haiti-hash 1.2.3 → 1.4.0

Sign up to get free protection for your applications and to get access to all the features.
data/data/prototypes.json CHANGED
@@ -339,7 +339,7 @@
339
339
  ]
340
340
  },
341
341
  {
342
- "regex": "^[a-f0-9]{32}(:.+)?$",
342
+ "regex": "^[a-f0-9]{32}(?::.+)?$",
343
343
  "modes": [
344
344
  {
345
345
  "john": "raw-md5",
@@ -360,7 +360,7 @@
360
360
  {
361
361
  "john": null,
362
362
  "hashcat": 2600,
363
- "extended": false,
363
+ "extended": true,
364
364
  "name": "Double MD5"
365
365
  },
366
366
  {
@@ -378,31 +378,31 @@
378
378
  {
379
379
  "john": "dynamic_160",
380
380
  "hashcat": null,
381
- "extended": false,
381
+ "extended": true,
382
382
  "name": "Haval-128 (3 rounds)"
383
383
  },
384
384
  {
385
385
  "john": "dynamic_180",
386
386
  "hashcat": null,
387
- "extended": false,
387
+ "extended": true,
388
388
  "name": "Haval-128 (5 rounds)"
389
389
  },
390
390
  {
391
391
  "john": null,
392
392
  "hashcat": null,
393
- "extended": false,
393
+ "extended": true,
394
394
  "name": "Tiger-128"
395
395
  },
396
396
  {
397
397
  "john": null,
398
398
  "hashcat": null,
399
- "extended": false,
399
+ "extended": true,
400
400
  "name": "Skein-256(128)"
401
401
  },
402
402
  {
403
403
  "john": null,
404
404
  "hashcat": null,
405
- "extended": false,
405
+ "extended": true,
406
406
  "name": "Skein-512(128)"
407
407
  },
408
408
  {
@@ -615,14 +615,46 @@
615
615
  "extended": true,
616
616
  "name": "md5($salt.pad16($pass))"
617
617
  },
618
+ {
619
+ "john": null,
620
+ "hashcat": 4410,
621
+ "extended": true,
622
+ "name": "md5(sha1($pass).$salt)",
623
+ "samples": [
624
+ "bc8319c0220bff8a0d7f5d703114a725:34659348756345251"
625
+ ]
626
+ },
618
627
  {
619
628
  "john": null,
620
629
  "hashcat": null,
621
- "extended": false,
630
+ "extended": true,
622
631
  "name": "MD6-128",
623
632
  "samples": [
624
633
  "8cd9a30bfde990878c06be4a6111f726"
625
634
  ]
635
+ },
636
+ {
637
+ "john": null,
638
+ "hashcat": 2810,
639
+ "extended": false,
640
+ "name": "IPB 2.x (Invision Power Board)",
641
+ "samples": [
642
+ "022f7e02b3314f7d0968f73c00ba759f:67588"
643
+ ]
644
+ }
645
+ ]
646
+ },
647
+ {
648
+ "regex": "^[a-f0-9]{32}(?::.{1,32})?$",
649
+ "modes": [
650
+ {
651
+ "john": null,
652
+ "hashcat": 12,
653
+ "extended": true,
654
+ "name": "PostgreSQL",
655
+ "samples": [
656
+ "93a8cf6a7d43e3b5bcd2dc6abb3e02c6:27032153220030464358344758762807"
657
+ ]
626
658
  }
627
659
  ]
628
660
  },
@@ -930,40 +962,7 @@
930
962
  ]
931
963
  },
932
964
  {
933
- "regex": "^[a-f0-9]{32}:.{5}$",
934
- "modes": [
935
- {
936
- "john": null,
937
- "hashcat": 2811,
938
- "extended": false,
939
- "name": "IP.Board \u2265 v2+"
940
- }
941
- ]
942
- },
943
- {
944
- "regex": "^[a-f0-9]{32}:.{8}$",
945
- "modes": [
946
- {
947
- "john": null,
948
- "hashcat": 2811,
949
- "extended": false,
950
- "name": "MyBB \u2265 v1.2+"
951
- }
952
- ]
953
- },
954
- {
955
- "regex": "^[a-z0-9]{34}$",
956
- "modes": [
957
- {
958
- "john": null,
959
- "hashcat": null,
960
- "extended": false,
961
- "name": "CryptoCurrency(Adress)"
962
- }
963
- ]
964
- },
965
- {
966
- "regex": "^[a-f0-9]{40}(:.+)?$",
965
+ "regex": "^[a-f0-9]{40}(:[^:]+)?$",
967
966
  "modes": [
968
967
  {
969
968
  "john": "raw-sha1",
@@ -998,7 +997,7 @@
998
997
  {
999
998
  "john": null,
1000
999
  "hashcat": null,
1001
- "extended": false,
1000
+ "extended": true,
1002
1001
  "name": "Tiger-160"
1003
1002
  },
1004
1003
  {
@@ -1166,7 +1165,7 @@
1166
1165
  ]
1167
1166
  },
1168
1167
  {
1169
- "regex": "^(\\$ripemd\\$)?[a-f0-9]{40}(:.+)?$",
1168
+ "regex": "^(\\$ripemd\\$)?[a-f0-9]{40}(:[^:]+)?$",
1170
1169
  "modes": [
1171
1170
  {
1172
1171
  "john": "ripemd-160",
@@ -1181,6 +1180,20 @@
1181
1180
  }
1182
1181
  ]
1183
1182
  },
1183
+ {
1184
+ "regex": "^[a-f0-9]{40}:[a-f0-9]+:[a-f0-9]+$",
1185
+ "modes": [
1186
+ {
1187
+ "john": null,
1188
+ "hashcat": 29000,
1189
+ "extended": true,
1190
+ "name": "sha1($salt.sha1(utf16le($username).':'.utf16le($pass)))",
1191
+ "samples": [
1192
+ "339b5eaa53f28516008e9ca710857d3a4785b6fc:8ca064ff42fcab5a8f0692544b8dd3d3054bd73fe9afaa08c6b6b310538cc9a7:757365726e616d65"
1193
+ ]
1194
+ }
1195
+ ]
1196
+ },
1184
1197
  {
1185
1198
  "regex": "^(\\*)?[a-f0-9]{40}$",
1186
1199
  "modes": [
@@ -1328,7 +1341,7 @@
1328
1341
  ]
1329
1342
  },
1330
1343
  {
1331
- "regex": "^{ssha1}[0-9]{2}\\$[a-z0-9$\\/.]{44}$",
1344
+ "regex": "^{ssha1}\\d{2}\\$[a-z0-9$\\/.]{44}$",
1332
1345
  "modes": [
1333
1346
  {
1334
1347
  "john": "aix-ssha1",
@@ -1356,7 +1369,7 @@
1356
1369
  ]
1357
1370
  },
1358
1371
  {
1359
- "regex": "^(\\$md5,rounds=[0-9]+\\$|\\$md5\\$rounds=[0-9]+\\$|\\$md5\\$)[a-z0-9\\/.]{0,16}(\\$|\\$\\$)[a-z0-9\\/.]{22}$",
1372
+ "regex": "^(\\$md5,rounds=\\d+\\$|\\$md5\\$rounds=\\d+\\$|\\$md5\\$)[a-z0-9\\/.]{0,16}(\\$|\\$\\$)[a-z0-9\\/.]{22}$",
1360
1373
  "modes": [
1361
1374
  {
1362
1375
  "john": "sunmd5",
@@ -1459,19 +1472,19 @@
1459
1472
  {
1460
1473
  "john": null,
1461
1474
  "hashcat": null,
1462
- "extended": false,
1475
+ "extended": true,
1463
1476
  "name": "Skein-256(224)"
1464
1477
  },
1465
1478
  {
1466
1479
  "john": null,
1467
1480
  "hashcat": null,
1468
- "extended": false,
1481
+ "extended": true,
1469
1482
  "name": "Skein-512(224)"
1470
1483
  },
1471
1484
  {
1472
1485
  "john": "dynamic_330",
1473
1486
  "hashcat": null,
1474
- "extended": false,
1487
+ "extended": true,
1475
1488
  "name": "Skein-224"
1476
1489
  },
1477
1490
  {
@@ -1483,7 +1496,7 @@
1483
1496
  ]
1484
1497
  },
1485
1498
  {
1486
- "regex": "^(\\$2[axy]|\\$2)\\$[0-9]{2}\\$[a-z0-9\\/.]{53}$",
1499
+ "regex": "^(\\$2[abxy]|\\$2)\\$\\d{2}\\$[a-z0-9\\/.]{53}$",
1487
1500
  "modes": [
1488
1501
  {
1489
1502
  "john": "bcrypt",
@@ -1520,6 +1533,15 @@
1520
1533
  "samples": [
1521
1534
  "$2a$05$Uo385Fa0g86uUXHwZxB90.qMMdRFExaXePGka4WGFv.86I45AEjmO"
1522
1535
  ]
1536
+ },
1537
+ {
1538
+ "john": null,
1539
+ "hashcat": 28400,
1540
+ "extended": true,
1541
+ "name": "bcrypt(sha512($pass)) / bcryptsha512",
1542
+ "samples": [
1543
+ "$2a$12$KhivLhCuLhSyMBOxLxCyLu78x4z2X/EJdZNfS3Gy36fvRt56P2jbS"
1544
+ ]
1523
1545
  }
1524
1546
  ]
1525
1547
  },
@@ -1546,7 +1568,7 @@
1546
1568
  ]
1547
1569
  },
1548
1570
  {
1549
- "regex": "^\\$bcrypt-sha256\\$(2[axy]|2)\\,[0-9]+\\$[a-z0-9\\/.]{22}\\$[a-z0-9\\/.]{31}$",
1571
+ "regex": "^\\$bcrypt-sha256\\$(2[axy]|2)\\,\\d+\\$[a-z0-9\\/.]{22}\\$[a-z0-9\\/.]{31}$",
1550
1572
  "modes": [
1551
1573
  {
1552
1574
  "john": null,
@@ -1659,7 +1681,7 @@
1659
1681
  {
1660
1682
  "john": null,
1661
1683
  "hashcat": null,
1662
- "extended": false,
1684
+ "extended": true,
1663
1685
  "name": "Skein-512(256)"
1664
1686
  },
1665
1687
  {
@@ -1712,21 +1734,39 @@
1712
1734
  },
1713
1735
  {
1714
1736
  "john": "dynamic_64",
1715
- "hashcat": null,
1737
+ "hashcat": 21400,
1716
1738
  "extended": true,
1717
- "name": "sha256(sha256_raw($pass))"
1739
+ "name": "sha256(sha256_raw($pass))",
1740
+ "samples": [
1741
+ "0cc1b58a543f372327aa0281e97ab56e345267ee46feabf7709515debb7ec43c"
1742
+ ]
1718
1743
  },
1719
1744
  {
1720
1745
  "john": "dynamic_65",
1721
- "hashcat": null,
1746
+ "hashcat": 20710,
1722
1747
  "extended": true,
1723
- "name": "sha256(sha256($pass).$salt)"
1748
+ "name": "sha256(sha256($pass).$salt)",
1749
+ "samples": [
1750
+ "bfede293ecf6539211a7305ea218b9f3f608953130405cda9eaba6fb6250f824:7218532375810603"
1751
+ ]
1724
1752
  },
1725
1753
  {
1726
1754
  "john": "dynamic_66",
1727
- "hashcat": null,
1755
+ "hashcat": 20720,
1728
1756
  "extended": true,
1729
- "name": "sha256($salt.sha256($pass))"
1757
+ "name": "sha256($salt.sha256($pass))",
1758
+ "samples": [
1759
+ "bae9edada8358fcebcd811f7d362f46277fb9d488379869fba65d79701d48b8b:869dc2ed80187919"
1760
+ ]
1761
+ },
1762
+ {
1763
+ "john": null,
1764
+ "hashcat": 21420,
1765
+ "extended": true,
1766
+ "name": "sha256($salt.sha256_raw($pass))",
1767
+ "samples": [
1768
+ "5934ea4d670c13a71155faba42056b2525f71bdc9215d31108990c11bf3d98e3:9269771356270099311432765354522635185291064175409115041569"
1769
+ ]
1730
1770
  },
1731
1771
  {
1732
1772
  "john": "dynamic_67",
@@ -1780,13 +1820,13 @@
1780
1820
  {
1781
1821
  "john": null,
1782
1822
  "hashcat": null,
1783
- "extended": false,
1823
+ "extended": true,
1784
1824
  "name": "SAM(LM_Hash:NT_Hash)"
1785
1825
  }
1786
1826
  ]
1787
1827
  },
1788
1828
  {
1789
- "regex": "^(\\$chap\\$0\\*)?[a-f0-9]{32}[\\*:][a-f0-9]{32}(:[0-9]{2})?$",
1829
+ "regex": "^(\\$chap\\$0\\*)?[a-f0-9]{32}[\\*:][a-f0-9]{32}(:\\d{2})?$",
1790
1830
  "modes": [
1791
1831
  {
1792
1832
  "john": "chap",
@@ -1814,7 +1854,7 @@
1814
1854
  ]
1815
1855
  },
1816
1856
  {
1817
- "regex": "^{ssha256}[0-9]{2}\\$[a-z0-9$\\/.]{60}$",
1857
+ "regex": "^{ssha256}\\d{2}\\$[a-z0-9$\\/.]{60}$",
1818
1858
  "modes": [
1819
1859
  {
1820
1860
  "john": "aix-ssha256",
@@ -1885,13 +1925,13 @@
1885
1925
  {
1886
1926
  "john": null,
1887
1927
  "hashcat": null,
1888
- "extended": false,
1928
+ "extended": true,
1889
1929
  "name": "Skein-512(384)"
1890
1930
  },
1891
1931
  {
1892
1932
  "john": null,
1893
1933
  "hashcat": null,
1894
- "extended": false,
1934
+ "extended": true,
1895
1935
  "name": "Skein-1024(384)"
1896
1936
  },
1897
1937
  {
@@ -1974,7 +2014,7 @@
1974
2014
  ]
1975
2015
  },
1976
2016
  {
1977
- "regex": "^{ssha512}[0-9]{2}\\$[a-z0-9\\/.]{16,48}\\$[a-z0-9\\/.]{86}$",
2017
+ "regex": "^{ssha512}\\d{2}\\$[a-z0-9\\/.]{16,48}\\$[a-z0-9\\/.]{86}$",
1978
2018
  "modes": [
1979
2019
  {
1980
2020
  "john": "aix-ssha512",
@@ -2038,7 +2078,10 @@
2038
2078
  "john": "raw-blake2",
2039
2079
  "hashcat": null,
2040
2080
  "extended": false,
2041
- "name": "BLAKE2-512"
2081
+ "name": "BLAKE2-512",
2082
+ "samples": [
2083
