haiti-hash 1.3.0 → 1.4.1
Sign up to get free protection for your applications and to get access to all the features.
- checksums.yaml +4 -4
- data/LICENSE.txt +1 -1
- data/bin/haiti +19 -1
- data/data/prototypes.json +1195 -192
- data/lib/haiti/version.rb +1 -1
- data/lib/haiti.rb +19 -0
- metadata +3 -3
data/data/prototypes.json
CHANGED
@@ -250,7 +250,13 @@
|
|
250
250
|
"john": "pix-md5",
|
251
251
|
"hashcat": 2400,
|
252
252
|
"extended": false,
|
253
|
-
"name": "Cisco-PIX(MD5)"
|
253
|
+
"name": "Cisco-PIX (MD5)",
|
254
|
+
"samples": [
|
255
|
+
"dRRVnUmUHXOTt9nk",
|
256
|
+
"2KFQnbNIdI.2KYOU",
|
257
|
+
"TRPEas6f/aa6JSPL",
|
258
|
+
".7nfVBEIEu4KbF/1"
|
259
|
+
]
|
254
260
|
},
|
255
261
|
{
|
256
262
|
"john": "dynamic_19",
|
@@ -282,7 +288,8 @@
|
|
282
288
|
"samples": [
|
283
289
|
"_GW..8841inaTltazRsQ",
|
284
290
|
"_J9..XXXXsqM/YSSP..Y",
|
285
|
-
"_J9..SDSD5YGyRCr4W4c"
|
291
|
+
"_J9..SDSD5YGyRCr4W4c",
|
292
|
+
"_EQ0.jzhSVeUyoSqLupI"
|
286
293
|
]
|
287
294
|
}
|
288
295
|
]
|
@@ -339,7 +346,7 @@
|
|
339
346
|
]
|
340
347
|
},
|
341
348
|
{
|
342
|
-
"regex": "^[a-f0-9]{32}(
|
349
|
+
"regex": "^[a-f0-9]{32}(?::.+)?$",
|
343
350
|
"modes": [
|
344
351
|
{
|
345
352
|
"john": "raw-md5",
|
@@ -360,7 +367,7 @@
|
|
360
367
|
{
|
361
368
|
"john": null,
|
362
369
|
"hashcat": 2600,
|
363
|
-
"extended":
|
370
|
+
"extended": true,
|
364
371
|
"name": "Double MD5"
|
365
372
|
},
|
366
373
|
{
|
@@ -378,31 +385,31 @@
|
|
378
385
|
{
|
379
386
|
"john": "dynamic_160",
|
380
387
|
"hashcat": null,
|
381
|
-
"extended":
|
388
|
+
"extended": true,
|
382
389
|
"name": "Haval-128 (3 rounds)"
|
383
390
|
},
|
384
391
|
{
|
385
392
|
"john": "dynamic_180",
|
386
393
|
"hashcat": null,
|
387
|
-
"extended":
|
394
|
+
"extended": true,
|
388
395
|
"name": "Haval-128 (5 rounds)"
|
389
396
|
},
|
390
397
|
{
|
391
398
|
"john": null,
|
392
399
|
"hashcat": null,
|
393
|
-
"extended":
|
400
|
+
"extended": true,
|
394
401
|
"name": "Tiger-128"
|
395
402
|
},
|
396
403
|
{
|
397
404
|
"john": null,
|
398
405
|
"hashcat": null,
|
399
|
-
"extended":
|
406
|
+
"extended": true,
|
400
407
|
"name": "Skein-256(128)"
|
401
408
|
},
|
402
409
|
{
|
403
410
|
"john": null,
|
404
411
|
"hashcat": null,
|
405
|
-
"extended":
|
412
|
+
"extended": true,
|
406
413
|
"name": "Skein-512(128)"
|
407
414
|
},
|
408
415
|
{
|
@@ -615,14 +622,46 @@
|
|
615
622
|
"extended": true,
|
616
623
|
