haiti-hash 1.1.2 → 1.2.2

Sign up to get free protection for your applications and to get access to all the features.
Files changed (5) hide show
  1. checksums.yaml +4 -4
  2. data/data/prototypes.json +900 -101
  3. data/lib/haiti/hash.rb +3 -0
  4. data/lib/haiti/version.rb +1 -1
  5. metadata +3 -115
checksums.yaml CHANGED
@@ -1,7 +1,7 @@
1
1
  ---
2
2
  SHA256:
3
- metadata.gz: c97cfd3205f66d6279408925c133f2396fe689de4043658ab12dfd6a8fd34dc9
4
- data.tar.gz: 24f3fc2682d3a6a43572db3754a5b2338f36584a9cd0c524a50ae4348787e49d
3
+ metadata.gz: ded7144eb44853f67ba1e55e9fcea638b94f0a917c044ef60b88e981c81af548
4
+ data.tar.gz: 7107938018e675075564bb404b66c4dfe45744635f8959d7317bf41b10284a80
5
5
  SHA512:
6
- metadata.gz: dd3ad9f60423a751dcfaa424dd82a15dac9c653f982fb393e05355e6a1acaacabf0cb68ca5a5608b053093a9d1bf2a28e53c7113374d397b86fc540669c407ec
7
- data.tar.gz: ddcf5251e1c98a7ef95d5e09384cc84ef4a9d41840514be1002875f9a08eaaf937464c65c6176cbe8a1d97060d0cdc3f6b2a99e44f0d6fe1ce52a82e642cfa5d
6
+ metadata.gz: fa814b67986f209abe4a7cddf27cd9088783783e1f4e277c7f408c48db5c8dffa6aee660350c3e6f59c7c9ea18cba7b95fba890d2f28ca459fdff9a6366d33b9
7
+ data.tar.gz: 71194cc6e3ad682573a14e4a83cfefaa79d469b9961c2fbd25e6c939726d94667ad818322e241907c8924e20b9bf5592a8d428f2f1610b2fa77093699af73c32
data/data/prototypes.json CHANGED
@@ -99,13 +99,18 @@
99
99
  ]
100
100
  },
101
101
  {
102
- "regex": "^(\\$crc32\\$[a-f0-9]{8}.)?[a-f0-9]{8}$",
102
+ "regex": "^(\\$crc32\\$)?([a-f0-9]{8}.)?[a-f0-9]{8}$",
103
103
  "modes": [
104
104
  {
105
105
  "john": "crc32",
106
- "hashcat": null,
106
+ "hashcat": 11500,
107
107
  "extended": false,
108
- "name": "CRC-32"
108
+ "name": "CRC-32",
109
+ "samples": [
110
+ "c762de4a:00000000",
111
+ "$crc32$00000000.fa455f6b",
112
+ "$crc32$4ff4f23f.ce6eb863"
113
+ ]
109
114
  }
110
115
  ]
111
116
  },
@@ -116,7 +121,12 @@
116
121
  "john": "bfegg",
117
122
  "hashcat": null,
118
123
  "extended": false,
119
- "name": "Eggdrop IRC Bot"
124
+ "name": "Eggdrop IRC Bot",
125
+ "samples": [
126
+ "+9F93o1OxwgK1",
127
+ "+C/.8o.Wuph9.",
128
+ "+Obytd.zXYjH/"
129
+ ]
120
130
  }
121
131
  ]
122
132
  },
@@ -127,19 +137,34 @@
127
137
  "john": "descrypt",
128
138
  "hashcat": 1500,
129
139
  "extended": false,
130
- "name": "DES(Unix)"
140
+ "name": "DES(Unix)",
141
+ "samples": [
142
+ "CCNf8Sbh3HDfQ",
143
+ "CCX.K.MFy4Ois",
144
+ "CC4rMpbg9AMZ."
145
+ ]
131
146
  },
132
147
  {
133
148
  "john": "descrypt",
134
149
  "hashcat": 1500,
135
150
  "extended": false,
136
- "name": "Traditional DES"
151
+ "name": "Traditional DES",
152
+ "samples": [
153
+ "CCNf8Sbh3HDfQ",
154
+ "CCX.K.MFy4Ois",
155
+ "CC4rMpbg9AMZ."
156
+ ]
137
157
  },
138
158
  {
139
159
  "john": "descrypt",
140
160
  "hashcat": 1500,
141
161
  "extended": false,
142
- "name": "DEScrypt"
162
+ "name": "DEScrypt",
163
+ "samples": [
164
+ "CCNf8Sbh3HDfQ",
165
+ "CCX.K.MFy4Ois",
166
+ "CC4rMpbg9AMZ."
167
+ ]
143
168
  }
144
169
  ]
145
170
  },
@@ -152,12 +177,6 @@
152
177
  "extended": false,
153
178
  "name": "MySQL323"
154
179
  },
155
- {
156
- "john": null,
157
- "hashcat": 3100,
158
- "extended": false,
159
- "name": "DES(Oracle)"
160
- },
161
180
  {
162
181
  "john": null,
163
182
  "hashcat": 5100,
@@ -166,21 +185,38 @@
166
185
  },
167
186
  {
168
187
  "john": null,
169
- "hashcat": 3100,
188
+ "hashcat": null,
170
189
  "extended": false,
171
- "name": "Oracle 7-10g"
190
+ "name": "FNV-164"
172
191
  },
173
192
  {
174
193
  "john": null,
175
194
  "hashcat": null,
176
195
  "extended": false,
177
- "name": "FNV-164"
196
+ "name": "CRC-64"
197
+ }
198
+ ]
199
+ },
200
+ {
201
+ "regex": "^[a-f0-9]{16}:[a-f0-9]{0,30}$",
202
+ "modes": [
203
+ {
204
+ "john": null,
205
+ "hashcat": 3100,
206
+ "extended": false,
207
+ "name": "DES(Oracle)",
208
+ "samples": [
209
+ "792FCB0AE31D8489:7284616727"
210
+ ]
178
211
  },
179
212
  {
180
213
  "john": null,
181
- "hashcat": null,
214
+ "hashcat": 3100,
182
215
  "extended": false,
183
- "name": "CRC-64"
216
+ "name": "Oracle 7-10g",
217
+ "samples": [
218
+ "792FCB0AE31D8489:7284616727"
219
+ ]
184
220
  }
185
221
  ]
186
222
  },
@@ -217,9 +253,14 @@
217
253
  "modes": [
218
254
  {
219
255
  "john": "bsdicrypt",
220
- "hashcat": null,
256
+ "hashcat": 12400,
221
257
  "extended": false,
222
- "name": "BSDi Crypt"
258
+ "name": "BSDi Crypt",
259
+ "samples": [
260
+ "_GW..8841inaTltazRsQ",
261
+ "_J9..XXXXsqM/YSSP..Y",
262
+ "_J9..SDSD5YGyRCr4W4c"
263
+ ]
223
264
  }
224
265
  ]
225
266
  },
@@ -230,19 +271,25 @@
230
271
  "john": null,
231
272
  "hashcat": null,
232
273
  "extended": false,
233
- "name": "CRC-96(ZIP)"
274
+ "name": "CRC-96 (ZIP)"
234
275
  },
235
276
  {
236
277
  "john": null,
237
278
  "hashcat": 20500,
238
279
  "extended": false,
239
- "name": "PKZIP Master Key"
280
+ "name": "PKZIP Master Key",
281
+ "samples": [
282
+ "f1eff5c0368d10311dcfc419"
283
+ ]
240
284
  },
241
285
  {
242
286
  "john": null,
243
287
  "hashcat": 20510,
244
288
  "extended": false,
245
- "name": "PKZIP Master Key (6 byte optimization)"
289
+ "name": "PKZIP Master Key (6 byte optimization)",
290
+ "samples": [
291
+ "f1eff5c0368d10311dcfc419"
292
+ ]
246
293
  }
247
294
  ]
248
295
  },
@@ -275,7 +322,11 @@
275
322
  "john": "raw-md5",
276
323
  "hashcat": 0,
277
324
  "extended": false,
278
- "name": "MD5"
325
+ "name": "MD5",
326
+ "samples": [
327
+ "8743b52063cd84097a65d1633f5c74f5",
328
+ "098F6BCD4621D373CADE4E832627B4F6"
329
+ ]
279
330
  },
280
331
  {
281
332
  "john": "raw-md4",
@@ -295,12 +346,6 @@
295
346
  "extended": false,
296
347
  "name": "LM"
297
348
  },
298
- {
299
- "john": "ripemd-128",
300
- "hashcat": null,
301
- "extended": false,
302
- "name": "RIPEMD-128"
303
- },
304
349
  {
305
350
  "john": "haval-128-4",
306
351
  "hashcat": null,
@@ -355,17 +400,14 @@
355
400
  "extended": true,
356
401
  "name": "ZipMonster"
357
402
  },
358
- {
359
- "john": null,
360
- "hashcat": 11000,
361
- "extended": true,
362
- "name": "PrestaShop"
363
- },
364
403
  {
365
404
  "john": "dynamic_3",
366
405
  "hashcat": 3500,
367
406
  "extended": true,
368
- "name": "md5(md5(md5($pass)))"
407
+ "name": "md5(md5(md5($pass)))",
408
+ "samples": [
409
+ "9882d0778518b095917eb589f6998441"
410
+ ]
369
411
  },
370
412
  {
371
413
  "john": "dynamic_2",
@@ -425,7 +467,10 @@
425
467
  "john": "dynamic_8",
426
468
  "hashcat": 3610,
427
469
  "extended": true,
428
- "name": "md5(md5($salt).$pass)"
