haiti-hash 1.1.1 → 1.2.1
Sign up to get free protection for your applications and to get access to all the features.
- checksums.yaml +4 -4
- data/data/prototypes.json +771 -100
- data/lib/haiti/hash.rb +3 -0
- data/lib/haiti/version.rb +1 -1
- metadata +3 -115
checksums.yaml
CHANGED
@@ -1,7 +1,7 @@
|
|
1
1
|
---
|
2
2
|
SHA256:
|
3
|
-
metadata.gz:
|
4
|
-
data.tar.gz:
|
3
|
+
metadata.gz: 00c1a935944116074a81562ef8740ac38f31d490b4c8565b46651c4a2c75dee7
|
4
|
+
data.tar.gz: 80e82fe3917bf03955e1a517d8e9a7e766719d0018565b4439bc84702ec82e7d
|
5
5
|
SHA512:
|
6
|
-
metadata.gz:
|
7
|
-
data.tar.gz:
|
6
|
+
metadata.gz: f23a65d2772e32a8554c677f32bb4e61f57abf172549d2f2071cd32e6ad25fa48ecebed3e86a1e33a8045cc224a2732013611da803e06cf63455b6f9a036d3bf
|
7
|
+
data.tar.gz: 7ce7b0fe76bd73d6ffac0b26db2ab0b2da0d439c83b704083e4f0ee3538c81e1e023038318a9c2e53af32841f15b92430eaab10d236d6e6ef69e2292b1e82e19
|
data/data/prototypes.json
CHANGED
@@ -99,13 +99,18 @@
|
|
99
99
|
]
|
100
100
|
},
|
101
101
|
{
|
102
|
-
"regex": "^(\\$crc32\\$[a-f0-9]{8}.)?[a-f0-9]{8}$",
|
102
|
+
"regex": "^(\\$crc32\\$)?([a-f0-9]{8}.)?[a-f0-9]{8}$",
|
103
103
|
"modes": [
|
104
104
|
{
|
105
105
|
"john": "crc32",
|
106
|
-
"hashcat":
|
106
|
+
"hashcat": 11500,
|
107
107
|
"extended": false,
|
108
|
-
"name": "CRC-32"
|
108
|
+
"name": "CRC-32",
|
109
|
+
"samples": [
|
110
|
+
"c762de4a:00000000",
|
111
|
+
"$crc32$00000000.fa455f6b",
|
112
|
+
"$crc32$4ff4f23f.ce6eb863"
|
113
|
+
]
|
109
114
|
}
|
110
115
|
]
|
111
116
|
},
|
@@ -116,7 +121,12 @@
|
|
116
121
|
"john": "bfegg",
|
117
122
|
"hashcat": null,
|
118
123
|
"extended": false,
|
119
|
-
"name": "Eggdrop IRC Bot"
|
124
|
+
"name": "Eggdrop IRC Bot",
|
125
|
+
"samples": [
|
126
|
+
"+9F93o1OxwgK1",
|
127
|
+
"+C/.8o.Wuph9.",
|
128
|
+
"+Obytd.zXYjH/"
|
129
|
+
]
|
120
130
|
}
|
121
131
|
]
|
122
132
|
},
|
@@ -127,19 +137,34 @@
|
|
127
137
|
"john": "descrypt",
|
128
138
|
"hashcat": 1500,
|
129
139
|
"extended": false,
|
130
|
-
"name": "DES(Unix)"
|
140
|
+
"name": "DES(Unix)",
|
141
|
+
"samples": [
|
142
|
+
"CCNf8Sbh3HDfQ",
|
143
|
+
"CCX.K.MFy4Ois",
|
144
|
+
"CC4rMpbg9AMZ."
|
145
|
+
]
|
131
146
|
},
|
132
147
|
{
|
133
148
|
"john": "descrypt",
|
134
149
|
"hashcat": 1500,
|
135
150
|
"extended": false,
|
136
|
-
"name": "Traditional DES"
|
151
|
+
"name": "Traditional DES",
|
152
|
+
"samples": [
|
153
|
+
"CCNf8Sbh3HDfQ",
|
154
|
+
"CCX.K.MFy4Ois",
|
155
|
+
"CC4rMpbg9AMZ."
|
156
|
+
]
|
137
157
|
},
|
138
158
|
{
|
139
159
|
"john": "descrypt",
|
140
160
|
"hashcat": 1500,
|
141
161
|
"extended": false,
|
142
|
-
"name": "DEScrypt"
|
162
|
+
"name": "DEScrypt",
|
163
|
+
"samples": [
|
164
|
+
"CCNf8Sbh3HDfQ",
|
165
|
+
"CCX.K.MFy4Ois",
|
166
|
+
"CC4rMpbg9AMZ."
|
167
|
+
]
|
143
168
|
}
|
144
169
|
]
|
145
170
|
},
|
@@ -152,12 +177,6 @@
|
|
152
177
|
"extended": false,
|
153
178
|
"name": "MySQL323"
|
154
179
|
},
|
155
|
-
{
|
156
|
-
"john": null,
|
157
|
-
"hashcat": 3100,
|
158
|
-
"extended": false,
|
159
|
-
"name": "DES(Oracle)"
|
160
|
-
},
|
161
180
|
{
|
162
181
|
"john": null,
|
163
182
|
"hashcat": 5100,
|
@@ -166,21 +185,38 @@
|
|
166
185
|
},
|
167
186
|
{
|
168
187
|
"john": null,
|
169
|
-
"hashcat":
|
188
|
+
"hashcat": null,
|
170
189
|
"extended": false,
|
171
|
-
"name": "
|
190
|
+
"name": "FNV-164"
|
172
191
|
},
|
173
192
|
{
|
174
193
|
"john": null,
|
175
194
|
"hashcat": null,
|
176
195
|
"extended": false,
|
177
|
-
"name": "
|
196
|
+
"name": "CRC-64"
|
197
|
+
}
|
198
|
+
]
|
199
|
+
},
|
200
|
+
{
|
201
|
+
"regex": "^[a-f0-9]{16}:[a-f0-9]{0,30}$",
|
202
|
+
"modes": [
|
203
|
+
{
|
204
|
+
"john": null,
|
205
|
+
"hashcat": 3100,
|
206
|
+
"extended": false,
|
207
|
+
"name": "DES(Oracle)",
|
208
|
+
"samples": [
|
209
|
+
"792FCB0AE31D8489:7284616727"
|
210
|
+
]
|
178
211
|
},
|
179
212
|
{
|
180
213
|
"john": null,
|
181
|
-
"hashcat":
|
214
|
+
"hashcat": 3100,
|
182
215
|
"extended": false,
|
183
|
-
"name": "
|
216
|
+
"name": "Oracle 7-10g",
|
217
|
+
"samples": [
|
218
|
+
"792FCB0AE31D8489:7284616727"
|
219
|
+
]
|
184
220
|
}
|
185
221
|
]
|
186
222
|
},
|
@@ -217,9 +253,14 @@
|
|
217
253
|
"modes": [
|
218
254
|
{
|
219
255
|
"john": "bsdicrypt",
|
220
|
-
"hashcat":
|
256
|
+
"hashcat": 12400,
|
221
257
|
"extended": false,
|
222
|
-
"name": "BSDi Crypt"
|
258
|
+
"name": "BSDi Crypt",
|
259
|
+
"samples": [
|
260
|
+
"_GW..8841inaTltazRsQ",
|
261
|
+
"_J9..XXXXsqM/YSSP..Y",
|
262
|
+
"_J9..SDSD5YGyRCr4W4c"
|
263
|
+
]
|
223
264
|
}
|
224
265
|
]
|
225
266
|
},
|
@@ -230,7 +271,25 @@
|
|
230
271
|
"john": null,
|
231
272
|
"hashcat": null,
|
232
273
|
"extended": false,
|
233
|
-
"name": "CRC-96(ZIP)"
|
274
|
+
"name": "CRC-96 (ZIP)"
|
275
|
+
},
|
276
|
+
{
|
277
|
+
"john": null,
|
278
|
+
"hashcat": 20500,
|
279
|
+
"extended": false,
|
280
|
+
"name": "PKZIP Master Key",
|
281
|
+
"samples": [
|
282
|
+
"f1eff5c0368d10311dcfc419"
|
283
|
+
]
|
284
|
+
},
|
285
|
+
{
|
286
|
+
"john": null,
|
287
|
+
"hashcat": 20510,
|
288
|
+
"extended": false,
|
289
|
+
"name": "PKZIP Master Key (6 byte optimization)",
|
290
|
+
"samples": [
|
291
|
+
"f1eff5c0368d10311dcfc419"
|
292
|
+
]
|
234
293
|
}
|
235
294
|
]
|
236
295
|
},
|
@@ -263,7 +322,11 @@
|
|
263
322
|
"john": "raw-md5",
|
264
323
|
"hashcat": 0,
|
265
324
|
"extended": false,
|
266
|
-
"name": "MD5"
|
325
|
+
"name": "MD5",
|
326
|
+
"samples": [
|
327
|
+
"8743b52063cd84097a65d1633f5c74f5",
|
328
|
+
"098F6BCD4621D373CADE4E832627B4F6"
|
329
|
+
]
|
267
330
|
},
|
268
331
|
{
|
269
332
|
"john": "raw-md4",
|
@@ -283,12 +346,6 @@
|
|
283
346
|
"extended": false,
|
284
347
|
"name": "LM"
|
285
348
|
},
|
286
|
-
{
|
287
|
-
"john": "ripemd-128",
|
288
|
-
"hashcat": null,
|
289
|
-
"extended": false,
|
290
|
-
"name": "RIPEMD-128"
|
291
|
-
},
|
292
349
|
{
|
293
350
|
"john": "haval-128-4",
|
294
351
|
"hashcat": null,
|
@@ -343,17 +400,14 @@
|
|
343
400
|
"extended": true,