"name": "md5($salt.pad16($pass))"
|
617
624
|
},
|
625
|
+
{
|
626
|
+
"john": null,
|
627
|
+
"hashcat": 4410,
|
628
|
+
"extended": true,
|
629
|
+
"name": "md5(sha1($pass).$salt)",
|
630
|
+
"samples": [
|
631
|
+
"bc8319c0220bff8a0d7f5d703114a725:34659348756345251"
|
632
|
+
]
|
633
|
+
},
|
618
634
|
{
|
619
635
|
"john": null,
|
620
636
|
"hashcat": null,
|
621
|
-
"extended":
|
637
|
+
"extended": true,
|
622
638
|
"name": "MD6-128",
|
623
639
|
"samples": [
|
624
640
|
"8cd9a30bfde990878c06be4a6111f726"
|
625
641
|
]
|
642
|
+
},
|
643
|
+
{
|
644
|
+
"john": null,
|
645
|
+
"hashcat": 2810,
|
646
|
+
"extended": false,
|
647
|
+
"name": "IPB 2.x (Invision Power Board)",
|
648
|
+
"samples": [
|
649
|
+
"022f7e02b3314f7d0968f73c00ba759f:67588"
|
650
|
+
]
|
651
|
+
}
|
652
|
+
]
|
653
|
+
},
|
654
|
+
{
|
655
|
+
"regex": "^[a-f0-9]{32}(?::.{1,32})?$",
|
656
|
+
"modes": [
|
657
|
+
{
|
658
|
+
"john": null,
|
659
|
+
"hashcat": 12,
|
660
|
+
"extended": true,
|
661
|
+
"name": "PostgreSQL",
|
662
|
+
"samples": [
|
663
|
+
"93a8cf6a7d43e3b5bcd2dc6abb3e02c6:27032153220030464358344758762807"
|
664
|
+
]
|
626
665
|
}
|
627
666
|
]
|
628
667
|
},
|
@@ -753,19 +792,32 @@
|
|
753
792
|
"john": "md5crypt",
|
754
793
|
"hashcat": 500,
|
755
794
|
"extended": false,
|
756
|
-
"name": "MD5 Crypt"
|
795
|
+
"name": "MD5 Crypt",
|
796
|
+
"samples": [
|
797
|
+
"$1$38652870$DUjsu4TTlTsOe/xxZ05uf/"
|
798
|
+
]
|
757
799
|
},
|
758
800
|
{
|
759
801
|
"john": "md5crypt",
|
760
802
|
"hashcat": 500,
|
761
803
|
"extended": false,
|
762
|
-
"name": "
|
763
|
-
}
|
804
|
+
"name": "FreeBSD MD5"
|
805
|
+
}
|
806
|
+
]
|
807
|
+
},
|
808
|
+
{
|
809
|
+
"regex": "^\\$1\\$[a-z0-9\\/.]{4}\\$[a-z0-9\\/.]{22}(:.*)?$",
|
810
|
+
"modes": [
|
811
|
+
|
764
812
|
{
|
765
813
|
"john": "md5crypt",
|
766
814
|
"hashcat": 500,
|
767
815
|
"extended": false,
|
768
|
-
"name": "
|
816
|
+
"name": "Cisco Type 5 (MD5)",
|
817
|
+
"samples": [
|
818
|
+
"$1$VkQd$Vma3sR7B1LL.v5lgy1NYc/",
|
819
|
+
"$1$SpMm$eALjeyED.WSZs0naLNv22/"
|
820
|
+
]
|
769
821
|
}
|
770
822
|
]
|
771
823
|
},
|
@@ -930,40 +982,7 @@
|
|
930
982
|
]
|
931
983
|
},
|
932
984
|
{
|
933
|
-
"regex": "^[a-f0-9]{
|
934
|
-
"modes": [
|
935
|
-
{
|
936
|
-
"john": null,
|
937
|
-
"hashcat": 2811,
|
938
|
-
"extended": false,
|
939
|
-
"name": "IP.Board \u2265 v2+"
|
940
|
-
}
|
941
|
-
]
|
942
|
-
},
|
943
|
-
{
|
944
|
-
"regex": "^[a-f0-9]{32}:.{8}$",
|
945