470
+ "name": "md5(md5($salt).$pass)",
471
+ "samples": [
472
+ "7b57255a15958ef898543ea6cc3313bc:1234"
473
+ ]
429
474
  },
430
475
  {
431
476
  "john": "dynamic_9",
@@ -437,7 +482,10 @@
437
482
  "john": null,
438
483
  "hashcat": 3720,
439
484
  "extended": true,
440
- "name": "md5($pass.md5($salt))"
485
+ "name": "md5($pass.md5($salt))",
486
+ "samples": [
487
+ "10ce488714fdbde9453670e0e4cbe99c:1234"
488
+ ]
441
489
  },
442
490
  {
443
491
  "john": "dynamic_5",
@@ -485,7 +533,10 @@
485
533
  "john": null,
486
534
  "hashcat": 4210,
487
535
  "extended": true,
488
- "name": "md5($username.0.$pass)"
536
+ "name": "md5($username.0.$pass)",
537
+ "samples": [
538
+ "09ea048c345ad336ebe38ae5b6c4de24:1234"
539
+ ]
489
540
  },
490
541
  {
491
542
  "john": "dynamic_15",
@@ -539,13 +590,61 @@
539
590
  "john": "dynamic_39",
540
591
  "hashcat": null,
541
592
  "extended": true,
542
- "name": "net-md5"
593
+ "name": "md5($salt.pad16($pass))"
543
594
  },
544
595
  {
545
- "john": "dynamic_39",
596
+ "john": null,
546
597
  "hashcat": null,
547
- "extended": true,
548
- "name": "md5($salt.pad16($pass))"
598
+ "extended": false,
599
+ "name": "MD6-128",
600
+ "samples": [
601
+ "8cd9a30bfde990878c06be4a6111f726"
602
+ ]
603
+ }
604
+ ]
605
+ },
606
+ {
607
+ "regex": "^[a-f0-9]{32}:.{56}$",
608
+ "modes": [
609
+ {
610
+ "john": null,
611
+ "hashcat": 11000,
612
+ "extended": false,
613
+ "name": "PrestaShop",
614
+ "samples": [
615
+ "f22cade043e7214200206dbffca49fd9:27167508161455764247627144160038845437138252877014827848",
616
+ "810e3d12f0f10777a679d9ca1ad7a8d9:M2uZ122bSHJ4Mi54tXGY0lqcv1r28mUluSkyw37ou5oia4i239ujqw0l"
617
+ ]
618
+ }
619
+ ]
620
+ },
621
+ {
622
+ "regex": "^(\\$netmd5\\$)?([a-f0-9]{88,96}\\$)?[a-f0-9]{32}$",
623
+ "modes": [
624
+ {
625
+ "john": "net-md5",
626
+ "hashcat": null,
627
+ "extended": false,
628
+ "name": "Keyed MD5: RIPv2, OSPF, BGP, SNMPv2",
629
+ "samples": [
630
+ "02020000ffff0003002c01145267d48d000000000000000000020000ac100100ffffff000000000000000001ffff0001$1e372a8a233c6556253a0909bc3dcce6",
631
+ "$netmd5$0201002cac1001010000000000000002000001105267ff8fffffff00000a0201000000280000000000000000$445ecbb27272bd791a757a6c85856150"
632
+ ]
633
+ }
634
+ ]
635
+ },
636
+ {
637
+ "regex": "^(\\$ripemd\\$)?[a-f0-9]{32}(:.+)?$",
638
+ "modes": [
639
+ {
640
+ "john": "ripemd-128",
641
+ "hashcat": null,
642
+ "extended": false,
643
+ "name": "RIPEMD-128",
644
+ "samples": [
645
+ "cdf26213a150dc3ecb610f18f6b38b46",
646
+ "$ripemd$cdf26213a150dc3ecb610f18f6b38b46"
647
+ ]
549
648
  }
550
649
  ]
551
650
  },
@@ -572,24 +671,38 @@
572
671
  ]
573
672
  },
574
673
  {
575
- "regex": "^([^\\\\\\/:*?\"<>|]{1,20}:)?[a-f0-9]{32}(:[^\\\\\\/:*?\"<>|]{1,20})?$",
674
+ "regex": "^(([^\\\\:*?\"<>|\\n]+:)|(M\\$.+#))?[a-f0-9]{32}(:[^\\\\\\/:*?\"<>|\\n]+)?$",
576
675
  "modes": [
577
676
  {
578
- "john": "mscach",
677
+ "john": "mscash",
579
678
  "hashcat": 1100,
580
679
  "extended": false,
581
- "name": "Domain Cached Credentials"
680
+ "name": "Domain Cached Credentials (DCC), MS Cache",
681
+ "samples": [
682
+ "176a4c2bd45ac73687676c2f09045353",
683
+ "M$test2#ab60bdb4493822b175486810ac2abe63",
684
+ "M$#january#72488d8077e33d138b9cff94092716e4",
685
+ "CORP1.COMPANY.LOCAL/Administrator:ab60bdb4493822b175486810ac2abe63:Administrator"
686
+ ]
582
687
  }
583
688
  ]
584
689
  },
585
690
  {
586
- "regex": "^([^\\\\\\/:*?\"<>|]{1,20}:)?(\\$DCC2\\$10240#[^\\\\\\/:*?\"<>|]{1,20}#)?[a-f0-9]{32}$",
691
+ "regex": "^([^\\\\:*?\"<>|\\n]+:)?(\\$DCC2\\$(\\d+#)?[^\\\\:*?\"<>|\\n]*#)?[a-f0-9]{32}$",
587
692
  "modes": [
588
693
  {
589
- "john": "mscach2",
694
+ "john": "mscash2",
590
695
  "hashcat": 2100,
591
696
  "extended": false,
592
- "name": "Domain Cached Credentials 2"
697
+ "name": "Domain Cached Credentials 2 (DCC2), MS Cache 2",
698
+ "samples": [
699
+ "cfc6a1e33eb36c3d4f84e4c2606623d2",
700
+ "$DCC2$10240#test1#607bbe89611e37446e736f7856515bf8",
701
+ "$DCC2$10000#Twelve_chars#54236c670e185043c8016006c001e982",
702
+ "$DCC2$january#26b5495b21f9ad58255d99b5e117abe2",
703
+ "$DCC2$#59137848828d14b1fca295a5032b52a1",
704
+ "CORP1.COMPANY.LOCAL/Administrator:$DCC2$10240#Administrator#cceed966f6689269b758893bb6bbb985"
705
+ ]
593
706
  }
594
707
  ]
595
708
  },
@@ -708,25 +821,36 @@
708
821
  ]
709
822
  },
710
823
  {
711
- "regex": "^\\$apr1\\$[a-z0-9\\/.]{0,8}\\$[a-z0-9\\/.]{22}$",
824
+ "regex": "^(?:\\$apr1\\$|\\$1\\$|{smd5})[a-z0-9\\/.]{0,8}\\$[a-z0-9\\/.]{22}$",
712
825
  "modes": [
713
826
  {
714
- "john": null,
827
+ "john": "md5crypt-long",
715
828
  "hashcat": 1600,
716
829
  "extended": false,
717
- "name": "MD5(APR)"
830
+ "name": "MD5 (APR)"
718
831
  },
719
832
  {
720
- "john": null,
833
+ "john": "md5crypt-long",
721
834
  "hashcat": 1600,
722
835
  "extended": false,
723
836
  "name": "Apache MD5"
724
837
  },
725
838
  {
726
- "john": null,
839
+ "john": "md5crypt-long",
727
840
  "hashcat": 1600,
728
841
  "extended": false,
729
842
  "name": "md5apr1"
843
+ },
844
+ {
845
+ "john": "md5crypt-long",
846
+ "hashcat": 1600,
847
+ "extended": false,
848
+ "name": "crypt(3) MD5",
849
+ "samples": [
850
+ "$apr1$71850310$gh9m4xcAn3MGxogwX/ztb.",
851
+ "$1$12345678$aIccj83HRDBo6ux1bVx7D1",
852
+ "{smd5}s8/xSJ/v$uGam4GB8hOjTLQqvBfxJ2/"
853
+ ]
730
854
  }
731
855
  ]
732
856
  },
@@ -742,13 +866,43 @@
742
866
  ]
743
867
  },
744
868
  {
745
- "regex": "^[a-f0-9]{32}:[a-f0-9]{32}$",
869
+ "regex": "^[a-f0-9]{32}:.+$",
746
870
  "modes": [
747
871
  {
748
872
  "john": null,
749
873
  "hashcat": 3721,
750
874
  "extended": false,
751
- "name": "WebEdition CMS"
875
+ "name": "WebEdition CMS",
876
+ "samples": [
877
+ "fa01af9f0de5f377ae8befb03865178e:5678"
878
+ ]
879
+ },
880
+ {
881
+ "john": null,
882
+ "hashcat": 26401,
883
+ "extended": true,
884
+ "name": "AES-128-ECB NOKDF (PT = $salt, key = $pass)",
885
+ "samples": [
886
+ "e7a32f3210455cc044f26117c4612aab:86046627772965328523223752173724"
887
+ ]
888
+ },
889
+ {
890
+ "john": null,
891
+ "hashcat": 26402,
892
+ "extended": true,
893
+ "name": "AES-192-ECB NOKDF (PT = $salt, key = $pass)",
894
+ "samples": [
895
+ "2995e91b798ef51232a91579edb1d176:49869364034411376791729962721320"
896
+ ]
897
+ },
898
+ {
899
+ "john": null,
900
+ "hashcat": 26403,
901
+ "extended": true,
902
+ "name": "AES-256-ECB NOKDF (PT = $salt, key = $pass)",
903
+ "samples": [
904
+ "264a4248c9522cb74d33fe26cb596895:61270210011294880287232432636227"