|
344
401
|
"name": "ZipMonster"
|
345
402
|
},
|
346
|
-
{
|
347
|
-
"john": null,
|
348
|
-
"hashcat": 11000,
|
349
|
-
"extended": true,
|
350
|
-
"name": "PrestaShop"
|
351
|
-
},
|
352
403
|
{
|
353
404
|
"john": "dynamic_3",
|
354
405
|
"hashcat": 3500,
|
355
406
|
"extended": true,
|
356
|
-
"name": "md5(md5(md5($pass)))"
|
407
|
+
"name": "md5(md5(md5($pass)))",
|
408
|
+
"samples": [
|
409
|
+
"9882d0778518b095917eb589f6998441"
|
410
|
+
]
|
357
411
|
},
|
358
412
|
{
|
359
413
|
"john": "dynamic_2",
|
@@ -413,7 +467,10 @@
|
|
413
467
|
"john": "dynamic_8",
|
414
468
|
"hashcat": 3610,
|
415
469
|
"extended": true,
|
416
|
-
"name": "md5(md5($salt).$pass)"
|
470
|
+
"name": "md5(md5($salt).$pass)",
|
471
|
+
"samples": [
|
472
|
+
"7b57255a15958ef898543ea6cc3313bc:1234"
|
473
|
+
]
|
417
474
|
},
|
418
475
|
{
|
419
476
|
"john": "dynamic_9",
|
@@ -425,7 +482,10 @@
|
|
425
482
|
"john": null,
|
426
483
|
"hashcat": 3720,
|
427
484
|
"extended": true,
|
428
|
-
"name": "md5($pass.md5($salt))"
|
485
|
+
"name": "md5($pass.md5($salt))",
|
486
|
+
"samples": [
|
487
|
+
"10ce488714fdbde9453670e0e4cbe99c:1234"
|
488
|
+
]
|
429
489
|
},
|
430
490
|
{
|
431
491
|
"john": "dynamic_5",
|
@@ -473,7 +533,10 @@
|
|
473
533
|
"john": null,
|
474
534
|
"hashcat": 4210,
|
475
535
|
"extended": true,
|
476
|
-
"name": "md5($username.0.$pass)"
|
536
|
+
"name": "md5($username.0.$pass)",
|
537
|
+
"samples": [
|
538
|
+
"09ea048c345ad336ebe38ae5b6c4de24:1234"
|
539
|
+
]
|
477
540
|
},
|
478
541
|
{
|
479
542
|
"john": "dynamic_15",
|
@@ -527,13 +590,52 @@
|
|
527
590
|
"john": "dynamic_39",
|
528
591
|
"hashcat": null,
|
529
592
|
"extended": true,
|
530
|
-
"name": "
|
531
|
-
}
|
593
|
+
"name": "md5($salt.pad16($pass))"
|
594
|
+
}
|
595
|
+
]
|
596
|
+
},
|
597
|
+
{
|
598
|
+
"regex": "^[a-f0-9]{32}:.{56}$",
|
599
|
+
"modes": [
|
532
600
|
{
|
533
|
-
"john":
|
601
|
+
"john": null,
|
602
|
+
"hashcat": 11000,
|
603
|
+
"extended": false,
|
604
|
+
"name": "PrestaShop",
|
605
|
+
"samples": [
|
606
|
+
"f22cade043e7214200206dbffca49fd9:27167508161455764247627144160038845437138252877014827848",
|
607
|
+
"810e3d12f0f10777a679d9ca1ad7a8d9:M2uZ122bSHJ4Mi54tXGY0lqcv1r28mUluSkyw37ou5oia4i239ujqw0l"
|
608
|
+
]
|
609
|
+
}
|
610
|
+
]
|
611
|
+
},
|
612
|
+
{
|
613
|
+
"regex": "^(\\$netmd5\\$)?([a-f0-9]{88,96}\\$)?[a-f0-9]{32}$",
|
614
|
+
"modes": [
|
615
|
+
{
|
616
|
+
"john": "net-md5",
|
534
617
|
"hashcat": null,
|
535
|
-
"extended":
|
536
|
-
"name": "
|
618
|
+
"extended": false,
|
619
|
+
"name": "Keyed MD5: RIPv2, OSPF, BGP, SNMPv2",
|
620
|
+
"samples": [
|
621
|
+
"02020000ffff0003002c01145267d48d000000000000000000020000ac100100ffffff000000000000000001ffff0001$1e372a8a233c6556253a0909bc3dcce6",
|
622
|
+
"$netmd5$0201002cac1001010000000000000002000001105267ff8fffffff00000a0201000000280000000000000000$445ecbb27272bd791a757a6c85856150"
|
623
|
+
]
|
624
|
+
}
|
625
|
+
]
|
626
|
+
},
|
627
|
+
{
|
628
|
+
"regex": "^(\\$ripemd\\$)?[a-f0-9]{32}(:.+)?$",
|
629
|
+
"modes": [
|
630
|
+
{
|
631
|
+
"john": "ripemd-128",
|
632
|
+
"hashcat": null,
|
633
|
+
"extended": false,
|
634
|
+
"name": "RIPEMD-128",
|
635
|
+
"samples": [
|
636
|
+
"cdf26213a150dc3ecb610f18f6b38b46",
|
637
|
+
"$ripemd$cdf26213a150dc3ecb610f18f6b38b46"
|
638
|
+
]
|
537
639
|
}
|
538
640
|
]
|
539
641
|
},
|
@@ -560,24 +662,38 @@
|
|
560
662
|
]
|
561
663
|
},
|
562
664
|
{
|
563
|
-
"regex": "^([
|
665
|
+
"regex": "^(([^\\\\:*?\"<>|\\n]+:)|(M\\$.+#))?[a-f0-9]{32}(:[^\\\\\\/:*?\"<>|\\n]+)?$",
|
564
666
|
"modes": [
|
565
667
|
{
|
566
|
-
"john": "
|
668
|
+
"john": "mscash",
|
567
669
|
"hashcat": 1100,
|
568
670
|
"extended": false,
|
569
|
-
"name": "Domain Cached Credentials"
|
671
|
+
"name": "Domain Cached Credentials (DCC), MS Cache",
|
672
|
+
"samples": [
|
673
|
+
"176a4c2bd45ac73687676c2f09045353",
|
674
|
+
"M$test2#ab60bdb4493822b175486810ac2abe63",
|
675
|
+
"M$#january#72488d8077e33d138b9cff94092716e4",
|
676
|
+
"CORP1.COMPANY.LOCAL/Administrator:ab60bdb4493822b175486810ac2abe63:Administrator"
|
677
|
+
]
|
570
678
|
}
|
571
679
|
]
|
572
680
|
},
|
573
681
|
{
|
574
|
-
"regex": "^([
|
682
|
+
"regex": "^([^\\\\:*?\"<>|\\n]+:)?(\\$DCC2\\$(\\d+#)?[^\\\\:*?\"<>|\\n]*#)?[a-f0-9]{32}$",
|
575
683
|
"modes": [
|
576
684
|
{
|
577
|
-
"john": "
|
685
|
+
"john": "mscash2",
|
578
686
|
"hashcat": 2100,
|
579
687
|
"extended": false,
|
580
|
-
"name": "Domain Cached Credentials 2"
|
688
|
+
"name": "Domain Cached Credentials 2 (DCC2), MS Cache 2",
|
689
|
+
"samples": [
|
690
|
+
"cfc6a1e33eb36c3d4f84e4c2606623d2",
|
691
|
+
"$DCC2$10240#test1#607bbe89611e37446e736f7856515bf8",
|
692
|
+
"$DCC2$10000#Twelve_chars#54236c670e185043c8016006c001e982",
|
693
|
+
"$DCC2$january#26b5495b21f9ad58255d99b5e117abe2",
|
694
|
+
"$DCC2$#59137848828d14b1fca295a5032b52a1",
|
695
|
+
"CORP1.COMPANY.LOCAL/Administrator:$DCC2$10240#Administrator#cceed966f6689269b758893bb6bbb985"
|
696
|
+
]
|
581
697
|
}
|
582
698
|
]
|
583
699
|
},
|
@@ -730,13 +846,16 @@
|
|
730
846
|
]
|
731
847
|
},
|
732
848
|
{
|
733
|
-
"regex": "^[a-f0-9]{32}
|
849
|
+
"regex": "^[a-f0-9]{32}:.+$",
|
734
850
|
"modes": [
|
735
851
|
{
|
736
852
|
"john": null,
|
737
853
|
"hashcat": 3721,
|
738
854
|
"extended": false,
|
739
|
-
"name": "WebEdition CMS"
|
855
|
+
"name": "WebEdition CMS",
|
856
|
+
"samples": [
|
857
|
+
"fa01af9f0de5f377ae8befb03865178e:5678"
|
858
|
+
]
|
740
859
|
}
|
741
860
|
]
|
742
861
|
},
|
@@ -788,12 +907,6 @@
|
|
788
907
|
"extended": false,
|
789
908
|
"name": "Double SHA-1"
|
790
909
|
},
|
791
|
-
{
|
792
|
-
"john": "ripemd-160",
|
793
|
-
"hashcat": 6000,
|
794
|
-
"extended": false,
|
795
|
-
"name": "RIPEMD-160"
|
796
|
-
},
|
797
910
|
{
|
798
911
|
"john": "dynamic_190",
|
799
912
|
"hashcat": null,
|
@@ -828,7 +941,10 @@
|
|
828
941
|
"john": "raw-sha1-linkedin",
|
829
942
|
"hashcat": 190,
|
830
943
|
"extended": false,