+ "4245af08b46fbb290222ab8a68613621d92ce78577152d712467742417ebc1153668f1c9e1ec1e152a32a9c242dc686d175e087906377f0c483c5be2cb68953e"
2084
+ ]
2042
2085
  },
2043
2086
  {
2044
2087
  "john": "skein-512",
@@ -2049,7 +2092,7 @@
2049
2092
  {
2050
2093
  "john": null,
2051
2094
  "hashcat": null,
2052
- "extended": false,
2095
+ "extended": true,
2053
2096
  "name": "Skein-1024(512)"
2054
2097
  },
2055
2098
  {
@@ -2136,11 +2179,38 @@
2136
2179
  "john": "raw-blake2",
2137
2180
  "hashcat": 600,
2138
2181
  "extended": false,
2139
- "name": "BLAKE2-512"
2182
+ "name": "BLAKE2-512",
2183
+ "samples": [
2184
+ "$BLAKE2$021ced8799296ceca557832ab941a50b4a11f83478cf141f51f933f653ab9fbcc05a037cddbed06e309bf334942c4e58cdf1a46e237911ccd7fcf9787cbc7fd0",
2185
+ "$BLAKE2$1f7d9b7c9a90f7bfc66e52b69f3b6c3befbd6aee11aac860e99347a495526f30c9e51f6b0db01c24825092a09dd1a15740f0ade8def87e60c15da487571bcef7",
2186
+ "$BLAKE2$296c269e70ac5f0095e6fb47693480f0f7b97ccd0307f5c3bfa4df8f5ca5c9308a0e7108e80a0a9c0ebb715e8b7109b072046c6cd5e155b4cfd2f27216283b1e"
2187
+ ]
2188
+ }
2189
+ ]
2190
+ },
2191
+ {
2192
+ "regex": "^\\$BLAKE2\\$[a-f0-9]{128}(?::.+)$",
2193
+ "modes": [
2194
+ {
2195
+ "john": null,
2196
+ "hashcat": 610,
2197
+ "extended": true,
2198
+ "name": "BLAKE2-512($pass.$salt)",
2199
+ "samples": [
2200
+ "$BLAKE2$41fcd44c789c735c08b43a871b81c8f617ca43918d38aee6cf8291c58a0b00a03115857425e5ff6f044be7a5bec8536b52d6c9992e21cd43cdca8a55bbf1f5c1:1033"
2201
+ ]
2202
+ },
2203
+ {
2204
+ "john": null,
2205
+ "hashcat": 620,
2206
+ "extended": true,
2207
+ "name": "BLAKE2-512($salt.$pass)",
2208
+ "samples": [
2209
+ "$BLAKE2$f0325fdfc3f82a014935442f7adbc069d4636d67276a85b09f8de368f122cf5195a0b780d7fee709fbf1dcd02ddcb581df84508cf1fb0f3393af1be0565491c6:3301"
2210
+ ]
2140
2211
  }
2141
2212
  ]
2142
2213
  },
2143
-
2144
2214
  {
2145
2215
  "regex": "^[a-f0-9]{136}$",
2146
2216
  "modes": [
@@ -2178,7 +2248,7 @@
2178
2248
  ]
2179
2249
  },
2180
2250
  {
2181
- "regex": "^\\$ml\\$[0-9]+\\$[a-f0-9]{64}\\$[a-f0-9]{128}$",
2251
+ "regex": "^\\$ml\\$\\d+\\$[a-f0-9]{64}\\$[a-f0-9]{128}$",
2182
2252
  "modes": [
2183
2253
  {
2184
2254
  "john": "pbkdf2-hmac-sha512",
@@ -2200,13 +2270,13 @@
2200
2270
  {
2201
2271
  "john": null,
2202
2272
  "hashcat": null,
2203
- "extended": false,
2273
+ "extended": true,
2204
2274
  "name": "Skein-1024"
2205
2275
  }
2206
2276
  ]
2207
2277
  },
2208
2278
  {
2209
- "regex": "^grub\\.pbkdf2\\.sha512\\.[0-9]+\\.([a-f0-9]{128,2048}\\.|[0-9]+\\.)?[a-f0-9]{128}$",
2279
+ "regex": "^grub\\.pbkdf2\\.sha512\\.\\d+\\.([a-f0-9]{128,2048}\\.|\\d+\\.)?[a-f0-9]{128}$",
2210
2280
  "modes": [
2211
2281
  {
2212
2282
  "john": null,
@@ -2250,7 +2320,7 @@
2250
2320
  ]
2251
2321
  },
2252
2322
  {
2253
- "regex": "^\\$5\\$(rounds=[0-9]+\\$)?[a-z0-9\\/.]{0,16}\\$[a-z0-9\\/.]{43}$",
2323
+ "regex": "^\\$5\\$(rounds=\\d+\\$)?[a-z0-9\\/.]{0,16}\\$[a-z0-9\\/.]{43}$",
2254
2324
  "modes": [
2255
2325
  {
2256
2326
  "john": "sha256crypt",
@@ -2272,7 +2342,7 @@
2272
2342
  ]
2273
2343
  },
2274
2344
  {
2275
- "regex": "^\\$6\\$(rounds=[0-9]+\\$)?[a-z0-9\\/.]{0,16}\\$[a-z0-9\\/.]{86}$",
2345
+ "regex": "^\\$6\\$(rounds=\\d+\\$)?[a-z0-9\\/.]{0,16}\\$[a-z0-9\\/.]{86}$",
2276
2346
  "modes": [
2277
2347
  {
2278
2348
  "john": "sha512crypt",
@@ -2409,57 +2479,111 @@
2409
2479
  ]
2410
2480
  },
2411
2481
  {
2412
- "regex": "^\\$(krb5pa|mskrb5)\\$([0-9]{2})?\\$.+\\$[a-f0-9]{1,}$",
2482
+ "regex": "^\\$(?:af|k4)\\$[^$]+\\$[a-f0-9]{32}$",
2483
+ "modes": [
2484
+ {
2485
+ "john": "krb4",
2486
+ "hashcat": null,
2487
+ "extended": false,
2488
+ "name": "Kerberos 4 TGT",
2489
+ "samples": [
2490
+ "$af$UMICH.EDU$bb46613c503ad92e649d99d038efddb2",
2491
+ "$af$UMICH.EDU$bebcedf43f7f2aa78cf9c0639e494c92"
2492
+ ]
2493
+ }
2494
+ ]
2495
+ },
2496
+ {
2497
+ "regex": "^\\$krb5\\$[^$]+\\$[^$]+\\$[a-f0-9]{456}$",
2498
+ "modes": [
2499
+ {
2500
+ "john": "krb5",
2501
+ "hashcat": null,
2502
+ "extended": false,
2503
+ "name": "Kerberos 5 TGT",
2504
+ "samples": [
2505
+ "$krb5$oskov$ACM.UIUC.EDU$4730d7249765615d6f3652321c4fb76d09fb9cd06faeb0c31b8737f9fdfcde4bd4259c31cb1dff25df39173b09abdff08373302d99ac09802a290915243d9f0ea0313fdedc7f8d1fae0d9df8f0ee6233818d317f03a72c2e77b480b2bc50d1ca14fba85133ea00e472c50dbc825291e2853bd60a969ddb69dae35b604b34ea2c2265a4ffc72e9fb811da17c7f2887ccb17e2f87cd1f6c28a9afc0c083a9356a9ee2a28d2e4a01fc7ea90cc8836b8e25650c3a1409b811d0bad42a59aa418143291d42d7b1e6cb5b1876a4cc758d721323a762e943f774630385c9faa68df6f3a94422f97",
2506
+ "$krb5$oskov$ACM.UIUC.EDU$6cba0316d38e31ba028f87394792baade516afdfd8c5a964b6a7677adbad7815d778b297beb238394aa97a4d495adb7c9b7298ba7c2a2062fb6c9a4297f12f83755060f4f58a1ea4c7026df585cdfa02372ad619ab1a4ec617ad23e76d6e37e36268d9aa0abcf83f11fa8092b4328c5e6c577f7ec6f1c1684d9c99a309eee1f5bd764c4158a2cf311cded8794b2de83131c3dc51303d5300e563a2b7a230eac67e85b4593e561bf6b88c77b82c729e7ba7f3d2f99b8dc85b07873e40335aff4647833a87681ee557fbd1ffa1a458a5673d1bd3c1587eceeabaebf4e44c24d9a8ac8c1d89"
2507
+ ]
2508
+ }
2509
+ ]
2510
+ },
2511
+ {
2512
+ "regex": "^\\$(?:krb5pa\\$\\d{2}|mskrb5)\\$.+\\$[a-f0-9]+$",
2413
2513
  "modes": [
2414
2514
  {
2415
2515
  "john": "krb5pa-md5",
2416
2516
  "hashcat": 7500,
2417
2517
  "extended": false,
2418
- "name": "Kerberos 5 AS-REQ Pre-Auth etype 23"
2518
+ "name": "Kerberos 5 AS-REQ Pre-Auth etype 23",
2519
+ "samples": [
2520
+ "$krb5pa$23$user$realm$salt$5cbb0c882a2b26956e81644edbdb746326f4f5f0e947144fb3095dffe4b4b03e854fc1d631323632303636373330383333353630",
2521
+ "$krb5pa$23$user$realm$salt$afcbe07c32c3450b37d0f2516354570fe7d3e78f829e77cdc1718adf612156507181f7daeb03b6fbcfe91f8346f3c0ae7e8abfe5",
2522
+ "$mskrb5$john$JOHN.DOE.MS.COM$02E837D06B2AC76891F388D9CC36C67A$2A9785BF5036C45D3843490BF9C228E8C18653E10CE58D7F8EF119D2EF4F92B1803B1451",
2523
+ "$krb5pa$23$$$$afcbe07c32c3450b37d0f2516354570fe7d3e78f829e77cdc1718adf612156507181f7daeb03b6fbcfe91f8346f3c0ae7e8abfe5"
2524
+ ]
2419
2525
  }
2420
2526
  ]
2421
2527
  },
2422
2528
  {
2423
- "regex": "^\\$krb5tgs\\$23\\$\\*[^*]*\\*\\$[a-f0-9]{32}\\$[a-f0-9]{64,40960}$",
2529
+ "regex": "^\\$krb5tgs\\$23\\$(?:[^$]+\\$[^$]+\\$[^$]+\\$)?[a-f0-9]{32}\\$[a-f0-9]{64,40960}$",
2424
2530
  "modes": [
2425
2531
  {
2426
2532
  "john": "krb5tgs",
2427
2533
  "hashcat": 13100,
2428
2534
  "extended": false,
2429
- "name": "Kerberos 5 TGS-REP etype 23"
2535
+ "name": "Kerberos 5 TGS-REP etype 23",
2536
+ "samples": [
2537
+ "$krb5tgs$23$*user$realm$test/spn*$b548e10f5694ae018d7ad63c257af7dc$35e8e45658860bc31a859b41a08989265f4ef8afd75652ab4d7a30ef151bf6350d879ae189a8cb769e01fa573c6315232b37e4bcad9105520640a781e5fd85c09615e78267e494f433f067cc6958200a82f70627ce0eebc2ac445729c2a8a0255dc3ede2c4973d2d93ac8c1a56b26444df300cb93045d05ff2326affaa3ae97f5cd866c14b78a459f0933a550e0b6507bf8af27c2391ef69fbdd649dd059a4b9ae2440edd96c82479645ccdb06bae0eead3b7f639178a90cf24d9a",
2538
+ "$krb5tgs$23$74809c4c83c3c8279c6058d2f206ec2f$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",
2539
+ "$krb5tgs$23$8bef2ad33c7d5d23c8693ccd868d9f84$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"
2540
+ ]
2430
2541
  }
2431
2542
  ]
2432
2543
  },
2433
2544
  {
2434
- "regex": "^\\$krb5asrep\\$23\\$[^:]+:[a-f0-9]{32,32}\\$[a-f0-9]{64,40960}$",
2545
+ "regex": "^\\$krb5asrep\\$23\\$(?:[^:$]+:)?[a-f0-9]{32}\\$[a-f0-9]{64,40960}$",
2435
2546
  "modes": [
2436
2547
  {
2437
2548
  "john": "krb5asrep",
2438
2549
  "hashcat": 18200,
2439
2550
  "extended": false,
2440
- "name": "Kerberos 5 AS-REP etype 23"
2551
+ "name": "Kerberos 5 AS-REP etype 23",
2552
+ "samples": [
2553
+ "$krb5asrep$23$8cf8eb5287e28a4006c064892150c4fb$3e05ecc13548bec8e1eeb900dea5429cc6931bae9b8524490eb3a8801560871fe44355ed556202afbb39872e1bbb5c3c4f1b37dcd68fda89a23ebad917d4bbb0933edd94331598939e5d0c0c98c7e219a2e9dd6b877280d1bd7c51131413be577a167208bcc21e9fe7ae8f393278d740e72ca5c44c42d5cb0bf6bab0a36f1b88b7ddc4abbc6f152e652f6ba35c2955fb4132e11b7e566f3b422c3740f79847b77783d245a4e570b8a621b4ff6ff4815566446af70313ee78133707a76a4e4424783bd7c04920aa822a1a36b29f7e25cef186e6439fc46e42e23d6bd918969ef49b8388aef158e443b3a57dbde7ada631fbef7326f9046a9b",
2554
+ "$krb5asrep$23$c447eddaebf22ebf006a8fc6f986488c$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",
2555
+ "$krb5asrep$23$771adbc2397abddef676742924414f2b$2df6eb2d9c71820dc3fa2c098e071d920f0e412f5f12411632c5ee70e004da1be6f003b78661f8e4507e173552a52da751c45887c19bc1661ed334e0ccb4ef33975d4bd68b3d24746f281b4ca4fdf98fca0e50a8e845ad7d834e020c05b1495bc473b0295c6e9b94963cb912d3ff0f2f48c9075b0f52d9a31e5f4cc67c7af1d816b6ccfda0da5ccf35820a4d7d79073fa404726407ac840910357ef210fcf19ed81660106dfc3f4d9166a89d59d274f31619ddd9a1e2712c879a4e9c471965098842b44fae7ca6dd389d5d98b7fd7aca566ca399d072025e81cf0ef5075447687f80100307145fade7a8",
2556
+ "$krb5asrep$23$user@domain.com:3e156ada591263b8aab0965f5aebd837$007497cb51b6c8116d6407a782ea0e1c5402b17db7afa6b05a6d30ed164a9933c754d720e279c6c573679bd27128fe77e5fea1f72334c1193c8ff0b370fadc6368bf2d49bbfdba4c5dccab95e8c8ebfdc75f438a0797dbfb2f8a1a5f4c423f9bfc1fea483342a11bd56a216f4d5158ccc4b224b52894fadfba3957dfe4b6b8f5f9f9fe422811a314768673e0c924340b8ccb84775ce9defaa3baa0910b676ad0036d13032b0dd94e3b13903cc738a7b6d00b0b3c210d1f972a6c7cae9bd3c959acf7565be528fc179118f28c679f6deeee1456f0781eb8154e18e49cb27b64bf74cd7112a0ebae2102ac"
2557
+ ]
2441
2558
  }
2442
2559
  ]
2443
2560
  },
2444
2561
  {
2445
- "regex": "^\\$krb5asrep\\$18\\$[^:]+:[a-f0-9]{32,32}\\$[a-f0-9]{64,40960}$",
2562
+ "regex": "^\\$krb5asrep\\$18\\$[^$]+\\$[a-f0-9]{542}\\$[a-f0-9]{24}$",
2446
2563
  "modes": [
2447
2564
  {
2448
2565
  "john": "krb5asrep",
2449
2566
  "hashcat": null,
2450
2567
  "extended": false,
2451
- "name": "Kerberos 5 AS-REP etype 18"
2568
+ "name": "Kerberos 5 AS-REP etype 18",
2569
+ "samples": [
2570