905
+ ]
752
906
  }
753
907
  ]
754
908
  },
@@ -800,12 +954,6 @@
800
954
  "extended": false,
801
955
  "name": "Double SHA-1"
802
956
  },
803
- {
804
- "john": "ripemd-160",
805
- "hashcat": 6000,
806
- "extended": false,
807
- "name": "RIPEMD-160"
808
- },
809
957
  {
810
958
  "john": "dynamic_190",
811
959
  "hashcat": null,
@@ -840,7 +988,10 @@
840
988
  "john": "raw-sha1-linkedin",
841
989
  "hashcat": 190,
842
990
  "extended": false,
843
- "name": "LinkedIn"
991
+ "name": "LinkedIn",
992
+ "samples": [
993
+ "b89eaac7e61417341b710b727768294d0e6a277b"
994
+ ]
844
995
  },
845
996
  {
846
997
  "john": null,
@@ -882,7 +1033,10 @@
882
1033
  "john": null,
883
1034
  "hashcat": 4600,
884
1035
  "extended": true,
885
- "name": "sha1(sha1(sha1($pass)))"
1036
+ "name": "sha1(sha1(sha1($pass)))",
1037
+ "samples": [
1038
+ "dc57f246485e62d99a5110afc9264b4ccbfcf3cc"
1039
+ ]
886
1040
  },
887
1041
  {
888
1042
  "john": "dynamic_23",
@@ -967,23 +1121,57 @@
967
1121
  "hashcat": null,
968
1122
  "extended": true,
969
1123
  "name": "sha1($salt.pad20($pass))"
1124
+ },
1125
+ {
1126
+ "john": null,
1127
+ "hashcat": 24300,
1128
+ "extended": true,
1129
+ "name": "sha1($salt.sha1($pass.$salt))",
1130
+ "samples": [
1131
+ "94520b02c04e79e08a75a84c2a6e3ed4e3874fe8:ThisIsATestSalt"
1132
+ ]
970
1133
  }
971
1134
  ]
972
1135
  },
973
1136
  {
974
- "regex": "^\\*[a-f0-9]{40}$",
1137
+ "regex": "^(\\$ripemd\\$)?[a-f0-9]{40}(:.+)?$",
1138
+ "modes": [
1139
+ {
1140
+ "john": "ripemd-160",
1141
+ "hashcat": 6000,
1142
+ "extended": false,
1143
+ "name": "RIPEMD-160",
1144
+ "samples": [
1145
+ "9c1185a5c5e9fc54612808977ee8f548b2258d31",
1146
+ "$ripemd$9c1185a5c5e9fc54612808977ee8f548b2258d31",
1147
+ "012cb9b334ec1aeb71a9c8ce85586082467f7eb6"
1148
+ ]
1149
+ }
1150
+ ]
1151
+ },
1152
+ {
1153
+ "regex": "^(\\*)?[a-f0-9]{40}$",
975
1154
  "modes": [
976
1155
  {
977
1156
  "john": "mysql-sha1",
978
1157
  "hashcat": 300,
979
1158
  "extended": false,
980
- "name": "MySQL5.x"
1159
+ "name": "MySQL5.x",
1160
+ "samples": [
1161
+ "*2c905879f74f28f8570989947d06a8429fb943e6",
1162
+ "*A8A397146B1A5F8C8CF26404668EFD762A1B7B82"
1163
+ ]
981
1164
  },
982
1165
  {
983
1166
  "john": "mysql-sha1",
984
1167
  "hashcat": 300,
985
1168
  "extended": false,
986
- "name": "MySQL4.1"
1169
+ "name": "MySQL4.1",
1170
+ "samples": [
1171
+ "*5AD8F88516BD021DD43F171E2C785C69F8E54ADB",
1172
+ "*be1bdec0aa74b4dcb079943e70528096cca985f8",
1173
+ "fcf7c1b8749cf99d88e5f34271d636178fb5d130"
1174
+ ]
987
1175
  }
988
1176
  ]
989
1177
  },
@@ -1142,7 +1330,10 @@
1142
1330
  "john": "sunmd5",
1143
1331
  "hashcat": 3300,
1144
1332
  "extended": false,
1145
- "name": "Sun MD5 Crypt"
1333
+ "name": "Sun MD5 Crypt",
1334
+ "samples": [
1335
+ "$md5$rounds=904$iPPKEBnEkp3JV8uX$0L6m7rOFTVFn.SGqo2M9W1"
1336
+ ]
1146
1337
  }
1147
1338
  ]
1148
1339
  },
@@ -1279,6 +1470,24 @@
1279
1470
  "hashcat": 3200,
1280
1471
  "extended": false,
1281
1472
  "name": "bcrypt"
1473
+ },
1474
+ {
1475
+ "john": null,
1476
+ "hashcat": 25600,
1477
+ "extended": true,
1478
+ "name": "bcrypt(md5($pass)) / bcryptmd5",
1479
+ "samples": [
1480
+ "$2a$05$/VT2Xs2dMd8GJKfrXhjYP.DkTjOVrY12yDN7/6I8ZV0q/1lEohLru"
1481
+ ]
1482
+ },
1483
+ {
1484
+ "john": null,
1485
+ "hashcat": 25800,
1486
+ "extended": true,
1487
+ "name": "bcrypt(sha1($pass)) / bcryptsha1",
1488
+ "samples": [
1489
+ "$2a$05$Uo385Fa0g86uUXHwZxB90.qMMdRFExaXePGka4WGFv.86I45AEjmO"
1490
+ ]
1282
1491
  }
1283
1492
  ]
1284
1493
  },
@@ -1361,7 +1570,11 @@
1361
1570
  "john": "dynamic_140",
1362
1571
  "hashcat": null,
1363
1572
  "extended": false,
1364
- "name": "RIPEMD-256"
1573
+ "name": "RIPEMD-256",
1574
+ "samples": [
1575
+ "1419109aa0de60e6ba0b6d2b2f602c13b07e97b5ffc85b6be2297badc699262f",
1576
+ "f156e6c20042057840f3251ee041596d89fde06c2505f61764ad1c03c2fc1375"
1577
+ ]
1365
1578
  },
1366
1579
  {
1367
1580
  "john": "haval-256-3",
@@ -1506,6 +1719,15 @@
1506
1719
  "hashcat": null,
1507
1720
  "extended": false,
1508
1721
  "name": "BLAKE2-256"
1722
+ },
1723
+ {
1724
+ "john": null,
1725
+ "hashcat": null,
1726
+ "extended": false,
1727
+ "name": "MD6-256",
1728
+ "samples": [
1729
+ "bc9e2022386d929ae3936306153d9366fc555dc868579c87c7faf8846f79f414"
1730
+ ]
1509
1731
  }
1510
1732
  ]
1511
1733
  },
@@ -1577,7 +1799,11 @@
1577
1799
  "john": "dynamic_150",
1578
1800
  "hashcat": null,
1579
1801
  "extended": false,
1580
- "name": "RIPEMD-320"
1802
+ "name": "RIPEMD-320",
1803
+ "samples": [
1804
+ "303aa1dcb731cd4e4bff2a60971eb7376c6c47cb59947c804776d115470183c8cc2e487337b45412",
1805
+ "3c616c27aa7539c4726388c9e047aa4ea089dd739b3cfc470e964ea12e479da3cce437b9daa90214"
1806
+ ]
1581
1807
  }
1582
1808
  ]
1583
1809
  },
@@ -1733,7 +1959,12 @@
1733
1959
  "john": "raw-sha512",
1734
1960
  "hashcat": 1700,
1735
1961
  "extended": false,
1736
- "name": "SHA-512"
1962
+ "name": "SHA-512",
1963
+ "samples": [
1964
+ "f342aae82952db35b8e02c30115e3deed3d80fdfdadacab336f0ba51ac54e297291fa1d6b201d69a2bd77e2535280f17a54fa1e527abc6e2eddba79ad3be11c0",
1965
+ "7aba4411846c61b08b0f2282a8a4600232ace4dd96593c755ba9c9a4e7b780b8bdc437b5c55574b3e8409c7b511032f98ef120e25467678f0458643578eb60ff",
1966
+ "12b03226a6d8be9c6e8cd5e55dc6c7920caaa39df14aab92d5e3ea9340d1c8a4d3d0b8e4314f1f6ef131ba4bf1ceb9186ab87c801af0d5c95b1befb8cedae2b9"
1967
+ ]
1737
1968
  },
1738
1969
  {
1739
1970
  "john": "whirlpool",
@@ -1854,6 +2085,15 @@
1854
2085
  "hashcat": null,
1855
2086
  "extended": true,
1856
2087
  "name": "sha512(sha512($pass).sha512($pass))"
2088
+ },
2089
+ {
2090
+ "john": null,
2091
+ "hashcat": null,
2092
+ "extended": false,
2093
+ "name": "MD6-512",
2094
+ "samples": [
2095
+ "39990e5d4b65abd1c679b36fc7fa0b2f831144374ac3792736180bc5fc5ed4e93f177ed03f16ebac7327b9ddb7e4add838c3ce784653bbdd57d46a9a1d22932d"
2096
+ ]
1857
2097
  }
1858
2098
  ]
1859
2099
  },
@@ -1884,16 +2124,24 @@
1884
2124
  "regex": "^0x0200[a-f0-9]{136}$",
1885
2125
  "modes": [
1886
2126
  {
1887
- "john": "msql12",
2127
+ "john": "mssql12",
1888
2128
  "hashcat": 1731,
1889
2129
  "extended": false,
1890
- "name": "MSSQL(2012)"
2130
+ "name": "MSSQL(2012)",
2131
+ "samples": [
2132
+ "0x0200F733058A07892C5CACE899768F89965F6BD1DED7955FE89E1C9A10E27849B0B213B5CE92CC9347ECCB34C3EFADAF2FD99BFFECD8D9150DD6AACB5D409A9D2652A4E0AF16",
2133
+ "0x0200AB3E1F9028A739EEF62ABF672427276A32D5EDD349E638E7F2CD81DAA247CFE20EE4E3B0A30B2D0AE3C3FA010E61752F1BF45E045041F1B988C083C7F118527E3E5F0562"