|
-
"modes": [
|
946
|
-
{
|
947
|
-
"john": null,
|
948
|
-
"hashcat": 2811,
|
949
|
-
"extended": false,
|
950
|
-
"name": "MyBB \u2265 v1.2+"
|
951
|
-
}
|
952
|
-
]
|
953
|
-
},
|
954
|
-
{
|
955
|
-
"regex": "^[a-z0-9]{34}$",
|
956
|
-
"modes": [
|
957
|
-
{
|
958
|
-
"john": null,
|
959
|
-
"hashcat": null,
|
960
|
-
"extended": false,
|
961
|
-
"name": "CryptoCurrency(Adress)"
|
962
|
-
}
|
963
|
-
]
|
964
|
-
},
|
965
|
-
{
|
966
|
-
"regex": "^[a-f0-9]{40}(:.+)?$",
|
985
|
+
"regex": "^[a-f0-9]{40}(:[^:]+)?$",
|
967
986
|
"modes": [
|
968
987
|
{
|
969
988
|
"john": "raw-sha1",
|
@@ -998,7 +1017,7 @@
|
|
998
1017
|
{
|
999
1018
|
"john": null,
|
1000
1019
|
"hashcat": null,
|
1001
|
-
"extended":
|
1020
|
+
"extended": true,
|
1002
1021
|
"name": "Tiger-160"
|
1003
1022
|
},
|
1004
1023
|
{
|
@@ -1166,7 +1185,7 @@
|
|
1166
1185
|
]
|
1167
1186
|
},
|
1168
1187
|
{
|
1169
|
-
"regex": "^(\\$ripemd\\$)?[a-f0-9]{40}(
|
1188
|
+
"regex": "^(\\$ripemd\\$)?[a-f0-9]{40}(:[^:]+)?$",
|
1170
1189
|
"modes": [
|
1171
1190
|
{
|
1172
1191
|
"john": "ripemd-160",
|
@@ -1181,6 +1200,20 @@
|
|
1181
1200
|
}
|
1182
1201
|
]
|
1183
1202
|
},
|
1203
|
+
{
|
1204
|
+
"regex": "^[a-f0-9]{40}:[a-f0-9]+:[a-f0-9]+$",
|
1205
|
+
"modes": [
|
1206
|
+
{
|
1207
|
+
"john": null,
|
1208
|
+
"hashcat": 29000,
|
1209
|
+
"extended": true,
|
1210
|
+
"name": "sha1($salt.sha1(utf16le($username).':'.utf16le($pass)))",
|
1211
|
+
"samples": [
|
1212
|
+
"339b5eaa53f28516008e9ca710857d3a4785b6fc:8ca064ff42fcab5a8f0692544b8dd3d3054bd73fe9afaa08c6b6b310538cc9a7:757365726e616d65"
|
1213
|
+
]
|
1214
|
+
}
|
1215
|
+
]
|
1216
|
+
},
|
1184
1217
|
{
|
1185
1218
|
"regex": "^(\\*)?[a-f0-9]{40}$",
|
1186
1219
|
"modes": [
|
@@ -1214,7 +1247,10 @@
|
|
1214
1247
|
"john": null,
|
1215
1248
|
"hashcat": 5700,
|
1216
1249
|
"extended": false,
|
1217
|
-
"name": "Cisco
|
1250
|
+
"name": "Cisco Type 4 (Raw SHA256)",
|
1251
|
+
"samples": [
|
1252
|
+
"2btjjy78REtmYkkW0csHUbJZOstRXoWdX1mGrmmfeHI"
|
1253
|
+
]
|
1218
1254
|
}
|
1219
1255
|
]
|
1220
1256
|
},
|
@@ -1328,7 +1364,7 @@
|
|
1328
1364
|
]
|
1329
1365
|
},
|
1330
1366
|
{
|
1331
|
-
"regex": "^{ssha1}
|
1367
|
+
"regex": "^{ssha1}\\d{2}\\$[a-z0-9$\\/.]{44}$",
|
1332
1368
|
"modes": [
|
1333
1369
|
{
|
1334
1370
|
"john": "aix-ssha1",
|
@@ -1356,15 +1392,16 @@
|
|
1356
1392
|
]
|
1357
1393
|
},
|
1358
1394
|
{
|
1359
|
-
"regex": "^(\\$md5,rounds
|
1395
|
+