+ "$krb5asrep$18$EXAMPLE.COMlulu$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$a5245c7f39480a840da0e4c6",
2571
+ "$krb5asrep$18$EXAMPLE.COMluser$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$420973360c2e907b9053f1db"
2572
+ ]
2452
2573
  }
2453
2574
  ]
2454
2575
  },
2455
2576
  {
2456
- "regex": "^\\$krb5asrep\\$17\\$[^:]+:[a-f0-9]{32,32}\\$[a-f0-9]{64,40960}$",
2577
+ "regex": "^\\$krb5asrep\\$17\\$[^$]+\\$[a-f0-9]{542}\\$[a-f0-9]{24}$",
2457
2578
  "modes": [
2458
2579
  {
2459
2580
  "john": "krb5asrep",
2460
2581
  "hashcat": null,
2461
2582
  "extended": false,
2462
- "name": "Kerberos 5 AS-REP etype 17"
2583
+ "name": "Kerberos 5 AS-REP etype 17",
2584
+ "samples": [
2585
+ "$krb5asrep$17$EXAMPLE.COMhero$4e7c79214fd330b2e505a4c75e257e4686029136d54f92ce91bb69d5ffc064e64e925b3ae8bc1df431c74ccaf2075cb4a1a32151b0848964e147bf6f8e4a50caa7931faad50433991e016e312c70ad9007e38166f8df39eda3edd2445cce757e062d0919e663a67eb9fdb472b2a840cf521f18bd794947bcc0c0c6394cc5a60b860c963640867e623732206e7bf904d3b066a17b6f4ea3fd6d74f110ee80052e5297f7a19aaec22e22d582d183d43d6ca1792da187a3a182d1f479c5b4692841ccd701a63735d64584c4f8d199d67876dae5181f4eadfe75e454d0587d0953d7e16cb1b63265da6188b10c1746a2e83c41707bd03fcb2d460d1c6802826a0347b5ee7cdbe5384acad139b4395928bd$7ed0277ba9b853008cc62abe"
2586
+ ]
2463
2587
  }
2464
2588
  ]
2465
2589
  },
@@ -2470,7 +2594,10 @@
2470
2594
  "john": null,
2471
2595
  "hashcat": 19600,
2472
2596
  "extended": false,
2473
- "name": "Kerberos 5 TGS-REP etype 17 (AES128-CTS-HMAC-SHA1-96)"
2597
+ "name": "Kerberos 5 TGS-REP etype 17 (AES128-CTS-HMAC-SHA1-96)",
2598
+ "samples": [
2599
+ "$krb5tgs$17$srv_http$synacktiv.local$849e31b3db1c1f203fa20b85$948690f5875125348286ad3346d27b43eaabc71896b620c16de7ddcdbd561628c650c508856a3f574261948b6db4b48332d30536e978046a423ad4368f9a69b4dc4642dab4e0d475d8299be718fd6f98ac85a771b457b2453e78c9411dfce572b19660fe7a5a8246d9b2a91ea2f14d1986ea0a77ecf9b8330bc8fd9ab540bcf46b74c5aa7005cfccd89ec05f66aeab30c6b2bf8595cf6c9a1b68ad885258850c4b1dd9265f270fb2af52fd76c16246df51ea67efc58a65c345686c84e43642febe908a"
2600
+ ]
2474
2601
  }
2475
2602
  ]
2476
2603
  },
@@ -2481,34 +2608,121 @@
2481
2608
  "john": null,
2482
2609
  "hashcat": 19700,
2483
2610
  "extended": false,
2484
- "name": "Kerberos 5 TGS-REP etype 18 (AES256-CTS-HMAC-SHA1-96)"
2611
+ "name": "Kerberos 5 TGS-REP etype 18 (AES256-CTS-HMAC-SHA1-96)",
2612
+ "samples": [
2613
+ "$krb5tgs$18$srv_http$synacktiv.local$16ce51f6eba20c8ee534ff8a$57d07b23643a516834795f0c010da8f549b7e65063e5a367ca9240f9b800adad1734df7e7d5dd8307e785de4f40aacf901df41aa6ce695f8619ec579c1fa57ee93661cf402aeef4e3a42e7e3477645d52c09dc72feade03512dffe0df517344f673c63532b790c242cc1d50f4b4b34976cb6e08ab325b3aefb2684262a5ee9faacb14d059754f50553be5bfa5c4c51e833ff2b6ac02c6e5d4c4eb193e27d7dde301bd1ddf480e5e282b8c27ef37b136c8f140b56de105b73adeb1de16232fa1ab5c9f6"
2614
+ ]
2485
2615
  }
2486
2616
  ]
2487
2617
  },
2488
2618
  {
2489
- "regex": "^\\$krb5pa\\$17\\$[^$]{1,512}\\$[^$]{1,512}\\$[a-f0-9]{104,112}$",
2619
+ "regex": "^\\$krb5pa\\$17\\$[^$]{1,512}\\$[^$]{1,512}(?:\\$[^$]*)?\\$[a-f0-9]{104,112}$",
2490
2620
  "modes": [
2491
2621
  {
2492
2622
  "john": "krb5pa-sha1",
2493
2623
  "hashcat": 19800,
2494
2624
  "extended": false,
2495
- "name": "Kerberos 5 AS-REQ Pre-Auth etype 17"
2625
+ "name": "Kerberos 5 AS-REQ Pre-Auth etype 17",
2626
+ "samples": [
2627
+ "$krb5pa$17$hashcat$HASHCATDOMAIN.COM$a17776abe5383236c58582f515843e029ecbff43706d177651b7b6cdb2713b17597ddb35b1c9c470c281589fd1d51cca125414d19e40e333",
2628
+ "$krb5pa$17$user1$EXAMPLE.COM$$c5461873dc13665771b98ba80be53939e906d90ae1ba79cf2e21f0395e50ee56379fbef4d0298cfccfd6cf8f907329120048fd05e8ae5df4"
2629
+ ]
2496
2630
  }
2497
2631
  ]
2498
2632
  },
2499
2633
  {
2500
- "regex": "^\\$krb5pa\\$18\\$[^$]{1,512}\\$[^$]{1,512}\\$[a-f0-9]{104,112}$",
2634
+ "regex": "^\\$krb5pa\\$18\\$[^$]{1,512}\\$[^$]{1,512}(?:\\$[^$]*)?\\$[a-f0-9]{104,112}$",
2501
2635
  "modes": [
2502
2636
  {
2503
2637
  "john": "krb5pa-sha1",
2504
2638
  "hashcat": 19900,
2505
2639
  "extended": false,
2506
- "name": "Kerberos 5 AS-REQ Pre-Auth etype 18"
2640
+ "name": "Kerberos 5 AS-REQ Pre-Auth etype 18",
2641
+ "samples": [
2642
+ "$krb5pa$18$hashcat$HASHCATDOMAIN.COM$96c289009b05181bfd32062962740b1b1ce5f74eb12e0266cde74e81094661addab08c0c1a178882c91a0ed89ae4e0e68d2820b9cce69770",
2643
+ "$krb5pa$18$user1$EXAMPLE.COM$$2a0e68168d1eac344da458599c3a2b33ff326a061449fcbc242b212504e484d45903c6a16e2d593912f56c93883bf697b325193d62a8be9c",
2644
+ "$krb5pa$18$aduser$AD.EXAMPLE.COM$$64dfeee04be2b2e0423814e0df4d0f960885aca4efffe6cb5694c4d34690406071c4968abd2c153ee42d258c5e09a41269bbcd7799f478d3",
2645
+ "$krb5pa$18$aduser$AD.EXAMPLE.COM$AD.EXAMPLE.COMaduser$f94f755a8b4493d925094a4eb1cec630ac40411a14c9733a853516fe426637d9daefdedc0567e2bb5a83d4f89a0ad1a4b178662b6106c0ff"
2646
+ ]
2647
+ }
2648
+ ]
2649
+ },
2650
+ {
2651
+ "regex": "^\\$krb5db\\$17\\$[^$]{1,512}\\$[^$]{1,512}(?:\\$[^$]*)?\\$[a-f0-9]{32}$",
2652
+ "modes": [
2653
+ {
2654
+ "john": null,
2655
+ "hashcat": 28800,
2656
+ "extended": false,
2657
+ "name": "Kerberos 5 DB etype 17",
2658
+ "samples": [
2659
+ "$krb5db$17$test$TEST.LOCAL$1c41586d6c060071e08186ee214e725e"
2660
+ ]
2661
+ }
2662
+ ]
2663
+ },
2664
+ {
2665
+ "regex": "^\\$krb17\\$[^$]{1,512}\\$[a-f0-9]{32}$",
2666
+ "modes": [
2667
+ {
2668
+ "john": "krb5-17",
2669
+ "hashcat": null,
2670
+ "extended": false,
2671
+ "name": "Kerberos 5 DB etype 17",
2672
+ "samples": [
2673
+ "$krb17$TEST.LOCALtest$6fb8b78e20ad3df6591cabb9cacf4594",
2674
+ "$krb17$TEST.LOCALtest$b7dc1cf2b403cf5f27ea9b2ea526dc5a"
2675
+ ]
2676
+ }
2677
+ ]
2678
+ },
2679
+ {
2680
+ "regex": "^\\$krb5db\\$18\\$[^$]{1,512}\\$[^$]{1,512}(?:\\$[^$]{1,512})?\\$[a-f0-9]{64}$",
2681
+ "modes": [
2682
+ {
2683
+ "john": null,
2684
+ "hashcat": 28900,
2685
+ "extended": false,
2686
+ "name": "Kerberos 5 DB etype 18",
2687
+ "samples": [
2688
+ "$krb5db$18$test$TEST.LOCAL$266b5a53a6d663c3f69174f3309acada8e467c097c7973699f86286a6cf1a6c7"
2689
+ ]
2690
+ }
2691
+ ]
2692
+ },
2693
+ {
2694
+ "regex": "^\\$krb18\\$[^$]{1,512}\\$[a-f0-9]{64}$",
2695
+ "modes": [
2696
+ {
2697
+ "john": "krb5-18",
2698
+ "hashcat": null,
2699
+ "extended": false,
2700
+ "name": "Kerberos 5 DB etype 18",
2701
+ "samples": [
2702
+ "$krb18$OLYMPE.OLtest$214bb89cf5b8330112d52189ab05d9d05b03b5a961fe6d06203335ad5f339b26"
2703
+ ]
2704
+ }
2705
+ ]
2706
+ },
2707
+ {
2708
+ "regex": "^\\$krb3\\$[^$]{1,512}\\$[a-f0-9]{16}$",
2709
+ "modes": [
2710
+ {
2711
+ "john": "krb5-3",
2712
+ "hashcat": null,
2713
+ "extended": false,
2714
+ "name": "Kerberos 5 DB etype 3",
2715
+ "samples": [
2716
+ "$krb3$INTERNAL.CORP1user3$eafdc79b7620584a",
2717
+ "$krb3$EXAMPLE.COMlulu$25bfb33132c11346",
2718
+ "$krb3$EXAMPLE.COMluluaaaa$97076894ae025738",
2719
+ "$krb3$EXAMPLE.COMluluaaaa$79850e6e9e5e92d0"
2720
+ ]
2507
2721
  }
2508
2722
  ]
2509
2723
  },
2510
2724
  {
2511
- "regex": "^\\$scram\\$[0-9]+\\$[a-z0-9\\/.]{16}\\$sha-1=[a-z0-9\\/.]{27},sha-256=[a-z0-9\\/.]{43},sha-512=[a-z0-9\\/.]{86}$",
2725
+ "regex": "^\\$scram\\$\\d+\\$[a-z0-9\\/.]{16}\\$sha-1=[a-z0-9\\/.]{27},sha-256=[a-z0-9\\/.]{43},sha-512=[a-z0-9\\/.]{86}$",
2512
2726
  "modes": [
2513
2727
  {
2514
2728
  "john": null,
@@ -2613,7 +2827,7 @@
2613
2827
  ]
2614
2828
  },
2615
2829
  {
2616
- "regex": "^[a-f0-9]{32}:[0-9]+:[a-z0-9_.+\\-]+@[a-z0-9\\-]+\\.[a-z0-9\\-.]+$",
2830
+ "regex": "^[a-f0-9]{32}:\\d+:[a-z0-9_.+\\-]+@[a-z0-9\\-]+\\.[a-z0-9\\-.]+$",
2617
2831
  "modes": [
2618
2832
  {
2619
2833
  "john": null,
@@ -2624,7 +2838,7 @@
2624
2838
  ]
2625
2839
  },
2626
2840
  {
2627
- "regex": "^[a-z0-9\\/.]{16}([:$].{1,})?$",
2841
+ "regex": "^[a-z0-9\\/.]{16}([:$].+)?$",
2628
2842
  "modes": [
2629
2843
  {
2630
2844
  "john": "asa-md5",
@@ -2652,7 +2866,7 @@
2652
2866
  ]
2653
2867
  },
2654
2868
  {
2655
- "regex": "^[a-z0-9]{32}(:([a-z0-9\\-]+\\.)?[a-z0-9\\-.]+\\.[a-z]{2,7}:.+:[0-9]+)?$",
2869
+ "regex": "^[a-z0-9]{32}(:([a-z0-9\\-]+\\.)?[a-z0-9\\-.]+\\.[a-z]{2,7}:.+:\\d+)?$",
2656
2870
  "modes": [
2657
2871
  {
2658
2872
  "john": null,
@@ -2685,7 +2899,7 @@
2685
2899
  ]
2686
2900
  },
2687
2901
  {
2688
- "regex": "^\\$sha1\\$[0-9]+\\$[a-z0-9\\/.]{0,64}\\$[a-z0-9\\/.]{28}$",
2902
+ "regex": "^\\$sha1\\$\\d+\\$[a-z0-9\\/.]{0,64}\\$[a-z0-9\\/.]{28}$",
2689
2903
  "modes": [
2690
2904
  {
2691
2905
  "john": "sha1crypt",
@@ -2733,7 +2947,7 @@
2733
2947
  ]
2734
2948
  },
2735
2949
  {
2736
- "regex": "^\\$pbkdf2(-hmac)?(-sha1)?\\$([0-9]{1,6}\\$[a-z0-9\\/.]+\\$[a-z0-9\\/.]+|[0-9]{1,6}\\.[a-f0-9]+\\.[a-f0-9]{40})$",
2950
+ "regex": "^\\$pbkdf2(-hmac)?(-sha1)?\\$(\\d{1,6}\\$[a-z0-9\\/.]+\\$[a-z0-9\\/.]+|\\d{1,6}\\.[a-f0-9]+\\.[a-f0-9]{40})$",
2737
2951
  "modes": [
2738
2952
  {
2739
2953
  "john": "pbkdf2-hmac-sha1",
@@ -2751,7 +2965,7 @@
2751
2965
  ]
2752
2966
  },
2753
2967
  {
2754
- "regex": "^\\$pbkdf2-sha256\\$[0-9]{1,6}\\$[a-z0-9\\/.]+\\$[a-z0-9\\/.]+$",
2968
+ "regex": "^\\$pbkdf2-sha256\\$\\d{1,6}\\$[a-z0-9\\/.]+\\$[a-z0-9\\/.]+$",
2755
2969
  "modes": [
2756
2970
  {
2757
2971
  "john": "pbkdf2-hmac-sha256",
@@ -2768,7 +2982,7 @@
2768
2982
  ]
2769
2983
  },
2770
2984
  {
2771
- "regex": "^\\$pbkdf2-sha512\\$[0-9]+\\$[a-z0-9\\/.]+\\$[a-z0-9\\/.]{86}$",
2985
+ "regex": "^\\$pbkdf2-sha512\\$\\d+\\$[a-z0-9\\/.]+\\$[a-z0-9\\/.]{86}$",
2772
2986
  "modes": [
2773
2987
  {
2774
2988
  "john": null,
@@ -2779,7 +2993,7 @@
2779
2993
  ]
2780
2994
  },
2781
2995
  {
2782
- "regex": "^\\$p5k2\\$[0-9]+\\$[a-z0-9\\/+=\\-]+\\$[a-z0-9\\/+\\-]{27}=$",
2996
+ "regex": "^\\$p5k2\\$\\d+\\$[a-z0-9\\/+=\\-]+\\$[a-z0-9\\/+\\-]{27}=$",
2783
2997
  "modes": [
2784
2998
  {
2785
2999
  "john": null,
@@ -2790,7 +3004,7 @@
2790
3004
  ]
2791
3005
  },
2792
3006
  {
2793
- "regex": "^\\$p5k2\\$[0-9]+\\$[a-z0-9\\/.]+\\$[a-z0-9\\/.]{32}$",
3007