2134
+ ]
1891
2135
  },
1892
2136
  {
1893
- "john": "msql12",
2137
+ "john": "mssql12",
1894
2138
  "hashcat": 1731,
1895
2139
  "extended": false,
1896
- "name": "MSSQL(2014)"
2140
+ "name": "MSSQL(2014)",
2141
+ "samples": [
2142
+ "0x02003788006711b2e74e7d8cb4be96b1d187c962c5591a02d5a6ae81b3a4a094b26b7877958b26733e45016d929a756ed30d0a5ee65d3ce1970f9b7bf946e705c595f07625b1",
2143
+ "0x02006BF4AB05873FF0C8A4AFD1DC5912CBFDEF62E0520A3353B04E1184F05C873C9C76BBADDEAAC1E9948C7B6ABFFD62BFEFD7139F17F6AFE10BE0FEE7A178644623067C2423"
2144
+ ]
1897
2145
  }
1898
2146
  ]
1899
2147
  },
@@ -2007,9 +2255,12 @@
2007
2255
  "modes": [
2008
2256
  {
2009
2257
  "john": null,
2010
- "hashcat": null,
2258
+ "hashcat": 20711,
2011
2259
  "extended": false,
2012
- "name": "Minecraft(AuthMe Reloaded)"
2260
+ "name": "Minecraft (AuthMe Reloaded sha256)",
2261
+ "samples": [
2262
+ "$SHA$7218532375810603$bfede293ecf6539211a7305ea218b9f3f608953130405cda9eaba6fb6250f824"
2263
+ ]
2013
2264
  }
2014
2265
  ]
2015
2266
  },
@@ -2205,9 +2456,12 @@
2205
2456
  "modes": [
2206
2457
  {
2207
2458
  "john": null,
2208
- "hashcat": 7600,
2459
+ "hashcat": 4521,
2209
2460
  "extended": false,
2210
- "name": "Redmine Project Management Web App"
2461
+ "name": "Redmine",
2462
+ "samples": [
2463
+ "c18e826af2a78c7b9b7261452613233417e65817:28246535720688452723483475753333"
2464
+ ]
2211
2465
  }
2212
2466
  ]
2213
2467
  },
@@ -2251,7 +2505,10 @@
2251
2505
  "john": null,
2252
2506
  "hashcat": 123,
2253
2507
  "extended": false,
2254
- "name": "EPi"
2508
+ "name": "EPi",
2509
+ "samples": [
2510
+ "0x326C6D7B4E4F794B79474E36704F35723958397163735263516265456E31 0xAFC55E260B8F45C0C6512BCE776C1AD8312B56E6"
2511
+ ]
2255
2512
  }
2256
2513
  ]
2257
2514
  },
@@ -2365,9 +2622,13 @@
2365
2622
  "modes": [
2366
2623
  {
2367
2624
  "john": "sha1crypt",
2368
- "hashcat": null,
2625
+ "hashcat": 15100,
2369
2626
  "extended": false,
2370
- "name": "SHA-1 Crypt"
2627
+ "name": "SHA-1 Crypt (Juniper/NetBSD)",
2628
+ "samples": [
2629
+ "$sha1$20000$75552156$HhYMDdaEHiK3eMIzTldOFPnw.s2Q",
2630
+ "$sha1$64000$wnUR8T1U$azjCegpOIk0FjE61qzGWhdkpuMRL"
2631
+ ]
2371
2632
  }
2372
2633
  ]
2373
2634
  },
@@ -2405,24 +2666,37 @@
2405
2666
  ]
2406
2667
  },
2407
2668
  {
2408
- "regex": "^\\$pbkdf2(-sha1)?\\$[0-9]+\\$[a-z0-9\\/.]+\\$[a-z0-9\\/.]{27}$",
2669
+ "regex": "^\\$pbkdf2(-hmac)?(-sha1)?\\$([0-9]{1,6}\\$[a-z0-9\\/.]+\\$[a-z0-9\\/.]+|[0-9]{1,6}\\.[a-f0-9]+\\.[a-f0-9]{40})$",
2409
2670
  "modes": [
2410
2671
  {
2411
- "john": null,
2412
- "hashcat": null,
2672
+ "john": "pbkdf2-hmac-sha1",
2673
+ "hashcat": 20400,
2413
2674
  "extended": false,
2414
- "name": "PBKDF2-SHA1(Generic)"
2675
+ "name": "PBKDF2-SHA1 (Generic)",
2676
+ "samples": [
2677
+ "$pbkdf2$131000$r5WythYixPgfQ2jt3buXcg$8Kdr.QQEOaZIXNOrrru36I/.6Po",
2678
+ "$pbkdf2-hmac-sha1$1000.fd11cde0.27de197171e6d49fc5f55c9ef06c0d8751cd7250",
2679
+ "$pbkdf2-hmac-sha1$1000$6926d45e$231c561018a4cee662df7cd4a8206701c5806af9",
2680
+ "$pbkdf2-hmac-sha1$1000.6834476f733353333654315a5a31494f.1932a843a69dc1e38a29d2691a7abf27ecaa6d55",
2681
+ "$pbkdf2-hmac-sha1$1000.3031323334353637383930313233343536373839303132333435363738393031323334353637383930313233343536373839303132333435363738393031323334353637383930313233343536373839303132333435363738393031323334353637383930313233343536373839303132333435363738393031323334353637383930313233343536373839303132333435363738393031323334353637383930313233343536373839303132333435363738.8f7c89f74233f78f6c8ace00696cf6ed09ae43f4"
2682
+ ]
2415
2683
  }
2416
2684
  ]
2417
2685
  },
2418
2686
  {
2419
- "regex": "^\\$pbkdf2-sha256\\$[0-9]+\\$[a-z0-9\\/.]+\\$[a-z0-9\\/.]{43}$",
2687
+ "regex": "^\\$pbkdf2-sha256\\$[0-9]{1,6}\\$[a-z0-9\\/.]+\\$[a-z0-9\\/.]+$",
2420
2688
  "modes": [
2421
2689
  {
2422
2690
  "john": "pbkdf2-hmac-sha256",
2423
- "hashcat": null,
2691
+ "hashcat": 20300,
2424
2692
  "extended": false,
2425
- "name": "PBKDF2-SHA256(Generic)"
2693
+ "name": "PBKDF2-SHA256 (Generic)",
2694
+ "samples": [
2695
+ "$pbkdf2-sha256$29000$x9h7j/Ge8x6DMEao1VqrdQ$kra3R1wEnY8mPdDWOpTqOTINaAmZvRMcYd8u5OBQP9A",
2696
+ "$pbkdf2-sha256$1000$b1dWS2dab3dKQWhPSUg3cg$UY9j5wlyxtsJqhDKTqua8Q3fMp0ojc2pOnErzr8ntLE",
2697
+ "$pbkdf2-sha256$12000$fK8VAoDQuvees5ayVkpp7Q$xfzKAoBR/Iaa68tjn.O8KfGxV.zdidcqEeDoTFvDz2A",
2698
+ "$pbkdf2-sha256$12000$MDEyMzQ1Njc4OTAxMjM0NTY3ODkwMTIzNDU2Nzg5MDEyMzQ1Njc4OTAxMjM0NTY3ODkwMTIzNDU2Nzg5MDEyMzQ1Njc4OTAxMjM0NTY3ODkwMTIzNDU2Nzg5MDEyMzQ1Njc4OTAxMjM0NTY3ODkwMTIzNDU2Nzg5MDEyMzQ1Njc4OTAxMjM0NTY3ODkwMTIzNDU2Nzg5MDEyMzQ1Njc4OTAxMjM0NTY3ODkwMTIzNDU2Nzg$94Z71JhWYUP2E0IrQrexc8AMhHzVB4bwkxh7n0FCnns"
2699
+ ]
2426
2700
  }
2427
2701
  ]
2428
2702
  },
@@ -2554,7 +2828,7 @@
2554
2828
  "john": "django",
2555
2829
  "hashcat": 10000,
2556
2830
  "extended": false,
2557
- "name": "Django(PBKDF2-HMAC-SHA256)"
2831
+ "name": "Django (PBKDF2-HMAC-SHA256)"
2558
2832
  }
2559
2833
  ]
2560
2834
  },
@@ -2697,7 +2971,10 @@
2697
2971
  "john": null,
2698
2972
  "hashcat": 25300,
2699
2973
  "extended": false,
2700
- "name": "Microsoft Office 2016 - SheetProtection"
2974
+ "name": "Microsoft Office 2016 - SheetProtection",
2975
+ "samples": [
2976
+ "$office$2016$0$100000$876MLoKTq42+/DLp415iZQ==$TNDvpvYyvlSUy97UOLKNhXynhUDDA7H8kLql0ISH5SxcP6hbthdjaTo4Z3/MU0dcR2SAd+AduYb3TB5CLZ8+ow=="
2977
+ ]
2701
2978
  }
2702
2979
  ]
2703
2980
  },
@@ -2886,7 +3163,10 @@
2886
3163
  "john": null,
2887
3164
  "hashcat": 10900,
2888
3165
  "extended": false,
2889
- "name": "PBKDF2-HMAC-SHA256(PHP)"
3166
+ "name": "PBKDF2-HMAC-SHA256 (PHP)",
3167
+ "samples": [
3168
+ "sha256:1000:NjI3MDM3:vVfavLQL9ZWjg8BUMq6/FB8FtpkIGWYk"
3169
+ ]
2890
3170
  }
2891
3171
  ]
2892
3172
  },
@@ -2895,9 +3175,27 @@
2895
3175
  "modes": [
2896
3176
  {
2897
3177
  "john": "dahua",
2898
- "hashcat": null,
3178
+ "hashcat": 24900,
3179
+ "extended": false,
3180
+ "name": "Dahua (MD5 Authentication)",
3181
+ "samples": [
3182
+ "GRuHbyVp",
3183
+ "$dahua$4WzwxXxM"
3184
+ ]
3185
+ }
3186
+ ]
3187
+ },
3188
+ {
3189
+ "regex": "^[a-z0-9]{8}(?::[a-z0-9]{8})?$",
3190
+ "modes": [
3191
+ {
3192
+ "john": null,
3193
+ "hashcat": 25700,
2899
3194
  "extended": false,
2900
- "name": "Dahua"
3195
+ "name": "MurmurHash",
3196
+ "samples": [
3197
+ "b69e7687:05094309"
3198
+ ]
2901
3199
  }
2902
3200
  ]
2903
3201
  },
@@ -2947,7 +3245,19 @@
2947
3245
  "john": "pdf",