"regex": "^(\\$md5,rounds=\\d+\\$|\\$md5\\$rounds=\\d+\\$|\\$md5\\$)[a-z0-9\\/.]{0,16}(\\$|\\$\\$)[a-z0-9\\/.]{22}$",
|
1360
1396
|
"modes": [
|
1361
1397
|
{
|
1362
1398
|
"john": "sunmd5",
|
1363
1399
|
"hashcat": 3300,
|
1364
1400
|
"extended": false,
|
1365
|
-
"name": "Sun MD5 Crypt",
|
1401
|
+
"name": "Sun / Solaris MD5 Crypt",
|
1366
1402
|
"samples": [
|
1367
|
-
"$md5$rounds=904$iPPKEBnEkp3JV8uX$0L6m7rOFTVFn.SGqo2M9W1"
|
1403
|
+
"$md5$rounds=904$iPPKEBnEkp3JV8uX$0L6m7rOFTVFn.SGqo2M9W1",
|
1404
|
+
"$md5,rounds=5000$GUBv0xjJ$$mSwgIswdjlTY0YxV7HBVm0"
|
1368
1405
|
]
|
1369
1406
|
}
|
1370
1407
|
]
|
@@ -1459,19 +1496,19 @@
|
|
1459
1496
|
{
|
1460
1497
|
"john": null,
|
1461
1498
|
"hashcat": null,
|
1462
|
-
"extended":
|
1499
|
+
"extended": true,
|
1463
1500
|
"name": "Skein-256(224)"
|
1464
1501
|
},
|
1465
1502
|
{
|
1466
1503
|
"john": null,
|
1467
1504
|
"hashcat": null,
|
1468
|
-
"extended":
|
1505
|
+
"extended": true,
|
1469
1506
|
"name": "Skein-512(224)"
|
1470
1507
|
},
|
1471
1508
|
{
|
1472
1509
|
"john": "dynamic_330",
|
1473
1510
|
"hashcat": null,
|
1474
|
-
"extended":
|
1511
|
+
"extended": true,
|
1475
1512
|
"name": "Skein-224"
|
1476
1513
|
},
|
1477
1514
|
{
|
@@ -1483,7 +1520,7 @@
|
|
1483
1520
|
]
|
1484
1521
|
},
|
1485
1522
|
{
|
1486
|
-
"regex": "^(\\$2[
|
1523
|
+
"regex": "^(\\$2[abxy]|\\$2)\\$\\d{2}\\$[a-z0-9\\/.]{53}$",
|
1487
1524
|
"modes": [
|
1488
1525
|
{
|
1489
1526
|
"john": "bcrypt",
|
@@ -1520,6 +1557,15 @@
|
|
1520
1557
|
"samples": [
|
1521
1558
|
"$2a$05$Uo385Fa0g86uUXHwZxB90.qMMdRFExaXePGka4WGFv.86I45AEjmO"
|
1522
1559
|
]
|
1560
|
+
},
|
1561
|
+
{
|
1562
|
+
"john": null,
|
1563
|
+
"hashcat": 28400,
|
1564
|
+
"extended": true,
|
1565
|
+
"name": "bcrypt(sha512($pass)) / bcryptsha512",
|
1566
|
+
"samples": [
|
1567
|
+
"$2a$12$KhivLhCuLhSyMBOxLxCyLu78x4z2X/EJdZNfS3Gy36fvRt56P2jbS"
|
1568
|
+
]
|
1523
1569
|
}
|
1524
1570
|
]
|
1525
1571
|
},
|
@@ -1546,7 +1592,7 @@
|
|
1546
1592
|
]
|
1547
1593
|
},
|
1548
1594
|
{
|
1549
|
-
"regex": "^\\$bcrypt-sha256\\$(2[axy]|2)
|
1595
|
+
"regex": "^\\$bcrypt-sha256\\$(2[axy]|2)\\,\\d+\\$[a-z0-9\\/.]{22}\\$[a-z0-9\\/.]{31}$",
|
1550
1596
|
"modes": [
|
1551
1597
|
{
|
1552
1598
|
"john": null,
|
@@ -1659,7 +1705,7 @@
|
|
1659
1705
|
{
|
1660
1706
|
"john": null,
|
1661
1707
|
"hashcat": null,
|
1662
|
-
"extended":
|
1708
|
+
"extended": true,
|
1663
1709
|
"name": "Skein-512(256)"
|
1664
1710
|
},
