1107
|
},
|
@@ -856,10 +1154,22 @@
|
|
856
1154
|
"regex": "^[a-f0-9]{48}$",
|
857
1155
|
"modes": [
|
858
1156
|
{
|
859
|
-
"john":
|
1157
|
+
"john": "dynamic_220",
|
1158
|
+
"hashcat": null,
|
1159
|
+
"extended": false,
|
1160
|
+
"name": "Haval-192 (3 rounds)"
|
1161
|
+
},
|
1162
|
+
{
|
1163
|
+
"john": "dynamic_230",
|
1164
|
+
"hashcat": null,
|
1165
|
+
"extended": false,
|
1166
|
+
"name": "Haval-192 (4 rounds)"
|
1167
|
+
},
|
1168
|
+
{
|
1169
|
+
"john": "dynamic_240",
|
860
1170
|
"hashcat": null,
|
861
1171
|
"extended": false,
|
862
|
-
"name": "Haval-192"
|
1172
|
+
"name": "Haval-192 (5 rounds)"
|
863
1173
|
},
|
864
1174
|
{
|
865
1175
|
"john": "tiger",
|
@@ -950,7 +1260,10 @@
|
|
950
1260
|
"john": "sunmd5",
|
951
1261
|
"hashcat": 3300,
|
952
1262
|
"extended": false,
|
953
|
-
"name": "Sun MD5 Crypt"
|
1263
|
+
"name": "Sun MD5 Crypt",
|
1264
|
+
"samples": [
|
1265
|
+
"$md5$rounds=904$iPPKEBnEkp3JV8uX$0L6m7rOFTVFn.SGqo2M9W1"
|
1266
|
+
]
|
954
1267
|
}
|
955
1268
|
]
|
956
1269
|
},
|
@@ -959,24 +1272,84 @@
|
|
959
1272
|
"modes": [
|
960
1273
|
{
|
961
1274
|
"john": "raw-sha224",
|
962
|
-
"hashcat":
|
1275
|
+
"hashcat": 1300,
|
963
1276
|
"extended": false,
|
964
1277
|
"name": "SHA-224"
|
965
1278
|
},
|
966
1279
|
{
|
967
|
-
"john":
|
1280
|
+
"john": "dynamic_51",
|
1281
|
+
"hashcat": null,
|
1282
|
+
"extended": true,
|
1283
|
+
"name": "sha224($salt.$pass)"
|
1284
|
+
},
|
1285
|
+
{
|
1286
|
+
"john": "dynamic_52",
|
1287
|
+
"hashcat": null,
|
1288
|
+
"extended": true,
|
1289
|
+
"name": "sha224($pass.$salt)"
|
1290
|
+
},
|
1291
|
+
{
|
1292
|
+
"john": "dynamic_53",
|
1293
|
+
"hashcat": null,
|
1294
|
+
"extended": true,
|
1295
|
+
"name": "sha224(sha224($pass))"
|
1296
|
+
},
|
1297
|
+
{
|
1298
|
+
"john": "dynamic_54",
|
1299
|
+
"hashcat": null,
|
1300
|
+
"extended": true,
|
1301
|
+
"name": "sha224(sha224_raw($pass))"
|
1302
|
+
},
|
1303
|
+
{
|
1304
|
+
"john": "dynamic_55",
|
1305
|
+
"hashcat": null,
|
1306
|
+
"extended": true,
|
1307
|
+
"name": "sha224(sha224($pass).$salt)"
|
1308
|
+
},
|
1309
|
+
{
|
1310
|
+
"john": "dynamic_56",
|
1311
|
+
"hashcat": null,
|
1312
|
+
"extended": true,
|
1313
|
+
"name": "sha224($salt.sha224($pass))"
|
1314
|
+
},
|
1315
|
+
{
|
1316
|
+
"john": "dynamic_57",
|
1317
|
+
"hashcat": null,
|
1318
|
+
"extended": true,
|
1319
|
+
"name": "sha224(sha224($salt).sha224($pass))"
|
1320
|
+
},
|
1321
|
+
{
|
1322
|
+
"john": "dynamic_58",
|
1323
|
+
"hashcat": null,
|
1324
|
+
"extended": true,
|
1325
|
+
"name": "sha224(sha224($pass).sha224($pass))"
|
1326
|
+
},
|
1327
|
+
{
|
1328
|
+
"john": "dynamic_250",
|
968
1329
|
"hashcat": null,
|
969
1330
|
"extended": false,
|
970
|
-
"name": "Haval-224"
|
1331
|
+
"name": "Haval-224 (3 rounds)"
|
971
1332
|
},
|
972
1333
|
{
|
973
|
-
"john":
|
1334
|
+
"john": "dynamic_260",
|
1335
|
+
"hashcat": null,
|
1336
|
+
"extended": false,
|
1337
|
+
"name": "Haval-224 (4 rounds)"
|
1338
|
+
},
|
1339
|
+
{
|
1340
|
+
"john": "dynamic_270",
|
1341
|
+
"hashcat": null,
|
1342
|
+
"extended": false,
|
1343
|
+
"name": "Haval-224 (5 rounds)"
|
1344
|
+
},
|
1345
|
+
{
|
1346
|
+
"john": "dynamic_370",
|
974
1347
|
"hashcat": 17300,
|
975
1348
|
"extended": false,
|
976
1349
|
"name": "SHA3-224"
|
977
1350
|
},
|
978
1351
|
{
|
979
|
-
"john":
|
1352
|
+
"john": "dynamic_430",
|
980
1353
|
"hashcat": 17700,
|
981
1354
|
"extended": false,
|
982
1355
|
"name": "Keccak-224"
|
@@ -992,6 +1365,18 @@
|
|
992
1365
|
"hashcat": null,
|
993
1366
|
"extended": false,
|
994
1367
|
"name": "Skein-512(224)"
|
1368
|
+
},
|
1369
|
+
{
|
1370
|
+
"john": "dynamic_330",
|
1371
|
+
"hashcat": null,
|
1372
|
+
"extended": false,
|
1373
|
+
"name": "Skein-224"
|
1374
|
+
},
|
1375
|
+
{
|
1376
|
+
"john": null,
|
1377
|
+
"hashcat": null,
|
1378
|
+
"extended": false,
|
1379
|
+
"name": "BLAKE2-224"
|
995
1380
|
}
|
996
1381
|
]
|
997
1382
|
},
|
@@ -1094,19 +1479,35 @@
|
|
1094
1479
|
"name": "SHA-256"
|
1095
1480
|
},
|
1096
1481
|
{
|
1097
|
-
"john":
|
1482
|
+
"john": "dynamic_140",
|
1098
1483
|
"hashcat": null,
|
1099
1484
|
"extended": false,
|
1100
|
-
"name": "RIPEMD-256"
|
1485
|
+
"name": "RIPEMD-256",
|
1486
|
+
"samples": [
|
1487
|
+
"1419109aa0de60e6ba0b6d2b2f602c13b07e97b5ffc85b6be2297badc699262f",
|
1488
|
+
"f156e6c20042057840f3251ee041596d89fde06c2505f61764ad1c03c2fc1375"
|
1489
|
+
]
|
1101
1490
|
},
|
1102
1491
|
{
|
1103
1492
|
"john": "haval-256-3",
|
1104
1493
|
"hashcat": null,
|
1105
1494
|
"extended": false,
|
1106
|
-
"name": "Haval-256"
|
1495
|
+
"name": "Haval-256 (3 rounds)"
|
1107
1496
|
},
|
1108
1497
|
{
|
1109
|
-
"john": "
|
1498
|
+
"john": "dynamic_290",
|
1499
|
+
"hashcat": null,
|
1500
|
+
"extended": false,
|
1501
|
+
"name": "Haval-256 (4 rounds)"
|
1502
|
+
},
|
1503
|
+
{
|
1504
|
+
"john": "dynamic_300",
|
1505
|
+
"hashcat": null,
|
1506
|
+
"extended": false,
|
1507
|
+
"name": "Haval-256 (5 rounds)"
|
1508
|
+
},
|
1509
|
+
{
|
1510
|
+