2948
3246
  "hashcat": 10500,
2949
3247
  "extended": false,
2950
- "name": "PDF 1.4 - 1.6 (Acrobat 5 - 8)"
3248
+ "name": "PDF 1.4 - 1.6 (Acrobat 5 - 8)",
3249
+ "samples": [
3250
+ "$pdf$2*3*128*-4*1*16*62888255846156252261477183186121*32*6879919b1afd520bd3b7dbcc0868a0a500000000000000000000000000000000*32*0000000000000000000000000000000000000000000000000000000000000000"
3251
+ ]
3252
+ },
3253
+ {
3254
+ "john": "pdf",
3255
+ "hashcat": 25400,
3256
+ "extended": false,
3257
+ "name": "PDF 1.4 - 1.6 (Acrobat 5 - 8) - edit password",
3258
+ "samples": [
3259
+ "$pdf$2*3*128*-3904*1*16*631ed33746e50fba5caf56bcc39e09c6*32*5f9d0e4f0b39835dace0d306c40cd6b700000000000000000000000000000000*32*842103b0a0dc886db9223b94afe2d7cd63389079b61986a4fcf70095ad630c24"
3260
+ ]
2951
3261
  }
2952
3262
  ]
2953
3263
  },
@@ -2969,13 +3279,18 @@
2969
3279
  ]
2970
3280
  },
2971
3281
  {
2972
- "regex": "^\\$bitcoin\\$[0-9]{2,4}\\$[a-fA-F0-9$]{250,350}$",
3282
+ "regex": "^\\$bitcoin\\$[0-9]{2,4}\\$[a-f0-9$]{250,360}$",
2973
3283
  "modes": [
2974
3284
  {
2975
3285
  "john": "bitcoin",
2976
3286
  "hashcat": 11300,
2977
3287
  "extended": false,
2978
- "name": "Bitcoin/Litecoin Wallet"
3288
+ "name": "Bitcoin/Litecoin Wallet",
3289
+ "samples": [
3290
+ "$bitcoin$96$c265931309b4a59307921cf054b4ec6b6e4554369be79802e94e16477645777d948ae1d375191831efc78e5acd1f0443$16$8017214013543185$200460$96$480008005625057442352316337722323437108374245623701184230273883222762730232857701607167815448714$66$014754433300175043011633205413774877455616682000536368706315333388",
3291
+ "$bitcoin$96$c265931309b4a59307921cf054b4ec6b6e4554369be79802e94e16477645777d948ae1d375191831efc78e5acd1f0443$16$8017214013543185$200460$96$480008005625057442352316337722323437108374245623701184230273883222762730232857701607167815448714$66$014754433300175043011633205413774877455616682000536368706315333388",
3292
+ "$bitcoin$96$a8d2a30b9a5419934cbb7cb0727ddc16c4bebdbf30d7e099ca35f2b1b7ba04cc42eb5b865bff8f65fc6ba9e15428d84f$16$872581181d72f577$128205$96$0a8d43558ed2b55f4a53491df66e6a71003db4588d11dc0a88b976122c2849a74c2bfaace36424cf029795db6fd2c78f$130$04ff53a6f68eab1c52e5b561b4616edb5bed4d7510cdb4931c8da68732a86d86f3a3f7de266f17c8d03e02ebe8e2c86e2f5de0007217fd4aaf5742ca7373113060"
3293
+ ]
2979
3294
  }
2980
3295
  ]
2981
3296
  },
@@ -3027,7 +3342,7 @@
3027
3342
  "regex": "^\\$zip2\\$\\*[0-9]{1}\\*[0-9]{1}\\*[0-9]{1}\\*[a-f0-9]{16,32}\\*[a-f0-9]{1,6}\\*[a-f0-9]{1,6}\\*[a-f0-9]{0,16384}\\*[a-f0-9]{20}\\*\\$\/zip2\\$$",
3028
3343
  "modes": [
3029
3344
  {
3030
- "john": "ZIP",
3345
+ "john": "zip",
3031
3346
  "hashcat": 13600,
3032
3347
  "extended": false,
3033
3348
  "name": "WinZip"
@@ -3078,9 +3393,13 @@
3078
3393
  "modes": [
3079
3394
  {
3080
3395
  "john": "telegram",
3081
- "hashcat": null,
3396
+ "hashcat": 24500,
3082
3397
  "extended": false,
3083
- "name": "Telegram Desktop \u2265 2.1.14-beta / 2.2.0"
3398
+ "name": "Telegram Desktop \u2265 2.1.14-beta / 2.2.0",
3399
+ "samples": [
3400
+ "$telegram$2*100000*77461dcb457ce9539f8e4235d33bd12455b4a38446e63b52ecdf2e7b65af4476*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",
3401
+ "$telegram$2*100000*0970f6c043d855aa895703b8a1cc086109cf081f72a77b6504f7f4bf3db06420*129294a5eac3196a4c9a88e556f7507b0957f6dd45d704db8abe607ec6d807270c02635289056256a6044a6408e7ef5d33f98c561f16f8aedd2b3ae33ddffddc63c8584dcb232c9f610953f461adb8d29da83f2b01e32db98101febffae4072703bfbfd492e1dd6abeb0926d3df2ed3b47dee4eb6c9f42ab657f89f19d7314c07e2ffc843e448c6d324e9f8d2c3e877a25b0b153736fddb35f5205737620ba2f96aa47f799366150b4de89a0c6e12caa4f03553d164ce9e2e975aadc83538e6ae3df93acb6026f97ac9f6f017a6bbc6607767e591b2c732e3c0ac844584c69dae89ca3272c996eb83b4e66976e3851cfc89be11dc602bb8c0cdf578d9a0a9dbc2296888fa5ee7e58d985a9bf9a1dbc75d2ddfd6ce222c5ee9f3bb40f6e25c2cd"
3402
+ ]
3084
3403
  }
3085
3404
  ]
3086
3405
  },
@@ -3138,5 +3457,485 @@
3138
3457
  "name": "PKZIP"
3139
3458
  }
3140
3459
  ]
3460
+ },
3461
+ {
3462
+ "regex": "^\\$argon2d\\$v=19\\$m=[0-9]{1,6},t=[0-9]{1,2},p=[0-9]{1,2}\\$[^$]+\\$[^\\s]{6,}$",
3463
+ "modes": [
3464
+ {
3465
+ "john": "argon2",
3466
+ "hashcat": null,
3467
+ "extended": false,
3468
+ "name": "argon2d",
3469
+ "samples": [
3470
+ "$argon2d$v=19$m=4096,t=3,p=1$ZGFtYWdlX2RvbmU$w9w3s5/zV8+PcAZlJhnTCOE+vBkZssmZf6jOq3dKv50",
3471
+ "$argon2d$v=19$m=4096,t=3,p=1$c2hvcnRfc2FsdA$zMrTcOAOUje6UqObRVh84Pe1K6gumcDqqGzRM0ILzYmj",
3472
+ "$argon2d$v=19$m=16384,t=3,p=1$c2hvcnRfc2FsdA$TLSTPihIo+5F67Y1vJdfWdB9",
3473
+ "$argon2d$v=19$m=16384,t=4,p=3$YW5vdGhlcl9zYWx0$yw93eMxC8REPAwbQ0e/q43jR9+RI9HI/DHP75uzm7tQfjU734oaI3dzcMWjYjHzVQD+J4+MG+7oyD8dN/PtnmPCZs+UZ67E+rkXJ/wTvY4WgXgAdGtJRrAGxhy4rD7d5G+dCpqhrog"
3474
+ ]
3475
+ }
3476
+ ]
3477
+ },
3478
+ {
3479
+ "regex": "^\\$argon2i\\$v=19\\$m=[0-9]{1,6},t=[0-9]{1,2},p=[0-9]{1,2}\\$[^$]+\\$[^\\s]{6,}$",
3480
+ "modes": [
3481
+ {
3482
+ "john": "argon2",
3483
+ "hashcat": null,
3484
+ "extended": false,
3485
+ "name": "argon2i",
3486
+ "samples": [
3487
+ "$argon2i$v=19$m=4096,t=3,p=1$ZGFtYWdlX2RvbmU$N59QwnpxDQZRj1/cO6bqm408dD6Z2Z9LKYpwFJSPVKA",
3488
+ "$argon2i$v=19$m=4096,t=3,p=1$c2hvcnRfc2FsdA$1l4kAwUdAApoCbFH7ghBEf7bsdrOQzE4axIJ3PV0Ncrd",
3489
+ "$argon2i$v=19$m=16384,t=3,p=1$c2hvcnRfc2FsdA$vvjDVog22A5x9eljmB+2yC8y",
3490
+ "$argon2i$v=19$m=16384,t=4,p=3$YW5vdGhlcl9zYWx0$K7unxwO5aeuZCpnIJ06FMCRKod3eRg8oIRzQrK3E6mGbyqlTvvl47jeDWq/5drF1COJkEF9Ty7FWXJZHa+vqlf2YZGp/4qSlAvKmdtJ/6JZU32iQItzMRwcfujHE+PBjbL5uz4966A"
3491
+ ]
3492
+ }
3493
+ ]
3494
+ },
3495
+ {
3496
+ "regex": "^\\$argon2id\\$v=19\\$m=[0-9]{1,6},t=[0-9]{1,2},p=[0-9]{1,2}\\$[^$]+\\$[^\\s]{6,}$",
3497
+ "modes": [
3498
+ {
3499
+ "john": null,
3500
+ "hashcat": null,
3501
+ "extended": false,
3502
+ "name": "argon2id"
3503
+ }
3504
+ ]
3505
+ },
3506
+ {
3507
+ "regex": "^\\$axcrypt\\$\\*2\\*[0-9]{1,7}\\*[a-f0-9]{128}\\*[a-f0-9]{288}\\*[0-9]{1,7}\\*[a-f0-9]{64}$",
3508
+ "modes": [
3509
+ {
3510
+ "john": "axcrypt",
3511
+ "hashcat": 23500,
3512
+ "extended": false,
3513
+ "name": "AxCrypt 2",
3514
+ "samples": [
3515
+ "$axcrypt$*2*10000*6d44c6d19076bce9920c5fb76b246c161926ce65abb93ec2003919d78898aadd5bc6e5754201ff25d681ad89fa2861d20ef7c3fd7bde051909dfef8adcb50491*68f78a1b80291a42b2a117d6209d3eb3541a8d47ed6b970b2b8294b2bc78347fc2b494a0599f8cba6d45e88fd8fbc5b4dd7e888f6c9543e679489de132167222e130d5925278693ad8599284705fdf99360b2199ed0005be05867b9b7aa6bb4be76f5f979819eb27cf590a47d81830575b2af09dda756360c844b89c7dcec099cfdd27d2d0c95d24f143405f303e4843*1000*debdeb8ea7b9800b01855de09b105fdb8840efc1f67dc742283d13a5570165f8",