|
1665
1711
|
{
|
@@ -1712,21 +1758,39 @@
|
|
1712
1758
|
},
|
1713
1759
|
{
|
1714
1760
|
"john": "dynamic_64",
|
1715
|
-
"hashcat":
|
1761
|
+
"hashcat": 21400,
|
1716
1762
|
"extended": true,
|
1717
|
-
"name": "sha256(sha256_raw($pass))"
|
1763
|
+
"name": "sha256(sha256_raw($pass))",
|
1764
|
+
"samples": [
|
1765
|
+
"0cc1b58a543f372327aa0281e97ab56e345267ee46feabf7709515debb7ec43c"
|
1766
|
+
]
|
1718
1767
|
},
|
1719
1768
|
{
|
1720
1769
|
"john": "dynamic_65",
|
1721
|
-
"hashcat":
|
1770
|
+
"hashcat": 20710,
|
1722
1771
|
"extended": true,
|
1723
|
-
"name": "sha256(sha256($pass).$salt)"
|
1772
|
+
"name": "sha256(sha256($pass).$salt)",
|
1773
|
+
"samples": [
|
1774
|
+
"bfede293ecf6539211a7305ea218b9f3f608953130405cda9eaba6fb6250f824:7218532375810603"
|
1775
|
+
]
|
1724
1776
|
},
|
1725
1777
|
{
|
1726
1778
|
"john": "dynamic_66",
|
1727
|
-
"hashcat":
|
1779
|
+
"hashcat": 20720,
|
1728
1780
|
"extended": true,
|
1729
|
-
"name": "sha256($salt.sha256($pass))"
|
1781
|
+
"name": "sha256($salt.sha256($pass))",
|
1782
|
+
"samples": [
|
1783
|
+
"bae9edada8358fcebcd811f7d362f46277fb9d488379869fba65d79701d48b8b:869dc2ed80187919"
|
1784
|
+
]
|
1785
|
+
},
|
1786
|
+
{
|
1787
|
+
"john": null,
|
1788
|
+
"hashcat": 21420,
|
1789
|
+
"extended": true,
|
1790
|
+
"name": "sha256($salt.sha256_raw($pass))",
|
1791
|
+
"samples": [
|
1792
|
+
"5934ea4d670c13a71155faba42056b2525f71bdc9215d31108990c11bf3d98e3:9269771356270099311432765354522635185291064175409115041569"
|
1793
|
+
]
|
1730
1794
|
},
|
1731
1795
|
{
|
1732
1796
|
"john": "dynamic_67",
|
@@ -1780,13 +1844,13 @@
|
|
1780
1844
|
{
|
1781
1845
|
"john": null,
|
1782
1846
|
"hashcat": null,
|
1783
|
-
"extended":
|
1847
|
+
"extended": true,
|
1784
1848
|
"name": "SAM(LM_Hash:NT_Hash)"
|
1785
1849
|
}
|
1786
1850
|
]
|
1787
1851
|
},
|
1788
1852
|
{
|
1789
|
-
"regex": "^(\\$chap\\$0\\*)?[a-f0-9]{32}[\\*:][a-f0-9]{32}(
|
1853
|
+
"regex": "^(\\$chap\\$0\\*)?[a-f0-9]{32}[\\*:][a-f0-9]{32}(:\\d{2})?$",
|
1790
1854
|
"modes": [
|
1791
1855
|
{
|
1792
1856
|
"john": "chap",
|
@@ -1814,7 +1878,7 @@
|
|
1814
1878
|
]
|
1815
1879
|
},
|
1816
1880
|
{
|
1817
|
-
"regex": "^{ssha256}
|
1881
|
+
"regex": "^{ssha256}\\d{2}\\$[a-z0-9$\\/.]{60}$",
|
1818
1882
|
"modes": [
|
1819
1883
|
{
|
1820
1884
|
"john": "aix-ssha256",
|
@@ -1885,13 +1949,13 @@
|
|
1885
1949
|
{
|
1886
1950
|
"john": null,
|
1887
1951
|
"hashcat": null,
|
1888
|
-