"john": "gost",
|
1110
1511
|
"hashcat": 6900,
|
1111
1512
|
"extended": false,
|
1112
1513
|
"name": "GOST R 34.11-94"
|
@@ -1118,7 +1519,7 @@
|
|
1118
1519
|
"name": "GOST CryptoPro S-Box"
|
1119
1520
|
},
|
1120
1521
|
{
|
1121
|
-
"john":
|
1522
|
+
"john": "dynamic_380",
|
1122
1523
|
"hashcat": 17400,
|
1123
1524
|
"extended": false,
|
1124
1525
|
"name": "SHA3-256"
|
@@ -1148,13 +1549,13 @@
|
|
1148
1549
|
"name": "Ventrilo"
|
1149
1550
|
},
|
1150
1551
|
{
|
1151
|
-
"john":
|
1552
|
+
"john": "dynamic_62",
|
1152
1553
|
"hashcat": 1410,
|
1153
1554
|
"extended": true,
|
1154
1555
|
"name": "sha256($pass.$salt)"
|
1155
1556
|
},
|
1156
1557
|
{
|
1157
|
-
"john":
|
1558
|
+
"john": "dynamic_61",
|
1158
1559
|
"hashcat": 1420,
|
1159
1560
|
"extended": true,
|
1160
1561
|
"name": "sha256($salt.$pass)"
|
@@ -1182,6 +1583,54 @@
|
|
1182
1583
|
"hashcat": 1460,
|
1183
1584
|
"extended": true,
|
1184
1585
|
"name": "HMAC-SHA256 (key = $salt)"
|
1586
|
+
},
|
1587
|
+
{
|
1588
|
+
"john": "dynamic_63",
|
1589
|
+
"hashcat": null,
|
1590
|
+
"extended": true,
|
1591
|
+
"name": "sha256(sha256($pass))"
|
1592
|
+
},
|
1593
|
+
{
|
1594
|
+
"john": "dynamic_64",
|
1595
|
+
"hashcat": null,
|
1596
|
+
"extended": true,
|
1597
|
+
"name": "sha256(sha256_raw($pass))"
|
1598
|
+
},
|
1599
|
+
{
|
1600
|
+
"john": "dynamic_65",
|
1601
|
+
"hashcat": null,
|
1602
|
+
"extended": true,
|
1603
|
+
"name": "sha256(sha256($pass).$salt)"
|
1604
|
+
},
|
1605
|
+
{
|
1606
|
+
"john": "dynamic_66",
|
1607
|
+
"hashcat": null,
|
1608
|
+
"extended": true,
|
1609
|
+
"name": "sha256($salt.sha256($pass))"
|
1610
|
+
},
|
1611
|
+
{
|
1612
|
+
"john": "dynamic_67",
|
1613
|
+
"hashcat": null,
|
1614
|
+
"extended": true,
|
1615
|
+
"name": "sha256(sha256($salt).sha256($pass))"
|
1616
|
+
},
|
1617
|
+
{
|
1618
|
+
"john": "dynamic_68",
|
1619
|
+
"hashcat": null,
|
1620
|
+
"extended": true,
|
1621
|
+
"name": "sha256(sha256($pass).sha256($pass))"
|
1622
|
+
},
|
1623
|
+
{
|
1624
|
+
"john": "dynamic_320",
|
1625
|
+
"hashcat": null,
|
1626
|
+
"extended": false,
|
1627
|
+
"name": "PANAMA"
|
1628
|
+
},
|
1629
|
+
{
|
1630
|
+
"john": null,
|
1631
|
+
"hashcat": null,
|
1632
|
+
"extended": false,
|
1633
|
+
"name": "BLAKE2-256"
|
1185
1634
|
}
|
1186
1635
|
]
|
1187
1636
|
},
|
@@ -1250,10 +1699,14 @@
|
|
1250
1699
|
"regex": "^[a-f0-9]{80}$",
|
1251
1700
|
"modes": [
|
1252
1701
|
{
|
1253
|
-
"john":
|
1702
|
+
"john": "dynamic_150",
|
1254
1703
|
"hashcat": null,
|
1255
1704
|
"extended": false,
|
1256
|
-
"name": "RIPEMD-320"
|
1705
|
+
"name": "RIPEMD-320",
|
1706
|
+
"samples": [
|
1707
|
+
"303aa1dcb731cd4e4bff2a60971eb7376c6c47cb59947c804776d115470183c8cc2e487337b45412",
|
1708
|
+
"3c616c27aa7539c4726388c9e047aa4ea089dd739b3cfc470e964ea12e479da3cce437b9daa90214"
|
1709
|
+
]
|
1257
1710
|
}
|
1258
1711
|
]
|
1259
1712
|
},
|
@@ -1289,13 +1742,13 @@
|
|
1289
1742
|
"name": "SHA-384"
|
1290
1743
|
},
|
1291
1744
|
{
|
1292
|
-
"john":
|
1745
|
+
"john": "dynamic_390",
|
1293
1746
|
"hashcat": 17500,
|
1294
1747
|
"extended": false,
|
1295
1748
|
"name": "SHA3-384"
|
1296
1749
|
},
|
1297
1750
|
{
|
1298
|
-
"john":
|
1751
|
+
"john": "dynamic_440",
|
1299
1752
|
"hashcat": 17900,
|
1300
1753
|
"extended": false,
|
1301
1754
|
"name": "Keccak-384"
|
@@ -1311,6 +1764,66 @@
|
|
1311
1764
|
"hashcat": null,
|
1312
1765
|
"extended": false,
|
1313
1766
|
"name": "Skein-1024(384)"
|
1767
|
+
},
|
1768
|
+
{
|
1769
|
+
"john": "dynamic_71",
|
1770
|
+
"hashcat": null,
|
1771
|
+
"extended": true,
|
1772
|
+
"name": "sha384($salt.$pass)"
|
1773
|
+
},
|
1774
|
+
{
|
1775
|
+
"john": "dynamic_72",
|
1776
|
+
"hashcat": null,
|
1777
|
+
"extended": true,
|
1778
|
+
"name": "sha384($pass.$salt)"
|
1779
|
+
},
|
1780
|
+
{
|
1781
|
+
"john": "dynamic_73",
|
1782
|
+
"hashcat": null,
|
1783
|
+
"extended": true,
|
1784
|
+
"name": "sha384(sha384($pass))"
|
1785
|
+
},
|
1786
|
+
{
|
1787
|
+
"john": "dynamic_74",
|
1788
|
+
"hashcat": null,
|
1789
|
+
"extended": true,
|
1790
|
+
"name": "sha384(sha384_raw($pass))"
|
1791
|
+
},
|
1792
|
+
{
|
1793
|
+
"john": "dynamic_75",
|
1794
|
+
"hashcat": null,
|
1795
|
+
"extended": true,
|
1796
|
+
"name": "sha384(sha384($pass).$salt)"
|
1797
|
+
},
|
1798
|
+
{
|
1799
|
+
"john": "dynamic_76",
|
1800
|
+
"hashcat": null,
|
1801
|
+
"extended": true,
|
1802
|
+
"name": "sha384($salt.sha384($pass))"
|
1803
|
+
},
|
1804
|
+
{
|
1805
|
+
"john": "dynamic_77",
|
1806
|
+
"hashcat": null,
|
1807
|
+
"extended": true,
|
1808
|
+
"name": "sha384(sha384($salt).sha384($pass))"
|
1809
|
+
},
|
1810
|
+
{
|
1811
|
+
"john": "dynamic_78",
|
1812
|
+
"hashcat": null,
|
1813
|
+
"extended": true,
|
1814
|
+
"name": "sha384(sha384($pass).sha384($pass))"
|
1815
|
+
},
|
1816
|
+
{
|
1817
|
+
"john": "dynamic_350",
|
1818
|
+
"hashcat": null,
|
1819
|
+
"extended": true,
|
1820
|
+
"name": "Skein-384"
|
1821
|
+
},
|
1822
|
+
{
|
1823
|
+
"john": null,
|
1824
|
+
"hashcat": null,
|
1825
|
+