+ "regex": "^\\$p5k2\\$\\d+\\$[a-z0-9\\/.]+\\$[a-z0-9\\/.]{32}$",
2794
3008
  "modes": [
2795
3009
  {
2796
3010
  "john": null,
@@ -2801,7 +3015,7 @@
2801
3015
  ]
2802
3016
  },
2803
3017
  {
2804
- "regex": "^{FSHP[0123]\\|[0-9]+\\|[0-9]+}[a-z0-9\\/+=]+$",
3018
+ "regex": "^{FSHP[0123]\\|\\d+\\|\\d+}[a-z0-9\\/+=]+$",
2805
3019
  "modes": [
2806
3020
  {
2807
3021
  "john": null,
@@ -2823,7 +3037,7 @@
2823
3037
  ]
2824
3038
  },
2825
3039
  {
2826
- "regex": "^[0-9]{4}:[a-f0-9]{16}:[a-f0-9]{2080}$",
3040
+ "regex": "^\\d{4}:[a-f0-9]{16}:[a-f0-9]{2080}$",
2827
3041
  "modes": [
2828
3042
  {
2829
3043
  "john": null,
@@ -2834,7 +3048,7 @@
2834
3048
  ]
2835
3049
  },
2836
3050
  {
2837
- "regex": "^[a-f0-9]{64}:[a-f0-9]{32}:[0-9]{5}:[a-f0-9]{608}$",
3051
+ "regex": "^[a-f0-9]{64}:[a-f0-9]{32}:\\d{5}:[a-f0-9]{608}$",
2838
3052
  "modes": [
2839
3053
  {
2840
3054
  "john": null,
@@ -2889,7 +3103,7 @@
2889
3103
  ]
2890
3104
  },
2891
3105
  {
2892
- "regex": "^(\\$django\\$\\*1\\*)?pbkdf2_sha256\\$[0-9]+\\$[a-z0-9]+\\$[a-z0-9\\/+=]{44}$",
3106
+ "regex": "^(\\$django\\$\\*1\\*)?pbkdf2_sha256\\$\\d+\\$[a-z0-9]+\\$[a-z0-9\\/+=]{44}$",
2893
3107
  "modes": [
2894
3108
  {
2895
3109
  "john": "django",
@@ -2900,7 +3114,7 @@
2900
3114
  ]
2901
3115
  },
2902
3116
  {
2903
- "regex": "^pbkdf2_sha1\\$[0-9]+\\$[a-z0-9]+\\$[a-z0-9\\/+=]{28}$",
3117
+ "regex": "^pbkdf2_sha1\\$\\d+\\$[a-z0-9]+\\$[a-z0-9\\/+=]{28}$",
2904
3118
  "modes": [
2905
3119
  {
2906
3120
  "john": null,
@@ -2911,7 +3125,7 @@
2911
3125
  ]
2912
3126
  },
2913
3127
  {
2914
- "regex": "^bcrypt(\\$2[axy]|\\$2)\\$[0-9]{2}\\$[a-z0-9\\/.]{53}$",
3128
+ "regex": "^bcrypt(\\$2[axy]|\\$2)\\$\\d{2}\\$[a-z0-9\\/.]{53}$",
2915
3129
  "modes": [
2916
3130
  {
2917
3131
  "john": null,
@@ -2943,17 +3157,6 @@
2943
3157
  }
2944
3158
  ]
2945
3159
  },
2946
- {
2947
- "regex": "^md5[a-f0-9]{32}$",
2948
- "modes": [
2949
- {
2950
- "john": null,
2951
- "hashcat": null,
2952
- "extended": false,
2953
- "name": "PostgreSQL MD5"
2954
- }
2955
- ]
2956
- },
2957
3160
  {
2958
3161
  "regex": "^\\([a-z0-9\\/+]{49}\\)$",
2959
3162
  "modes": [
@@ -2966,7 +3169,7 @@
2966
3169
  ]
2967
3170
  },
2968
3171
  {
2969
- "regex": "^SCRYPT:[0-9]{1,}:[0-9]{1}:[0-9]{1}:[a-z0-9:\\/+=]{1,}$",
3172
+ "regex": "^SCRYPT:\\d+:\\d{1}:\\d{1}:[a-z0-9:\\/+=]+$",
2970
3173
  "modes": [
2971
3174
  {
2972
3175
  "john": null,
@@ -2999,7 +3202,7 @@
2999
3202
  ]
3000
3203
  },
3001
3204
  {
3002
- "regex": "^\\$office\\$\\*2007\\*[0-9]{2}\\*[0-9]{3}\\*[0-9]{2}\\*[a-z0-9]{32}\\*[a-z0-9]{32}\\*[a-z0-9]{40}$",
3205
+ "regex": "^\\$office\\$\\*2007\\*\\d{2}\\*\\d{3}\\*\\d{2}\\*[a-z0-9]{32}\\*[a-z0-9]{32}\\*[a-z0-9]{40}$",
3003
3206
  "modes": [
3004
3207
  {
3005
3208
  "john": "office",
@@ -3010,7 +3213,7 @@
3010
3213
  ]
3011
3214
  },
3012
3215
  {
3013
- "regex": "^\\$office\\$\\*2010\\*[0-9]{6}\\*[0-9]{3}\\*[0-9]{2}\\*[a-z0-9]{32}\\*[a-z0-9]{32}\\*[a-z0-9]{64}$",
3216
+ "regex": "^\\$office\\$\\*2010\\*\\d{6}\\*\\d{3}\\*\\d{2}\\*[a-z0-9]{32}\\*[a-z0-9]{32}\\*[a-z0-9]{64}$",
3014
3217
  "modes": [
3015
3218
  {
3016
3219
  "john": "office",
@@ -3021,7 +3224,7 @@
3021
3224
  ]
3022
3225
  },
3023
3226
  {
3024
- "regex": "^\\$office\\$\\*2013\\*[0-9]{6}\\*[0-9]{3}\\*[0-9]{2}\\*[a-z0-9]{32}\\*[a-z0-9]{32}\\*[a-z0-9]{64}$",
3227
+ "regex": "^\\$office\\$\\*2013\\*\\d{6}\\*\\d{3}\\*\\d{2}\\*[a-z0-9]{32}\\*[a-z0-9]{32}\\*[a-z0-9]{64}$",
3025
3228
  "modes": [
3026
3229
  {
3027
3230
  "john": "office",
@@ -3032,7 +3235,7 @@
3032
3235
  ]
3033
3236
  },
3034
3237
  {
3035
- "regex": "^\\$office\\$2016\\$[0-9]\\$[0-9]{6}\\$[^$]{24}\\$[^$]{88}$",
3238
+ "regex": "^\\$office\\$2016\\$\\d\\$\\d{6}\\$[^$]{24}\\$[^$]{88}$",
3036
3239
  "modes": [
3037
3240
  {
3038
3241
  "john": null,
@@ -3046,7 +3249,7 @@
3046
3249
  ]
3047
3250
  },
3048
3251
  {
3049
- "regex": "^\\$fde\\$[0-9]{2}\\$[a-f0-9]{32}\\$[0-9]{2}\\$[a-f0-9]{32}\\$[a-f0-9]{3072}$",
3252
+ "regex": "^\\$fde\\$\\d{2}\\$[a-f0-9]{32}\\$\\d{2}\\$[a-f0-9]{32}\\$[a-f0-9]{3072}$",
3050
3253
  "modes": [
3051
3254
  {
3052
3255
  "john": "fde",
@@ -3114,7 +3317,7 @@
3114
3317
  ]
3115
3318
  },
3116
3319
  {
3117
- "regex": "^{x-issha,\\s[0-9]{4}}[a-z0-9\\/+=]+$",
3320
+ "regex": "^{x-issha,\\s\\d{4}}[a-z0-9\\/+=]+$",
3118
3321
  "modes": [
3119
3322
  {
3120
3323
  "john": "saph",
@@ -3180,7 +3383,7 @@
3180
3383
  ]
3181
3384
  },
3182
3385
  {
3183
- "regex": "^bcrypt_sha256\\$\\$(2[axy]|2)\\$[0-9]+\\$[a-z0-9\\/.]{53}$",
3386
+ "regex": "^bcrypt_sha256\\$\\$(2[axy]|2)\\$\\d+\\$[a-z0-9\\/.]{53}$",
3184
3387
  "modes": [
3185
3388
  {
3186
3389
  "john": null,
@@ -3191,18 +3394,24 @@
3191
3394
  ]
3192
3395
  },
3193
3396
  {
3194
- "regex": "^\\$postgres\\$.[^\\*]+[*:][a-f0-9]{1,32}[*:][a-f0-9]{32}$",
3397
+ "regex": "^\\$postgres?\\$(?:[^*]{0,32})?\\*[a-f0-9]{8}\\*[a-f0-9]{32}$",
3195
3398
  "modes": [
3196
3399
  {
3197
3400
  "john": "postgres",
3198
3401
  "hashcat": 11100,
3199
3402
  "extended": false,
3200
- "name": "PostgreSQL Challenge-Response Authentication (MD5)"
3403
+ "name": "PostgreSQL CRAM (MD5)",
3404
+ "samples": [
3405
+ "$postgres$postgres*74402844*4e7fabaaf34d780c4a5822d28ee1c83e",
3406
+ "$postgres$postgres*f063f05d*1d586cc8d137e5f1733f234d224393e8",
3407
+ "$postgre$postgres*684697c8*bf2a64f35feba7bf1b633d60393c1356",
3408
+ "$postgres$Twelve_chars*55393156*c01df9affa7573ef32ec143759f3e005"
3409
+ ]
3201
3410
  }
3202
3411
  ]
3203
3412
  },
3204
3413
  {
3205
- "regex": "^\\$siemens-s7\\$[0-9]{1}\\$[a-f0-9]{40}\\$[a-f0-9]{40}$",
3414
+ "regex": "^\\$siemens-s7\\$\\d{1}\\$[a-f0-9]{40}\\$[a-f0-9]{40}$",
3206
3415
  "modes": [
3207
3416
  {
3208
3417
  "john": "siemens-s7",
@@ -3224,7 +3433,7 @@
3224
3433
  ]
3225
3434
  },
3226
3435
  {
3227
- "regex": "^sha256[:$][0-9]+[:$][a-z0-9\\/+]+[:$][a-z0-9\\/+]{32,128}$",
3436
+ "regex": "^sha256[:$]\\d+[:$][a-z0-9\\/+]+[:$][a-z0-9\\/+]{32,128}$",
3228
3437
  "modes": [
3229
3438
  {
3230
3439
  "john": null,
@@ -3287,7 +3496,7 @@
3287
3496
  ]
3288
3497
  },
3289
3498
  {
3290
- "regex": "^\\$pdf\\$1\\*2\\*[0-9]{2}\\*[-0-9]{1,6}\\*[0-9]\\*[0-9]{2}\\*[a-f0-9]{32}\\*[0-9]{2}\\*[a-f0-9]{64}\\*[0-9]{2}\\*[a-f0-9]{64}$",
3499
+ "regex": "^\\$pdf\\$1\\*2\\*\\d{2}\\*[-0-9]{1,6}\\*\\d\\*\\d{2}\\*[a-f0-9]{32}\\*\\d{2}\\*[a-f0-9]{64}\\*\\d{2}\\*[a-f0-9]{64}$",
3291
3500
  "modes": [
3292
3501
  {
3293
3502
  "john": "pdf",
@@ -3304,7 +3513,7 @@
3304
3513
  ]
3305
3514
  },
3306
3515
  {
3307
- "regex": "^\\$pdf\\$1\\*2\\*[0-9]{2}\\*[-0-9]{1,6}\\*[0-9]\\*[0-9]{2}\\*[a-f0-9]{32}\\*[0-9]{2}\\*[a-f0-9]{64}\\*[0-9]{2}\\*[a-f0-9]{64}:[a-f0-9]{10}$",
3516
+ "regex": "^\\$pdf\\$1\\*2\\*\\d{2}\\*[-0-9]{1,6}\\*\\d\\*\\d{2}\\*[a-f0-9]{32}\\*\\d{2}\\*[a-f0-9]{64}\\*\\d{2}\\*[a-f0-9]{64}:[a-f0-9]{10}$",
3308
3517
  "modes": [
3309
3518
  {
3310
3519
  "john": "pdf",
@@ -3338,7 +3547,7 @@
3338
3547
  ]
3339
3548
  },
3340
3549
  {
3341
- "regex": "^\\$pdf\\$5\\*[5|6]\\*[0-9]{3}\\*[-0-9]{1,6}\\*[0-9]\\*[0-9]{1,4}\\*[a-f0-9]{0,1024}\\*[0-9]{1,4}\\*[a-f0-9]{0,1024}\\*[0-9]{1,4}\\*[a-f0-9]{0,1024}\\*[0-9]{1,4}\\*[a-f0-9]{0,1024}\\*[0-9]{1,4}\\*[a-f0-9]{0,1024}$",
3550
+ "regex": "^\\$pdf\\$5\\*[5|6]\\*\\d{3}\\*[-0-9]{1,6}\\*\\d\\*\\d{1,4}\\*[a-f0-9]{0,1024}\\*\\d{1,4}\\*[a-f0-9]{0,1024}\\*\\d{1,4}\\*[a-f0-9]{0,1024}\\*\\d{1,4}\\*[a-f0-9]{0,1024}\\*\\d{1,4}\\*[a-f0-9]{0,1024}$",
3342
3551
  "modes": [
3343
3552
  {
3344
3553
  "john": "pdf",
@@ -3355,7 +3564,7 @@
3355
3564
  ]
3356
3565
  },
3357
3566
  {
3358
- "regex": "^\\$bitcoin\\$[0-9]{2,4}\\$[a-f0-9$]{250,360}$",
3567
+ "regex": "^\\$bitcoin\\$\\d{2,4}\\$[a-f0-9$]{250,360}$",
3359
3568
  "modes": [
3360
3569
  {
3361
3570
  "john": "bitcoin",
@@ -3404,7 +3613,7 @@
3404
3613
  ]
3405
3614
  },
3406
3615
  {
3407
- "regex": "^\\$ab\\$[0-9]{1}\\*[0-9]{1}\\*[0-9]{1,6}\\*[a-f0-9]{128}\\*[a-f0-9]{128}\\*[a-f0-9]{32}\\*[a-f0-9]{192}$",
3616
+ "regex": "^\\$ab\\$\\d{1}\\*\\d{1}\\*\\d{1,6}\\*[a-f0-9]{128}\\*[a-f0-9]{128}\\*[a-f0-9]{32}\\*[a-f0-9]{192}$",
3408
3617
  "modes": [
3409
3618
  {
3410
3619
  "john": "AndroidBackup",
@@ -3415,18 +3624,24 @@
3415
3624
  ]
3416
3625
  },
3417
3626
  {
3418
- "regex": "^\\$zip2\\$\\*[0-9]{1}\\*[0-9]{1}\\*[0-9]{1}\\*[a-f0-9]{16,32}\\*[a-f0-9]{1,6}\\*[a-f0-9]{1,6}\\*[a-f0-9]{0,16384}\\*[a-f0-9]{20}\\*\\$\/zip2\\$$",
3627
+ "regex": "^\\$zip2\\$\\*\\d{1}\\*\\d{1}\\*\\d{1}\\*[a-f0-9]{16,32}\\*[a-f0-9]{1,6}\\*[a-f0-9]{1,6}\\*[a-f0-9]*\\*[a-f0-9]{20}\\*\\$\/zip2\\$$",
3419
3628
  "modes": [
3420
3629
  {
3421
3630
  "john": "zip",
3422
3631
  "hashcat": 13600,
3423
3632
  "extended": false,
3424
- "name": "WinZip"
3633
+ "name": "WinZip",
3634
+ "samples": [
3635
+ "$zip2$*0*1*0*0675369741458183*5dc5*0**36b85538918416712640*$/zip2$",
3636
+ "$zip2$*0*1*0*9ffba76344938a7d*cc41*210*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*bd2e946811c4c5b09694*$/zip2$",
3637
+ "$zip2$*0*2*0*c702895e204a15d8016cd436*7688*32*f1e0c797182c9231ebbdfb23111203131d9c949b45396f6ea233ac41c056f938a68869400bc25123bd61f8d7bd4930a6440c*3f229b45b30739ab4867*$/zip2$",
3638
+ "$zip2$*0*3*0*855f69693734c7be8c1093ea5bae6114*f035*210*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*c6b781ef18c5ccd83869*$/zip2$"
3639
+ ]
3425
3640
  }
3426
3641
  ]
3427
3642
  },
3428
3643
  {
3429
- "regex": "^\\$itunes_backup\\$\\*[0-9]{1,2}\\*[a-f0-9]{80}\\*[0-9]{1,6}\\*[a-f0-9]{40}\\*[0-9]{0,10}\\*[a-f0-9]{0,40}$",
3644
+ "regex": "^\\$itunes_backup\\$\\*\\d{1,2}\\*[a-f0-9]{80}\\*\\d{1,6}\\*[a-f0-9]{40}\\*\\d{0,10}\\*[a-f0-9]{0,40}$",
3430
3645
  "modes": [
3431
3646
  {
3432
3647
  "john": "itunes-backup",
@@ -3443,7 +3658,7 @@
3443
3658
  ]
3444
3659
  },
3445
3660
  {
3446
- "regex": "^\\$telegram\\$0\\*[a-f0-9]{64}\\*[0-9]{32}$",
3661
+ "regex": "^\\$telegram\\$0\\*[a-f0-9]{64}\\*\\d{32}$",
3447
3662
  "modes": [
3448
3663
  {
3449
3664
  "john": null,