"extended":
|
1952
|
+
"extended": true,
|
1889
1953
|
"name": "Skein-512(384)"
|
1890
1954
|
},
|
1891
1955
|
{
|
1892
1956
|
"john": null,
|
1893
1957
|
"hashcat": null,
|
1894
|
-
"extended":
|
1958
|
+
"extended": true,
|
1895
1959
|
"name": "Skein-1024(384)"
|
1896
1960
|
},
|
1897
1961
|
{
|
@@ -1974,7 +2038,7 @@
|
|
1974
2038
|
]
|
1975
2039
|
},
|
1976
2040
|
{
|
1977
|
-
"regex": "^{ssha512}
|
2041
|
+
"regex": "^{ssha512}\\d{2}\\$[a-z0-9\\/.]{16,48}\\$[a-z0-9\\/.]{86}$",
|
1978
2042
|
"modes": [
|
1979
2043
|
{
|
1980
2044
|
"john": "aix-ssha512",
|
@@ -2038,7 +2102,10 @@
|
|
2038
2102
|
"john": "raw-blake2",
|
2039
2103
|
"hashcat": null,
|
2040
2104
|
"extended": false,
|
2041
|
-
"name": "BLAKE2-512"
|
2105
|
+
"name": "BLAKE2-512",
|
2106
|
+
"samples": [
|
2107
|
+
"4245af08b46fbb290222ab8a68613621d92ce78577152d712467742417ebc1153668f1c9e1ec1e152a32a9c242dc686d175e087906377f0c483c5be2cb68953e"
|
2108
|
+
]
|
2042
2109
|
},
|
2043
2110
|
{
|
2044
2111
|
"john": "skein-512",
|
@@ -2049,7 +2116,7 @@
|
|
2049
2116
|
{
|
2050
2117
|
"john": null,
|
2051
2118
|
"hashcat": null,
|
2052
|
-
"extended":
|
2119
|
+
"extended": true,
|
2053
2120
|
"name": "Skein-1024(512)"
|
2054
2121
|
},
|
2055
2122
|
{
|
@@ -2136,11 +2203,38 @@
|
|
2136
2203
|
"john": "raw-blake2",
|
2137
2204
|
"hashcat": 600,
|
2138
2205
|
"extended": false,
|
2139
|
-
"name": "BLAKE2-512"
|
2206
|
+
"name": "BLAKE2-512",
|
2207
|
+
"samples": [
|
2208
|
+
"$BLAKE2$021ced8799296ceca557832ab941a50b4a11f83478cf141f51f933f653ab9fbcc05a037cddbed06e309bf334942c4e58cdf1a46e237911ccd7fcf9787cbc7fd0",
|
2209
|
+
"$BLAKE2$1f7d9b7c9a90f7bfc66e52b69f3b6c3befbd6aee11aac860e99347a495526f30c9e51f6b0db01c24825092a09dd1a15740f0ade8def87e60c15da487571bcef7",
|
2210
|
+
"$BLAKE2$296c269e70ac5f0095e6fb47693480f0f7b97ccd0307f5c3bfa4df8f5ca5c9308a0e7108e80a0a9c0ebb715e8b7109b072046c6cd5e155b4cfd2f27216283b1e"
|
2211
|
+
]
|
2212
|
+
}
|
2213
|
+
]
|
2214
|
+
},
|
2215
|
+
{
|
2216
|
+
"regex": "^\\$BLAKE2\\$[a-f0-9]{128}(?::.+)$",
|
2217
|
+
"modes": [
|
2218
|
+
{
|
2219
|
+
"john": null,
|
2220
|
+
"hashcat": 610,
|
2221
|
+
"extended": true,
|
2222
|
+
"name": "BLAKE2-512($pass.$salt)",
|
2223
|
+
"samples": [
|
2224
|
+
"$BLAKE2$41fcd44c789c735c08b43a871b81c8f617ca43918d38aee6cf8291c58a0b00a03115857425e5ff6f044be7a5bec8536b52d6c9992e21cd43cdca8a55bbf1f5c1:1033"
|
2225
|
+
]
|
2226
|
+
},
|
2227
|
+
{
|
2228
|
+
"john": null,
|