"extended": false,
|
1826
|
+
"name": "BLAKE2-384"
|
1314
1827
|
}
|
1315
1828
|
]
|
1316
1829
|
},
|
@@ -1349,7 +1862,12 @@
|
|
1349
1862
|
"john": "raw-sha512",
|
1350
1863
|
"hashcat": 1700,
|
1351
1864
|
"extended": false,
|
1352
|
-
"name": "SHA-512"
|
1865
|
+
"name": "SHA-512",
|
1866
|
+
"samples": [
|
1867
|
+
"f342aae82952db35b8e02c30115e3deed3d80fdfdadacab336f0ba51ac54e297291fa1d6b201d69a2bd77e2535280f17a54fa1e527abc6e2eddba79ad3be11c0",
|
1868
|
+
"7aba4411846c61b08b0f2282a8a4600232ace4dd96593c755ba9c9a4e7b780b8bdc437b5c55574b3e8409c7b511032f98ef120e25467678f0458643578eb60ff",
|
1869
|
+
"12b03226a6d8be9c6e8cd5e55dc6c7920caaa39df14aab92d5e3ea9340d1c8a4d3d0b8e4314f1f6ef131ba4bf1ceb9186ab87c801af0d5c95b1befb8cedae2b9"
|
1870
|
+
]
|
1353
1871
|
},
|
1354
1872
|
{
|
1355
1873
|
"john": "whirlpool",
|
@@ -1375,6 +1893,12 @@
|
|
1375
1893
|
"extended": false,
|
1376
1894
|
"name": "SHA3-512"
|
1377
1895
|
},
|
1896
|
+
{
|
1897
|
+
"john": "dynamic_400",
|
1898
|
+
"hashcat": 17600,
|
1899
|
+
"extended": false,
|
1900
|
+
"name": "SHA3-512"
|
1901
|
+
},
|
1378
1902
|
{
|
1379
1903
|
"john": "raw-keccak",
|
1380
1904
|
"hashcat": 18000,
|
@@ -1383,9 +1907,9 @@
|
|
1383
1907
|
},
|
1384
1908
|
{
|
1385
1909
|
"john": "raw-blake2",
|
1386
|
-
"hashcat":
|
1910
|
+
"hashcat": null,
|
1387
1911
|
"extended": false,
|
1388
|
-
"name": "
|
1912
|
+
"name": "BLAKE2-512"
|
1389
1913
|
},
|
1390
1914
|
{
|
1391
1915
|
"john": "skein-512",
|
@@ -1400,13 +1924,13 @@
|
|
1400
1924
|
"name": "Skein-1024(512)"
|
1401
1925
|
},
|
1402
1926
|
{
|
1403
|
-
"john":
|
1927
|
+
"john": "dynamic_82",
|
1404
1928
|
"hashcat": 1710,
|
1405
1929
|
"extended": true,
|
1406
1930
|
"name": "sha512($pass.$salt)"
|
1407
1931
|
},
|
1408
1932
|
{
|
1409
|
-
"john":
|
1933
|
+
"john": "dynamic_81",
|
1410
1934
|
"hashcat": 1720,
|
1411
1935
|
"extended": true,
|
1412
1936
|
"name": "sha512($salt.$pass)"
|
@@ -1434,9 +1958,51 @@
|
|
1434
1958
|
"hashcat": 1760,
|
1435
1959
|
"extended": true,
|
1436
1960
|
"name": "HMAC-SHA512 (key = $salt)"
|
1961
|
+
},
|
1962
|
+
{
|
1963
|
+
"john": "dynamic_83",
|
1964
|
+
"hashcat": null,
|
1965
|
+
"extended": true,
|
1966
|
+
"name": "sha512(sha512($pass))"
|
1967
|
+
},
|
1968
|
+
{
|
1969
|
+
"john": "dynamic_85",
|
1970
|
+
"hashcat": null,
|
1971
|
+
"extended": true,
|
1972
|
+
"name": "sha512(sha512($pass).$salt)"
|
1973
|
+
},
|
1974
|
+
{
|
1975
|
+
"john": "dynamic_86",
|
1976
|
+
"hashcat": null,
|
1977
|
+
"extended": true,
|
1978
|
+
"name": "sha512($salt.sha512($pass))"
|
1979
|
+
},
|
1980
|
+
{
|
1981
|
+
"john": "dynamic_87",
|
1982
|
+
"hashcat": null,
|
1983
|
+
"extended": true,
|
1984
|
+
"name": "sha512(sha512($salt).sha512($pass))"
|
1985
|
+
},
|
1986
|
+
{
|
1987
|
+
"john": "dynamic_88",
|
1988
|
+
"hashcat": null,
|
1989
|
+
"extended": true,
|
1990
|
+
"name": "sha512(sha512($pass).sha512($pass))"
|
1437
1991
|
}
|
1438
1992
|
]
|
1439
1993
|
},
|
1994
|
+
{
|
1995
|
+
"regex": "^\\$BLAKE2\\$[a-f0-9]{128}$",
|
1996
|
+
"modes": [
|
1997
|
+
{
|
1998
|
+
"john": "raw-blake2",
|
1999
|
+
"hashcat": 600,
|
2000
|
+
"extended": false,
|
2001
|
+
"name": "BLAKE2-512"
|
2002
|
+
}
|
2003
|
+
]
|
2004
|
+
},
|
2005
|
+
|
1440
2006
|
{
|
1441
2007
|
"regex": "^[a-f0-9]{136}$",
|
1442
2008
|
"modes": [
|
@@ -1452,16 +2018,24 @@
|
|
1452
2018
|
"regex": "^0x0200[a-f0-9]{136}$",
|
1453
2019
|
"modes": [
|
1454
2020
|
{
|
1455
|
-
"john": "
|
2021
|
+
"john": "mssql12",
|
1456
2022
|
"hashcat": 1731,
|
1457
2023
|
"extended": false,
|
1458
|
-
"name": "MSSQL(2012)"
|
2024
|
+
"name": "MSSQL(2012)",
|
2025
|
+
"samples": [
|
2026
|
+
"0x0200F733058A07892C5CACE899768F89965F6BD1DED7955FE89E1C9A10E27849B0B213B5CE92CC9347ECCB34C3EFADAF2FD99BFFECD8D9150DD6AACB5D409A9D2652A4E0AF16",
|
2027
|
+
"0x0200AB3E1F9028A739EEF62ABF672427276A32D5EDD349E638E7F2CD81DAA247CFE20EE4E3B0A30B2D0AE3C3FA010E61752F1BF45E045041F1B988C083C7F118527E3E5F0562"
|
2028
|
+
]
|
1459
2029
|
},
|
1460
2030
|
{
|
1461
|
-
"john": "
|
2031
|
+
"john": "mssql12",
|
1462
2032
|
"hashcat": 1731,
|
1463
2033
|
"extended": false,
|
1464
|
-
"name": "MSSQL(2014)"
|
2034
|
+
"name": "MSSQL(2014)",
|
2035
|
+
"samples": [
|
2036
|
+
"0x02003788006711b2e74e7d8cb4be96b1d187c962c5591a02d5a6ae81b3a4a094b26b7877958b26733e45016d929a756ed30d0a5ee65d3ce1970f9b7bf946e705c595f07625b1",
|
2037
|
+
"0x02006BF4AB05873FF0C8A4AFD1DC5912CBFDEF62E0520A3353B04E1184F05C873C9C76BBADDEAAC1E9948C7B6ABFFD62BFEFD7139F17F6AFE10BE0FEE7A178644623067C2423"
|
2038
|
+
]
|
1465
2039
|
}
|
1466
2040
|
]
|
1467
2041
|
},
|
@@ -1575,9 +2149,12 @@
|
|
1575
2149
|
"modes": [
|
1576
2150
|
{
|
1577
2151
|
"john": null,
|
1578
|
-
"hashcat":
|
2152
|
+
"hashcat": 20711,
|
1579
2153
|
"extended": false,
|
1580
|
-
"name": "Minecraft(AuthMe Reloaded)"
|
2154
|
+
"name": "Minecraft (AuthMe Reloaded sha256)",
|
2155
|
+
"samples": [
|
2156
|
+
"$SHA$7218532375810603$bfede293ecf6539211a7305ea218b9f3f608953130405cda9eaba6fb6250f824"
|
2157
|
+
]
|
1581
2158
|
}