@@ -3480,46 +3695,73 @@
3480
3695
  ]
3481
3696
  },
3482
3697
  {
3483
- "regex": "^\\$7z\\$[0-9]{1,3}\\$[0-9]{1,2}\\$[0-9]{1}\\$[^$]{0,64}\\$[0-9]{1,2}\\$[a-f0-9]{32}\\$[0-9]{1,10}\\$[0-9]{1,6}\\$[0-9]{1,6}\\$[a-f0-9]{2,}$",
3698
+ "regex": "^\\$7z\\$\\d{1,3}\\$\\d{1,2}\\$\\d{1}\\$[^$]{0,64}\\$\\d{1,2}\\$[a-f0-9]{32}\\$\\d{1,10}\\$\\d+\\$\\d+\\$[a-f0-9]{2,}(?:\\$\\d+\\$[a-f0-9]{0,10}(?:\\$[a-f0-9]{0,10})?)?$",
3484
3699
  "modes": [
3485
3700
  {
3486
3701
  "john": "7z",
3487
3702
  "hashcat": 11600,
3488
3703
  "extended": false,
3489
- "name": "7-zip"
3704
+ "name": "7-zip",
3705
+ "samples": [
3706
+ "$7z$0$14$0$$11$33363437353138333138300000000000$2365089182$16$12$d00321533b483f54a523f624a5f63269",
3707
+ "$7z$128$19$0$1122$8$a264c94f2cd72bec0000000000000000$725883103$112$108$64749c0963e20c74602379ca740165b9511204619859d1914819bc427b7e5f0f8fc67f53a0b53c114f6fcf4542a28e4a9d3914b4bc76baaa616d6a7ec9efc3f051cb330b682691193e6fa48159208329460c3025fb273232b82450645f2c12a9ea38b53a2331a1d0858813c8bf25a831",
3708
+ "$7z$1$19$0$1122$8$732b59fd26896e410000000000000000$2955316379$192$183$7544a3a7ec3eb99a33d80e57907e28fb8d0e140ec85123cf90740900429136dcc8ba0692b7e356a4d4e30062da546a66b92ec04c64c0e85b22e3c9a823abef0b57e8d7b8564760611442ecceb2ca723033766d9f7c848e5d234ca6c7863a2683f38d4605322320765938049305655f7fb0ad44d8781fec1bf7a2cb3843f269c6aca757e509577b5592b60b8977577c20aef4f990d2cb665de948004f16da9bf5507bf27b60805f16a9fcc4983208297d3affc4455ca44f9947221216f58c337f$232$5d00000100",
3709
+ "$7z$0$19$0$1122$8$d1f50227759415890000000000000000$1412385885$112$112$5e5b8b734adf52a64c541a5a5369023d7cccb78bd910c0092535dfb013a5df84ac692c5311d2e7bbdc580f5b867f7b5dd43830f7b4f37e41c7277e228fb92a6dd854a31646ad117654182253706dae0c069d3f4ce46121d52b6f20741a0bb39fc61113ce14d22f9184adafd6b5333fb1",
3710
+ "$7z$0$19$0$1122$8$d1f50227759415890000000000000000$1412385885$112$112$5e5b8b734adf52a64c541a5a5369023d7cccb78bd910c0092535dfb013a5df84ac692c5311d2e7bbdc580f5b867f7b5dd43830f7b4f37e41c7277e228fb92a6dd854a31646ad117654182253706dae0c069d3f4ce46121d52b6f20741a0bb39fc61113ce14d22f9184adafd6b5333fb1",
3711
+ "$7z$7$19$0$$8$8a9fc71fabb004c40000000000000000$1263025034$32$29$f84a72524bf817740f312a33e71d32bfa27f3652706d3e9590a118f70aca7757$24$",
3712
+ "$7z$129$19$0$$16$e69f6cbb583ea5fe2bd2fa577bf35d7c$1528797878$64$51$aef4bf018d0340cf086526f856a95526e4d587799f3c9adaa57bee6f7086e1eebae13ec751deee6ec6e343ef0a6171ba6b608433461235ef2fcbb8ead742d9ca$658$5d00100000$05",
3713
+ "$7z$1$19$0$1122$8$5fdbec1569ff58060000000000000000$2465353234$112$112$58ba7606aafc7918e3db7f6e0920f410f61f01e9c1533c40850992fee4c5e5215bc6b4ea145313d0ac065b8ec5b47d9fb895bb7f97609be46107d71e219544cfd24b52c2ecd65477f72c466915dcd71b80782b1ac46678ab7f437fd9f7b8e9d9fad54281d252de2a7ae386a65fc69eda$176$5d00000100",
3714
+ "$7z$2$19$0$$8$055c46385a7995490000000000000000$1263025034$32$28$1abc552f80372f1c1fea1bab9583599b844b25f0b06afacfbf322ef3d396126a$24$00",
3715
+ "$7z$128$19$0$1122$8$94fb9024fdd3e6c40000000000000000$3965424295$112$99$1127828817ff126bc45ff3c5225d9d0c5d00a52094909674e6ed3dc431546d9a672738f2fa07556340d604d2efd2901b9d2ac2c0686c25af9c520c137b16c50c54df8703fd0b0606fa721ad70aafb9c4e3b288ef49864e6034021969b4ce11e3b8e269a92090ccf593c6a0da06262116",
3716
+ "$7z$128$19$0$1122$8$e24e93c7a9ebde080000000000000000$718561925$112$99$580bf36388526c932c22e3227b51774b6963a9c5b96fc8e2ac70a4302864fa88f50e7c00d9a79e0bca0f07a236e51200dc23435b7680e6fa99b19d790ac093af615a972f8b232686c21279234a2582f9714c5a1a2d326084158eba3e81b4f8ad40784d84baa8ddbed19f1c6603156d2c",
3717
+ "$7z$128$19$0$1122$8$6fbd519735b131710000000000000000$1248418560$112$99$cc9e3c97073d7fd37f04d4e6983b386e3ac00f6292dedb0f566dccf22cdbbb55fee8669edade383e96aa0a740e2b42aa7fddbe5831cac10828c624ee03a1a256c6e777c3d714c55296cb815c509a252b9426fe8d4566c944efe3fac5ea94910e55a390aef2c729a031e832c406049810"
3718
+ ]
3490
3719
  }
3491
3720
  ]
3492
3721
  },
3493
3722
  {
3494
- "regex": "^\\$zip3\\$\\*[0-9]\\*[0-9]\\*128\\*[0-9]\\*[a-f0-9]{0,32}\\*[a-f0-9]{288}\\*[0-9]\\*[0-9]\\*[0-9]\\*[^\\s]{0,64}$",
3723
+ "regex": "^\\$zip3\\$\\*\\d\\*\\d\\*128\\*\\d\\*[a-f0-9]{0,32}\\*[a-f0-9]{288}\\*\\d\\*\\d\\*\\d\\*[^\\s]{0,64}$",
3495
3724
  "modes": [
3496
3725
  {
3497
3726
  "john": "securezip",
3498
3727
  "hashcat": 23001,
3499
3728
  "extended": false,
3500
- "name": "SecureZIP AES-128"
3729
+ "name": "SecureZIP AES-128",
3730
+ "samples": [
3731
+ "$zip3$*0*1*128*0*b4630625c92b6e7848f6fd86*df2f62611b3d02d2c7e05a48dad57c7d93b0bac1362261ab533807afb69db856676aa6e350320130b5cbf27c55a48c0f75739654ac312f1cf5c37149557fc88a92c7e3dde8d23edd2b839036e88092a708b7e818bf1b6de92f0efb5cce184cceb11db6b3ca0527d0bdf1f1137ee6660d9890928cd80542ac1f439515519147c14d965b5ba107c6227f971e3e115170bf*0*0*0*file.txt"
3732
+ ]
3501
3733
  }
3502
3734
  ]
3503
3735
  },
3504
3736
  {
3505
- "regex": "^\\$zip3\\$\\*[0-9]\\*[0-9]\\*192\\*[0-9]\\*[a-f0-9]{0,32}\\*[a-f0-9]{288}\\*[0-9]\\*[0-9]\\*[0-9]\\*[^\\s]{0,64}$",
3737
+ "regex": "^\\$zip3\\$\\*\\d\\*\\d\\*192\\*\\d\\*[a-f0-9]{0,32}\\*[a-f0-9]{288}\\*\\d\\*\\d\\*\\d\\*[^\\s]{0,64}$",
3506
3738
  "modes": [
3507
3739
  {
3508
3740
  "john": "securezip",
3509
3741
  "hashcat": 23002,
3510
3742
  "extended": false,
3511
- "name": "SecureZIP AES-192"
3743
+ "name": "SecureZIP AES-192",
3744
+ "samples": [
3745
+ "$zip3$*0*1*192*0*53ff2de8c280778e1e0ab997*603eb37dbab9ea109e2c405e37d8cae1ec89e1e0d0b9ce5bf55d1b571c343b6a3df35fe381c30249cb0738a9b956ba8e52dfc5552894296300446a771032776c811ff8a71d9bb3c4d6c37016c027e41fea2d157d5b0ce17804b1d7c1606b7c1121d37851bd705e001f2cd755bbf305966d129a17c1d48ff8e87cfa41f479090cd456527db7d1d43f9020ad8e73f851a5*0*0*0*file.txt",
3746
+ "$zip3$*0*1*192*0*edb47a990800000000000000*ba4288c0572f6043b21eba768ca8854fbec62c644f29cdc9652f037b3600dcc761dd07645cbaa1ebec1140e21e19a1cf4b43a82cb47e71e6ac82d3387581996e3fb201328dd5ad8a5be841e2cc9bee7e940da5b55b8a385df87d2431e24baf9a050ea550bd8ea00d2271f9e9d06b32222b8e5815a9db7e75655937c8437332b5b5b08e4c1800976b528322df6ba9653e*0*0*0*secret.txt",
3747
+ "$zip3$*0*1*192*0*a5763deec28f57f7c3218289*7c789a396b6935a2595da1045728aec01572ed0834bc0baa1ab43a186265be83135359ddf2e2f1a2c42f88879617922687131720e8238b006ba10f1caead1d6fbcabbacf32bc3aeda76747d26671f3a94f2037b330a3a790eb72564b05e064747e042c3112d42e739907fdded43c5c4fbf1a5f831cf77bb47f838c75d30a95215b6457a0d4ffc6d408da6be86a04c0d2*0*0*0*1"
3748
+ ]
3512
3749
  }
3513
3750
  ]
3514
3751
  },
3515
3752
  {
3516
- "regex": "^\\$zip3\\$\\*[0-9]\\*[0-9]\\*256\\*[0-9]\\*[a-f0-9]{0,32}\\*[a-f0-9]{288}\\*[0-9]\\*[0-9]\\*[0-9]\\*[^\\s]{0,64}$",
3753
+ "regex": "^\\$zip3\\$\\*\\d\\*\\d\\*256\\*\\d\\*[a-f0-9]{0,32}\\*[a-f0-9]{288}\\*\\d\\*\\d\\*\\d\\*[^\\s]{0,64}$",
3517
3754
  "modes": [
3518
3755
  {
3519
3756
  "john": "securezip",
3520
3757
  "hashcat": 23003,
3521
3758
  "extended": false,
3522
- "name": "SecureZIP AES-256"
3759
+ "name": "SecureZIP AES-256",
3760
+ "samples": [
3761
+ "$zip3$*0*1*256*0*39bff47df6152a0214d7a967*65ff418ffb3b1198cccdef0327c03750f328d6dd5287e00e4c467f33b92a6ef40a74bb11b5afad61a6c3c9b279d8bd7961e96af7b470c36fc186fd3cfe059107021c9dea0cf206692f727eeca71f18f5b0b6ee1f702b648bba01aa21c7b7f3f0f7d547838aad46868155a04214f22feef7b31d7a15e1abe6dba5e569c62ee640783bb4a54054c2c69e93ece9f1a2af9d*0*0*0*file.txt",
3762
+ "$zip3$*0*1*256*0*edb47a990800000000000000*32f884f9fbb54360920a50ec37cc0651fe7b0d9892de44eed17696186139a09c1530e0522abfd9777d18441739cdc7107fdfd252ecd0c8dbbba8181bd09436e9a6a918e385cbab26bee49cd0e3182e67df3fe8c3cdc9e58d6166a0f550969cc456b4a881524e6e66a14e30196b972e260c509fce918736465aea1d00bd5871876e263635be4700ef081117ed896e1504*0*0*0*secret.txt",
3763
+ "$zip3$*0*1*256*0*3f2f7f230e00000000000000*c75ed4a3ec89c22cda7aa3faa9a11cdcca9f5a2f45fe2844d963b2b76b8f98f43a907997557fc2b0eb8cb590b130c573ddfac3f5e70997d6a4539e10728317bdcd70eb74b82bafa2e4871488984db8522c4c4c8ff28fd2dd62c26be9d24246f80ddbdfa8d3b9e81b775dbdb84371446564df3effdbea48713dd223a2bb9afddffc9b8e60f41939f7577f9f30b0a28b78*0*0*0*code.txt"
3764
+ ]
3523
3765
  }
3524
3766
  ]
3525
3767
  },
@@ -3528,14 +3770,56 @@
3528
3770
  "modes": [
3529
3771
  {
3530
3772
  "john": "pkzip",
3531
- "hashcat": null,
3773
+ "hashcat": 17200,
3532
3774
  "extended": false,
3533
- "name": "PKZIP"
3775
+ "name": "PKZIP (Compressed)",
3776
+ "samples": [
3777
+ "$pkzip2$1*1*2*0*e3*1c5*eda7a8de*0*28*8*e3*eda7*5096*a9fc1f4e951c8fb3031a6f903e5f4e3211c8fdc4671547bf77f6f682afbfcc7475d83898985621a7af9bccd1349d1976500a68c48f630b7f22d7a0955524d768e34868880461335417ddd149c65a917c0eb0a4bf7224e24a1e04cf4ace5eef52205f4452e66ded937db9545f843a68b1e84a2e933cc05fb36d3db90e6c5faf1bee2249fdd06a7307849902a8bb24ec7e8a0886a4544ca47979a9dfeefe034bdfc5bd593904cfe9a5309dd199d337d3183f307c2cb39622549a5b9b8b485b7949a4803f63f67ca427a0640ad3793a519b2476c52198488e3e2e04cac202d624fb7d13c2*$/pkzip2$",
3778
+ "$pkzip$1*1*2*0*e4*1c5*eda7a8de*0*4c*8*e4*eda7*194883130e4c7419bd735c53dec36f0c4b6de6daefea0f507d67ff7256a49b5ea93ccfd9b12f2ee99053ee0b1c9e1c2b88aeaeb6bd4e60094a1ea118785d4ded6dae94cade41199330f4f11b37cba7cda5d69529bdfa43e2700ba517bd2f7ff4a0d4b3d7f2559690ec044deb818c44844d6dd50adbebf02cec663ae8ebb0dde05d2abc31eaf6de36a2fc19fda65dd6a7e449f669d1f8c75e9daa0a3f7be8feaa43bf84762d6dbcc9424285a93cedfa3a75dadc11e969065f94fe3991bc23c9b09eaa5318aa29fa02e83b6bee26cafec0a5e189242ac9e562c7a5ed673f599cefcd398617*$/pkzip$",
3779
+ "$pkzip$1*2*2*0*e4*1c5*eda7a8de*0*47*8*e4*4bb6*436c9ffa4328870f6272349b591095e1b1126420c3041744650282bc4f575d0d4a5fc5fb34724e6a1cde742192387b9ed749ab5c72cd6bb0206f102e9216538f095fb773661cfde82c2e2a619332998124648bf4cd0da56279f0c297567d9b5d684125ee92920dd513fd18c27afba2a9633614f75d8f8b9a14095e3fafe8165330871287222e6681dd9c0f830cf5d464457b257d0900eed29107fad8af3ac4f87cf5af5183ff0516ccd9aeac1186006c8d11b18742dfb526aadbf2906772fbfe8fb18798967fd397a724d59f6fcd4c32736550986d227a6b447ef70585c049a1a4d7bf25*$/pkzip$"