|
831
|
-
"name": "LinkedIn"
|
944
|
+
"name": "LinkedIn",
|
945
|
+
"samples": [
|
946
|
+
"b89eaac7e61417341b710b727768294d0e6a277b"
|
947
|
+
]
|
832
948
|
},
|
833
949
|
{
|
834
950
|
"john": null,
|
@@ -870,7 +986,10 @@
|
|
870
986
|
"john": null,
|
871
987
|
"hashcat": 4600,
|
872
988
|
"extended": true,
|
873
|
-
"name": "sha1(sha1(sha1($pass)))"
|
989
|
+
"name": "sha1(sha1(sha1($pass)))",
|
990
|
+
"samples": [
|
991
|
+
"dc57f246485e62d99a5110afc9264b4ccbfcf3cc"
|
992
|
+
]
|
874
993
|
},
|
875
994
|
{
|
876
995
|
"john": "dynamic_23",
|
@@ -955,23 +1074,57 @@
|
|
955
1074
|
"hashcat": null,
|
956
1075
|
"extended": true,
|
957
1076
|
"name": "sha1($salt.pad20($pass))"
|
1077
|
+
},
|
1078
|
+
{
|
1079
|
+
"john": null,
|
1080
|
+
"hashcat": 24300,
|
1081
|
+
"extended": true,
|
1082
|
+
"name": "sha1($salt.sha1($pass.$salt))",
|
1083
|
+
"samples": [
|
1084
|
+
"94520b02c04e79e08a75a84c2a6e3ed4e3874fe8:ThisIsATestSalt"
|
1085
|
+
]
|
958
1086
|
}
|
959
1087
|
]
|
960
1088
|
},
|
961
1089
|
{
|
962
|
-
"regex": "
|
1090
|
+
"regex": "^(\\$ripemd\\$)?[a-f0-9]{40}(:.+)?$",
|
1091
|
+
"modes": [
|
1092
|
+
{
|
1093
|
+
"john": "ripemd-160",
|
1094
|
+
"hashcat": 6000,
|
1095
|
+
"extended": false,
|
1096
|
+
"name": "RIPEMD-160",
|
1097
|
+
"samples": [
|
1098
|
+
"9c1185a5c5e9fc54612808977ee8f548b2258d31",
|
1099
|
+
"$ripemd$9c1185a5c5e9fc54612808977ee8f548b2258d31",
|
1100
|
+
"012cb9b334ec1aeb71a9c8ce85586082467f7eb6"
|
1101
|
+
]
|
1102
|
+
}
|
1103
|
+
]
|
1104
|
+
},
|
1105
|
+
{
|
1106
|
+
"regex": "^(\\*)?[a-f0-9]{40}$",
|
963
1107
|
"modes": [
|
964
1108
|
{
|
965
1109
|
"john": "mysql-sha1",
|
966
1110
|
"hashcat": 300,
|
967
1111
|
"extended": false,
|
968
|
-
"name": "MySQL5.x"
|
1112
|
+
"name": "MySQL5.x",
|
1113
|
+
"samples": [
|
1114
|
+
"*2c905879f74f28f8570989947d06a8429fb943e6",
|
1115
|
+
"*A8A397146B1A5F8C8CF26404668EFD762A1B7B82"
|
1116
|
+
]
|
969
1117
|
},
|
970
1118
|
{
|
971
1119
|
"john": "mysql-sha1",
|
972
1120
|
"hashcat": 300,
|
973
1121
|
"extended": false,
|
974
|
-
"name": "MySQL4.1"
|
1122
|
+
"name": "MySQL4.1",
|
1123
|
+
"samples": [
|
1124
|
+
"*5AD8F88516BD021DD43F171E2C785C69F8E54ADB",
|
1125
|
+
"*be1bdec0aa74b4dcb079943e70528096cca985f8",
|
1126
|
+
"fcf7c1b8749cf99d88e5f34271d636178fb5d130"
|
1127
|
+
]
|
975
1128
|
}
|
976
1129
|
]
|
977
1130
|
},
|
@@ -1130,7 +1283,10 @@
|
|
1130
1283
|
"john": "sunmd5",
|
1131
1284
|
"hashcat": 3300,
|
1132
1285
|
"extended": false,
|
1133
|
-
"name": "Sun MD5 Crypt"
|
1286
|
+
"name": "Sun MD5 Crypt",
|
1287
|
+
"samples": [
|
1288
|
+
"$md5$rounds=904$iPPKEBnEkp3JV8uX$0L6m7rOFTVFn.SGqo2M9W1"
|
1289
|
+
]
|
1134
1290
|
}
|
1135
1291
|
]
|
1136
1292
|
},
|
@@ -1349,7 +1505,11 @@
|
|
1349
1505
|
"john": "dynamic_140",
|
1350
1506
|
"hashcat": null,
|
1351
1507
|
"extended": false,
|
1352
|
-
"name": "RIPEMD-256"
|
1508
|
+
"name": "RIPEMD-256",
|
1509
|
+
"samples": [
|
1510
|
+
"1419109aa0de60e6ba0b6d2b2f602c13b07e97b5ffc85b6be2297badc699262f",
|
1511
|
+
"f156e6c20042057840f3251ee041596d89fde06c2505f61764ad1c03c2fc1375"
|
1512
|
+
]
|
1353
1513
|
},
|
1354
1514
|
{
|
1355
1515
|
"john": "haval-256-3",
|
@@ -1565,7 +1725,11 @@
|
|
1565
1725
|
"john": "dynamic_150",
|
1566
1726
|
"hashcat": null,
|
1567
1727
|
"extended": false,
|
1568
|
-
"name": "RIPEMD-320"
|
1728
|
+
"name": "RIPEMD-320",
|
1729
|
+
"samples": [
|
1730
|
+
"303aa1dcb731cd4e4bff2a60971eb7376c6c47cb59947c804776d115470183c8cc2e487337b45412",
|
1731
|
+
"3c616c27aa7539c4726388c9e047aa4ea089dd739b3cfc470e964ea12e479da3cce437b9daa90214"
|
1732
|
+
]
|
1569
1733
|
}
|
1570
1734
|
]
|
1571
1735
|
},
|
@@ -1721,7 +1885,12 @@
|
|
1721
1885
|
"john": "raw-sha512",
|
1722
1886
|
"hashcat": 1700,
|
1723
1887
|
"extended": false,
|
1724
|
-
"name": "SHA-512"
|
1888
|
+
"name": "SHA-512",
|
1889
|
+
"samples": [
|
1890
|
+
"f342aae82952db35b8e02c30115e3deed3d80fdfdadacab336f0ba51ac54e297291fa1d6b201d69a2bd77e2535280f17a54fa1e527abc6e2eddba79ad3be11c0",
|
1891
|
+
"7aba4411846c61b08b0f2282a8a4600232ace4dd96593c755ba9c9a4e7b780b8bdc437b5c55574b3e8409c7b511032f98ef120e25467678f0458643578eb60ff",
|
1892
|
+
"12b03226a6d8be9c6e8cd5e55dc6c7920caaa39df14aab92d5e3ea9340d1c8a4d3d0b8e4314f1f6ef131ba4bf1ceb9186ab87c801af0d5c95b1befb8cedae2b9"
|
1893
|
+
]
|
1725
1894
|
},
|
1726
1895
|
{
|
1727
1896
|
"john": "whirlpool",
|
@@ -1761,7 +1930,7 @@
|
|
1761
1930
|
},
|
1762
1931
|
{
|
1763
1932
|
"john": "raw-blake2",
|
1764
|
-
"hashcat":
|
1933
|
+
"hashcat": null,
|
1765
1934
|
"extended": false,
|
1766
1935
|
"name": "BLAKE2-512"
|
1767
1936
|
},
|
@@ -1845,6 +2014,18 @@
|
|
1845
2014
|
}
|
1846
2015
|
]
|
1847
2016
|
},
|
2017
|
+
{
|
2018
|
+
"regex": "^\\$BLAKE2\\$[a-f0-9]{128}$",
|
2019
|
+
"modes": [
|
2020
|
+
{
|
2021
|
+
"john": "raw-blake2",
|
2022
|
+
"hashcat": 600,
|
2023
|
+
"extended": false,
|
2024
|
+
"name": "BLAKE2-512"
|
2025
|
+
}
|
2026
|
+
]
|
2027
|
+
},
|
2028
|
+
|
1848
2029
|
{
|
1849
2030
|
"regex": "^[a-f0-9]{136}$",
|
1850
2031
|
"modes": [
|
@@ -1860,16 +2041,24 @@
|
|
1860
2041
|
"regex": "^0x0200[a-f0-9]{136}$",
|
1861
2042
|
"modes": [
|
1862
2043
|
{
|
1863
|
-
"john": "
|
2044
|
+
"john": "mssql12",
|
1864
2045
|
"hashcat": 1731,
|
1865
2046
|
"extended": false,
|
1866
|
-
"name": "MSSQL(2012)"
|
2047
|
+
"name": "MSSQL(2012)",
|
2048
|
+
"samples": [
|
2049
|
+
"0x0200F733058A07892C5CACE899768F89965F6BD1DED7955FE89E1C9A10E27849B0B213B5CE92CC9347ECCB34C3EFADAF2FD99BFFECD8D9150DD6AACB5D409A9D2652A4E0AF16",
|
2050
|
+
"0x0200AB3E1F9028A739EEF62ABF672427276A32D5EDD349E638E7F2CD81DAA247CFE20EE4E3B0A30B2D0AE3C3FA010E61752F1BF45E045041F1B988C083C7F118527E3E5F0562"
|
2051
|
+
]
|
1867
2052
|
},
|
1868
2053
|
{
|
1869
|
-
"john": "
|
2054
|
+
"john": "mssql12",
|
1870
2055
|
"hashcat": 1731,
|
1871
2056
|
"extended": false,
|
1872
|
-
"name": "MSSQL(2014)"
|
2057
|
+
"name": "MSSQL(2014)",
|
2058
|
+
"samples": [
|
2059
|
+