|
1582
2159
|
]
|
1583
2160
|
},
|
@@ -1665,7 +2242,95 @@
|
|
1665
2242
|
"john": "krb5pa-md5",
|
1666
2243
|
"hashcat": 7500,
|
1667
2244
|
"extended": false,
|
1668
|
-
"name": "Kerberos 5 AS-REQ Pre-Auth"
|
2245
|
+
"name": "Kerberos 5 AS-REQ Pre-Auth etype 23"
|
2246
|
+
}
|
2247
|
+
]
|
2248
|
+
},
|
2249
|
+
{
|
2250
|
+
"regex": "^\\$krb5tgs\\$23\\$\\*[^*]*\\*\\$[a-f0-9]{32}\\$[a-f0-9]{64,40960}$",
|
2251
|
+
"modes": [
|
2252
|
+
{
|
2253
|
+
"john": "krb5tgs",
|
2254
|
+
"hashcat": 13100,
|
2255
|
+
"extended": false,
|
2256
|
+
"name": "Kerberos 5 TGS-REP etype 23"
|
2257
|
+
}
|
2258
|
+
]
|
2259
|
+
},
|
2260
|
+
{
|
2261
|
+
"regex": "^\\$krb5asrep\\$23\\$[^:]+:[a-f0-9]{32,32}\\$[a-f0-9]{64,40960}$",
|
2262
|
+
"modes": [
|
2263
|
+
{
|
2264
|
+
"john": "krb5asrep",
|
2265
|
+
"hashcat": 18200,
|
2266
|
+
"extended": false,
|
2267
|
+
"name": "Kerberos 5 AS-REP etype 23"
|
2268
|
+
}
|
2269
|
+
]
|
2270
|
+
},
|
2271
|
+
{
|
2272
|
+
"regex": "^\\$krb5asrep\\$18\\$[^:]+:[a-f0-9]{32,32}\\$[a-f0-9]{64,40960}$",
|
2273
|
+
"modes": [
|
2274
|
+
{
|
2275
|
+
"john": "krb5asrep",
|
2276
|
+
"hashcat": null,
|
2277
|
+
"extended": false,
|
2278
|
+
"name": "Kerberos 5 AS-REP etype 18"
|
2279
|
+
}
|
2280
|
+
]
|
2281
|
+
},
|
2282
|
+
{
|
2283
|
+
"regex": "^\\$krb5asrep\\$17\\$[^:]+:[a-f0-9]{32,32}\\$[a-f0-9]{64,40960}$",
|
2284
|
+
"modes": [
|
2285
|
+
{
|
2286
|
+
"john": "krb5asrep",
|
2287
|
+
"hashcat": null,
|
2288
|
+
"extended": false,
|
2289
|
+
"name": "Kerberos 5 AS-REP etype 17"
|
2290
|
+
}
|
2291
|
+
]
|
2292
|
+
},
|
2293
|
+
{
|
2294
|
+
"regex": "^\\$krb5tgs\\$17\\$[^$]{1,512}\\$[^$]{1,512}\\$[^$]{1,4}?\\$?[a-f0-9]{1,32}\\$[a-f0-9]{64,40960}$",
|
2295
|
+
"modes": [
|
2296
|
+
{
|
2297
|
+
"john": null,
|
2298
|
+
"hashcat": 19600,
|
2299
|
+
"extended": false,
|
2300
|
+
"name": "Kerberos 5 TGS-REP etype 17 (AES128-CTS-HMAC-SHA1-96)"
|
2301
|
+
}
|
2302
|
+
]
|
2303
|
+
},
|
2304
|
+
{
|
2305
|
+
"regex": "^\\$krb5tgs\\$18\\$[^$]{1,512}\\$[^$]{1,512}\\$[^$]{1,4}?\\$?[a-f0-9]{1,32}\\$[a-f0-9]{64,40960}$",
|
2306
|
+
"modes": [
|
2307
|
+
{
|
2308
|
+
"john": null,
|
2309
|
+
"hashcat": 19700,
|
2310
|
+
"extended": false,
|
2311
|
+
"name": "Kerberos 5 TGS-REP etype 18 (AES256-CTS-HMAC-SHA1-96)"
|
2312
|
+
}
|
2313
|
+
]
|
2314
|
+
},
|
2315
|
+
{
|
2316
|
+
"regex": "^\\$krb5pa\\$17\\$[^$]{1,512}\\$[^$]{1,512}\\$[a-f0-9]{104,112}$",
|
2317
|
+
"modes": [
|
2318
|
+
{
|
2319
|
+
"john": "krb5pa-sha1",
|
2320
|
+
"hashcat": 19800,
|
2321
|
+
"extended": false,
|
2322
|
+
"name": "Kerberos 5 AS-REQ Pre-Auth etype 17"
|
2323
|
+
}
|
2324
|
+
]
|
2325
|
+
},
|
2326
|
+
{
|
2327
|
+
"regex": "^\\$krb5pa\\$18\\$[^$]{1,512}\\$[^$]{1,512}\\$[a-f0-9]{104,112}$",
|
2328
|
+
"modes": [
|
2329
|
+
{
|
2330
|
+
"john": "krb5pa-sha1",
|
2331
|
+
"hashcat": 19900,
|
2332
|
+
"extended": false,
|
2333
|
+
"name": "Kerberos 5 AS-REQ Pre-Auth etype 18"
|
1669
2334
|
}
|
1670
2335
|
]
|
1671
2336
|
},
|
@@ -1685,9 +2350,12 @@
|
|
1685
2350
|
"modes": [
|
1686
2351
|
{
|
1687
2352
|
"john": null,
|
1688
|
-
"hashcat":
|
2353
|
+
"hashcat": 4521,
|
1689
2354
|
"extended": false,
|
1690
|
-
"name": "Redmine
|
2355
|
+
"name": "Redmine",
|
2356
|
+
"samples": [
|
2357
|
+
"c18e826af2a78c7b9b7261452613233417e65817:28246535720688452723483475753333"
|
2358
|
+
]
|
1691
2359
|
}
|
1692
2360
|
]
|
1693
2361
|
},
|
@@ -1731,7 +2399,10 @@
|
|
1731
2399
|
"john": null,
|
1732
2400
|
"hashcat": 123,
|
1733
2401
|
"extended": false,
|
1734
|
-
"name": "EPi"
|
2402
|
+
"name": "EPi",
|
2403
|
+
"samples": [
|
2404
|
+
"0x326C6D7B4E4F794B79474E36704F35723958397163735263516265456E31 0xAFC55E260B8F45C0C6512BCE776C1AD8312B56E6"
|
2405
|
+
]
|
1735
2406
|
}
|
1736
2407
|
]
|
1737
2408
|
},
|
@@ -1787,6 +2458,12 @@
|
|
1787
2458
|
"hashcat": 2410,
|
1788
2459
|
"extended": false,
|
1789
2460
|
"name": "Cisco-ASA(MD5)"
|
2461
|
+
},
|
2462
|
+
{
|
2463
|
+
"john": "dynamic_20",
|
2464
|
+
"hashcat": 2410,
|
2465
|
+
"extended": true,
|
2466
|
+
"name": "md5($pass.$salt)"
|
1790
2467
|
}
|
1791
2468
|
]
|
1792
2469
|
},
|
@@ -1839,9 +2516,13 @@
|
|
1839
2516
|
"modes": [
|
1840
2517
|
{
|
1841
2518
|
"john": "sha1crypt",
|
1842
|
-
"hashcat":
|
2519
|
+
"hashcat": 15100,
|
1843
2520
|
"extended": false,
|
1844
|
-
"name": "SHA-1 Crypt"
|
2521
|
+
"name": "SHA-1 Crypt (Juniper/NetBSD)",
|
2522
|
+
"samples": [
|
2523
|
+
"$sha1$20000$75552156$HhYMDdaEHiK3eMIzTldOFPnw.s2Q",
|
2524
|
+
"$sha1$64000$wnUR8T1U$azjCegpOIk0FjE61qzGWhdkpuMRL"
|
2525
|
+
]
|
1845
2526
|
}
|
1846
2527
|
]
|
1847
2528
|
},
|
@@ -1879,24 +2560,37 @@
|
|
1879
2560
|
]
|
1880
2561
|
},
|
1881
2562
|
{
|
1882
|
-
"regex": "^\\$pbkdf2(-sha1)?\\$[0-9]
|
2563
|
+
"regex": "^\\$pbkdf2(-hmac)?(-sha1)?\\$([0-9]{1,6}\\$[a-z0-9\\/.]+\\$[a-z0-9\\/.]+|[0-9]{1,6}\\.[a-f0-9]+\\.[a-f0-9]{40})$",
|
1883
2564
|
"modes": [
|
1884
2565
|
{
|
1885
|
-
"john":
|
1886
|
-
"hashcat":
|
2566
|
+
"john": "pbkdf2-hmac-sha1",
|
2567
|
+
"hashcat": 20400,
|
1887
2568
|