3516
+ "$axcrypt$*2*28200*96fca6b5aff19cb540125e6452f1ab6e1cbf7097ad75326e7aa1726f687ed18e66a63295d735f458a138901be41d95d29ff760c7c4b4178320251f2ab0ecabd8*d1d90c425fd8e2d20b2aa7ef6f3ab9dcefad84917f9e07f65f8da61e7e84f490ba8007179718ce0033cbc887177c2b51ed00e88155741960ab667a5328f305969518bc436ee1ba28126a5be79b0b90f8a9c8a438cba9d0e59c0b6573cde124a8300a6fb01ff857485d302285f1eacd7f08d9cc70ec9fdf412b60bc5a728b5108ef8bda24caee5ab7cc4376951c080c6d*1000*fead8792ea352979ab19e7b287bf709f39df0706a7e460b5271d1ebc71014b3b",
3517
+ "$axcrypt$*2*23652*8817291e0611409390c50a8bdc99a98bf56d393174d7c177082391f7919ed392a701783790ad2eed49139ede2b1546dc4a9aaa142e2b2530b4c82cff03df18b1*2561a0c3f5e166c7273ea6fb59592a58b8d8235a379c82de39fc6d674291b6a25a268732c34eab1b092166ca4f9ef9e383325b90633896890f7dca4d29876ec5bb232ff89c8130aad917f93d9228a091a9996e1f14d4b130b5aad7516c11aa9143730d7b0ec8168b4d83bdd0ca1a9a36784572b9db992bd13289ecd577a421ded0576801e88c7275b2d5fa8eb7e540cb*1000*3dc38e68204a7060c3cd616ffcf6df17dbbb3c199e67ea85c7e29751b9ea2fc2"
3518
+ ]
3519
+ }
3520
+ ]
3521
+ },
3522
+ {
3523
+ "regex": "^\\$axcrypt\\$\\*1\\*[0-9]{1,7}\\*[a-f0-9]{32}\\*[a-f0-9]{48}(?:\\*[a-z0-9]+)?$",
3524
+ "modes": [
3525
+ {
3526
+ "john": "axcrypt",
3527
+ "hashcat": null,
3528
+ "extended": false,
3529
+ "name": "AxCrypt 1",
3530
+ "samples": [
3531
+ "$axcrypt$*1*1337*0fd9e7e2f907f480f8af162564f8f94b*af10c88878ba4e2c89b12586f93b7802453121ee702bc362",
3532
+ "$axcrypt$*1*31014*3408ae91dddc0b1750ed4223fd843364*1cc0f8fa8d89f44d284d0562ac7e93848c86ce9605907129",
3533
+ "$axcrypt$*1*20000*efd759ae68ae7edd709b9e1c2166d0f7*dcf4c1279b8e4d39475925b17f698c3ce39e9e7d82917272*68656c6c6f0a",
3534
+ "$axcrypt$*1*38574*ce4f58c1e85df1ea921df6d6c05439b4*3278c3c730f7887b1008e852e59997e2196710a5c6bc1813*66664a6b2074434a4520374d73592055626979204a6b755520736d6b4b20394e694a205548444320524578562065674b33202f42593d"
3535
+ ]
3536
+ }
3537
+ ]
3538
+ },
3539
+ {
3540
+ "regex": "^\\$rar5\\$[0-9]{2}\\$[a-f0-9]{32}\\$[0-9]{2}\\$[a-f0-9]{32}\\$[0-9]{1}\\$[a-f0-9]{16}$",
3541
+ "modes": [
3542
+ {
3543
+ "john": "rar5",
3544
+ "hashcat": 13000,
3545
+ "extended": false,
3546
+ "name": "RAR5",
3547
+ "samples": [
3548
+ "$rar5$16$38466361001011015181344360681307$15$00000000000000000000000000000000$8$cc7a30583e62676a",
3549
+ "$rar5$16$37526a0922b4adcc32f8fed5d51bb6c8$15$8955617d9b801def51d734095bb8ecdb$8$9f0b23c98ebb3653",
3550
+ "$rar5$16$ed9bd88cc649bd06bfd7dc418fcf5fbd$15$21771e718815d6f23073ea294540ce94$8$5c4361e549c999e1"
3551
+ ]
3552
+ }
3553
+ ]
3554
+ },
3555
+ {
3556
+ "regex": "^\\$RAR3\\$\\*[0-9]{1}\\*[a-f0-9]{16}\\*[a-f0-9]{8}\\*[0-9]{1,7}\\*[0-9]{1,6}\\*[0-9]{1}\\*[a-f0-9]{2,}\\*[0-9]{2}$",
3557
+ "modes": [
3558
+ {
3559
+ "john": "rar",
3560
+ "hashcat": 23700,
3561
+ "extended": false,
3562
+ "name": "RAR3 -p (Uncompressed)",
3563
+ "samples": [
3564
+ "$RAR3$*1*e54a73729887cb53*49b0a846*16*14*1*34620bcca8176642a210b1051901921e*30",
3565
+ "$RAR3$*1*c47c5bef0bbd1e98*965f1453*48*47*1*c5e987f81d316d9dcfdb6a1b27105ce63fca2c594da5aa2f6fdf2f65f50f0d66314f8a09da875ae19d6c15636b65c815*30"
3566
+ ]
3567
+ },
3568
+ {
3569
+ "john": "rar",
3570
+ "hashcat": 23800,
3571
+ "extended": false,
3572
+ "name": "RAR3 -p (Compressed)",
3573
+ "samples": [
3574
+ "$RAR3$*1*ad56eb40219c9da2*834064ce*32*13*1*eb47b1abe17a1a75bce6c92ab1cef3f4126035ea95deaf08b3f32a0c7b8078e1*33",
3575
+ "$RAR3$*1*b4eee1a48dc95d12*965f1453*64*47*1*0fe529478798c0960dd88a38a05451f9559e15f0cf20b4cac58260b0e5b56699d5871bdcc35bee099cc131eb35b9a116adaedf5ecc26b1c09cadf5185b3092e6*33"
3576
+ ]
3577
+ }
3578
+ ]
3579
+ },
3580
+ {
3581
+ "regex": "^\\$RAR3\\$\\*[0-9]{1}\\*[a-f0-9]{16}\\*[a-f0-9]{32}$",
3582
+ "modes": [
3583
+ {
3584
+ "john": "rar",
3585
+ "hashcat": 12500,
3586
+ "extended": false,
3587
+ "name": "RAR3 -hp",
3588
+ "samples": [
3589
+ "$RAR3$*0*45109af8ab5f297a*adbf6c5385d7a40373e8f77d7b89d317",
3590
+ "$RAR3$*0*7ce241baa2bd521b*3eb0017fa8843017952c53a3ac8332b6",
3591
+ "$RAR3$*0*c203c4d80a8a09dc*1f406154556d4c895a8be207fd2b5d0c"
3592
+ ]
3593
+ }
3594
+ ]
3595
+ },
3596
+ {
3597
+ "regex": "^\\$uido\\$[a-f0-9]{32}\\$[a-f0-9]{40}\\$\\d{1,7}\\$[a-f0-9]{80}$",
3598
+ "modes": [
3599
+ {
3600
+ "john": null,
3601
+ "hashcat": 26500,
3602
+ "extended": false,
3603
+ "name": "iPhone passcode (UID key + System Keybag)",
3604
+ "samples": [
3605
+ "$uido$77889b1bca161ce876d976a102c7bf82$3090545724551425617156367874312887832777$50000$2d4c86b71c0c04129a47c6468e2437d1fecd88e232a7b15112d5364682dc391dbbbb921cf6e02664"
3606
+ ]
3607
+ }
3608
+ ]
3609
+ },
3610
+ {
3611
+ "regex": "^\\$metamask\\$(?=.{44}\\$)(?:[a-z0-9+\\/]{4})*(?:|(?:[a-z0-9+\\/]{3}=)|(?:[a-z0-9+\\/]{2}==)|(?:[a-z0-9+\\/]{1}===))\\$(?=.{24}\\$)(?:[a-z0-9+\\/]{4})*(?:|(?:[a-z0-9+\\/]{3}=)|(?:[a-z0-9+\\/]{2}==)|(?:[a-z0-9+\\/]{1}===))\\$(?=.{64,})(?:[a-z0-9+\\/]{4})*(?:|(?:[a-z0-9+\\/]{3}=)|(?:[a-z0-9+\\/]{2}==)|(?:[a-z0-9+\\/]{1}===))$",
3612
+ "modes": [
3613
+ {
3614
+ "john": null,
3615
+ "hashcat": 26600,
3616
+ "extended": false,
3617
+ "name": "MetaMask Wallet",
3618
+ "samples": [
3619
+ "$metamask$AARgM5AgABE2eWgJcWAwQIAFmSYoASZVZBlAR4B0h2M=$8HrVMqsjfFTusMbegh+KWg==$7FPq7LjWe3t/TjDBtUwrJBpiG/Rdt+uf71dLCyUZd0pdtymBK6mSMZDyRfp/CzpjEPA1dU1BLDshcwM/1k6KdO//+mPWrgY4j49XTXIMnHNhJPfPv8s9rXiq8jLqetsStqtWmTZaD7fTtbzOYWR4gwQc98MxCnn/IrSnfCHungw1rLV5Xm0/hF7WfzFeEgcHknhJJP1xSeJCL9qI5DJ+lz7ksc0UVvHoiNJx8uvPBNkHpGQRNujwlnk="
3620
+ ]
3621
+ }
3622
+ ]
3623
+ },
3624
+ {
3625
+ "regex": "^SH2(?=.{60})(?:[a-z0-9+\/]{4})*(?:|(?:[a-z0-9+\/]{3}=)|(?:[a-z0-9+\/]{2}==)|(?:[a-z0-9+\/]{1}===))$",
3626
+ "modes": [
3627
+ {
3628
+ "john": "fortigate256",
3629
+ "hashcat": 26300,
3630
+ "extended": false,
3631
+ "name": "FortiGate256 (FortiOS256)",
3632
+ "samples": [
3633
+ "SH2lpcpFXM5QRlWYwY5vL9+5svfYyb+c79qENpxEoB3NtZpVxKwHjuq/9TH88U=",
3634
+ "SH2+n+OiTlautpJQF1NBcMU2H1otOvlAz9g5wzxwHw+4il3Aiixv9oPtKnRgCc=",
3635
+ "SH2B0YZCrPjDldskSin50dSxbw22VVy+Mb6Ldvb4eq1FV5q4KE3SYPotvX2KWI="
3636
+ ]
3637
+ }
3638
+ ]
3639
+ },
3640
+ {
3641
+ "regex": "^(?=.{28})(?:[a-z0-9+\\/]{4})*(?:|(?:[a-z0-9+\\/]{3}=)|(?:[a-z0-9+\\/]{2}==)|(?:[a-z0-9+\\/]{1}===))$",
3642
+ "modes": [
3643
+ {
3644
+ "john": null,
3645
+ "hashcat": 24800,
3646
+ "extended": false,
3647
+ "name": "Umbraco HMAC-SHA1",
3648
+ "samples": [
3649
+ "8uigXlGMNI7BzwLCJlDbcKR2FP4="
3650