"0x02003788006711b2e74e7d8cb4be96b1d187c962c5591a02d5a6ae81b3a4a094b26b7877958b26733e45016d929a756ed30d0a5ee65d3ce1970f9b7bf946e705c595f07625b1",
|
2060
|
+
"0x02006BF4AB05873FF0C8A4AFD1DC5912CBFDEF62E0520A3353B04E1184F05C873C9C76BBADDEAAC1E9948C7B6ABFFD62BFEFD7139F17F6AFE10BE0FEE7A178644623067C2423"
|
2061
|
+
]
|
1873
2062
|
}
|
1874
2063
|
]
|
1875
2064
|
},
|
@@ -1983,9 +2172,12 @@
|
|
1983
2172
|
"modes": [
|
1984
2173
|
{
|
1985
2174
|
"john": null,
|
1986
|
-
"hashcat":
|
2175
|
+
"hashcat": 20711,
|
1987
2176
|
"extended": false,
|
1988
|
-
"name": "Minecraft(AuthMe Reloaded)"
|
2177
|
+
"name": "Minecraft (AuthMe Reloaded sha256)",
|
2178
|
+
"samples": [
|
2179
|
+
"$SHA$7218532375810603$bfede293ecf6539211a7305ea218b9f3f608953130405cda9eaba6fb6250f824"
|
2180
|
+
]
|
1989
2181
|
}
|
1990
2182
|
]
|
1991
2183
|
},
|
@@ -2181,9 +2373,12 @@
|
|
2181
2373
|
"modes": [
|
2182
2374
|
{
|
2183
2375
|
"john": null,
|
2184
|
-
"hashcat":
|
2376
|
+
"hashcat": 4521,
|
2185
2377
|
"extended": false,
|
2186
|
-
"name": "Redmine
|
2378
|
+
"name": "Redmine",
|
2379
|
+
"samples": [
|
2380
|
+
"c18e826af2a78c7b9b7261452613233417e65817:28246535720688452723483475753333"
|
2381
|
+
]
|
2187
2382
|
}
|
2188
2383
|
]
|
2189
2384
|
},
|
@@ -2227,7 +2422,10 @@
|
|
2227
2422
|
"john": null,
|
2228
2423
|
"hashcat": 123,
|
2229
2424
|
"extended": false,
|
2230
|
-
"name": "EPi"
|
2425
|
+
"name": "EPi",
|
2426
|
+
"samples": [
|
2427
|
+
"0x326C6D7B4E4F794B79474E36704F35723958397163735263516265456E31 0xAFC55E260B8F45C0C6512BCE776C1AD8312B56E6"
|
2428
|
+
]
|
2231
2429
|
}
|
2232
2430
|
]
|
2233
2431
|
},
|
@@ -2341,9 +2539,13 @@
|
|
2341
2539
|
"modes": [
|
2342
2540
|
{
|
2343
2541
|
"john": "sha1crypt",
|
2344
|
-
"hashcat":
|
2542
|
+
"hashcat": 15100,
|
2345
2543
|
"extended": false,
|
2346
|
-
"name": "SHA-1 Crypt"
|
2544
|
+
"name": "SHA-1 Crypt (Juniper/NetBSD)",
|
2545
|
+
"samples": [
|
2546
|
+
"$sha1$20000$75552156$HhYMDdaEHiK3eMIzTldOFPnw.s2Q",
|
2547
|
+
"$sha1$64000$wnUR8T1U$azjCegpOIk0FjE61qzGWhdkpuMRL"
|
2548
|
+
]
|
2347
2549
|
}
|
2348
2550
|
]
|
2349
2551
|
},
|
@@ -2381,24 +2583,37 @@
|
|
2381
2583
|
]
|
2382
2584
|
},
|
2383
2585
|
{
|
2384
|
-
"regex": "^\\$pbkdf2(-sha1)?\\$[0-9]
|
2586
|
+
"regex": "^\\$pbkdf2(-hmac)?(-sha1)?\\$([0-9]{1,6}\\$[a-z0-9\\/.]+\\$[a-z0-9\\/.]+|[0-9]{1,6}\\.[a-f0-9]+\\.[a-f0-9]{40})$",
|
2385
2587
|
"modes": [
|
2386
2588
|
{
|
2387
|
-
"john":
|
2388
|
-
"hashcat":
|
2589
|
+
"john": "pbkdf2-hmac-sha1",
|
2590
|
+
"hashcat": 20400,
|
2389
2591
|
"extended": false,
|
2390
|
-
"name": "PBKDF2-SHA1(Generic)"
|
2592
|
+
"name": "PBKDF2-SHA1 (Generic)",
|
2593
|
+
"samples": [
|
2594
|
+
"$pbkdf2$131000$r5WythYixPgfQ2jt3buXcg$8Kdr.QQEOaZIXNOrrru36I/.6Po",
|
2595
|
+
"$pbkdf2-hmac-sha1$1000.fd11cde0.27de197171e6d49fc5f55c9ef06c0d8751cd7250",
|
2596
|
+
"$pbkdf2-hmac-sha1$1000$6926d45e$231c561018a4cee662df7cd4a8206701c5806af9",
|
2597
|
+
"$pbkdf2-hmac-sha1$1000.6834476f733353333654315a5a31494f.1932a843a69dc1e38a29d2691a7abf27ecaa6d55",
|
2598
|
+
"$pbkdf2-hmac-sha1$1000.3031323334353637383930313233343536373839303132333435363738393031323334353637383930313233343536373839303132333435363738393031323334353637383930313233343536373839303132333435363738393031323334353637383930313233343536373839303132333435363738393031323334353637383930313233343536373839303132333435363738393031323334353637383930313233343536373839303132333435363738.8f7c89f74233f78f6c8ace00696cf6ed09ae43f4"
|
2599
|
+
]
|
2391
2600
|
}
|
2392
2601
|
]
|
2393
2602
|
},
|
2394
2603
|
{
|
2395
|
-
"regex": "^\\$pbkdf2-sha256\\$[0-9]
|
2604
|
+
"regex": "^\\$pbkdf2-sha256\\$[0-9]{1,6}\\$[a-z0-9\\/.]+\\$[a-z0-9\\/.]+$",
|
2396
2605
|
"modes": [
|
2397
2606
|
{
|
2398
2607
|
"john": "pbkdf2-hmac-sha256",
|
2399
|
-
"hashcat":
|
2608
|
+
"hashcat": 20300,
|
2400
2609
|
"extended": false,
|
2401
|
-
"name": "PBKDF2-SHA256(Generic)"
|
2610
|
+
"name": "PBKDF2-SHA256 (Generic)",
|
2611
|
+
"samples": [
|
2612
|
+
"$pbkdf2-sha256$29000$x9h7j/Ge8x6DMEao1VqrdQ$kra3R1wEnY8mPdDWOpTqOTINaAmZvRMcYd8u5OBQP9A",
|
2613
|
+
"$pbkdf2-sha256$1000$b1dWS2dab3dKQWhPSUg3cg$UY9j5wlyxtsJqhDKTqua8Q3fMp0ojc2pOnErzr8ntLE",
|
2614
|
+
"$pbkdf2-sha256$12000$fK8VAoDQuvees5ayVkpp7Q$xfzKAoBR/Iaa68tjn.O8KfGxV.zdidcqEeDoTFvDz2A",
|
2615
|
+
"$pbkdf2-sha256$12000$MDEyMzQ1Njc4OTAxMjM0NTY3ODkwMTIzNDU2Nzg5MDEyMzQ1Njc4OTAxMjM0NTY3ODkwMTIzNDU2Nzg5MDEyMzQ1Njc4OTAxMjM0NTY3ODkwMTIzNDU2Nzg5MDEyMzQ1Njc4OTAxMjM0NTY3ODkwMTIzNDU2Nzg5MDEyMzQ1Njc4OTAxMjM0NTY3ODkwMTIzNDU2Nzg5MDEyMzQ1Njc4OTAxMjM0NTY3ODkwMTIzNDU2Nzg$94Z71JhWYUP2E0IrQrexc8AMhHzVB4bwkxh7n0FCnns"
|
2616
|
+
]
|
2402
2617
|
}
|
2403
2618
|
]
|
2404
2619
|
},
|
@@ -2530,7 +2745,7 @@
|
|
2530
2745
|
"john": "django",
|
2531
2746
|
"hashcat": 10000,
|
2532
2747
|
"extended": false,
|
2533
|
-
"name": "Django(PBKDF2-HMAC-SHA256)"
|
2748
|
+
"name": "Django (PBKDF2-HMAC-SHA256)"
|
2534
2749
|
}
|
2535
2750
|
]
|
2536
2751
|
},
|
@@ -2648,7 +2863,7 @@
|
|
2648
2863
|
"regex": "^\\$office\\$\\*2010\\*[0-9]{6}\\*[0-9]{3}\\*[0-9]{2}\\*[a-z0-9]{32}\\*[a-z0-9]{32}\\*[a-z0-9]{64}$",
|
2649
2864
|
"modes": [
|
2650
2865
|
{
|
2651
|
-
"john":
|
2866
|
+
"john": "office",
|
2652
2867
|
"hashcat": 9500,
|
2653
2868
|
"extended": false,
|
2654
2869
|
"name": "Microsoft Office 2010"
|
@@ -2659,10 +2874,24 @@
|
|
2659
2874
|
"regex": "^\\$office\\$\\*2013\\*[0-9]{6}\\*[0-9]{3}\\*[0-9]{2}\\*[a-z0-9]{32}\\*[a-z0-9]{32}\\*[a-z0-9]{64}$",
|
2660
2875
|
"modes": [
|
2661
2876
|
{
|
2662
|
-
"john":
|
2877
|
+
"john": "office",
|
2663
2878
|
"hashcat": 9600,
|
2664
2879
|
"extended": false,
|
2665
|
-
"name": "Microsoft Office 2013"
|
2880
|
+
"name": "Microsoft Office 2013 - 2019"
|
2881
|
+
}
|
2882
|
+
]
|
2883
|
+
},
|
2884
|
+
{
|
2885
|
+
"regex": "^\\$office\\$2016\\$[0-9]\\$[0-9]{6}\\$[^$]{24}\\$[^$]{88}$",
|
2886
|
+
"modes": [
|
2887
|
+
{
|
2888
|
+
"john": null,
|
2889
|
+
"hashcat": 25300,
|
2890
|
+
"extended": false,
|
2891
|
+