"extended": false,
|
1888
|
-
"name": "PBKDF2-SHA1(Generic)"
|
2569
|
+
"name": "PBKDF2-SHA1 (Generic)",
|
2570
|
+
"samples": [
|
2571
|
+
"$pbkdf2$131000$r5WythYixPgfQ2jt3buXcg$8Kdr.QQEOaZIXNOrrru36I/.6Po",
|
2572
|
+
"$pbkdf2-hmac-sha1$1000.fd11cde0.27de197171e6d49fc5f55c9ef06c0d8751cd7250",
|
2573
|
+
"$pbkdf2-hmac-sha1$1000$6926d45e$231c561018a4cee662df7cd4a8206701c5806af9",
|
2574
|
+
"$pbkdf2-hmac-sha1$1000.6834476f733353333654315a5a31494f.1932a843a69dc1e38a29d2691a7abf27ecaa6d55",
|
2575
|
+
"$pbkdf2-hmac-sha1$1000.3031323334353637383930313233343536373839303132333435363738393031323334353637383930313233343536373839303132333435363738393031323334353637383930313233343536373839303132333435363738393031323334353637383930313233343536373839303132333435363738393031323334353637383930313233343536373839303132333435363738393031323334353637383930313233343536373839303132333435363738.8f7c89f74233f78f6c8ace00696cf6ed09ae43f4"
|
2576
|
+
]
|
1889
2577
|
}
|
1890
2578
|
]
|
1891
2579
|
},
|
1892
2580
|
{
|
1893
|
-
"regex": "^\\$pbkdf2-sha256\\$[0-9]
|
2581
|
+
"regex": "^\\$pbkdf2-sha256\\$[0-9]{1,6}\\$[a-z0-9\\/.]+\\$[a-z0-9\\/.]+$",
|
1894
2582
|
"modes": [
|
1895
2583
|
{
|
1896
2584
|
"john": "pbkdf2-hmac-sha256",
|
1897
|
-
"hashcat":
|
2585
|
+
"hashcat": 20300,
|
1898
2586
|
"extended": false,
|
1899
|
-
"name": "PBKDF2-SHA256(Generic)"
|
2587
|
+
"name": "PBKDF2-SHA256 (Generic)",
|
2588
|
+
"samples": [
|
2589
|
+
"$pbkdf2-sha256$29000$x9h7j/Ge8x6DMEao1VqrdQ$kra3R1wEnY8mPdDWOpTqOTINaAmZvRMcYd8u5OBQP9A",
|
2590
|
+
"$pbkdf2-sha256$1000$b1dWS2dab3dKQWhPSUg3cg$UY9j5wlyxtsJqhDKTqua8Q3fMp0ojc2pOnErzr8ntLE",
|
2591
|
+
"$pbkdf2-sha256$12000$fK8VAoDQuvees5ayVkpp7Q$xfzKAoBR/Iaa68tjn.O8KfGxV.zdidcqEeDoTFvDz2A",
|
2592
|
+
"$pbkdf2-sha256$12000$MDEyMzQ1Njc4OTAxMjM0NTY3ODkwMTIzNDU2Nzg5MDEyMzQ1Njc4OTAxMjM0NTY3ODkwMTIzNDU2Nzg5MDEyMzQ1Njc4OTAxMjM0NTY3ODkwMTIzNDU2Nzg5MDEyMzQ1Njc4OTAxMjM0NTY3ODkwMTIzNDU2Nzg5MDEyMzQ1Njc4OTAxMjM0NTY3ODkwMTIzNDU2Nzg5MDEyMzQ1Njc4OTAxMjM0NTY3ODkwMTIzNDU2Nzg$94Z71JhWYUP2E0IrQrexc8AMhHzVB4bwkxh7n0FCnns"
|
2593
|
+
]
|
1900
2594
|
}
|
1901
2595
|
]
|
1902
2596
|
},
|
@@ -2028,7 +2722,7 @@
|
|
2028
2722
|
"john": "django",
|
2029
2723
|
"hashcat": 10000,
|
2030
2724
|
"extended": false,
|
2031
|
-
"name": "Django(PBKDF2-HMAC-SHA256)"
|
2725
|
+
"name": "Django (PBKDF2-HMAC-SHA256)"
|
2032
2726
|
}
|
2033
2727
|
]
|
2034
2728
|
},
|
@@ -2146,7 +2840,7 @@
|
|
2146
2840
|
"regex": "^\\$office\\$\\*2010\\*[0-9]{6}\\*[0-9]{3}\\*[0-9]{2}\\*[a-z0-9]{32}\\*[a-z0-9]{32}\\*[a-z0-9]{64}$",
|
2147
2841
|
"modes": [
|
2148
2842
|
{
|
2149
|
-
"john":
|
2843
|
+
"john": "office",
|
2150
2844
|
"hashcat": 9500,
|
2151
2845
|
"extended": false,
|
2152
2846
|
"name": "Microsoft Office 2010"
|
@@ -2157,10 +2851,21 @@
|
|
2157
2851
|
"regex": "^\\$office\\$\\*2013\\*[0-9]{6}\\*[0-9]{3}\\*[0-9]{2}\\*[a-z0-9]{32}\\*[a-z0-9]{32}\\*[a-z0-9]{64}$",
|
2158
2852
|
"modes": [
|
2159
2853
|
{
|
2160
|
-
"john":
|
2854
|
+
"john": "office",
|
2161
2855
|
"hashcat": 9600,
|
2162
2856
|
"extended": false,
|
2163
|
-
"name": "Microsoft Office 2013"
|
2857
|
+
"name": "Microsoft Office 2013 - 2019"
|
2858
|
+
}
|
2859
|
+
]
|
2860
|
+
},
|
2861
|
+
{
|
2862
|
+
"regex": "^\\$office\\$2016\\$[0-9]\\$[0-9]{6}\\$[^$]{24}\\$[^$]{88}$",
|
2863
|
+
"modes": [
|
2864
|
+
{
|
2865
|
+
"john": null,
|
2866
|
+
"hashcat": 25300,
|
2867
|
+
"extended": false,
|
2868
|
+
"name": "Microsoft Office 2016 - SheetProtection"
|
2164
2869
|
}
|
2165
2870
|
]
|
2166
2871
|
},
|
@@ -2202,19 +2907,19 @@
|
|
2202
2907
|
"regex": "^\\$oldoffice\\$[34]\\*[a-f0-9]{32}\\*[a-f0-9]{32}\\*[a-f0-9]{40}$",
|
2203
2908
|
"modes": [
|
2204
2909
|
{
|
2205
|
-
"john":
|
2910
|
+
"john": "oldoffice",
|
2206
2911
|
"hashcat": 9800,
|
2207
2912
|
"extended": false,
|
2208
2913
|
"name": "Microsoft Office \u2264 2003 (SHA1+RC4)"
|
2209
2914
|
},
|
2210
2915
|
{
|
2211
|
-
"john":
|
2916
|
+
"john": "oldoffice",
|
2212
2917
|
"hashcat": 9810,
|
2213
2918
|
"extended": false,
|
2214
2919
|
"name": "Microsoft Office \u2264 2003 (SHA1+RC4) collider-mode #1"
|
2215
2920
|
},
|
2216
2921
|
{
|
2217
|
-
"john":
|
2922
|
+
"john": "oldoffice",
|
2218
2923
|
"hashcat": 9820,
|
2219
2924
|
"extended": false,
|
2220
2925
|
"name": "Microsoft Office \u2264 2003 (SHA1+RC4) collider-mode #2"
|
@@ -2349,7 +3054,10 @@
|
|
2349
3054
|
"john": null,
|
2350
3055
|
"hashcat": 10900,
|
2351
3056
|
"extended": false,
|
2352
|
-
"name": "PBKDF2-HMAC-SHA256(PHP)"
|
3057
|
+
"name": "PBKDF2-HMAC-SHA256 (PHP)",
|
3058
|
+
"samples": [
|
3059
|
+
"sha256:1000:NjI3MDM3:vVfavLQL9ZWjg8BUMq6/FB8FtpkIGWYk"
|
3060
|
+
]
|
2353
3061
|
}
|
2354
3062
|
]
|
2355
3063
|
},
|
@@ -2376,7 +3084,35 @@
|
|
2376
3084
|
]
|
2377
3085
|
},
|
2378
3086
|
{
|
2379
|
-
"regex": "^\\$pdf\\$
|
3087
|
+
"regex": "^\\$pdf\\$1\\*2\\*[0-9]{2}\\*[-0-9]{1,6}\\*[0-9]\\*[0-9]{2}\\*[a-f0-9]{32}\\*[0-9]{2}\\*[a-f0-9]{64}\\*[0-9]{2}\\*[a-f0-9]{64}$",
|
3088
|
+
"modes": [
|
3089
|
+
{
|
3090
|
+
"john": "pdf",
|
3091
|
+