2229
|
+
"hashcat": 620,
|
2230
|
+
"extended": true,
|
2231
|
+
"name": "BLAKE2-512($salt.$pass)",
|
2232
|
+
"samples": [
|
2233
|
+
"$BLAKE2$f0325fdfc3f82a014935442f7adbc069d4636d67276a85b09f8de368f122cf5195a0b780d7fee709fbf1dcd02ddcb581df84508cf1fb0f3393af1be0565491c6:3301"
|
2234
|
+
]
|
2140
2235
|
}
|
2141
2236
|
]
|
2142
2237
|
},
|
2143
|
-
|
2144
2238
|
{
|
2145
2239
|
"regex": "^[a-f0-9]{136}$",
|
2146
2240
|
"modes": [
|
@@ -2178,7 +2272,7 @@
|
|
2178
2272
|
]
|
2179
2273
|
},
|
2180
2274
|
{
|
2181
|
-
"regex": "^\\$ml
|
2275
|
+
"regex": "^\\$ml\\$\\d+\\$[a-f0-9]{64}\\$[a-f0-9]{128}$",
|
2182
2276
|
"modes": [
|
2183
2277
|
{
|
2184
2278
|
"john": "pbkdf2-hmac-sha512",
|
@@ -2200,13 +2294,13 @@
|
|
2200
2294
|
{
|
2201
2295
|
"john": null,
|
2202
2296
|
"hashcat": null,
|
2203
|
-
"extended":
|
2297
|
+
"extended": true,
|
2204
2298
|
"name": "Skein-1024"
|
2205
2299
|
}
|
2206
2300
|
]
|
2207
2301
|
},
|
2208
2302
|
{
|
2209
|
-
"regex": "^grub\\.pbkdf2\\.sha512
|
2303
|
+
"regex": "^grub\\.pbkdf2\\.sha512\\.\\d+\\.([a-f0-9]{128,2048}\\.|\\d+\\.)?[a-f0-9]{128}$",
|
2210
2304
|
"modes": [
|
2211
2305
|
{
|
2212
2306
|
"john": null,
|
@@ -2250,13 +2344,16 @@
|
|
2250
2344
|
]
|
2251
2345
|
},
|
2252
2346
|
{
|
2253
|
-
"regex": "^\\$5\\$(rounds
|
2347
|
+
"regex": "^\\$5\\$(rounds=\\d+\\$)?[a-z0-9\\/.]{0,16}\\$[a-z0-9\\/.]{43}$",
|
2254
2348
|
"modes": [
|
2255
2349
|
{
|
2256
2350
|
"john": "sha256crypt",
|
2257
2351
|
"hashcat": 7400,
|
2258
2352
|
"extended": false,
|
2259
|
-
"name": "SHA-256 Crypt"
|
2353
|
+
"name": "SHA-256 Crypt",
|
2354
|
+
"samples": [
|
2355
|
+
"$5$9ks3nNEqv31FX.F$gdEoLFsCRsn/WRN3wxUnzfeZLoooVlzeF4WjLomTRFD"
|
2356
|
+
]
|
2260
2357
|
}
|
2261
2358
|
]
|
2262
2359
|
},
|
@@ -2272,13 +2369,16 @@
|
|
2272
2369
|
]
|
2273
2370
|
},
|
2274
2371
|
{
|
2275
|
-
"regex": "^\\$6\\$(rounds
|
2372
|
+
"regex": "^\\$6\\$(rounds=\\d+\\$)?[a-z0-9\\/.]{0,16}\\$[a-z0-9\\/.]{86}$",
|
2276
2373
|
"modes": [
|
2277
2374
|
{
|
2278
2375
|
"john": "sha512crypt",
|
2279
2376
|
"hashcat": 1800,
|
2280
2377
|
"extended": false,
|
2281
|
-
"name": "SHA-512 Crypt"
|
2378
|
+
"name": "SHA-512 Crypt",
|
2379
|
+
"samples": [
|
2380
|
+
"$6$qoE2letU$wWPRl.PVczjzeMVgjiA8LLy2nOyZbf7Amj3qLIL978o18gbMySdKZ7uepq9tmMQXxyTIrS12Pln.2Q/6Xscao0"
|
2381
|
+
]
|
2282
2382
|
}
|
2283
2383
|
]
|
2284
2384
|
},
|
@@ -2409,57 +2509,111 @@
|
|
2409
2509
|
]
|
2410
2510
|
},
|
2411
2511
|
{