"name": "Microsoft Office 2016 - SheetProtection",
|
2892
|
+
"samples": [
|
2893
|
+
"$office$2016$0$100000$876MLoKTq42+/DLp415iZQ==$TNDvpvYyvlSUy97UOLKNhXynhUDDA7H8kLql0ISH5SxcP6hbthdjaTo4Z3/MU0dcR2SAd+AduYb3TB5CLZ8+ow=="
|
2894
|
+
]
|
2666
2895
|
}
|
2667
2896
|
]
|
2668
2897
|
},
|
@@ -2704,19 +2933,19 @@
|
|
2704
2933
|
"regex": "^\\$oldoffice\\$[34]\\*[a-f0-9]{32}\\*[a-f0-9]{32}\\*[a-f0-9]{40}$",
|
2705
2934
|
"modes": [
|
2706
2935
|
{
|
2707
|
-
"john":
|
2936
|
+
"john": "oldoffice",
|
2708
2937
|
"hashcat": 9800,
|
2709
2938
|
"extended": false,
|
2710
2939
|
"name": "Microsoft Office \u2264 2003 (SHA1+RC4)"
|
2711
2940
|
},
|
2712
2941
|
{
|
2713
|
-
"john":
|
2942
|
+
"john": "oldoffice",
|
2714
2943
|
"hashcat": 9810,
|
2715
2944
|
"extended": false,
|
2716
2945
|
"name": "Microsoft Office \u2264 2003 (SHA1+RC4) collider-mode #1"
|
2717
2946
|
},
|
2718
2947
|
{
|
2719
|
-
"john":
|
2948
|
+
"john": "oldoffice",
|
2720
2949
|
"hashcat": 9820,
|
2721
2950
|
"extended": false,
|
2722
2951
|
"name": "Microsoft Office \u2264 2003 (SHA1+RC4) collider-mode #2"
|
@@ -2851,7 +3080,10 @@
|
|
2851
3080
|
"john": null,
|
2852
3081
|
"hashcat": 10900,
|
2853
3082
|
"extended": false,
|
2854
|
-
"name": "PBKDF2-HMAC-SHA256(PHP)"
|
3083
|
+
"name": "PBKDF2-HMAC-SHA256 (PHP)",
|
3084
|
+
"samples": [
|
3085
|
+
"sha256:1000:NjI3MDM3:vVfavLQL9ZWjg8BUMq6/FB8FtpkIGWYk"
|
3086
|
+
]
|
2855
3087
|
}
|
2856
3088
|
]
|
2857
3089
|
},
|
@@ -2860,9 +3092,13 @@
|
|
2860
3092
|
"modes": [
|
2861
3093
|
{
|
2862
3094
|
"john": "dahua",
|
2863
|
-
"hashcat":
|
3095
|
+
"hashcat": 24900,
|
2864
3096
|
"extended": false,
|
2865
|
-
"name": "Dahua"
|
3097
|
+
"name": "Dahua (MD5 Authentication)",
|
3098
|
+
"samples": [
|
3099
|
+
"GRuHbyVp",
|
3100
|
+
"$dahua$4WzwxXxM"
|
3101
|
+
]
|
2866
3102
|
}
|
2867
3103
|
]
|
2868
3104
|
},
|
@@ -2878,24 +3114,86 @@
|
|
2878
3114
|
]
|
2879
3115
|
},
|
2880
3116
|
{
|
2881
|
-
"regex": "^\\$pdf\\$
|
3117
|
+
"regex": "^\\$pdf\\$1\\*2\\*[0-9]{2}\\*[-0-9]{1,6}\\*[0-9]\\*[0-9]{2}\\*[a-f0-9]{32}\\*[0-9]{2}\\*[a-f0-9]{64}\\*[0-9]{2}\\*[a-f0-9]{64}$",
|
3118
|
+
"modes": [
|
3119
|
+
{
|
3120
|
+
"john": "pdf",
|
3121
|
+
"hashcat": 10400,
|
3122
|
+
"extended": false,
|
3123
|
+
"name": "PDF 1.1 - 1.3 (Acrobat 2 - 4)"
|
3124
|
+
},
|
3125
|
+
{
|
3126
|
+
"john": "pdf",
|
3127
|
+
"hashcat": 10410,
|
3128
|
+
"extended": false,
|
3129
|
+
"name": "PDF 1.1 - 1.3 (Acrobat 2 - 4), collider #1"
|
3130
|
+
}
|
3131
|
+
]
|
3132
|
+
},
|
3133
|
+
{
|
3134
|
+
"regex": "^\\$pdf\\$1\\*2\\*[0-9]{2}\\*[-0-9]{1,6}\\*[0-9]\\*[0-9]{2}\\*[a-f0-9]{32}\\*[0-9]{2}\\*[a-f0-9]{64}\\*[0-9]{2}\\*[a-f0-9]{64}:[a-f0-9]{10}$",
|
3135
|
+
"modes": [
|
3136
|
+
{
|
3137
|
+
"john": "pdf",
|
3138
|
+
"hashcat": 10420,
|
3139
|
+
"extended": false,
|
3140
|
+
"name": "PDF 1.1 - 1.3 (Acrobat 2 - 4), collider #2"
|
3141
|
+
}
|
3142
|
+
]
|
3143
|
+
},
|
3144
|
+
{
|
3145
|
+
"regex": "^\\$pdf\\$[24]\\*[34]\\*128\\*[0-9\\-]{1,6}\\*1\\*(16|32)\\*[a-f0-9]{32,64}\\*32\\*[a-f0-9]{64}\\*(8|16|32)\\*[a-f0-9]{16,64}$",
|
2882
3146
|
"modes": [
|
2883
3147
|
{
|
2884
3148
|
"john": "pdf",
|
2885
3149
|
"hashcat": 10500,
|
2886
3150
|
"extended": false,
|
2887
|
-
"name": "PDF 1.4 - 1.6 (Acrobat 5 - 8)"
|
3151
|
+
"name": "PDF 1.4 - 1.6 (Acrobat 5 - 8)",
|
3152
|
+
"samples": [
|
3153
|
+
"$pdf$2*3*128*-4*1*16*62888255846156252261477183186121*32*6879919b1afd520bd3b7dbcc0868a0a500000000000000000000000000000000*32*0000000000000000000000000000000000000000000000000000000000000000"
|
3154
|
+
]
|
3155
|
+
},
|
3156
|
+
{
|
3157
|
+
"john": "pdf",
|
3158
|
+
"hashcat": 25400,
|
3159
|
+
"extended": false,
|
3160
|
+
"name": "PDF 1.4 - 1.6 (Acrobat 5 - 8) - edit password",
|
3161
|
+
"samples": [
|
3162
|
+
"$pdf$2*3*128*-3904*1*16*631ed33746e50fba5caf56bcc39e09c6*32*5f9d0e4f0b39835dace0d306c40cd6b700000000000000000000000000000000*32*842103b0a0dc886db9223b94afe2d7cd63389079b61986a4fcf70095ad630c24"
|
3163
|
+
]
|
2888
3164
|
}
|
2889
3165
|
]
|
2890
3166
|
},
|
2891
3167
|
{
|
2892
|
-
"regex": "^\\$
|
3168
|
+
"regex": "^\\$pdf\\$5\\*[5|6]\\*[0-9]{3}\\*[-0-9]{1,6}\\*[0-9]\\*[0-9]{1,4}\\*[a-f0-9]{0,1024}\\*[0-9]{1,4}\\*[a-f0-9]{0,1024}\\*[0-9]{1,4}\\*[a-f0-9]{0,1024}\\*[0-9]{1,4}\\*[a-f0-9]{0,1024}\\*[0-9]{1,4}\\*[a-f0-9]{0,1024}$",
|
3169
|
+
"modes": [
|
3170
|
+
{
|
3171
|
+
"john": "pdf",
|
3172
|
+
"hashcat": 10600,
|
3173
|
+
"extended": false,
|
3174
|
+
"name": "PDF 1.7 Level 3 (Acrobat 9)"
|
3175
|
+
},
|
3176
|
+
{
|
3177
|
+
"john": "pdf",
|
3178
|
+
"hashcat": 10700,
|
3179
|
+
"extended": false,
|
3180
|
+
"name": "PDF 1.7 Level 8 (Acrobat 10 - 11)"
|
3181
|
+
}
|
3182
|
+
]
|
3183
|
+
},
|
3184
|
+
{
|
3185
|
+
"regex": "^\\$bitcoin\\$[0-9]{2,4}\\$[a-f0-9$]{250,360}$",
|
2893
3186
|
"modes": [
|
2894
3187
|
{
|
2895
3188
|
"john": "bitcoin",
|
2896
3189
|
"hashcat": 11300,
|
2897
3190
|
"extended": false,
|
2898
|
-
"name": "Bitcoin/Litecoin Wallet"
|
3191
|
+
"name": "Bitcoin/Litecoin Wallet",
|
3192
|
+
"samples": [
|
3193
|
+
"$bitcoin$96$c265931309b4a59307921cf054b4ec6b6e4554369be79802e94e16477645777d948ae1d375191831efc78e5acd1f0443$16$8017214013543185$200460$96$480008005625057442352316337722323437108374245623701184230273883222762730232857701607167815448714$66$014754433300175043011633205413774877455616682000536368706315333388",
|
3194
|
+
"$bitcoin$96$c265931309b4a59307921cf054b4ec6b6e4554369be79802e94e16477645777d948ae1d375191831efc78e5acd1f0443$16$8017214013543185$200460$96$480008005625057442352316337722323437108374245623701184230273883222762730232857701607167815448714$66$014754433300175043011633205413774877455616682000536368706315333388",
|
3195
|
+
"$bitcoin$96$a8d2a30b9a5419934cbb7cb0727ddc16c4bebdbf30d7e099ca35f2b1b7ba04cc42eb5b865bff8f65fc6ba9e15428d84f$16$872581181d72f577$128205$96$0a8d43558ed2b55f4a53491df66e6a71003db4588d11dc0a88b976122c2849a74c2bfaace36424cf029795db6fd2c78f$130$04ff53a6f68eab1c52e5b561b4616edb5bed4d7510cdb4931c8da68732a86d86f3a3f7de266f17c8d03e02ebe8e2c86e2f5de0007217fd4aaf5742ca7373113060"