"hashcat": 10400,
|
3092
|
+
"extended": false,
|
3093
|
+
"name": "PDF 1.1 - 1.3 (Acrobat 2 - 4)"
|
3094
|
+
},
|
3095
|
+
{
|
3096
|
+
"john": "pdf",
|
3097
|
+
"hashcat": 10410,
|
3098
|
+
"extended": false,
|
3099
|
+
"name": "PDF 1.1 - 1.3 (Acrobat 2 - 4), collider #1"
|
3100
|
+
}
|
3101
|
+
]
|
3102
|
+
},
|
3103
|
+
{
|
3104
|
+
"regex": "^\\$pdf\\$1\\*2\\*[0-9]{2}\\*[-0-9]{1,6}\\*[0-9]\\*[0-9]{2}\\*[a-f0-9]{32}\\*[0-9]{2}\\*[a-f0-9]{64}\\*[0-9]{2}\\*[a-f0-9]{64}:[a-f0-9]{10}$",
|
3105
|
+
"modes": [
|
3106
|
+
{
|
3107
|
+
"john": "pdf",
|
3108
|
+
"hashcat": 10420,
|
3109
|
+
"extended": false,
|
3110
|
+
"name": "PDF 1.1 - 1.3 (Acrobat 2 - 4), collider #2"
|
3111
|
+
}
|
3112
|
+
]
|
3113
|
+
},
|
3114
|
+
{
|
3115
|
+
"regex": "^\\$pdf\\$[24]\\*[34]\\*128\\*[0-9\\-]{1,6}\\*1\\*(16|32)\\*[a-f0-9]{32,64}\\*32\\*[a-f0-9]{64}\\*(8|16|32)\\*[a-f0-9]{16,64}$",
|
2380
3116
|
"modes": [
|
2381
3117
|
{
|
2382
3118
|
"john": "pdf",
|
@@ -2385,5 +3121,333 @@
|
|
2385
3121
|
"name": "PDF 1.4 - 1.6 (Acrobat 5 - 8)"
|
2386
3122
|
}
|
2387
3123
|
]
|
3124
|
+
},
|
3125
|
+
{
|
3126
|
+
"regex": "^\\$pdf\\$5\\*[5|6]\\*[0-9]{3}\\*[-0-9]{1,6}\\*[0-9]\\*[0-9]{1,4}\\*[a-f0-9]{0,1024}\\*[0-9]{1,4}\\*[a-f0-9]{0,1024}\\*[0-9]{1,4}\\*[a-f0-9]{0,1024}\\*[0-9]{1,4}\\*[a-f0-9]{0,1024}\\*[0-9]{1,4}\\*[a-f0-9]{0,1024}$",
|
3127
|
+
"modes": [
|
3128
|
+
{
|
3129
|
+
"john": "pdf",
|
3130
|
+
"hashcat": 10600,
|
3131
|
+
"extended": false,
|
3132
|
+
"name": "PDF 1.7 Level 3 (Acrobat 9)"
|
3133
|
+
},
|
3134
|
+
{
|
3135
|
+
"john": "pdf",
|
3136
|
+
"hashcat": 10700,
|
3137
|
+
"extended": false,
|
3138
|
+
"name": "PDF 1.7 Level 8 (Acrobat 10 - 11)"
|
3139
|
+
}
|
3140
|
+
]
|
3141
|
+
},
|
3142
|
+
{
|
3143
|
+
"regex": "^\\$bitcoin\\$[0-9]{2,4}\\$[a-f0-9$]{250,360}$",
|
3144
|
+
"modes": [
|
3145
|
+
{
|
3146
|
+
"john": "bitcoin",
|
3147
|
+
"hashcat": 11300,
|
3148
|
+
"extended": false,
|
3149
|
+
"name": "Bitcoin/Litecoin Wallet",
|
3150
|
+
"samples": [
|
3151
|
+
"$bitcoin$96$c265931309b4a59307921cf054b4ec6b6e4554369be79802e94e16477645777d948ae1d375191831efc78e5acd1f0443$16$8017214013543185$200460$96$480008005625057442352316337722323437108374245623701184230273883222762730232857701607167815448714$66$014754433300175043011633205413774877455616682000536368706315333388",
|
3152
|
+
"$bitcoin$96$c265931309b4a59307921cf054b4ec6b6e4554369be79802e94e16477645777d948ae1d375191831efc78e5acd1f0443$16$8017214013543185$200460$96$480008005625057442352316337722323437108374245623701184230273883222762730232857701607167815448714$66$014754433300175043011633205413774877455616682000536368706315333388",
|
3153
|
+
"$bitcoin$96$a8d2a30b9a5419934cbb7cb0727ddc16c4bebdbf30d7e099ca35f2b1b7ba04cc42eb5b865bff8f65fc6ba9e15428d84f$16$872581181d72f577$128205$96$0a8d43558ed2b55f4a53491df66e6a71003db4588d11dc0a88b976122c2849a74c2bfaace36424cf029795db6fd2c78f$130$04ff53a6f68eab1c52e5b561b4616edb5bed4d7510cdb4931c8da68732a86d86f3a3f7de266f17c8d03e02ebe8e2c86e2f5de0007217fd4aaf5742ca7373113060"
|
3154
|
+
]
|
3155
|
+
}
|
3156
|
+
]
|
3157
|
+
},
|
3158
|
+
{
|
3159
|
+
"regex": "^\\$ethereum\\$[a-z0-9*]{150,1400}$",
|
3160
|
+
"modes": [
|
3161
|
+
{
|
3162
|
+
"john": "ethereum-presale-opencl",
|
3163
|
+
"hashcat": 16300,
|
3164
|
+
"extended": false,
|
3165
|
+
"name": "Ethereum Presale Wallet"
|
3166
|
+
}
|
3167
|
+
]
|
3168
|
+
},
|
3169
|
+
{
|
3170
|
+
"regex": "^\\$ethereum\\$[a-z0-9*]{150,250}$",
|
3171
|
+
"modes": [
|
3172
|
+
{
|
3173
|
+
"john": "Ethereum Wallet",
|
3174
|
+
"hashcat": 15600,
|
3175
|
+
"extended": false,
|
3176
|
+
"name": "ethereum-opencl"
|
3177
|
+
}
|
3178
|
+
]
|
3179
|
+
},
|
3180
|
+
{
|
3181
|
+
"regex": "^\\$monero\\$(0)\\*[a-f0-9]{32,4096}$",
|
3182
|
+
"modes": [
|
3183
|
+
{
|
3184
|
+
"john": "monero",
|
3185
|
+
"hashcat": null,
|
3186
|
+
"extended": false,
|
3187
|
+
"name": "monero Wallet"
|
3188
|
+
}
|
3189
|
+
]
|
3190
|
+
},
|
3191
|
+
{
|
3192
|
+
"regex": "^\\$ab\\$[0-9]{1}\\*[0-9]{1}\\*[0-9]{1,6}\\*[a-f0-9]{128}\\*[a-f0-9]{128}\\*[a-f0-9]{32}\\*[a-f0-9]{192}$",
|
3193
|
+
"modes": [
|
3194
|
+
{
|
3195
|
+
"john": "AndroidBackup",
|
3196
|
+
"hashcat": 18900,
|
3197
|
+
"extended": false,
|
3198
|
+
"name": "Android Backup"
|
3199
|
+
}
|
3200
|
+
]
|
3201
|
+
},
|
3202
|
+
{
|
3203
|
+
"regex": "^\\$zip2\\$\\*[0-9]{1}\\*[0-9]{1}\\*[0-9]{1}\\*[a-f0-9]{16,32}\\*[a-f0-9]{1,6}\\*[a-f0-9]{1,6}\\*[a-f0-9]{0,16384}\\*[a-f0-9]{20}\\*\\$\/zip2\\$$",
|
3204
|
+
"modes": [
|
3205
|
+
{
|
3206
|
+
"john": "zip",
|
3207
|
+
"hashcat": 13600,
|
3208
|
+
"extended": false,
|
3209
|
+
"name": "WinZip"
|
3210
|
+
}
|
3211
|
+
]
|
3212
|
+
},
|
3213
|
+
{
|
3214
|
+
"regex": "^\\$itunes_backup\\$\\*[0-9]{1,2}\\*[a-f0-9]{80}\\*[0-9]{1,6}\\*[a-f0-9]{40}\\*[0-9]{0,10}\\*[a-f0-9]{0,40}$",
|
3215
|
+
"modes": [
|
3216
|
+
{
|
3217
|
+
"john": "itunes-backup",
|
3218
|
+
"hashcat": 14700,
|
3219
|
+
"extended": false,
|
3220
|
+
"name": "iTunes backup < 10.0"
|
3221
|
+
},
|
3222
|
+
{
|
3223
|
+
"john": "itunes-backup",