3780
+ ]
3781
+ },
3782
+ {
3783
+ "john": "pkzip",
3784
+ "hashcat": 17210,
3785
+ "extended": false,
3786
+ "name": "PKZIP (Uncompressed)",
3787
+ "samples": [
3788
+ "$pkzip2$1*1*2*0*1d1*1c5*eda7a8de*0*28*0*1d1*eda7*5096*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*$/pkzip2$"
3789
+ ]
3790
+ },
3791
+ {
3792
+ "john": "pkzip",
3793
+ "hashcat": 17220,
3794
+ "extended": false,
3795
+ "name": "PKZIP (Compressed Multi-File)",
3796
+ "samples": [
3797
+ "$pkzip2$3*1*1*0*8*24*a425*8827*d1730095cd829e245df04ebba6c52c0573d49d3bbeab6cb385b7fa8a28dcccd3098bfdd7*1*0*8*24*2a74*882a*51281ac874a60baedc375ca645888d29780e20d4076edd1e7154a99bde982152a736311f*2*0*e3*1c5*eda7a8de*0*29*8*e3*eda7*5096*1455781b59707f5151139e018bdcfeebfc89bc37e372883a7ec0670a5eafc622feb338f9b021b6601a674094898a91beac70e41e675f77702834ca6156111a1bf7361bc9f3715d77dfcdd626634c68354c6f2e5e0a7b1e1ce84a44e632d0f6e36019feeab92fb7eac9dda8df436e287aafece95d042059a1b27d533c5eab62c1c559af220dc432f2eb1a38a70f29e8f3cb5a207704274d1e305d7402180fd47e026522792f5113c52a116d5bb25b67074ffd6f4926b221555234aabddc69775335d592d5c7d22462b75de1259e8342a9ba71cb06223d13c7f51f13be2ad76352c3b8ed*$/pkzip2$",
3798
+ "$pkzip$3*1*1*0*8*24*4001*8986ec4d693e86c1a42c1bd2e6a994cb0b98507a6ec937fe0a41681c02fe52c61e3cc046*1*0*8*24*4003*a087adcda58de2e14e73db0043a4ff0ed3acc6a9aee3985d7cb81d5ddb32b840ea2057d9*2*0*e4*1c5*eda7a8de*0*4c*8*e4*eda7*89a792af804bf38e31fdccc8919a75ab6eb75d1fd6e7ecefa3c5b9c78c3d50d656f42e582af95882a38168a8493b2de5031bb8b39797463cb4769a955a2ba72abe48ee75b103f93ef9984ae740559b9bd84cf848d693d86acabd84749853675fb1a79edd747867ef52f4ee82435af332d43f0d0bb056c49384d740523fa75b86a6d29a138da90a8de31dbfa89f2f6b0550c2b47c43d907395904453ddf42a665b5f7662de170986f89d46d944b519e1db9d13d4254a6b0a5ac02b3cfdd468d7a4965e4af05699a920e6f3ddcedb57d956a6b2754835b14e174070ba6aec4882d581c9f30*$/pkzip$"
3799
+ ]
3800
+ },
3801
+ {
3802
+ "john": "pkzip",
3803
+ "hashcat": 17225,
3804
+ "extended": false,
3805
+ "name": "PKZIP (Mixed Multi-File)",
3806
+ "samples": [
3807
+ "$pkzip2$3*1*1*0*0*24*3e2c*3ef8*0619e9d17ff3f994065b99b1fa8aef41c056edf9fa4540919c109742dcb32f797fc90ce0*1*0*8*24*431a*3f26*18e2461c0dbad89bd9cc763067a020c89b5e16195b1ac5fa7fb13bd246d000b6833a2988*2*0*23*17*1e3c1a16*2e4*2f*0*23*1e3c*3f2d*54ea4dbc711026561485bbd191bf300ae24fa0997f3779b688cdad323985f8d3bb8b0c*$/pkzip2$"
3808
+ ]
3809
+ },
3810
+ {
3811
+ "john": "pkzip",
3812
+ "hashcat": 17230,
3813
+ "extended": false,
3814
+ "name": "PKZIP (Mixed Multi-File Checksum-Only)",
3815
+ "samples": [
3816
+ "$pkzip2$8*1*1*0*8*24*a425*8827*3bd479d541019c2f32395046b8fbca7e1dca218b9b5414975be49942c3536298e9cc939e*1*0*8*24*2a74*882a*537af57c30fd9fd4b3eefa9ce55b6bff3bbfada237a7c1dace8ebf3bb0de107426211da3*1*0*8*24*2a74*882a*5f406b4858d3489fd4a6a6788798ac9b924b5d0ca8b8e5a6371739c9edcfd28c82f75316*1*0*8*24*2a74*882a*1843aca546b2ea68bd844d1e99d4f74d86417248eb48dd5e956270e42a331c18ea13f5ed*1*0*8*24*2a74*882a*aca3d16543bbfb2e5d2659f63802e0fa5b33e0a1f8ae47334019b4f0b6045d3d8eda3af1*1*0*8*24*2a74*882a*fbe0efc9e10ae1fc9b169bd060470bf3e39f09f8d83bebecd5216de02b81e35fe7e7b2f2*1*0*8*24*2a74*882a*537886dbabffbb7cac77deb01dc84760894524e6966183b4478a4ef56f0c657375a235a1*1*0*8*24*eda7*5096*40eb30ef1ddd9b77b894ed46abf199b480f1e5614fde510855f92ae7b8026a11f80e4d5f*$/pkzip2$"
3817
+ ]
3534
3818
  }
3535
3819
  ]
3536
3820
  },
3537
3821
  {
3538
- "regex": "^\\$argon2d\\$v=19\\$m=[0-9]{1,6},t=[0-9]{1,2},p=[0-9]{1,2}\\$[^$]+\\$[^\\s]{6,}$",
3822
+ "regex": "^\\$argon2d\\$v=19\\$m=\\d{1,6},t=\\d{1,2},p=\\d{1,2}\\$[^$]+\\$[^\\s]{6,}$",
3539
3823
  "modes": [
3540
3824
  {
3541
3825
  "john": "argon2",
@@ -3552,7 +3836,7 @@
3552
3836
  ]
3553
3837
  },
3554
3838
  {
3555
- "regex": "^\\$argon2i\\$v=19\\$m=[0-9]{1,6},t=[0-9]{1,2},p=[0-9]{1,2}\\$[^$]+\\$[^\\s]{6,}$",
3839
+ "regex": "^\\$argon2i\\$v=19\\$m=\\d{1,6},t=\\d{1,2},p=\\d{1,2}\\$[^$]+\\$[^\\s]{6,}$",
3556
3840
  "modes": [
3557
3841
  {
3558
3842
  "john": "argon2",
@@ -3569,7 +3853,7 @@
3569
3853
  ]
3570
3854
  },
3571
3855
  {
3572
- "regex": "^\\$argon2id\\$v=19\\$m=[0-9]{1,6},t=[0-9]{1,2},p=[0-9]{1,2}\\$[^$]+\\$[^\\s]{6,}$",
3856
+ "regex": "^\\$argon2id\\$v=19\\$m=\\d{1,6},t=\\d{1,2},p=\\d{1,2}\\$[^$]+\\$[^\\s]{6,}$",
3573
3857
  "modes": [
3574
3858
  {
3575
3859
  "john": null,
@@ -3580,7 +3864,7 @@
3580
3864
  ]
3581
3865
  },
3582
3866
  {
3583
- "regex": "^\\$axcrypt\\$\\*2\\*[0-9]{1,7}\\*[a-f0-9]{128}\\*[a-f0-9]{288}\\*[0-9]{1,7}\\*[a-f0-9]{64}$",
3867
+ "regex": "^\\$axcrypt\\$\\*2\\*\\d{1,7}\\*[a-f0-9]{128}\\*[a-f0-9]{288}\\*\\d{1,7}\\*[a-f0-9]{64}$",
3584
3868
  "modes": [
3585
3869
  {
3586
3870
  "john": "axcrypt",
@@ -3596,7 +3880,7 @@
3596
3880
  ]
3597
3881
  },
3598
3882
  {
3599
- "regex": "^\\$axcrypt\\$\\*1\\*[0-9]{1,7}\\*[a-f0-9]{32}\\*[a-f0-9]{48}(?:\\*[a-z0-9]+)?$",
3883
+ "regex": "^\\$axcrypt\\$\\*1\\*\\d{1,7}\\*[a-f0-9]{32}\\*[a-f0-9]{48}(?:\\*[a-z0-9]+)?$",
3600
3884
  "modes": [
3601
3885
  {
3602
3886
  "john": "axcrypt",
@@ -3613,7 +3897,7 @@
3613
3897
  ]
3614
3898
  },
3615
3899
  {
3616
- "regex": "^\\$rar5\\$[0-9]{2}\\$[a-f0-9]{32}\\$[0-9]{2}\\$[a-f0-9]{32}\\$[0-9]{1}\\$[a-f0-9]{16}$",
3900
+ "regex": "^\\$rar5\\$\\d{2}\\$[a-f0-9]{32}\\$\\d{2}\\$[a-f0-9]{32}\\$\\d{1}\\$[a-f0-9]{16}$",
3617
3901
  "modes": [
3618
3902
  {
3619
3903
  "john": "rar5",
@@ -3629,7 +3913,7 @@
3629
3913
  ]
3630
3914
  },
3631
3915
  {
3632
- "regex": "^\\$RAR3\\$\\*[0-9]{1}\\*[a-f0-9]{16}\\*[a-f0-9]{8}\\*[0-9]{1,7}\\*[0-9]{1,6}\\*[0-9]{1}\\*[a-f0-9]{2,}\\*[0-9]{2}$",
3916
+ "regex": "^\\$RAR3\\$\\*\\d{1}\\*[a-f0-9]{16}\\*[a-f0-9]{8}\\*\\d{1,7}\\*\\d{1,6}\\*\\d{1}\\*[a-f0-9]{2,}\\*\\d{2}$",
3633
3917
  "modes": [
3634
3918
  {
3635
3919
  "john": "rar",
@@ -3654,7 +3938,7 @@
3654
3938
  ]
3655
3939
  },
3656
3940
  {
3657
- "regex": "^\\$RAR3\\$\\*[0-9]{1}\\*[a-f0-9]{16}\\*[a-f0-9]{32}$",
3941
+ "regex": "^\\$RAR3\\$\\*\\d{1}\\*[a-f0-9]{16}\\*[a-f0-9]{32}$",
3658
3942
  "modes": [
3659
3943
  {
3660
3944
  "john": "rar",
@@ -3684,7 +3968,7 @@
3684
3968
  ]
3685
3969
  },
3686
3970
  {
3687
- "regex": "^\\$metamask\\$(?=.{44}\\$)(?:[a-z0-9+\\/]{4})*(?:|(?:[a-z0-9+\\/]{3}=)|(?:[a-z0-9+\\/]{2}==)|(?:[a-z0-9+\\/]{1}===))\\$(?=.{24}\\$)(?:[a-z0-9+\\/]{4})*(?:|(?:[a-z0-9+\\/]{3}=)|(?:[a-z0-9+\\/]{2}==)|(?:[a-z0-9+\\/]{1}===))\\$(?=.{64,})(?:[a-z0-9+\\/]{4})*(?:|(?:[a-z0-9+\\/]{3}=)|(?:[a-z0-9+\\/]{2}==)|(?:[a-z0-9+\\/]{1}===))$",
3971
+ "regex": "^\\$metamask\\$(?=[^$]{44}\\$)(?:[a-z0-9+\\/]{4})*(?:|(?:[a-z0-9+\\/]{3}=)|(?:[a-z0-9+\\/]{2}==)|(?:[a-z0-9+\\/]{1}===))\\$(?=[^$]{24}\\$)(?:[a-z0-9+\\/]{4})*(?:|(?:[a-z0-9+\\/]{3}=)|(?:[a-z0-9+\\/]{2}==)|(?:[a-z0-9+\\/]{1}===))\\$(?=[^$]{64,})(?:[a-z0-9+\\/]{4})*(?:|(?:[a-z0-9+\\/]{3}=)|(?:[a-z0-9+\\/]{2}==)|(?:[a-z0-9+\\/]{1}===))$",
3688
3972
  "modes": [
3689
3973
  {
3690
3974
  "john": null,
@@ -3757,7 +4041,7 @@
3757
4041
  ]
3758
4042
  },
3759
4043
  {
3760
- "regex": "^\\$mongodb-scram\\$\\*\\d\\*(?=.{0,76}\\*)(?:[a-z0-9+\\/]{4})*(?:|(?:[a-z0-9+\\/]{3}=)|(?:[a-z0-9+\\/]{2}==)|(?:[a-z0-9+\\/]{1}===))\\*\\d{1,7}\\*(?=.{24}\\*)(?:[a-z0-9+\\/]{4})*(?:|(?:[a-z0-9+\\/]{3}=)|(?:[a-z0-9+\\/]{2}==)|(?:[a-z0-9+\\/]{1}===))\\*(?=.{28})(?:[a-z0-9+\\/]{4})*(?:|(?:[a-z0-9+\\/]{3}=)|(?:[a-z0-9+\\/]{2}==)|(?:[a-z0-9+\\/]{1}===))$",
4044
+ "regex": "^\\$mongodb-scram\\$\\*\\d\\*(?=[^*]{0,76}\\*)(?:[a-z0-9+\\/]{4})*(?:|(?:[a-z0-9+\\/]{3}=)|(?:[a-z0-9+\\/]{2}==)|(?:[a-z0-9+\\/]{1}===))\\*\\d{1,7}\\*(?=[^*]{24}\\*)(?:[a-z0-9+\\/]{4})*(?:|(?:[a-z0-9+\\/]{3}=)|(?:[a-z0-9+\\/]{2}==)|(?:[a-z0-9+\\/]{1}===))\\*(?=[^*]{28})(?:[a-z0-9+\\/]{4})*(?:|(?:[a-z0-9+\\/]{3}=)|(?:[a-z0-9+\\/]{2}==)|(?:[a-z0-9+\\/]{1}===))$",
3761
4045
  "modes": [
3762
4046
  {
3763
4047
  "john": null,
@@ -3771,7 +4055,7 @@
3771
4055
  ]
3772
4056
  },
3773
4057
  {
3774
- "regex": "^\\$mongodb-scram\\$\\*\\d\\*(?=.{0,88}\\*)(?:[a-z0-9+\\/]{4})*(?:|(?:[a-z0-9+\\/]{3}=)|(?:[a-z0-9+\\/]{2}==)|(?:[a-z0-9+\\/]{1}===))\\*\\d{1,7}\\*(?=.{40}\\*)(?:[a-z0-9+\\/]{4})*(?:|(?:[a-z0-9+\\/]{3}=)|(?:[a-z0-9+\\/]{2}==)|(?:[a-z0-9+\\/]{1}===))\\*(?=.{44})(?:[a-z0-9+\\/]{4})*(?:|(?:[a-z0-9+\\/]{3}=)|(?:[a-z0-9+\\/]{2}==)|(?:[a-z0-9+\\/]{1}===))$",
4058
+ "regex": "^\\$mongodb-scram\\$\\*\\d\\*(?=[^*]{0,88}\\*)(?:[a-z0-9+\\/]{4})*(?:|(?:[a-z0-9+\\/]{3}=)|(?:[a-z0-9+\\/]{2}==)|(?:[a-z0-9+\\/]{1}===))\\*\\d{1,7}\\*(?=[^*]{40}\\*)(?:[a-z0-9+\\/]{4})*(?:|(?:[a-z0-9+\\/]{3}=)|(?:[a-z0-9+\\/]{2}==)|(?:[a-z0-9+\\/]{1}===))\\*(?=[^*]{44})(?:[a-z0-9+\\/]{4})*(?:|(?:[a-z0-9+\\/]{3}=)|(?:[a-z0-9+\\/]{2}==)|(?:[a-z0-9+\\/]{1}===))$",
3775
4059
  "modes": [
3776
4060
  {
3777
4061
  "john": null,
@@ -3861,7 +4145,7 @@
3861
4145
  ]
3862
4146
  },
3863
4147
  {
3864
- "regex": "^\\$stellar\\$(?=.{24}\\$)(?:[a-z0-9+\\/]{4})*(?:|(?:[a-z0-9+\\/]{3}=)|(?:[a-z0-9+\\/]{2}==)|(?:[a-z0-9+\\/]{1}===))\\$(?=.{16}\\$)(?:[a-z0-9+\\/]{4})*(?:|(?:[a-z0-9+\\/]{3}=)|(?:[a-z0-9+\\/]{2}==)|(?:[a-z0-9+\\/]{1}===))\\$(?=.{96}$)(?:[a-z0-9+\\/]{4})*(?:|(?:[a-z0-9+\\/]{3}=)|(?:[a-z0-9+\\/]{2}==)|(?:[a-z0-9+\\/]{1}===))$",
4148
+ "regex": "^\\$stellar\\$(?=[^$]{24}\\$)(?:[a-z0-9+\\/]{4})*(?:|(?:[a-z0-9+\\/]{3}=)|(?:[a-z0-9+\\/]{2}==)|(?:[a-z0-9+\\/]{1}===))\\$(?=[^$]{16}\\$)(?:[a-z0-9+\\/]{4})*(?:|(?:[a-z0-9+\\/]{3}=)|(?:[a-z0-9+\\/]{2}==)|(?:[a-z0-9+\\/]{1}===))\\$(?=[^$]{96}$)(?:[a-z0-9+\\/]{4})*(?:|(?:[a-z0-9+\\/]{3}=)|(?:[a-z0-9+\\/]{2}==)|(?:[a-z0-9+\\/]{1}===))$",
3865
4149
  "modes": [
3866
4150
  {
3867
4151
  "john": null,
@@ -4198,5 +4482,373 @@
4198
4482
  ]
4199
4483
  }
4200
4484
  ]
4485
+ },
4486
+ {
4487
+ "regex": "^v1;PPH1_MD4,[a-f0-9]{20},\\d{1,6},[a-f0-9]{64};?$",
4488
+ "modes": [
4489
+ {
4490
+ "john": "azuread",
4491
+ "hashcat": 12800,
4492
+ "extended": false,
4493
+ "name": "AzureAD (MS-AzureSync) PBKDF2-HMAC-SHA256",
4494