|
3196
|
+
]
|
2899
3197
|
}
|
2900
3198
|
]
|
2901
3199
|
},
|
@@ -2947,7 +3245,7 @@
|
|
2947
3245
|
"regex": "^\\$zip2\\$\\*[0-9]{1}\\*[0-9]{1}\\*[0-9]{1}\\*[a-f0-9]{16,32}\\*[a-f0-9]{1,6}\\*[a-f0-9]{1,6}\\*[a-f0-9]{0,16384}\\*[a-f0-9]{20}\\*\\$\/zip2\\$$",
|
2948
3246
|
"modes": [
|
2949
3247
|
{
|
2950
|
-
"john": "
|
3248
|
+
"john": "zip",
|
2951
3249
|
"hashcat": 13600,
|
2952
3250
|
"extended": false,
|
2953
3251
|
"name": "WinZip"
|
@@ -2970,5 +3268,378 @@
|
|
2970
3268
|
"name": "iTunes backup >= 10.0"
|
2971
3269
|
}
|
2972
3270
|
]
|
3271
|
+
},
|
3272
|
+
{
|
3273
|
+
"regex": "^\\$telegram\\$0\\*[a-f0-9]{64}\\*[0-9]{32}$",
|
3274
|
+
"modes": [
|
3275
|
+
{
|
3276
|
+
"john": null,
|
3277
|
+
"hashcat": 22301,
|
3278
|
+
"extended": false,
|
3279
|
+
"name": "Telegram Mobile App Passcode (SHA256)"
|
3280
|
+
}
|
3281
|
+
]
|
3282
|
+
},
|
3283
|
+
{
|
3284
|
+
"regex": "^\\$telegram\\$1\\*4000\\*[a-f0-9]{64}\\*[a-f0-9]{576}$",
|
3285
|
+
"modes": [
|
3286
|
+
{
|
3287
|
+
"john": "telegram",
|
3288
|
+
"hashcat": null,
|
3289
|
+
"extended": false,
|
3290
|
+
"name": "Telegram Desktop 1.3.9"
|
3291
|
+
}
|
3292
|
+
]
|
3293
|
+
},
|
3294
|
+
{
|
3295
|
+
"regex": "^\\$telegram\\$2\\*100000\\*[a-f0-9]{64}\\*[a-f0-9]{576}$",
|
3296
|
+
"modes": [
|
3297
|
+
{
|
3298
|
+
"john": "telegram",
|
3299
|
+
"hashcat": 24500,
|
3300
|
+
"extended": false,
|
3301
|
+
"name": "Telegram Desktop \u2265 2.1.14-beta / 2.2.0",
|
3302
|
+
"samples": [
|
3303
|
+
"$telegram$2*100000*77461dcb457ce9539f8e4235d33bd12455b4a38446e63b52ecdf2e7b65af4476*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",
|
3304
|
+
"$telegram$2*100000*0970f6c043d855aa895703b8a1cc086109cf081f72a77b6504f7f4bf3db06420*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"
|
3305
|
+
]
|
3306
|
+
}
|
3307
|
+
]
|
3308
|
+
},
|
3309
|
+
{
|
3310
|
+
"regex": "^\\$7z\\$[0-9]{1,3}\\$[0-9]{1,2}\\$[0-9]{1}\\$[^$]{0,64}\\$[0-9]{1,2}\\$[a-f0-9]{32}\\$[0-9]{1,10}\\$[0-9]{1,6}\\$[0-9]{1,6}\\$[a-f0-9]{2,}$",
|
3311
|
+
"modes": [
|
3312
|
+
{
|
3313
|
+
"john": "7z",
|
3314
|
+
"hashcat": 11600,
|
3315
|
+
"extended": false,
|
3316
|
+
"name": "7-zip"
|
3317
|
+
}
|
3318
|
+
]
|
3319
|
+
},
|
3320
|
+
{
|
3321
|
+
"regex": "^\\$zip3\\$\\*[0-9]\\*[0-9]\\*128\\*[0-9]\\*[a-f0-9]{0,32}\\*[a-f0-9]{288}\\*[0-9]\\*[0-9]\\*[0-9]\\*[^\\s]{0,64}$",
|
3322
|
+
"modes": [
|
3323
|
+
{
|
3324
|
+
"john": "securezip",
|
3325
|
+
"hashcat": 23001,
|
3326
|
+
"extended": false,
|
3327
|
+
"name": "SecureZIP AES-128"
|
3328
|
+
}
|
3329
|
+
]
|
3330
|
+
},
|
3331
|
+
{
|
3332
|
+
"regex": "^\\$zip3\\$\\*[0-9]\\*[0-9]\\*192\\*[0-9]\\*[a-f0-9]{0,32}\\*[a-f0-9]{288}\\*[0-9]\\*[0-9]\\*[0-9]\\*[^\\s]{0,64}$",
|
3333
|
+
"modes": [
|
3334
|
+
{
|
3335
|
+
"john": "securezip",
|
3336
|
+
"hashcat": 23002,
|
3337
|
+
"extended": false,
|
3338
|
+
"name": "SecureZIP AES-192"
|
3339
|
+
}
|
3340
|
+
]
|
3341
|
+
},
|
3342
|
+
{
|
3343
|
+
"regex": "^\\$zip3\\$\\*[0-9]\\*[0-9]\\*256\\*[0-9]\\*[a-f0-9]{0,32}\\*[a-f0-9]{288}\\*[0-9]\\*[0-9]\\*[0-9]\\*[^\\s]{0,64}$",
|
3344
|
+
"modes": [
|
3345
|
+
{
|
3346
|
+
"john": "securezip",
|
3347
|
+
"hashcat": 23003,
|
3348
|
+
"extended": false,
|
3349
|
+
"name": "SecureZIP AES-256"
|
3350
|
+
}
|
3351
|
+
]
|
3352
|
+
},
|
3353
|
+
{
|
3354
|
+
"regex": "^\\$pkzip2?\\$[a-f0-9\\*]+\\$\/pkzip2?\\$$",
|
3355
|
+
"modes": [
|
3356
|
+
{
|
3357
|
+
"john": "pkzip",
|
3358
|
+
"hashcat": null,
|
3359
|
+
"extended": false,
|
3360
|
+
"name": "PKZIP"
|
3361
|
+
}
|
3362
|
+
]
|
3363
|
+
},
|
3364
|
+
{
|
3365
|
+
"regex": "^\\$argon2d\\$v=19\\$m=[0-9]{1,6},t=[0-9]{1,2},p=[0-9]{1,2}\\$[^$]+\\$[^\\s]{6,}$",
|
3366
|
+
"modes": [
|
3367
|
+
{
|
3368
|
+
"john": "argon2",
|
3369
|
+
"hashcat": null,
|
3370
|
+
"extended": false,
|
3371
|
+
"name": "argon2d",
|
3372
|
+
"samples": [
|
3373
|
+
"$argon2d$v=19$m=4096,t=3,p=1$ZGFtYWdlX2RvbmU$w9w3s5/zV8+PcAZlJhnTCOE+vBkZssmZf6jOq3dKv50",
|
3374
|
+
"$argon2d$v=19$m=4096,t=3,p=1$c2hvcnRfc2FsdA$zMrTcOAOUje6UqObRVh84Pe1K6gumcDqqGzRM0ILzYmj",
|
3375
|
+
"$argon2d$v=19$m=16384,t=3,p=1$c2hvcnRfc2FsdA$TLSTPihIo+5F67Y1vJdfWdB9",
|
3376
|
+
"$argon2d$v=19$m=16384,t=4,p=3$YW5vdGhlcl9zYWx0$yw93eMxC8REPAwbQ0e/q43jR9+RI9HI/DHP75uzm7tQfjU734oaI3dzcMWjYjHzVQD+J4+MG+7oyD8dN/PtnmPCZs+UZ67E+rkXJ/wTvY4WgXgAdGtJRrAGxhy4rD7d5G+dCpqhrog"
|
3377
|
+
]
|
3378
|
+
}
|
3379
|
+
]
|
3380
|
+
},
|
3381
|
+
{
|
3382
|
+
"regex": "^\\$argon2i\\$v=19\\$m=[0-9]{1,6},t=[0-9]{1,2},p=[0-9]{1,2}\\$[^$]+\\$[^\\s]{6,}$",
|
3383
|
+
"modes": [
|
3384
|
+
{
|
3385
|
+
"john": "argon2",
|
3386
|
+
"hashcat": null,
|
3387
|
+
"extended": false,
|
3388
|
+
"name": "argon2i",
|
3389
|
+
"samples": [
|
3390
|
+
"$argon2i$v=19$m=4096,t=3,p=1$ZGFtYWdlX2RvbmU$N59QwnpxDQZRj1/cO6bqm408dD6Z2Z9LKYpwFJSPVKA",
|
3391
|
+
"$argon2i$v=19$m=4096,t=3,p=1$c2hvcnRfc2FsdA$1l4kAwUdAApoCbFH7ghBEf7bsdrOQzE4axIJ3PV0Ncrd",
|
3392
|
+
"$argon2i$v=19$m=16384,t=3,p=1$c2hvcnRfc2FsdA$vvjDVog22A5x9eljmB+2yC8y",
|
3393
|
+
"$argon2i$v=19$m=16384,t=4,p=3$YW5vdGhlcl9zYWx0$K7unxwO5aeuZCpnIJ06FMCRKod3eRg8oIRzQrK3E6mGbyqlTvvl47jeDWq/5drF1COJkEF9Ty7FWXJZHa+vqlf2YZGp/4qSlAvKmdtJ/6JZU32iQItzMRwcfujHE+PBjbL5uz4966A"
|
3394
|
+
]
|
3395
|
+
}
|
3396
|
+
]
|
3397
|
+
},
|
3398
|
+
{
|
3399
|
+
"regex": "^\\$argon2id\\$v=19\\$m=[0-9]{1,6},t=[0-9]{1,2},p=[0-9]{1,2}\\$[^$]+\\$[^\\s]{6,}$",
|
3400
|
+
"modes": [
|
3401
|
+
{
|
3402
|
+
"john": null,
|
3403
|
+
"hashcat": null,
|
3404
|
+
"extended": false,
|
3405
|
+
"name": "argon2id"
|
3406
|
+
}
|
3407
|
+
]
|
3408
|
+
},
|
3409
|
+
{
|
3410
|
+
"regex": "^\\$axcrypt\\$\\*2\\*[0-9]{1,7}\\*[a-f0-9]{128}\\*[a-f0-9]{288}\\*[0-9]{1,7}\\*[a-f0-9]{64}$",
|
3411
|
+
"modes": [
|
3412
|
+
{
|
3413
|
+
"john": "axcrypt",
|
3414
|
+
"hashcat": 23500,
|
3415
|
+
"extended": false,
|
3416
|
+
"name": "AxCrypt 2",
|
3417
|
+