|
3224
|
+
"hashcat": 14800,
|
3225
|
+
"extended": false,
|
3226
|
+
"name": "iTunes backup >= 10.0"
|
3227
|
+
}
|
3228
|
+
]
|
3229
|
+
},
|
3230
|
+
{
|
3231
|
+
"regex": "^\\$telegram\\$0\\*[a-f0-9]{64}\\*[0-9]{32}$",
|
3232
|
+
"modes": [
|
3233
|
+
{
|
3234
|
+
"john": null,
|
3235
|
+
"hashcat": 22301,
|
3236
|
+
"extended": false,
|
3237
|
+
"name": "Telegram Mobile App Passcode (SHA256)"
|
3238
|
+
}
|
3239
|
+
]
|
3240
|
+
},
|
3241
|
+
{
|
3242
|
+
"regex": "^\\$telegram\\$1\\*4000\\*[a-f0-9]{64}\\*[a-f0-9]{576}$",
|
3243
|
+
"modes": [
|
3244
|
+
{
|
3245
|
+
"john": "telegram",
|
3246
|
+
"hashcat": null,
|
3247
|
+
"extended": false,
|
3248
|
+
"name": "Telegram Desktop 1.3.9"
|
3249
|
+
}
|
3250
|
+
]
|
3251
|
+
},
|
3252
|
+
{
|
3253
|
+
"regex": "^\\$telegram\\$2\\*100000\\*[a-f0-9]{64}\\*[a-f0-9]{576}$",
|
3254
|
+
"modes": [
|
3255
|
+
{
|
3256
|
+
"john": "telegram",
|
3257
|
+
"hashcat": null,
|
3258
|
+
"extended": false,
|
3259
|
+
"name": "Telegram Desktop \u2265 2.1.14-beta / 2.2.0"
|
3260
|
+
}
|
3261
|
+
]
|
3262
|
+
},
|
3263
|
+
{
|
3264
|
+
"regex": "^\\$7z\\$[0-9]{1,3}\\$[0-9]{1,2}\\$[0-9]{1}\\$[^$]{0,64}\\$[0-9]{1,2}\\$[a-f0-9]{32}\\$[0-9]{1,10}\\$[0-9]{1,6}\\$[0-9]{1,6}\\$[a-f0-9]{2,}$",
|
3265
|
+
"modes": [
|
3266
|
+
{
|
3267
|
+
"john": "7z",
|
3268
|
+
"hashcat": 11600,
|
3269
|
+
"extended": false,
|
3270
|
+
"name": "7-zip"
|
3271
|
+
}
|
3272
|
+
]
|
3273
|
+
},
|
3274
|
+
{
|
3275
|
+
"regex": "^\\$zip3\\$\\*[0-9]\\*[0-9]\\*128\\*[0-9]\\*[a-f0-9]{0,32}\\*[a-f0-9]{288}\\*[0-9]\\*[0-9]\\*[0-9]\\*[^\\s]{0,64}$",
|
3276
|
+
"modes": [
|
3277
|
+
{
|
3278
|
+
"john": "securezip",
|
3279
|
+
"hashcat": 23001,
|
3280
|
+
"extended": false,
|
3281
|
+
"name": "SecureZIP AES-128"
|
3282
|
+
}
|
3283
|
+
]
|
3284
|
+
},
|
3285
|
+
{
|
3286
|
+
"regex": "^\\$zip3\\$\\*[0-9]\\*[0-9]\\*192\\*[0-9]\\*[a-f0-9]{0,32}\\*[a-f0-9]{288}\\*[0-9]\\*[0-9]\\*[0-9]\\*[^\\s]{0,64}$",
|
3287
|
+
"modes": [
|
3288
|
+
{
|
3289
|
+
"john": "securezip",
|
3290
|
+
"hashcat": 23002,
|
3291
|
+
"extended": false,
|
3292
|
+
"name": "SecureZIP AES-192"
|
3293
|
+
}
|
3294
|
+
]
|
3295
|
+
},
|
3296
|
+
{
|
3297
|
+
"regex": "^\\$zip3\\$\\*[0-9]\\*[0-9]\\*256\\*[0-9]\\*[a-f0-9]{0,32}\\*[a-f0-9]{288}\\*[0-9]\\*[0-9]\\*[0-9]\\*[^\\s]{0,64}$",
|
3298
|
+
"modes": [
|
3299
|
+
{
|
3300
|
+
"john": "securezip",
|
3301
|
+
"hashcat": 23003,
|
3302
|
+
"extended": false,
|
3303
|
+
"name": "SecureZIP AES-256"
|
3304
|
+
}
|
3305
|
+
]
|
3306
|
+
},
|
3307
|
+
{
|
3308
|
+
"regex": "^\\$pkzip2?\\$[a-f0-9\\*]+\\$\/pkzip2?\\$$",
|
3309
|
+
"modes": [
|
3310
|
+
{
|
3311
|
+
"john": "pkzip",
|
3312
|
+
"hashcat": null,
|
3313
|
+
"extended": false,
|
3314
|
+
"name": "PKZIP"
|
3315
|
+
}
|
3316
|
+
]
|
3317
|
+
},
|
3318
|
+
{
|
3319
|
+
"regex": "^\\$argon2d\\$v=19\\$m=[0-9]{1,6},t=[0-9]{1,2},p=[0-9]{1,2}\\$[^$]+\\$[^\\s]{6,}$",
|
3320
|
+
"modes": [
|
3321
|
+
{
|
3322
|
+
"john": "argon2",
|
3323
|
+
"hashcat": null,
|
3324
|
+
"extended": false,
|
3325
|
+
"name": "argon2d",
|
3326
|
+
"samples": [
|
3327
|
+
"$argon2d$v=19$m=4096,t=3,p=1$ZGFtYWdlX2RvbmU$w9w3s5/zV8+PcAZlJhnTCOE+vBkZssmZf6jOq3dKv50",
|
3328
|
+
"$argon2d$v=19$m=4096,t=3,p=1$c2hvcnRfc2FsdA$zMrTcOAOUje6UqObRVh84Pe1K6gumcDqqGzRM0ILzYmj",
|
3329
|
+
"$argon2d$v=19$m=16384,t=3,p=1$c2hvcnRfc2FsdA$TLSTPihIo+5F67Y1vJdfWdB9",
|
3330
|
+
"$argon2d$v=19$m=16384,t=4,p=3$YW5vdGhlcl9zYWx0$yw93eMxC8REPAwbQ0e/q43jR9+RI9HI/DHP75uzm7tQfjU734oaI3dzcMWjYjHzVQD+J4+MG+7oyD8dN/PtnmPCZs+UZ67E+rkXJ/wTvY4WgXgAdGtJRrAGxhy4rD7d5G+dCpqhrog"
|
3331
|
+
]
|
3332
|
+
}
|
3333
|
+
]
|
3334
|
+
},
|
3335
|
+
{
|
3336
|
+
"regex": "^\\$argon2i\\$v=19\\$m=[0-9]{1,6},t=[0-9]{1,2},p=[0-9]{1,2}\\$[^$]+\\$[^\\s]{6,}$",
|
3337
|
+
"modes": [
|
3338
|
+
{
|
3339
|
+
"john": "argon2",
|
3340
|
+
"hashcat": null,
|
3341
|
+
"extended": false,
|
3342
|
+
"name": "argon2i",
|
3343
|
+
"samples": [
|
3344
|
+
"$argon2i$v=19$m=4096,t=3,p=1$ZGFtYWdlX2RvbmU$N59QwnpxDQZRj1/cO6bqm408dD6Z2Z9LKYpwFJSPVKA",
|
3345
|
+
"$argon2i$v=19$m=4096,t=3,p=1$c2hvcnRfc2FsdA$1l4kAwUdAApoCbFH7ghBEf7bsdrOQzE4axIJ3PV0Ncrd",
|
3346
|
+
"$argon2i$v=19$m=16384,t=3,p=1$c2hvcnRfc2FsdA$vvjDVog22A5x9eljmB+2yC8y",
|
3347
|
+
"$argon2i$v=19$m=16384,t=4,p=3$YW5vdGhlcl9zYWx0$K7unxwO5aeuZCpnIJ06FMCRKod3eRg8oIRzQrK3E6mGbyqlTvvl47jeDWq/5drF1COJkEF9Ty7FWXJZHa+vqlf2YZGp/4qSlAvKmdtJ/6JZU32iQItzMRwcfujHE+PBjbL5uz4966A"
|
3348
|
+
]
|
3349
|
+
}
|
3350
|
+
]
|
3351
|
+
},
|
3352
|
+
{
|
3353
|
+
"regex": "^\\$argon2id\\$v=19\\$m=[0-9]{1,6},t=[0-9]{1,2},p=[0-9]{1,2}\\$[^$]+\\$[^\\s]{6,}$",
|
3354
|
+
"modes": [
|
3355
|
+
{
|
3356
|
+
"john": null,
|
3357
|
+
"hashcat": null,
|
3358
|
+
"extended": false,
|
3359
|
+
"name": "argon2id"
|
3360
|
+
}
|
3361
|
+
]
|
3362
|
+
},
|
3363
|
+
{
|
3364
|
+
"regex": "^\\$axcrypt\\$\\*2\\*[0-9]{1,7}\\*[a-f0-9]{128}\\*[a-f0-9]{288}\\*[0-9]{1,7}\\*[a-f0-9]{64}$",
|
3365
|
+
"modes": [
|
3366
|
+
{
|
3367
|
+
"john": "axcrypt",
|
3368
|
+
"hashcat": 23500,
|
3369
|
+