+ "samples": [
4495
+ "v1;PPH1_MD4,54188415275183448824,100,55b530f052a9af79a7ba9c466dddcb8b116f8babf6c3873a51a3898fb008e123",
4496
+ "v1;PPH1_MD4,724b754c4b6d30526f36,100,367ff0ac2a1cb334bb26609c8bfc8ae5f619d1eaf07568df040f407504a20241;",
4497
+ "v1;PPH1_MD4,465564476f786e705069,100,612a80cb011bee1f929c7a9e2bd16d98a79f2deb9f44919100f7c0ec74508560;",
4498
+ "v1;PPH1_MD4,31414275383876386e32,100,102ce242cde4339e934d7c6b539d49ae340b02dd380815666b98bd036cd4dc4f;"
4499
+ ]
4500
+ }
4501
+ ]
4502
+ },
4503
+ {
4504
+ "regex": "^\\$response\\$[a-f0-9]{32}\\$.+\\$.+\\$.+\\$.+\\$.+(?:\\$\\d{8}\\$[a-f0-9]{4,16}\\$.+)?$",
4505
+ "modes": [
4506
+ {
4507
+ "john": "hdaa",
4508
+ "hashcat": null,
4509
+ "extended": false,
4510
+ "name": "HTTP Digest access authentication",
4511
+ "samples": [
4512
+ "$response$679066476e67b5c7c4e88f04be567f8b$user$myrealm$GET$/$8c12bd8f728afe56d45a0ce846b70e5a$00000001$4b61913cec32e2c9$auth",
4513
+ "$response$faa6cb7d676e5b7c17fcbf966436aa0c$moi$myrealm$GET$/$af32592775d27b1cd06356b3a0db9ddf$00000001$8e1d49754a25aea7$auth",
4514
+ "$response$56940f87f1f53ade8b7d3c5a102c2bf3$usrx$teN__chars$GET$/4TLHS1TMN9cfsbqSUAdTG3CRq7qtXMptnYfn7mIIi3HRKOMhOks56e$2c0366dcbc$00000001$0153$auth",
4515
+ "$response$8663faf2337dbcb2c52882807592ec2c$user$myrealm$GET$/$8c12bd8f728afe56d45a0ce846b70e5a$",
4516
+ "$response$8663faf2337dbcb2c52882807592ec2c$user$myrealm$GET$/$8c12bd8f728afe56d45a0ce846b70e5a",
4517
+ "$response$b9b9cb1fcce017ec497b31cc33a572b0$lulu$hyperion$GET$/$IERozb5mBQA=de6a5916efca4c24959b5be7e4ed3fc0c7f1f765$00000006$1bd5678ca084bc0d$auth",
4518
+ "$response$abe32fa35969fd6d77bad0ce3dbfdd3a$lulu$hyperion$GET$/icons/poweredby.png$XkZ1Dr9mBQA=6258d402c7c95b352bab0ba774d6974506e3318b$00000003$bd29e3b874427c73$auth"
4519
+ ]
4520
+ }
4521
+ ]
4522
+ },
4523
+ {
4524
+ "regex": "^\\$IPB2\\$[a-f0-9]{2,}\\$[a-f0-9]{32}$",
4525
+ "modes": [
4526
+ {
4527
+ "john": "ipb2",
4528
+ "hashcat": null,
4529
+ "extended": false,
4530
+ "name": "IPB 2.x (Invision Power Board)",
4531
+ "samples": [
4532
+ "$IPB2$2e75504633$d891f03a7327639bc632d62a7f302604",
4533
+ "$IPB2$735a213a4e$4f23de7bb115139660db5e953153f28a",
4534
+ "$IPB2$5d75343455$de98ba8ca7bb16f43af05e9e4fb8afee",
4535
+ "$IPB2$556c576c39$16d4f29c71b05bd75e61d0254800bfa3"
4536
+ ]
4537
+ }
4538
+ ]
4539
+ },
4540
+ {
4541
+ "regex": "^\\$AWS-Sig-v4\\$0\\$[^$]{16}\\$[^$]{1,16}\\$[^$]{1,16}\\$[a-f0-9]{64}\\$[a-f0-9]{64}$",
4542
+ "modes": [
4543
+ {
4544
+ "john": null,
4545
+ "hashcat": 28700,
4546
+ "extended": false,
4547
+ "name": "Amazon AWS4-HMAC-SHA256",
4548
+ "samples": [
4549
+ "$AWS-Sig-v4$0$20220221T000000Z$us-east-1$s3$421ab6e4af9f49fa30fa9c253fcfeb2ce91668e139e6b23303c5f75b04f8a3c4$3755ed2bc1b2346e003ccaa7d02ae8b73c72bcbe9f452ccf066c78504d786bbb"
4550
+ ]
4551
+ }
4552
+ ]
4553
+ },
4554
+ {
4555
+ "regex": "^[a-z0-9]{26,34}$",
4556
+ "modes": [
4557
+ {
4558
+ "john": null,
4559
+ "hashcat": 28501,
4560
+ "extended": false,
4561
+ "name": "Bitcoin WIF private key (P2PKH), compressed",
4562
+ "samples": [
4563
+ "1Jv6EonXm9x4Dw4QjEPAhGfmzFxTL7b3Zj"
4564
+ ]
4565
+ },
4566
+ {
4567
+ "john": null,
4568
+ "hashcat": 28502,
4569
+ "extended": false,
4570
+ "name": "Bitcoin WIF private key (P2PKH), uncompressed",
4571
+ "samples": [
4572
+ "1L9nr4GX4Zmd7gDL1UT75QPUqxSgNTvdHb"
4573
+ ]
4574
+ }
4575
+ ]
4576
+ },
4577
+ {
4578
+ "regex": "^bc1[a-z0-9]{39}$",
4579
+ "modes": [
4580
+ {
4581
+ "john": null,
4582
+ "hashcat": 28503,
4583
+ "extended": false,
4584
+ "name": "Bitcoin WIF private key (P2WPKH, Bech32), compressed",
4585
+ "samples": [
4586
+ "bc1qxd76a5zamfyw0g2d2rxkdh0zt9m0uzmxmwjf0q"
4587
+ ]
4588
+ },
4589
+ {
4590
+ "john": null,
4591
+ "hashcat": 28504,
4592
+ "extended": false,
4593
+ "name": "Bitcoin WIF private key (P2WPKH, Bech32), uncompressed",
4594
+ "samples": [
4595
+ "bc1qv8e65p73gmp4w3z6fqnyu8t6ct69vetsda3snd"
4596
+ ]
4597
+ }
4598
+ ]
4599
+ },
4600
+ {
4601
+ "regex": "^[a-z0-9]{34}$",
4602
+ "modes": [
4603
+ {
4604
+ "john": null,
4605
+ "hashcat": 28505,
4606
+ "extended": false,
4607
+ "name": "Bitcoin WIF private key (P2SH(P2WPKH)), compressed",
4608
+ "samples": [
4609
+ "3H1YvmSdrjEfj9LvtiKJ8XiYq5htJRuejA"
4610
+ ]
4611
+ },
4612
+ {
4613
+ "john": null,
4614
+ "hashcat": 28506,
4615
+ "extended": false,
4616
+ "name": "Bitcoin WIF private key (P2SH(P2WPKH)), uncompressed",
4617
+ "samples": [
4618
+ "3LovFVx5zBRvusVcj7pf3JxV9V46kjKhKu"
4619
+ ]
4620
+ }
4621
+ ]
4622
+ },
4623
+ {
4624
+ "regex": "^\\$DPAPImk\\$1\\*[12]\\*[S\\-0-9]{10,60}\\*[^*]{4,6}\\*[^*]{4,6}\\*\\d{1,6}\\*[a-f0-9]{32}\\*\\d{1,6}\\*[a-f0-9]{0,1024}$",
4625
+ "modes": [
4626
+ {
4627
+ "john": "DPAPImk",
4628
+ "hashcat": 15300,
4629
+ "extended": false,
4630
+ "name": "DPAPI masterkey file v1 (context 1 and 2)",
4631
+ "samples": [
4632
+ "$DPAPImk$1*1*S-15-21-466364039-425773974-453930460-1925*des3*sha1*24000*b038489dee5ad04e3e3cab4d957258b5*208*cb9b5b7d96a0d2a00305ca403d3fd9c47c561e35b4b2cf3aebfd1d3199a6481d56972be7ebd6c291b199e6f1c2ffaee91978706737e9b1209e6c7d3aa3d8c3c3e38ad1ccfa39400d62c2415961c17fd0bd6b0f7bbd49cc1de1a394e64b7237f56244238da8d37d78",
4633
+ "$DPAPImk$1*1*S-15-21-447321867-460417387-480872410-1240*des3*sha1*24000*9b49e2d3b25103d03e936fdf66b94d26*208*ec96025ed4b023ebfa52bdfd91dfeb64edf3f3970b347ee8bb8adfb2a686a0a34792d40074edd372f346da8fcd02cc5d4182c2fd09f4549ec106273926edd05c42e4b5fc8b8758a7c48f6ddae273f357bcb645c8ad16e3161e8a9dbb5002454f4db5ef0d5d7a93ac",
4634
+ "$DPAPImk$1*2*S-15-21-458698633-447735394-485599537-1788*des3*sha1*24000*96b957d9bf0f8846399e70a84431b595*208*0ee9fa2baf2cf0efda81514376aef853c6c93a5776fa6af66a869f44c50ac80148b7488f52b4c52c305e89a497a583e17cca4a9bab580668a8a5ce2eee083382c98049e481e47629b5815fb16247e3bbfa62c454585aaaf51ef15555a355fcf925cff16c0bb006f8",
4635
+ "$DPAPImk$1*1*S-1-5-21-1482476501-1659004503-725345543-1003*des3*sha1*4000*b3d62a0b06cecc236fe3200460426a13*208*d3841257348221cd92caf4427a59d785ed1474cab3d0101fc8d37137dbb598ff1fd2455826128b2594b846934c073528f8648d750d3c8e6621e6f706d79b18c22f172c0930d9a934de73ea2eb63b7b44810d332f7d03f14d1c153de16070a5cab9324da87405c1c0"
4636
+ ]
4637
+ }
4638
+ ]
4639
+ },
4640
+ {
4641
+ "regex": "^\\$DPAPImk\\$1\\*3\\*[S\\-0-9]{10,60}\\*[^*]{4,6}\\*[^*]{4,6}\\*\\d{1,6}\\*[a-f0-9]{32}\\*\\d{1,6}\\*[a-f0-9]{0,1024}$",
4642
+ "modes": [
4643
+ {
4644
+ "john": "DPAPImk",
4645
+ "hashcat": 15310,
4646
+ "extended": false,
4647
+ "name": "DPAPI masterkey file v1 (context 3)",
4648
+ "samples": [
4649
+ "$DPAPImk$1*3*S-15-21-407415836-404165111-436049749-1915*des3*sha1*14825*3e86e7d8437c4d5582ff668a83632cb2*208*96ad763b59e67c9f5c3d925e42bbe28a1412b919d1dc4abf03b2bed4c5c244056c14931d94d441117529b7171dfd6ebbe6eecf5d958b65574c293778fbadb892351cc59d5c65d65d2fcda73f5b056548a4a5550106d03d0c39d3cca7e5cdc0d521f48ac9e51cecc5",
4650
+ "$DPAPImk$1*3*S-1-5-21-1857904334-2267218879-1458651445-1123*des3*sha1*18000*e4c529ba8975e4ed56f5fb8b1e85be43*208*af96b391f1d6e2d37a4de3b4c412ce78f032d446d77ea1fb6a0782f47c390c844349c2bcaeba9fd570b39def6f67a369aa2e266e8d017689d8a09667fdfb640feb3e19ca22067cc5704644c1dcc43d4cccac667391f4918d0de77f36569fd2e104ef0619a46edcfc"
4651
+ ]
4652
+ }
4653
+ ]
4654
+ },
4655
+ {
4656
+ "regex": "^\\$DPAPImk\\$2\\*[12]\\*[S\\-0-9]{10,60}\\*[^*]{4,6}\\*[^*]{4,6}\\*\\d{1,6}\\*[a-f0-9]{32}\\*\\d{1,6}\\*[a-f0-9]{0,1024}$",
4657
+ "modes": [
4658
+ {
4659
+ "john": "DPAPImk",
4660
+ "hashcat": 15900,
4661
+ "extended": false,
4662
+ "name": "DPAPI masterkey file v2 (context 1 and 2)",
4663
+ "samples": [
4664
+ "$DPAPImk$2*1*S-15-21-439882973-489230393-482956683-1522*aes256*sha512*12900*79f7ca399f2626e21aad108c3922af7c*288*c47bc8a985ca6aa708b01c97b004bff20cc52379dc2635b4acf59ce17970a2cb47ace98c7e8de977f265243c5c03d0a97e4b954b494d9e38d9158d0c1e729d16a28ba69e2e7c6c3bc0e3afc9c9b6306b83372ccb35d89b98925728fd36315b8ee95b4d4eccdcb31564769f9a4b9ee10828184e16d4af336675d5e31d987dd87233d34fbbb98880c5e1f64cbb9b043ad8",
4665
+ "$DPAPImk$2*1*S-15-21-417226446-481759312-475941522-1494*aes256*sha512*8000*1e6b7a71a079bc12e71c75a6bcfd865c*288*5b5d651e538e5185f7d6939ba235ca2d8a2b9726a6e95b59844320ba1d1f22282527210bc784d22075e596d113927761a644ad4057cb4dbb497bd64ee6c630930a4ba388eadb59484ec2be7fb4cc79299a87f341d002d25b5b187c71fa19417ec9d1b65568a79c962cb3b5bcb1b8df5f968669af35eec5a24ed5dcee46deef42bfee5ad665dd4de56ccd9c6ba26b2acd",
4666
+ "$DPAPImk$2*2*S-15-21-402916398-457068774-444912990-1699*aes256*sha512*17000*4c51109a901e4be7f1e208f82a56e690*288*bb80d538ac4185eb0382080fda0d405bb74da3a6b98e96f222292b819fa9168cf1571e9bc9c698ad10daf850ab34de1a1765cfd5c0fb8a63a413a767d241dfe6355804af259d24f6be7282daac0a9e02d7fbe20675afb3733141995990a6d11012edfb7e81b49c0e1132dbc4503dd2206489e4f512e4fe9d573566c9d8973188b8d1a87610b8bef09e971270a376a52b"
4667
+ ]
4668
+ }
4669
+ ]
4670
+ },
4671
+ {
4672
+ "regex": "^\\$DPAPImk\\$2\\*3\\*[S\\-0-9]{10,60}\\*[^*]{4,6}\\*[^*]{4,6}\\*\\d{1,6}\\*[a-f0-9]{32}\\*\\d{1,6}\\*[a-f0-9]{0,1024}$",
4673
+ "modes": [
4674
+ {
4675
+ "john": "DPAPImk",
4676
+ "hashcat": 15910,
4677
+ "extended": false,
4678
+ "name": "DPAPI masterkey file v2 (context 3)",
4679
+ "samples": [
4680
+ "$DPAPImk$2*3*S-15-21-464497560-472124119-475628788-1088*aes256*sha512*13450*685165fdb6d0627a15100215ec331ed8*288*7e1ea6f7ec3c2111f2a3903c73aefe66e524d8b241dc1482d0bd07cc1f3ccdadd8cebd4263b3b7c2496da48f40d2eb4890513e6624aeefbe6bbc6ea73f2f71fecf9cc5fef3891a2e697a4415ba7a069642069c142335d53cc750d42a4f4d2b0592956b4a0e57a5d5b1bfd27f0a8eac9d0d5fc5c5e5e23af18ce1a8eff442ed335e5db3bad6e89146f71aa9351e132fd9"
4681
+ ]
4682
+ }
4683
+ ]
4684
+ },
4685
+ {
4686