+ ]
3651
+ }
3652
+ ]
3653
+ },
3654
+ {
3655
+ "regex": "^\\$bcve\\$\\d\\$[a-f0-9]{2}\\$[a-f0-9]{16}\\$[a-f0-9]{192}$",
3656
+ "modes": [
3657
+ {
3658
+ "john": null,
3659
+ "hashcat": 23900,
3660
+ "extended": false,
3661
+ "name": "Jetico BestCrypt v3 Volume Encryption",
3662
+ "samples": [
3663
+ "$bcve$3$08$234b8182cee7098b$35c12ef76a1e88175c4c222da3558310a0075bc7a06ecf46746d149c02a81fb8a97637d1103d2e13ddd5deaf982889594b18c12d7ca18a54875c5da4a47f90ae615ab94b8e3ed9e3c793d872a1b5ac35cfdb66c221d6d0853e9ff2e0f4435b43"
3664
+ ]
3665
+ }
3666
+ ]
3667
+ },
3668
+ {
3669
+ "regex": "^\\$BestCrypt\\$\\d\\$\\d\\$\\d\\$\\d{1,5}\\$\\d{1,3}\\$\\d+\\$\\d{1,3}\\$\\d{1,2}\\$[a-f0-9]{64,128}\\$\\d\\$[a-f0-9]{512}$",
3670
+ "modes": [
3671
+ {
3672
+ "john": "bestcrypt",
3673
+ "hashcat": null,
3674
+ "extended": false,
3675
+ "name": "Jetico BestCrypt Container Encryption (.jbc)",
3676
+ "samples": [
3677
+ "$BestCrypt$1$5$3$16384$240$3154116612$128$32$51f7450dccbb1c947dd46138bf0d80d588b6938b02505642dde9e1ea61481485$1$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",
3678
+ "$BestCrypt$1$5$3$16384$240$3154116612$10$64$7f36390c85bc5695d49d5d135cb09e00cbf738bb203d0f0a0181805acc15d1cc6f856af0f738c44eead724a854700700a1595b5b30d47242a277b60df6491dde$1$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"
3679
+ ]
3680
+ }
3681
+ ]
3682
+ },
3683
+ {
3684
+ "regex": "^\\$mongodb-scram\\$\\*\\d\\*(?=.{0,76}\\*)(?:[a-z0-9+\\/]{4})*(?:|(?:[a-z0-9+\\/]{3}=)|(?:[a-z0-9+\\/]{2}==)|(?:[a-z0-9+\\/]{1}===))\\*\\d{1,7}\\*(?=.{24}\\*)(?:[a-z0-9+\\/]{4})*(?:|(?:[a-z0-9+\\/]{3}=)|(?:[a-z0-9+\\/]{2}==)|(?:[a-z0-9+\\/]{1}===))\\*(?=.{28})(?:[a-z0-9+\\/]{4})*(?:|(?:[a-z0-9+\\/]{3}=)|(?:[a-z0-9+\\/]{2}==)|(?:[a-z0-9+\\/]{1}===))$",
3685
+ "modes": [
3686
+ {
3687
+ "john": null,
3688
+ "hashcat": 24100,
3689
+ "extended": false,
3690
+ "name": "MongoDB ServerKey SCRAM-SHA-1",
3691
+ "samples": [
3692
+ "$mongodb-scram$*0*dXNlcg==*10000*4p+f1tKpK18hQqrVr0UGOw==*Jv9lrpUQ2bVg2ZkXvRm2rppsqNw="
3693
+ ]
3694
+ }
3695
+ ]
3696
+ },
3697
+ {
3698
+ "regex": "^\\$mongodb-scram\\$\\*\\d\\*(?=.{0,88}\\*)(?:[a-z0-9+\\/]{4})*(?:|(?:[a-z0-9+\\/]{3}=)|(?:[a-z0-9+\\/]{2}==)|(?:[a-z0-9+\\/]{1}===))\\*\\d{1,7}\\*(?=.{40}\\*)(?:[a-z0-9+\\/]{4})*(?:|(?:[a-z0-9+\\/]{3}=)|(?:[a-z0-9+\\/]{2}==)|(?:[a-z0-9+\\/]{1}===))\\*(?=.{44})(?:[a-z0-9+\\/]{4})*(?:|(?:[a-z0-9+\\/]{3}=)|(?:[a-z0-9+\\/]{2}==)|(?:[a-z0-9+\\/]{1}===))$",
3699
+ "modes": [
3700
+ {
3701
+ "john": null,
3702
+ "hashcat": 24200,
3703
+ "extended": false,
3704
+ "name": "MongoDB ServerKey SCRAM-SHA-256",
3705
+ "samples": [
3706
+ "$mongodb-scram$*1*dXNlcg==*15000*qYaA1K1ZZSSpWfY+yqShlcTn0XVcrNipxiYCLQ==*QWVry9aTS/JW+y5CWCBr8lcEH9Kr/D4je60ncooPer8="
3707
+ ]
3708
+ }
3709
+ ]
3710
+ },
3711
+ {
3712
+ "regex": "^\\$scram\\$.+\\$\\d{1,5}\\$(?:[a-z0-9+\\/]{4})*(?:|(?:[a-z0-9+\\/]{3}=)|(?:[a-z0-9+\\/]{2}==)|(?:[a-z0-9+\\/]{1}===))\\$(?:[a-z0-9+\\/]{4})*(?:|(?:[a-z0-9+\\/]{3}=)|(?:[a-z0-9+\\/]{2}==)|(?:[a-z0-9+\\/]{1}===))$",
3713
+ "modes": [
3714
+ {
3715
+ "john": "scram",
3716
+ "hashcat": null,
3717
+ "extended": false,
3718
+ "name": "MongoDB SCRAM PBKDF2-SHA1",
3719
+ "samples": [
3720
+ "$scram$someadmin$10000$wf42AF7JaU1NSeBaSmkKzw==$H6A5RF0qz6DrcWNNX4xe+wIeVEw=",
3721
+ "$scram$admin$10000$ouQdw5om9Uc5gxulO9F/8w==$DSnATYsgoE8InL5Petfjp8MWGh4="
3722
+ ]
3723
+ }
3724
+ ]
3725
+ },
3726
+ {
3727
+ "regex": "^\\$mongodb\\$(?:(?:0\\$.+\\$[a-f0-9]{32})|(?:1\\$.+\\$[a-f0-9]{16}\\$[a-f0-9]{32}))$",
3728
+ "modes": [
3729
+ {
3730
+ "john": "mongodb",
3731
+ "hashcat": null,
3732
+ "extended": false,
3733
+ "name": "MongoDB (system / network)",
3734
+ "samples": [
3735
+ "$mongodb$0$sa$75692b1d11c072c6c79332e248c4f699",
3736
+ "$mongodb$1$sa$58d3229c83e3f87e$0c85e3f74adce5d037426791940c820a",
3737
+ "$mongodb$1$eight18_characters$8c82aec197929775$5c414259f7f7a42f8c4d1b6ffb37913a"
3738
+ ]
3739
+ }
3740
+ ]
3741
+ },
3742
+ {
3743
+ "regex": "^\\$iwork\\$\\d\\$\\d\\$\\d\\$\\d{4,6}\\$[a-f0-9]{16,32}\\$[a-f0-9]{32}\\$[a-f0-9]{128}$",
3744
+ "modes": [
3745
+ {
3746
+ "john": "iwork",
3747
+ "hashcat": 23300,
3748
+ "extended": false,
3749
+ "name": "Apple iWork",
3750
+ "samples": [
3751
+ "$iwork$2$1$1$4000$b31b7320d1e7a5ee$01f54d6f9e5090eb16fef2b05f8242bc$69561c985268326b7353fb22c3685a378341127557bd2bbea1bd10afb31f2127344707b662a2c29480c32b8b93dea0538327f604e5aa8733be83af25f370f7ac",
3752
+ "$iwork$1$2$1$100000$d77ce46a68697e08b76ac91de9117541$e7b72b2848dc27efed883963b00b1ac7$e794144cd2f04bd50e23957b30affb2898554a99a3accb7506c17132654e09c04bbeff45dc4f8a8a1db5fd1592f699eeff2f9a8c31b503e9631a25a344b517f7",
3753
+ "$iwork$1$2$1$100000$9d406f6bbb6d3798273a1352c33ed387$7dfef75b06f8cb0092802ad833d6e88c$fc4dd694e0b5fbb123d1a6f1abec30e51176e6f0d574e4988e9c82d354baa3540e2f2268d096d9e46c1080eda32ca8eb8abfeeaa01466d86706b03eb8bd5f0e5",
3754
+ "$iwork$2$1$1$4000$736f6d6553616c74$a9d975f8b3e1bf0c388944b457127df4$09eb5d093584376001d4c94e9d0a41eb8a2993132849c5aed8e56e7bd0e8ed50ba38aced793e3480675990c828c01d25fe245cc6aa603c6cb1a0425988f1d3dc"
3755
+ ]
3756
+ }
3757
+ ]
3758
+ },
3759
+ {
3760
+ "regex": "^SQLCIPHER\\*\\d\\*\\d{1,6}\\*[a-f0-9]{32}\\*[a-f0-9]{32}\\*[a-f0-9]{32}$",
3761
+ "modes": [
3762
+ {
3763
+ "john": null,
3764
+ "hashcat": 24610,
3765
+ "extended": false,
3766
+ "name": "SQLCipher",
3767
+ "samples": [
3768
+ "SQLCIPHER*1*64000*25548249195677404156261816261456*85b5e156e1cf1e0be5e9f4217186817b*33435c230bbc7989bbd027630e3f47cd"
3769
+ ]
3770
+ }
3771
+ ]
3772
+ },
3773
+ {
3774
+ "regex": "^[a-f0-9]{10}$",
3775
+ "modes": [
3776
+ {
3777
+ "john": null,
3778
+ "hashcat": 24700,
3779
+ "extended": false,
3780
+ "name": "Stuffit5",
3781
+ "samples": [
3782
+ "66a75cb059"
3783
+ ]
3784
+ }
3785
+ ]
3786
+ },
3787
+ {
3788
+ "regex": "^\\$stellar\\$(?=.{24}\\$)(?:[a-z0-9+\\/]{4})*(?:|(?:[a-z0-9+\\/]{3}=)|(?:[a-z0-9+\\/]{2}==)|(?:[a-z0-9+\\/]{1}===))\\$(?=.{16}\\$)(?:[a-z0-9+\\/]{4})*(?:|(?:[a-z0-9+\\/]{3}=)|(?:[a-z0-9+\\/]{2}==)|(?:[a-z0-9+\\/]{1}===))\\$(?=.{96}$)(?:[a-z0-9+\\/]{4})*(?:|(?:[a-z0-9+\\/]{3}=)|(?:[a-z0-9+\\/]{2}==)|(?:[a-z0-9+\\/]{1}===))$",
3789
+ "modes": [
3790
+ {
3791
+ "john": null,
3792
+ "hashcat": 25500,
3793
+ "extended": false,
3794
+ "name": "Stargazer Stellar Wallet XLM",
3795
+ "samples": [
3796
+ "$stellar$YAlIJziURRcBEWUwRSRDWA==$EutMmmcV5Hbf3p1I$rfSAF349RvGKG4R4Z2VCrH9WjNEKjbJa9hpOja9Yn8MwXruuFEMtw47HPn9CYj+JJ5Rb4Z87Wejj1c4fqpbMZHFOnqtQsVAr"
3797
+ ]
3798
+ }