"samples": [
|
3418
|
+
"$axcrypt$*2*10000*6d44c6d19076bce9920c5fb76b246c161926ce65abb93ec2003919d78898aadd5bc6e5754201ff25d681ad89fa2861d20ef7c3fd7bde051909dfef8adcb50491*68f78a1b80291a42b2a117d6209d3eb3541a8d47ed6b970b2b8294b2bc78347fc2b494a0599f8cba6d45e88fd8fbc5b4dd7e888f6c9543e679489de132167222e130d5925278693ad8599284705fdf99360b2199ed0005be05867b9b7aa6bb4be76f5f979819eb27cf590a47d81830575b2af09dda756360c844b89c7dcec099cfdd27d2d0c95d24f143405f303e4843*1000*debdeb8ea7b9800b01855de09b105fdb8840efc1f67dc742283d13a5570165f8",
|
3419
|
+
"$axcrypt$*2*28200*96fca6b5aff19cb540125e6452f1ab6e1cbf7097ad75326e7aa1726f687ed18e66a63295d735f458a138901be41d95d29ff760c7c4b4178320251f2ab0ecabd8*d1d90c425fd8e2d20b2aa7ef6f3ab9dcefad84917f9e07f65f8da61e7e84f490ba8007179718ce0033cbc887177c2b51ed00e88155741960ab667a5328f305969518bc436ee1ba28126a5be79b0b90f8a9c8a438cba9d0e59c0b6573cde124a8300a6fb01ff857485d302285f1eacd7f08d9cc70ec9fdf412b60bc5a728b5108ef8bda24caee5ab7cc4376951c080c6d*1000*fead8792ea352979ab19e7b287bf709f39df0706a7e460b5271d1ebc71014b3b",
|
3420
|
+
"$axcrypt$*2*23652*8817291e0611409390c50a8bdc99a98bf56d393174d7c177082391f7919ed392a701783790ad2eed49139ede2b1546dc4a9aaa142e2b2530b4c82cff03df18b1*2561a0c3f5e166c7273ea6fb59592a58b8d8235a379c82de39fc6d674291b6a25a268732c34eab1b092166ca4f9ef9e383325b90633896890f7dca4d29876ec5bb232ff89c8130aad917f93d9228a091a9996e1f14d4b130b5aad7516c11aa9143730d7b0ec8168b4d83bdd0ca1a9a36784572b9db992bd13289ecd577a421ded0576801e88c7275b2d5fa8eb7e540cb*1000*3dc38e68204a7060c3cd616ffcf6df17dbbb3c199e67ea85c7e29751b9ea2fc2"
|
3421
|
+
]
|
3422
|
+
}
|
3423
|
+
]
|
3424
|
+
},
|
3425
|
+
{
|
3426
|
+
"regex": "^\\$axcrypt\\$\\*1\\*[0-9]{1,7}\\*[a-f0-9]{32}\\*[a-f0-9]{48}(?:\\*[a-z0-9]+)?$",
|
3427
|
+
"modes": [
|
3428
|
+
{
|
3429
|
+
"john": "axcrypt",
|
3430
|
+
"hashcat": null,
|
3431
|
+
"extended": false,
|
3432
|
+
"name": "AxCrypt 1",
|
3433
|
+
"samples": [
|
3434
|
+
"$axcrypt$*1*1337*0fd9e7e2f907f480f8af162564f8f94b*af10c88878ba4e2c89b12586f93b7802453121ee702bc362",
|
3435
|
+
"$axcrypt$*1*31014*3408ae91dddc0b1750ed4223fd843364*1cc0f8fa8d89f44d284d0562ac7e93848c86ce9605907129",
|
3436
|
+
"$axcrypt$*1*20000*efd759ae68ae7edd709b9e1c2166d0f7*dcf4c1279b8e4d39475925b17f698c3ce39e9e7d82917272*68656c6c6f0a",
|
3437
|
+
"$axcrypt$*1*38574*ce4f58c1e85df1ea921df6d6c05439b4*3278c3c730f7887b1008e852e59997e2196710a5c6bc1813*66664a6b2074434a4520374d73592055626979204a6b755520736d6b4b20394e694a205548444320524578562065674b33202f42593d"
|
3438
|
+
]
|
3439
|
+
}
|
3440
|
+
]
|
3441
|
+
},
|
3442
|
+
{
|
3443
|
+
"regex": "^\\$rar5\\$[0-9]{2}\\$[a-f0-9]{32}\\$[0-9]{2}\\$[a-f0-9]{32}\\$[0-9]{1}\\$[a-f0-9]{16}$",
|
3444
|
+
"modes": [
|
3445
|
+
{
|
3446
|
+
"john": "rar5",
|
3447
|
+
"hashcat": 13000,
|
3448
|
+
"extended": false,
|
3449
|
+
"name": "RAR5",
|
3450
|
+
"samples": [
|
3451
|
+
"$rar5$16$38466361001011015181344360681307$15$00000000000000000000000000000000$8$cc7a30583e62676a",
|
3452
|
+
"$rar5$16$37526a0922b4adcc32f8fed5d51bb6c8$15$8955617d9b801def51d734095bb8ecdb$8$9f0b23c98ebb3653",
|
3453
|
+
"$rar5$16$ed9bd88cc649bd06bfd7dc418fcf5fbd$15$21771e718815d6f23073ea294540ce94$8$5c4361e549c999e1"
|
3454
|
+
]
|
3455
|
+
}
|
3456
|
+
]
|
3457
|
+
},
|
3458
|
+
{
|
3459
|
+
"regex": "^\\$RAR3\\$\\*[0-9]{1}\\*[a-f0-9]{16}\\*[a-f0-9]{8}\\*[0-9]{1,7}\\*[0-9]{1,6}\\*[0-9]{1}\\*[a-f0-9]{2,}\\*[0-9]{2}$",
|
3460
|
+
"modes": [
|
3461
|
+
{
|
3462
|
+
"john": "rar",
|
3463
|
+
"hashcat": 23700,
|
3464
|
+
"extended": false,
|
3465
|
+
"name": "RAR3 -p (Uncompressed)",
|
3466
|
+
"samples": [
|
3467
|
+
"$RAR3$*1*e54a73729887cb53*49b0a846*16*14*1*34620bcca8176642a210b1051901921e*30",
|
3468
|
+
"$RAR3$*1*c47c5bef0bbd1e98*965f1453*48*47*1*c5e987f81d316d9dcfdb6a1b27105ce63fca2c594da5aa2f6fdf2f65f50f0d66314f8a09da875ae19d6c15636b65c815*30"
|
3469
|
+
]
|
3470
|
+
},
|
3471
|
+
{
|
3472
|
+
"john": "rar",
|
3473
|
+
"hashcat": 23800,
|
3474
|
+
"extended": false,
|
3475
|
+
"name": "RAR3 -p (Compressed)",
|
3476
|
+
"samples": [
|
3477
|
+
"$RAR3$*1*ad56eb40219c9da2*834064ce*32*13*1*eb47b1abe17a1a75bce6c92ab1cef3f4126035ea95deaf08b3f32a0c7b8078e1*33",
|
3478
|
+
"$RAR3$*1*b4eee1a48dc95d12*965f1453*64*47*1*0fe529478798c0960dd88a38a05451f9559e15f0cf20b4cac58260b0e5b56699d5871bdcc35bee099cc131eb35b9a116adaedf5ecc26b1c09cadf5185b3092e6*33"
|
3479
|
+
]
|
3480
|
+
}
|
3481
|
+
]
|
3482
|
+
},
|
3483
|
+
{
|
3484
|
+
"regex": "^\\$RAR3\\$\\*[0-9]{1}\\*[a-f0-9]{16}\\*[a-f0-9]{32}$",
|
3485
|
+
"modes": [
|
3486
|
+
{
|
3487
|
+
"john": "rar",
|
3488
|
+
"hashcat": 12500,
|
3489
|
+
"extended": false,
|
3490
|
+
"name": "RAR3 -hp",
|
3491
|
+
"samples": [
|
3492
|
+
"$RAR3$*0*45109af8ab5f297a*adbf6c5385d7a40373e8f77d7b89d317",
|
3493
|
+
"$RAR3$*0*7ce241baa2bd521b*3eb0017fa8843017952c53a3ac8332b6",
|
3494
|
+
"$RAR3$*0*c203c4d80a8a09dc*1f406154556d4c895a8be207fd2b5d0c"
|
3495
|
+
]
|
3496
|
+
}
|
3497
|
+
]
|
3498
|
+
},
|
3499
|
+
{
|
3500
|
+
"regex": "^\\$uido\\$[a-f0-9]{32}\\$[a-f0-9]{40}\\$\\d{1,7}\\$[a-f0-9]{80}$",
|
3501
|
+
"modes": [
|
3502
|
+
{
|
3503
|
+
"john": null,
|
3504
|
+
"hashcat": 26500,
|
3505
|
+
"extended": false,
|
3506
|
+
"name": "iPhone passcode (UID key + System Keybag)",
|
3507
|
+
"samples": [
|
3508
|
+
"$uido$77889b1bca161ce876d976a102c7bf82$3090545724551425617156367874312887832777$50000$2d4c86b71c0c04129a47c6468e2437d1fecd88e232a7b15112d5364682dc391dbbbb921cf6e02664"
|
3509
|
+
]
|
3510
|
+
}
|
3511
|
+
]
|
3512
|
+
},
|
3513
|
+
{
|
3514
|
+
"regex": "^\\$metamask\\$(?=.{44}\\$)(?:[a-zA-Z0-9+\\/]{4})*(?:|(?:[a-zA-Z0-9+\\/]{3}=)|(?:[a-zA-Z0-9+\\/]{2}==)|(?:[a-zA-Z0-9+\\/]{1}===))\\$(?=.{24}\\$)(?:[a-zA-Z0-9+\\/]{4})*(?:|(?:[a-zA-Z0-9+\\/]{3}=)|(?:[a-zA-Z0-9+\\/]{2}==)|(?:[a-zA-Z0-9+\\/]{1}===))\\$(?=.{64,})(?:[a-zA-Z0-9+\\/]{4})*(?:|(?:[a-zA-Z0-9+\\/]{3}=)|(?:[a-zA-Z0-9+\\/]{2}==)|(?:[a-zA-Z0-9+\\/]{1}===))$",
|
3515
|
+
"modes": [
|
3516
|
+
{
|
3517
|
+
"john": null,
|