+ "regex": "^EXODUS:\\d{1,6}:\\d{1,6}:\\d{1,6}:(?=[^:]{44})(?:[a-z0-9+\/]{4})*(?:|(?:[a-z0-9+\/]{3}=)|(?:[a-z0-9+\/]{2}==)|(?:[a-z0-9+\/]{1}===)):(?=[^:]{16})(?:[a-z0-9+\/]{4})*(?:|(?:[a-z0-9+\/]{3}=)|(?:[a-z0-9+\/]{2}==)|(?:[a-z0-9+\/]{1}===)):(?=[^:]{44})(?:[a-z0-9+\/]{4})*(?:|(?:[a-z0-9+\/]{3}=)|(?:[a-z0-9+\/]{2}==)|(?:[a-z0-9+\/]{1}===)):(?=[^:]{24})(?:[a-z0-9+\/]{4})*(?:|(?:[a-z0-9+\/]{3}=)|(?:[a-z0-9+\/]{2}==)|(?:[a-z0-9+\/]{1}===))$",
4687
+ "modes": [
4688
+ {
4689
+ "john": null,
4690
+ "hashcat": 28200,
4691
+ "extended": false,
4692
+ "name": "Exodus Desktop Wallet (scrypt)",
4693
+ "samples": [
4694
+ "EXODUS:16384:8:1:IYkXZgFETRmFp4wQXyP8XMe3LtuOw8wMdLcBVQ+9YWE=:lq0W9ekN5sC0O7Xw:UD4a6mUUhkTbQtGWitXHZUg0pQ4RHI6W/KUyYE95m3k=:ZuNQckXOtr4r21x+DT1zpQ=="
4695
+ ]
4696
+ }
4697
+ ]
4698
+ },
4699
+ {
4700
+ "regex": "^[a-z0-9\\-_]+\\.[a-z0-9\\-_]{1,6}\\.[a-z0-9\\-_]{20,27}$",
4701
+ "modes": [
4702
+ {
4703
+ "john": null,
4704
+ "hashcat": 29100,
4705
+ "extended": false,
4706
+ "name": "Flask Session Cookie ($salt.$salt.$pass)",
4707
+ "samples": [
4708
+ "eyJ1c2VybmFtZSI6ImFkbWluIn0.YjdgRQ.1OTlf1PD0H9wXsu_qS0aywAJVD8"
4709
+ ]
4710
+ }
4711
+ ]
4712
+ },
4713
+ {
4714
+ "regex": "^\\$keepass\\$\\*1\\*\\d{1,10}\\*\\d{1,3}\\*[a-f0-9]{32}\\*[a-f0-9]{64}\\*[a-f0-9]{32}\\*[a-f0-9]{64}\\*\\d\\*\\d{1,8}\\*[a-f0-9]{2,}$",
4715
+ "modes": [
4716
+ {
4717
+ "john": "keepass",
4718
+ "hashcat": 13400,
4719
+ "extended": false,
4720
+ "name": "KeePass 1 AES / without keyfile",
4721
+ "samples": [
4722
+ "$keepass$*1*50000*0*375756b9e6c72891a8e5645a3338b8c8*82afc053e8e1a6cfa39adae4f5fe5e59f545a54d6956593d1709b39cacd7f796*c698fbfc7d1b71431d10611e2216ab21*24a63140f4eb3bfd7d59b7694eea38d1d93a43bc3af989755d2b326286c4d510*1*192*1a65072f436e9da0c9e832eca225a04ab78821b55d9f550860ade2ef8126a2c4050cf4d033374abd3dac6d0c5907c6cbb033643b203825c12e6c9853b5ac17a4809559fe723e01b4a2ab87cc83c8ba7ee4a757b8a0cf1674106f21f6675cba12064443d65436650df10ea0923c4cadfd4bfe341a6f4fa23a1a67f7d12a489fc5410ef6db9f6607905de491d3b3b915852a1b6c231c96366cbdee5ea9bd7f73ffd2f7a579215528ae1bf0ea540947ebfe39ca84bc6cbeded4f8e8fb6ed8f32dd5",
4723
+ "$keepass$*1*50000*124*60eed105dac456cfc37d89d950ca846e*72ffef7c0bc3698b8eca65184774f6cd91a9356d338e5140e47e319a87f5e46a*8725bdfd3580cf054a1564dc724aaffe*8e58cc08af2462ddffe2ee39735ad14b15e8cb96dc05ef70d8e64d475eca7bf5*1*752*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"
4724
+ ]
4725
+ },
4726
+ {
4727
+ "john": "keepass",
4728
+ "hashcat": null,
4729
+ "extended": false,
4730
+ "name": "KeePass 1 Twofish / without keyfile",
4731
+ "samples": [
4732
+ "$keepass$*1*50000*1*1ff21bd79aa8e9c3f439281a4ce6a97b*cfbdb00057ee0c9e889ca9d93b069ab5ae19f78852bc21aae4f60d0d325e0034*c1a7e6138a49a2dcfb3a84afbc1d918b*a704f9d060f0de5a070155d1d5a8727da92f404242cb3aa2b9aa53a145f87474*1*608*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"
4733
+ ]
4734
+ }
4735
+ ]
4736
+ },
4737
+ {
4738
+ "regex": "^\\$keepass\\$\\*1\\*\\d{1,10}\\*\\d{1,3}\\*[a-f0-9]{32}\\*[a-f0-9]{64}\\*[a-f0-9]{32}\\*[a-f0-9]{64}\\*\\d\\*\\d{1,8}\\*[a-f0-9]{2,}\\*\\d\\*\\d{2}\\*[a-f0-9]{64}$",
4739
+ "modes": [
4740
+ {
4741
+ "john": "keepass",
4742
+ "hashcat": 13400,
4743
+ "extended": false,
4744
+ "name": "KeePass 1 Twofish / with keyfile",
4745
+ "samples": [
4746
+ "$keepass$*1*6000*1*31c087828b0bb76362c10cae773aacdf*6d6c78b4f82ecbcd3b96670cf490914c25ea8c31bc3aeb3fc56e65fac16d721f*a735ec88c01816bc66200c8e17ee9110*08334be8523f4b69bd4e2328db854329bfc81e2ea5a46d8ccf3bccf7c03d879d*1*1360*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*1*64*bbc3babf62557aa4dfba705e24274e1aebf43907fe12f52eaf5395066f7cbdba",
4747
+ "$keepass$*1*6000*0*1a1d38235ccbeae4ca2a9edfbd3b290c*8e1e81b37a6161b6033fbd6dd350aaeaa0712cf2649fe40e3fbbaa4b61684f54*d9517d352aea00c2b7f57f1154b9c0a0*0a8ae9b13347402c242d7cde4d58d01f1e129287eaf62df768856bbb9d0633a1*1*1360*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*1*64*3a96fb77fbbbca7336ee699f17be31fde552191128553c6d89bfce4035dc0af0"
4748
+ ]
4749
+ }
4750
+ ]
4751
+ },
4752
+ {
4753
+ "regex": "^\\$keepass\\$\\*2\\*\\d{1,10}\\*\\d{1,3}\\*[a-f0-9]{64}\\*[a-f0-9]{64}\\*[a-f0-9]{32}\\*[a-f0-9]{64}\\*[a-f0-9]{64}$",
4754
+ "modes": [
4755
+ {
4756
+ "john": "keepass",
4757
+ "hashcat": 13400,
4758
+ "extended": false,
4759
+ "name": "KeePass 2 AES / without keyfile",
4760
+ "samples": [
4761
+ "$keepass$*2*6000*222*a279e37c38b0124559a83fa452a0269d56dc4119a5866d18e76f1f3fd536d64d*7ec7a06bc975ea2ae7c8dcb99e826a308564849b6b25d858cbbc78475af3733f*d477c849bf2278b7a1f626c81e343553*38c8ec186141c2705f2bcb334a730933ed3b0ee11391e1100fbaf429f6c99078*1ada85fe78cf36ab0537562a787dd83e446f13cd3d9a60fd495003de3537b702",
4762
+ "$keepass$*2*6000*222*e54497d3d9be3e310a817a13515225a87773ba71557a88673c34db824550be7b*d405c4f7e3c7b2b142fda44c3d55d3afab1c91a6aca7c81c1ff7e61b3f03be85*7eb45af0af777ecb57f0159b9ffa528b*0af7d9facefb20378e8666389de7586ea72e9527dc78bf5dfe5f1b455060a3e6*9b0d1893678dea77f88bf66e6986adbc5a8095e4a09c7e9744bad42ac49133a7",
4763
+ "$keepass$*2*6000*222*a279e37c38b0124559a83fa452a0269d56dc4119a5866d18e76f1f3fd536d64d*7ec7a06bc975ea2ae7c8dcb99e826a308564849b6b25d858cbbc78475af3733f*d477c849bf2278b7a1f626c81e343553*e61db922e9b77a161e9b674ddadfb8c660d61b5f68d97a3b1596ae94cfa9d169*7c80c7db9de77f176e86ba11697152c4c8f182bdb8133ad1bca22e9ec5bc275b"
4764
+ ]
4765
+ }
4766
+ ]
4767
+ },
4768
+ {
4769
+ "regex": "^\\$keepass\\$\\*2\\*\\d{1,10}\\*\\d{1,3}\\*[a-f0-9]{64}\\*[a-f0-9]{64}\\*[a-f0-9]{32}\\*[a-f0-9]{64}\\*[a-f0-9]{64}\\*\\d\\*\\d{2}\\*[a-f0-9]{64}$",
4770
+ "modes": [
4771
+ {
4772
+ "john": "keepass",
4773
+ "hashcat": 13400,
4774
+ "extended": false,
4775
+ "name": "Keepass 2 AES / with keyfile",
4776
+ "samples": [
4777
+ "$keepass$*2*6000*222*15b6b685bae998f2f608c909dc554e514f2843fbac3c7c16ea3600cc0de30212*c417098b445cfc7a87d56ba17200836f30208d38f75a4169c0280bab3b10ca2a*0d15a81eadccc58b1d3942090cd0ba66*57c4aa5ac7295a97da10f8b2f2d2bfd7a98b0faf75396bc1b55164a1e1dc7e52*2b822bb7e7d060bb42324459cb24df4d3ecd66dc5fc627ac50bf2d7c4255e4f8*1*64*aaf72933951a03351e032b382232bcafbeeabc9bc8e6988b18407bc5b8f0e3cc",
4778
+ "$keepass$*2*24569*0*c40432355cce7348c48053ceea0a28e7d18859c4ea47e3a799c6300861f64b95*265dafcc42e1537ff42e97e1e283c70014133be0fe2d420b4d24c6d57c9d2207*a00e20a852694c15aabb074d61b902fa*48dd553fb96f7996635f2414bfe6a1a8429ef0ffb71a1752abbef31853172c35*a44ae659958ad7fae8c8952cb83f3cf03fec2371ce22a8bf7fac1e687af2f249*1*64*5a26ea376cc5afc955104c334571d30486acbac512a94b75ca82a9e31dd97bf7",
4779
+ "$keepass$*2*6000*222*aa511591cb50394d044f31abb2febdb2788c9ee41d78a53f3efe0f83fdd64e81*7ceab79302a794cef818d9426e53a78458f82e72575967c4fb3788d4bc685874*1c5c1c0c475ee2f22bd56e9c75cfd67c*e7bf79115c83a0236260c71c17a816f9bd9288a683eb4b5e0d48666c66e97774*53f26838a293b392bfde1ad21b444b834cf5c02155a1378ac496653b2f3779ec*1*64*98df4f35fe74c031992d81a639305c4520f303fd1ca4bb09b53e33032b44c46a"
4780
+ ]
4781
+ }
4782
+ ]
4783
+ },
4784
+ {
4785
+ "regex": "^\\$keepass\\$\\*2\\*\\d{1,10}\\*\\d{1,3}\\*[a-f0-9]{64}\\*[a-f0-9]{64}\\*[a-f0-9]{24}\\*[a-f0-9]{64}\\*[a-f0-9]{64}$",
4786
+ "modes": [
4787
+ {
4788
+ "john": "keepass",
4789
+ "hashcat": null,
4790
+ "extended": false,
4791
+ "name": "KeePass 2 ChaCha20 (KDBX 3) / without keyfile",
4792
+ "samples": [
4793
+ "$keepass$*2*6000*2*e852737a797fb642a2814e5965aba3473644a56ea67998526ce5e6f0e256a56a*fb300459b1e8c52fefa8e72676b57563565475b1c1306c266a48ccc2010e6a94*03027f86819941d1d0f3f2f5*af0f6c5e4319e6c10fdb95f44ded70f3115ae7dc28ec83fd3676c92076505ded*e0ab7f438903eb91dd8bc13c52c5a1c02e34b107ae16710bc57858c8c85fecd0"
4794
+ ]
4795
+ }
4796
+ ]
4797
+ },
4798
+ {
4799
+ "regex": "^SCRAM-SHA-256\\$\\d{1,7}:(?=[^:$]{1,88}\\$)(?:[a-z0-9+\/]{4})*(?:|(?:[a-z0-9+\/]{3}=)|(?:[a-z0-9+\/]{2}==)|(?:[a-z0-9+\/]{1}===))\\$(?=[^:]{44}:)(?:[a-z0-9+\/]{4})*(?:|(?:[a-z0-9+\/]{3}=)|(?:[a-z0-9+\/]{2}==)|(?:[a-z0-9+\/]{1}===)):(?=[^:]{44})(?:[a-z0-9+\/]{4})*(?:|(?:[a-z0-9+\/]{3}=)|(?:[a-z0-9+\/]{2}==)|(?:[a-z0-9+\/]{1}===))$",
4800
+ "modes": [
4801
+ {
4802
+ "john": null,
4803
+ "hashcat": 28600,
4804
+ "extended": false,
4805
+ "name": "PostgreSQL SCRAM-SHA-256",
4806
+ "samples": [
4807
+ "SCRAM-SHA-256$4096:IKfxzJ8Nq4PkLJCfgKcPmA==$iRw3qwTp18uaBnsTOEExbtgWdKeBMbSSnZvqD4sdqLQ=:hPciC1CcnBna3szR8Mf3MVc8t0W7QPbIHoMMrh4zRV0="
4808
+ ]
4809
+ }
4810
+ ]
4811
+ },
4812
+ {
4813
+ "regex": "^\\$radmin3\\$[^*]{0,511}\\*[a-f0-9]{64}\\*[a-f0-9]{512}$",
4814
+ "modes": [
4815
+ {
4816
+ "john": null,
4817
+ "hashcat": 29200,
4818
+ "extended": false,
4819
+ "name": "Radmin3",
4820
+ "samples": [
4821
+ "$radmin3$75007300650072006e0061006d006500*c63bf695069d564844c4849e7df6d41f1fbc5f3a7d8fe27c5f20545a238398fa*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"
4822
+ ]
4823
+ }
4824
+ ]
4825
+ },
4826
+ {
4827
+ "regex": "^\\$teamspeak\\$3\\$(?=[^$]{28}\\$)(?:[a-z0-9+\/]{4})*(?:|(?:[a-z0-9+\/]{3}=)|(?:[a-z0-9+\/]{2}==)|(?:[a-z0-9+\/]{1}===))\\$(?=[^$]{152}$)(?:[a-z0-9+\/]{4})*(?:|(?:[a-z0-9+\/]{3}=)|(?:[a-z0-9+\/]{2}==)|(?:[a-z0-9+\/]{1}===))$",
4828
+ "modes": [
4829
+ {
4830
+ "john": null,
4831
+ "hashcat": 28300,
4832
+ "extended": false,
4833
+ "name": "Teamspeak 3 (channel hash)",
4834
+ "samples": [
4835
+ "$teamspeak$3$E0aV0IQ29EDyxRfkFoQflUGJ6zo=$mRgDUkNpd0IwUEcTJQBmE0NHYwdDEhFzQ0VgMRcFJUIRYnaHBwNXRZJwk2ZUaURzdXkVYiUROERmI0hYYGFYCDiIJCeIU3N5EhRVcZFnSIRCJlkUFkY4YFMDcheYeTl4RYZEdpKGJYhxAIQJEYGYEA=="
4836
+ ]
4837
+ }
4838
+ ]
4839
+ },
4840
+ {
4841
+ "regex": "^[a-f0-9]{32}[a-f0-9]{32}(?=[^$]{108}$)(?:[a-z0-9+\/]{4})*(?:|(?:[a-z0-9+\/]{3}=)|(?:[a-z0-9+\/]{2}==)|(?:[a-z0-9+\/]{1}===))$",
4842
+ "modes": [
4843
+ {
4844
+ "john": null,
4845
+ "hashcat": 29600,
4846
+ "extended": false,
4847
+ "name": "Terra Station Wallet (AES256-CBC(PBKDF2($pass)))",
4848
+ "samples": [
4849
+ "67445496c838e96c1424a8dae4b146f0fc247c8c34ef33feffeb1e4412018512wZGtBMeN84XZE2LoOKwTGvA4Ee4m7PR1lDGIdWUV6OSUZKRiKFx9tlrnZLt8r8OfOzbwUS2a2Uo+nrrP6F85fh4eHstwPJw0KwzHWB8br58="
4850
+ ]
4851
+ }
4852
+ ]
4201
4853
  }
4202
4854
  ]