3799
+ ]
3800
+ },
3801
+ {
3802
+ "regex": "^\\$knx-ip-secure-device-authentication-code\\$\\*[a-f0-9]{4}\\*[a-f0-9]{64}\\*[a-f0-9]{32}$",
3803
+ "modes": [
3804
+ {
3805
+ "john": null,
3806
+ "hashcat": 25900,
3807
+ "extended": false,
3808
+ "name": "KNX IP Secure - Device Authentication Code",
3809
+ "samples": [
3810
+ "$knx-ip-secure-device-authentication-code$*3033*fa7c0d787a9467c209f0a6e7cf16069ed704f3959dce19e45d7935c0a91bce41*f927640d9bbe9a4b0b74dd3289ad41ec"
3811
+ ]
3812
+ }
3813
+ ]
3814
+ },
3815
+ {
3816
+ "regex": "^\\$mozilla\\$\\*AES\\*[a-f0-9]{40}\\*[a-f0-9]{64}\\*\\d{1,6}\\*[a-f0-9]{32}\\*[a-f0-9]{32}$",
3817
+ "modes": [
3818
+ {
3819
+ "john": null,
3820
+ "hashcat": 26100,
3821
+ "extended": false,
3822
+ "name": "Mozilla key4.db",
3823
+ "samples": [
3824
+ "$mozilla$*AES*5add91733b9b13310ea79a4b38de5c3f797c3bf1*54c17e2a8a066cbdc55f2080c5e9f02ea3954d712cb34b4547f5186548f46512*10000*040e4b5a00f993e63f67a34f6cfc5704*eae9c6c003e6d1b2aa8aa21630838808"
3825
+ ]
3826
+ }
3827
+ ]
3828
+ },
3829
+ {
3830
+ "regex": "^\\$mozilla\\$\\*(?:(?:3DES\\*[a-f0-9]{40}\\*[a-f0-9]{40}\\*[a-f0-9]{32})|(?:\\d\\*\\d{2}\\*\\d\\*[a-f0-9]{40}\\*\\d{2}\\*[a-f0-9]{22}\\*\\d{2}\\*[a-f0-9]{32}\\*\\d{2}\\*[a-f0-9]{40}))$",
3831
+ "modes": [
3832
+ {
3833
+ "john": "mozilla",
3834
+ "hashcat": 26000,
3835
+ "extended": false,
3836
+ "name": "Mozilla key3.db",
3837
+ "samples": [
3838
+ "$mozilla$*3DES*b735d19e6cadb5136376a98c2369f22819d08c79*2b36961682200a877f7d5550975b614acc9fefe3*f03f3575fd5bdbc9e32232316eab7623",
3839
+ "$mozilla$*3*20*1*5199adfab24e85e3f308bacf692115f23dcd4f8f*11*2a864886f70d010c050103*16*9debdebd4596b278de029b2b2285ce2e*20*2c4d938ccb3f7f1551262185ccee947deae3b8ae"
3840
+ ]
3841
+ }
3842
+ ]
3843
+ },
3844
+ {
3845
+ "regex": "^[a-z]{16}$",
3846
+ "modes": [
3847
+ {
3848
+ "john": null,
3849
+ "hashcat": 26200,
3850
+ "extended": false,
3851
+ "name": "OpenEdge Progress 4GL Encode",
3852
+ "samples": [
3853
+ "lebVZteiEsdpkncc",
3854
+ "pjqtudckibycRKbj",
3855
+ "bkibllkLdqlpeIol",
3856
+ "OpalkkljtlheSihj"
3857
+ ]
3858
+ }
3859
+ ]
3860
+ },
3861
+ {
3862
+ "regex": "^\\$bitwarden\\$\\d\\*\\d{1,7}\\*(?:(?:.+\\*[a-f0-9]{32}\\*[a-f0-9]{160})|(?:(?:[a-z0-9+\\/]{4})*(?:|(?:[a-z0-9+\\/]{3}=)|(?:[a-z0-9+\\/]{2}==)|(?:[a-z0-9+\\/]{1}===))\\*(?:[a-z0-9+\\/]{4})*(?:|(?:[a-z0-9+\\/]{3}=)|(?:[a-z0-9+\\/]{2}==)|(?:[a-z0-9+\\/]{1}===))))$",
3863
+ "modes": [
3864
+ {
3865
+ "john": "bitwarden",
3866
+ "hashcat": 23400,
3867
+ "extended": false,
3868
+ "name": "Bitwarden",
3869
+ "samples": [
3870
+ "$bitwarden$1*100000*bm9yZXBseUBoYXNoY2F0Lm5ldA==*zAXL7noQxkIJG82vWuqyDsnoqnKAVU7gE/8IRI6BlMs=",
3871
+ "$bitwarden$0*5000*lulu@mailinator.com*20d9c3c9daaed076026b6cb5887d3273*3bbcb4c7cec45d71c7238291573eb8a8a0f71e6191fb708b07f2cb43b26a56b533ba35a5906abdc08600baedb18fbc042a3b50f4549890210a254129b0ae749394c3c39b33ca183c605ee97b167329d3",
3872
+ "$bitwarden$0*5000*user@example.com*ce49243f6593589f7fa825411fbeb8d7*d90deb720836c5ea5c91eccc896035e510fc8951606266e840b6d7748a623ef68cf98fb69ec8ab5b0fe6a0ddd48edcda9aa6eef07125d89ea417477b96bfd2db462f2b2363f73b5553d78e8b3f372e3a"
3873
+ ]
3874
+ }
3875
+ ]
3876
+ },
3877
+ {
3878
+ "regex": "^\\$xmpp-scram\\$\\d\\$\\d{1,8}\\$\\d{1,8}\\$[a-f0-9]{0,512}\\$[a-f0-9]{40}$",
3879
+ "modes": [
3880
+ {
3881
+ "john": "xmpp-scram",
3882
+ "hashcat": 23200,
3883
+ "extended": false,
3884
+ "name": "XMPP SCRAM PBKDF2-SHA1",
3885
+ "samples": [
3886
+ "$xmpp-scram$0$4096$45$353835323736323530353932363531393630313632353634313335323434323038393931323138373138343134$6d5b543b985dc6c0645da3c83d114fce121aa51d",
3887
+ "$xmpp-scram$0$4096$36$37333536663261622d613666622d346333642d396232622d626432646237633338343064$38f79a6e3e64c07f731570d531ec05365aa05306",
3888
+ "$xmpp-scram$0$4096$16$4f67aec1bd53f5f2f74652e69a3b8f32$4aec3caa8ace5180efa7a671092646c041ab1496",
3889
+ "$xmpp-scram$0$4096$16$1f7fcb384d5bcc61dfb1231ae1b32a2f$a2d076d56b0152ed557ad7d38fce93159bc63c9b",
3890
+ "$xmpp-scram$0$4096$24$bc1bd6638a1231ffd54f608983425eacf729d8455a469197$aee9254762b23a3950fd7c803caab5f6654587c8"
3891
+ ]
3892
+ }
3893
+ ]
3894
+ },
3895
+ {
3896
+ "regex": "^\\$keychain\\$\\*[a-f0-9]{40}\\*[a-f0-9]{16}\\*[a-f0-9]{96}$",
3897
+ "modes": [
3898
+ {
3899
+ "john": "keychain",
3900
+ "hashcat": 23100,
3901
+ "extended": false,
3902
+ "name": "Apple macOS Keychain",
3903
+ "samples": [
3904
+ "$keychain$*74cd1efd49e54a8fdc8750288801e09fa26a33b1*66001ad4e0498dc7*5a084b7314971b728cb551ac40b2e50b7b5bd8b8496b902efe7af07538863a45394ead8399ec581681f7416003c49cc7",
3905
+ "$keychain$*10f7445c8510fa40d9ef6b4e0f8c772a9d37e449*f3d19b2a45cdcccb*8c3c3b1c7d48a24dad4ccbd4fd794ca9b0b3f1386a0a4527f3548bfe6e2f1001804b082076641bbedbc9f3a7c33c084b",
3906
+ "$keychain$*a88cd6fbaaf40bc5437eee015a0f95ab8ab70545*b12372b1b7cb5c1f*1f5c596bcdd015afc126bc86f42dd092cb9d531d14a0aafaa89283f1bebace60562d497332afbd952fd329cc864144ec",
3907
+ "$keychain$*3a473dd308b1713ddc76fc976758eb543779a228*570b762ec2b177d0*a1f491231412ff74344244db4d98b1dab6e40a8fc63a11f0d5cdabf97fce5c4fa8ae0a1f95d0398d37e3d45e9fa07aa7"
3908
+ ]
3909
+ }
3910
+ ]
3911
+ },
3912
+ {
3913
+ "regex": "^\\$PEM\\$1\\$\\d\\$[a-f0-9]{16}\\$\\d{1,8}\\$[a-f0-9]{16,32}\\$\\d{1,8}\\$[a-f0-9]{64,}$",
3914
+ "modes": [
3915
+ {
3916
+ "john": "pem",
3917
+ "hashcat": 24410,
3918
+ "extended": false,
3919
+ "name": "PKCS#8 Private Keys (PBKDF2-HMAC-SHA1 + 3DES/AES)",
3920
+ "samples": [
3921
+ "$PEM$1$4$f5662bd8383b4b40$2048$2993b585d3fb2e7b235ed13d90f637e2$1232$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",
3922
+ "$PEM$1$1$cbb6cdcfc1b27cc8$2048$9b9e633ba83d48c2$144$54f2ab743656618ae51062fd6f2ff07a5078dcf3a1fa52075f50f4508e0c342b1f3e29703f4932c689e29f385f7ad73bf96ec7bb536ea8dafd40b9e5aee6f3e27dc21ee538d9e146a9361fc34ae5dd818b23c106688a451a5e180362954698a35111cef9315ffcd6cb4d440a6899177ff0384a9533923c05f97a5bbd3f94415688ca5c3af97f9edab771dc84807a6bcc"
3923
+ ]
3924
+ }
3925
+ ]
3926
+ },
3927
+ {
3928
+ "regex": "^\\$PEM\\$2\\$\\d\\$[a-f0-9]{16}\\$\\d{1,8}\\$[a-f0-9]{16,32}\\$\\d{1,8}\\$[a-f0-9]{64,}$",
3929
+ "modes": [
3930
+ {
3931
+ "john": null,
3932
+ "hashcat": 24420,
3933
+ "extended": false,
3934
+ "name": "PKCS#8 Private Keys (PBKDF2-HMAC-SHA256 + 3DES/AES)",
3935
+ "samples": [
3936
+ "$PEM$2$4$ed02960b8a10b1f1$2048$a634c482a95f23bd8fada558e1bac2cf$1232$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"
3937
+ ]
3938
+ }
3939
+ ]
3141
3940
  }
3142
3941
  ]