3518
|
+
"hashcat": 26600,
|
3519
|
+
"extended": false,
|
3520
|
+
"name": "MetaMask Wallet",
|
3521
|
+
"samples": [
|
3522
|
+
"$metamask$AARgM5AgABE2eWgJcWAwQIAFmSYoASZVZBlAR4B0h2M=$8HrVMqsjfFTusMbegh+KWg==$7FPq7LjWe3t/TjDBtUwrJBpiG/Rdt+uf71dLCyUZd0pdtymBK6mSMZDyRfp/CzpjEPA1dU1BLDshcwM/1k6KdO//+mPWrgY4j49XTXIMnHNhJPfPv8s9rXiq8jLqetsStqtWmTZaD7fTtbzOYWR4gwQc98MxCnn/IrSnfCHungw1rLV5Xm0/hF7WfzFeEgcHknhJJP1xSeJCL9qI5DJ+lz7ksc0UVvHoiNJx8uvPBNkHpGQRNujwlnk="
|
3523
|
+
]
|
3524
|
+
}
|
3525
|
+
]
|
3526
|
+
},
|
3527
|
+
{
|
3528
|
+
"regex": "^SH2(?=.{60})(?:[a-zA-Z0-9+\/]{4})*(?:|(?:[a-zA-Z0-9+\/]{3}=)|(?:[a-zA-Z0-9+\/]{2}==)|(?:[a-zA-Z0-9+\/]{1}===))$",
|
3529
|
+
"modes": [
|
3530
|
+
{
|
3531
|
+
"john": "fortigate256",
|
3532
|
+
"hashcat": 26300,
|
3533
|
+
"extended": false,
|
3534
|
+
"name": "FortiGate256 (FortiOS256)",
|
3535
|
+
"samples": [
|
3536
|
+
"SH2lpcpFXM5QRlWYwY5vL9+5svfYyb+c79qENpxEoB3NtZpVxKwHjuq/9TH88U=",
|
3537
|
+
"SH2+n+OiTlautpJQF1NBcMU2H1otOvlAz9g5wzxwHw+4il3Aiixv9oPtKnRgCc=",
|
3538
|
+
"SH2B0YZCrPjDldskSin50dSxbw22VVy+Mb6Ldvb4eq1FV5q4KE3SYPotvX2KWI="
|
3539
|
+
]
|
3540
|
+
}
|
3541
|
+
]
|
3542
|
+
},
|
3543
|
+
{
|
3544
|
+
"regex": "^(?=.{28})(?:[a-zA-Z0-9+\\/]{4})*(?:|(?:[a-zA-Z0-9+\\/]{3}=)|(?:[a-zA-Z0-9+\\/]{2}==)|(?:[a-zA-Z0-9+\\/]{1}===))$",
|
3545
|
+
"modes": [
|
3546
|
+
{
|
3547
|
+
"john": null,
|
3548
|
+
"hashcat": 24800,
|
3549
|
+
"extended": false,
|
3550
|
+
"name": "Umbraco HMAC-SHA1",
|
3551
|
+
"samples": [
|
3552
|
+
"8uigXlGMNI7BzwLCJlDbcKR2FP4="
|
3553
|
+
]
|
3554
|
+
}
|
3555
|
+
]
|
3556
|
+
},
|
3557
|
+
{
|
3558
|
+
"regex": "^\\$bcve\\$\\d\\$[a-f0-9]{2}\\$[a-f0-9]{16}\\$[a-f0-9]{192}$",
|
3559
|
+
"modes": [
|
3560
|
+
{
|
3561
|
+
"john": null,
|
3562
|
+
"hashcat": 23900,
|
3563
|
+
"extended": false,
|
3564
|
+
"name": "Jetico BestCrypt v3 Volume Encryption",
|
3565
|
+
"samples": [
|
3566
|
+
"$bcve$3$08$234b8182cee7098b$35c12ef76a1e88175c4c222da3558310a0075bc7a06ecf46746d149c02a81fb8a97637d1103d2e13ddd5deaf982889594b18c12d7ca18a54875c5da4a47f90ae615ab94b8e3ed9e3c793d872a1b5ac35cfdb66c221d6d0853e9ff2e0f4435b43"
|
3567
|
+
]
|
3568
|
+
}
|
3569
|
+
]
|
3570
|
+
},
|
3571
|
+
{
|
3572
|
+
"regex": "^\\$BestCrypt\\$\\d\\$\\d\\$\\d\\$\\d{1,5}\\$\\d{1,3}\\$\\d+\\$\\d{1,3}\\$\\d{1,2}\\$[a-f0-9]{64,128}\\$\\d\\$[a-f0-9]{512}$",
|
3573
|
+
"modes": [
|
3574
|
+
{
|
3575
|
+
"john": "bestcrypt",
|
3576
|
+
"hashcat": null,
|
3577
|
+
"extended": false,
|
3578
|
+
"name": "Jetico BestCrypt Container Encryption (.jbc)",
|
3579
|
+
"samples": [
|
3580
|
+
"$BestCrypt$1$5$3$16384$240$3154116612$128$32$51f7450dccbb1c947dd46138bf0d80d588b6938b02505642dde9e1ea61481485$1$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",
|
3581
|
+
"$BestCrypt$1$5$3$16384$240$3154116612$10$64$7f36390c85bc5695d49d5d135cb09e00cbf738bb203d0f0a0181805acc15d1cc6f856af0f738c44eead724a854700700a1595b5b30d47242a277b60df6491dde$1$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"
|
3582
|
+
]
|
3583
|
+
}
|
3584
|
+
]
|
3585
|
+
},
|
3586
|
+
{
|
3587
|
+
"regex": "^\\$mongodb-scram\\$\\*\\d\\*(?=.{0,76}\\*)(?:[a-zA-Z0-9+\\/]{4})*(?:|(?:[a-zA-Z0-9+\\/]{3}=)|(?:[a-zA-Z0-9+\\/]{2}==)|(?:[a-zA-Z0-9+\\/]{1}===))\\*\\d{1,7}\\*(?=.{24}\\*)(?:[a-zA-Z0-9+\\/]{4})*(?:|(?:[a-zA-Z0-9+\\/]{3}=)|(?:[a-zA-Z0-9+\\/]{2}==)|(?:[a-zA-Z0-9+\\/]{1}===))\\*(?=.{28})(?:[a-zA-Z0-9+\\/]{4})*(?:|(?:[a-zA-Z0-9+\\/]{3}=)|(?:[a-zA-Z0-9+\\/]{2}==)|(?:[a-zA-Z0-9+\\/]{1}===))$",
|
3588
|
+
"modes": [
|
3589
|
+
{
|
3590
|
+
"john": null,
|
3591
|
+
"hashcat": 24100,
|
3592
|
+
"extended": false,
|
3593
|
+
"name": "MongoDB ServerKey SCRAM-SHA-1",
|
3594
|
+
"samples": [
|
3595
|
+
"$mongodb-scram$*0*dXNlcg==*10000*4p+f1tKpK18hQqrVr0UGOw==*Jv9lrpUQ2bVg2ZkXvRm2rppsqNw="
|
3596
|
+
]
|
3597
|
+
}
|
3598
|
+
]
|
3599
|
+
},
|
3600
|
+
{
|
3601
|
+
"regex": "^\\$mongodb-scram\\$\\*\\d\\*(?=.{0,88}\\*)(?:[a-zA-Z0-9+\\/]{4})*(?:|(?:[a-zA-Z0-9+\\/]{3}=)|(?:[a-zA-Z0-9+\\/]{2}==)|(?:[a-zA-Z0-9+\\/]{1}===))\\*\\d{1,7}\\*(?=.{40}\\*)(?:[a-zA-Z0-9+\\/]{4})*(?:|(?:[a-zA-Z0-9+\\/]{3}=)|(?:[a-zA-Z0-9+\\/]{2}==)|(?:[a-zA-Z0-9+\\/]{1}===))\\*(?=.{44})(?:[a-zA-Z0-9+\\/]{4})*(?:|(?:[a-zA-Z0-9+\\/]{3}=)|(?:[a-zA-Z0-9+\\/]{2}==)|(?:[a-zA-Z0-9+\\/]{1}===))$",
|
3602
|
+
"modes": [
|
3603
|
+
{
|
3604
|
+
"john": null,
|
3605
|
+
"hashcat": 24200,
|
3606
|
+
"extended": false,
|
3607
|
+
"name": "MongoDB ServerKey SCRAM-SHA-256",
|
3608
|
+
"samples": [
|
3609
|
+
"$mongodb-scram$*1*dXNlcg==*15000*qYaA1K1ZZSSpWfY+yqShlcTn0XVcrNipxiYCLQ==*QWVry9aTS/JW+y5CWCBr8lcEH9Kr/D4je60ncooPer8="
|
3610
|
+
]
|
3611
|
+
}
|
3612
|
+
]
|
3613
|
+
},
|
3614
|
+
{
|
3615
|
+
"regex": "^\\$scram\\$.+\\$\\d{1,5}\\$(?:[a-zA-Z0-9+\\/]{4})*(?:|(?:[a-zA-Z0-9+\\/]{3}=)|(?:[a-zA-Z0-9+\\/]{2}==)|(?:[a-zA-Z0-9+\\/]{1}===))\\$(?:[a-zA-Z0-9+\\/]{4})*(?:|(?:[a-zA-Z0-9+\\/]{3}=)|(?:[a-zA-Z0-9+\\/]{2}==)|(?:[a-zA-Z0-9+\\/]{1}===))$",
|
3616
|
+
"modes": [
|
3617
|
+
{
|
3618
|
+
"john": "scram",
|
3619
|
+
"hashcat": null,
|
3620
|
+
"extended": false,
|
3621
|
+
"name": "MongoDB SCRAM PBKDF2-SHA1",
|
3622
|
+
"samples": [
|
3623
|
+
"$scram$someadmin$10000$wf42AF7JaU1NSeBaSmkKzw==$H6A5RF0qz6DrcWNNX4xe+wIeVEw=",
|
3624
|
+
"$scram$admin$10000$ouQdw5om9Uc5gxulO9F/8w==$DSnATYsgoE8InL5Petfjp8MWGh4="
|
3625
|
+
]
|
3626
|
+
}
|
3627
|
+
]
|
3628
|
+
},
|
3629
|
+
{
|
3630
|
+
"regex": "^\\$mongodb\\$(?:(?:0\\$.+\\$[a-f0-9]{32})|(?:1\\$.+\\$[a-f0-9]{16}\\$[a-f0-9]{32}))$",
|
3631
|
+
"modes": [
|
3632
|
+
{
|
3633
|
+
"john": "mongodb",
|
3634
|
+
"hashcat": null,
|
3635
|
+
"extended": false,
|
3636
|
+
"name": "MongoDB (system / network)",
|
3637
|
+
"samples": [
|
3638
|
+
"$mongodb$0$sa$75692b1d11c072c6c79332e248c4f699",
|
3639
|
+
"$mongodb$1$sa$58d3229c83e3f87e$0c85e3f74adce5d037426791940c820a",
|
3640
|
+
"$mongodb$1$eight18_characters$8c82aec197929775$5c414259f7f7a42f8c4d1b6ffb37913a"
|
3641
|
+
]
|
3642
|
+
}
|
3643
|
+
]
|
2973
3644
|
}
|
2974
3645
|
]
|