"extended": false,
|
3370
|
+
"name": "AxCrypt 2",
|
3371
|
+
"samples": [
|
3372
|
+
"$axcrypt$*2*10000*6d44c6d19076bce9920c5fb76b246c161926ce65abb93ec2003919d78898aadd5bc6e5754201ff25d681ad89fa2861d20ef7c3fd7bde051909dfef8adcb50491*68f78a1b80291a42b2a117d6209d3eb3541a8d47ed6b970b2b8294b2bc78347fc2b494a0599f8cba6d45e88fd8fbc5b4dd7e888f6c9543e679489de132167222e130d5925278693ad8599284705fdf99360b2199ed0005be05867b9b7aa6bb4be76f5f979819eb27cf590a47d81830575b2af09dda756360c844b89c7dcec099cfdd27d2d0c95d24f143405f303e4843*1000*debdeb8ea7b9800b01855de09b105fdb8840efc1f67dc742283d13a5570165f8",
|
3373
|
+
"$axcrypt$*2*28200*96fca6b5aff19cb540125e6452f1ab6e1cbf7097ad75326e7aa1726f687ed18e66a63295d735f458a138901be41d95d29ff760c7c4b4178320251f2ab0ecabd8*d1d90c425fd8e2d20b2aa7ef6f3ab9dcefad84917f9e07f65f8da61e7e84f490ba8007179718ce0033cbc887177c2b51ed00e88155741960ab667a5328f305969518bc436ee1ba28126a5be79b0b90f8a9c8a438cba9d0e59c0b6573cde124a8300a6fb01ff857485d302285f1eacd7f08d9cc70ec9fdf412b60bc5a728b5108ef8bda24caee5ab7cc4376951c080c6d*1000*fead8792ea352979ab19e7b287bf709f39df0706a7e460b5271d1ebc71014b3b",
|
3374
|
+
"$axcrypt$*2*23652*8817291e0611409390c50a8bdc99a98bf56d393174d7c177082391f7919ed392a701783790ad2eed49139ede2b1546dc4a9aaa142e2b2530b4c82cff03df18b1*2561a0c3f5e166c7273ea6fb59592a58b8d8235a379c82de39fc6d674291b6a25a268732c34eab1b092166ca4f9ef9e383325b90633896890f7dca4d29876ec5bb232ff89c8130aad917f93d9228a091a9996e1f14d4b130b5aad7516c11aa9143730d7b0ec8168b4d83bdd0ca1a9a36784572b9db992bd13289ecd577a421ded0576801e88c7275b2d5fa8eb7e540cb*1000*3dc38e68204a7060c3cd616ffcf6df17dbbb3c199e67ea85c7e29751b9ea2fc2"
|
3375
|
+
]
|
3376
|
+
}
|
3377
|
+
]
|
3378
|
+
},
|
3379
|
+
{
|
3380
|
+
"regex": "^\\$axcrypt\\$\\*1\\*[0-9]{1,7}\\*[a-f0-9]{32}\\*[a-f0-9]{48}(?:\\*[a-z0-9]+)?$",
|
3381
|
+
"modes": [
|
3382
|
+
{
|
3383
|
+
"john": "axcrypt",
|
3384
|
+
"hashcat": null,
|
3385
|
+
"extended": false,
|
3386
|
+
"name": "AxCrypt 1",
|
3387
|
+
"samples": [
|
3388
|
+
"$axcrypt$*1*1337*0fd9e7e2f907f480f8af162564f8f94b*af10c88878ba4e2c89b12586f93b7802453121ee702bc362",
|
3389
|
+
"$axcrypt$*1*31014*3408ae91dddc0b1750ed4223fd843364*1cc0f8fa8d89f44d284d0562ac7e93848c86ce9605907129",
|
3390
|
+
"$axcrypt$*1*20000*efd759ae68ae7edd709b9e1c2166d0f7*dcf4c1279b8e4d39475925b17f698c3ce39e9e7d82917272*68656c6c6f0a",
|
3391
|
+
"$axcrypt$*1*38574*ce4f58c1e85df1ea921df6d6c05439b4*3278c3c730f7887b1008e852e59997e2196710a5c6bc1813*66664a6b2074434a4520374d73592055626979204a6b755520736d6b4b20394e694a205548444320524578562065674b33202f42593d"
|
3392
|
+
]
|
3393
|
+
}
|
3394
|
+
]
|
3395
|
+
},
|
3396
|
+
{
|
3397
|
+
"regex": "^\\$rar5\\$[0-9]{2}\\$[a-f0-9]{32}\\$[0-9]{2}\\$[a-f0-9]{32}\\$[0-9]{1}\\$[a-f0-9]{16}$",
|
3398
|
+
"modes": [
|
3399
|
+
{
|
3400
|
+
"john": "rar5",
|
3401
|
+
"hashcat": 13000,
|
3402
|
+
"extended": false,
|
3403
|
+
"name": "RAR5",
|
3404
|
+
"samples": [
|
3405
|
+
"$rar5$16$38466361001011015181344360681307$15$00000000000000000000000000000000$8$cc7a30583e62676a",
|
3406
|
+
"$rar5$16$37526a0922b4adcc32f8fed5d51bb6c8$15$8955617d9b801def51d734095bb8ecdb$8$9f0b23c98ebb3653",
|
3407
|
+
"$rar5$16$ed9bd88cc649bd06bfd7dc418fcf5fbd$15$21771e718815d6f23073ea294540ce94$8$5c4361e549c999e1"
|
3408
|
+
]
|
3409
|
+
}
|
3410
|
+
]
|
3411
|
+
},
|
3412
|
+
{
|
3413
|
+
"regex": "^\\$RAR3\\$\\*[0-9]{1}\\*[a-f0-9]{16}\\*[a-f0-9]{8}\\*[0-9]{1,7}\\*[0-9]{1,6}\\*[0-9]{1}\\*[a-f0-9]{2,}\\*[0-9]{2}$",
|
3414
|
+
"modes": [
|
3415
|
+
{
|
3416
|
+
"john": "rar",
|
3417
|
+
"hashcat": 23700,
|
3418
|
+
"extended": false,
|
3419
|
+
"name": "RAR3 -p (Uncompressed)",
|
3420
|
+
"samples": [
|
3421
|
+
"$RAR3$*1*e54a73729887cb53*49b0a846*16*14*1*34620bcca8176642a210b1051901921e*30",
|
3422
|
+
"$RAR3$*1*c47c5bef0bbd1e98*965f1453*48*47*1*c5e987f81d316d9dcfdb6a1b27105ce63fca2c594da5aa2f6fdf2f65f50f0d66314f8a09da875ae19d6c15636b65c815*30"
|
3423
|
+
]
|
3424
|
+
},
|
3425
|
+
{
|
3426
|
+
"john": "rar",
|
3427
|
+
"hashcat": 23800,
|
3428
|
+
"extended": false,
|
3429
|
+
"name": "RAR3 -p (Compressed)",
|
3430
|
+
"samples": [
|
3431
|
+
"$RAR3$*1*ad56eb40219c9da2*834064ce*32*13*1*eb47b1abe17a1a75bce6c92ab1cef3f4126035ea95deaf08b3f32a0c7b8078e1*33",
|
3432
|
+
"$RAR3$*1*b4eee1a48dc95d12*965f1453*64*47*1*0fe529478798c0960dd88a38a05451f9559e15f0cf20b4cac58260b0e5b56699d5871bdcc35bee099cc131eb35b9a116adaedf5ecc26b1c09cadf5185b3092e6*33"
|
3433
|
+
]
|
3434
|
+
}
|
3435
|
+
]
|
3436
|
+
},
|
3437
|
+
{
|
3438
|
+
"regex": "^\\$RAR3\\$\\*[0-9]{1}\\*[a-f0-9]{16}\\*[a-f0-9]{32}$",
|
3439
|
+
"modes": [
|
3440
|
+
{
|
3441
|
+
"john": "rar",
|
3442
|
+
"hashcat": 12500,
|
3443
|
+
"extended": false,
|
3444
|
+
"name": "RAR3 -hp",
|
3445
|
+
"samples": [
|
3446
|
+
"$RAR3$*0*45109af8ab5f297a*adbf6c5385d7a40373e8f77d7b89d317",
|
3447
|
+
"$RAR3$*0*7ce241baa2bd521b*3eb0017fa8843017952c53a3ac8332b6",
|
3448
|
+
"$RAR3$*0*c203c4d80a8a09dc*1f406154556d4c895a8be207fd2b5d0c"
|
3449
|
+
]
|
3450
|
+
}
|
3451
|
+
]
|
2388
3452
|
}
|
2389
3453
|
]
|