|
2412
|
-
"regex": "^\\$(
|
2512
|
+
"regex": "^\\$(?:af|k4)\\$[^$]+\\$[a-f0-9]{32}$",
|
2513
|
+
"modes": [
|
2514
|
+
{
|
2515
|
+
"john": "krb4",
|
2516
|
+
"hashcat": null,
|
2517
|
+
"extended": false,
|
2518
|
+
"name": "Kerberos 4 TGT",
|
2519
|
+
"samples": [
|
2520
|
+
"$af$UMICH.EDU$bb46613c503ad92e649d99d038efddb2",
|
2521
|
+
"$af$UMICH.EDU$bebcedf43f7f2aa78cf9c0639e494c92"
|
2522
|
+
]
|
2523
|
+
}
|
2524
|
+
]
|
2525
|
+
},
|
2526
|
+
{
|
2527
|
+
"regex": "^\\$krb5\\$[^$]+\\$[^$]+\\$[a-f0-9]{456}$",
|
2528
|
+
"modes": [
|
2529
|
+
{
|
2530
|
+
"john": "krb5",
|
2531
|
+
"hashcat": null,
|
2532
|
+
"extended": false,
|
2533
|
+
"name": "Kerberos 5 TGT",
|
2534
|
+
"samples": [
|
2535
|
+
"$krb5$oskov$ACM.UIUC.EDU$4730d7249765615d6f3652321c4fb76d09fb9cd06faeb0c31b8737f9fdfcde4bd4259c31cb1dff25df39173b09abdff08373302d99ac09802a290915243d9f0ea0313fdedc7f8d1fae0d9df8f0ee6233818d317f03a72c2e77b480b2bc50d1ca14fba85133ea00e472c50dbc825291e2853bd60a969ddb69dae35b604b34ea2c2265a4ffc72e9fb811da17c7f2887ccb17e2f87cd1f6c28a9afc0c083a9356a9ee2a28d2e4a01fc7ea90cc8836b8e25650c3a1409b811d0bad42a59aa418143291d42d7b1e6cb5b1876a4cc758d721323a762e943f774630385c9faa68df6f3a94422f97",
|
2536
|
+
"$krb5$oskov$ACM.UIUC.EDU$6cba0316d38e31ba028f87394792baade516afdfd8c5a964b6a7677adbad7815d778b297beb238394aa97a4d495adb7c9b7298ba7c2a2062fb6c9a4297f12f83755060f4f58a1ea4c7026df585cdfa02372ad619ab1a4ec617ad23e76d6e37e36268d9aa0abcf83f11fa8092b4328c5e6c577f7ec6f1c1684d9c99a309eee1f5bd764c4158a2cf311cded8794b2de83131c3dc51303d5300e563a2b7a230eac67e85b4593e561bf6b88c77b82c729e7ba7f3d2f99b8dc85b07873e40335aff4647833a87681ee557fbd1ffa1a458a5673d1bd3c1587eceeabaebf4e44c24d9a8ac8c1d89"
|
2537
|
+
]
|
2538
|
+
}
|
2539
|
+
]
|
2540
|
+
},
|
2541
|
+
{
|
2542
|
+
"regex": "^\\$(?:krb5pa\\$\\d{2}|mskrb5)\\$.+\\$[a-f0-9]+$",
|
2413
2543
|
"modes": [
|
2414
2544
|
{
|
2415
2545
|
"john": "krb5pa-md5",
|
2416
2546
|
"hashcat": 7500,
|
2417
2547
|
"extended": false,
|
2418
|
-
"name": "Kerberos 5 AS-REQ Pre-Auth etype 23"
|
2548
|
+
"name": "Kerberos 5 AS-REQ Pre-Auth etype 23",
|
2549
|
+
"samples": [
|
2550
|
+
"$krb5pa$23$user$realm$salt$5cbb0c882a2b26956e81644edbdb746326f4f5f0e947144fb3095dffe4b4b03e854fc1d631323632303636373330383333353630",
|
2551
|
+
"$krb5pa$23$user$realm$salt$afcbe07c32c3450b37d0f2516354570fe7d3e78f829e77cdc1718adf612156507181f7daeb03b6fbcfe91f8346f3c0ae7e8abfe5",
|
2552
|
+
"$mskrb5$john$JOHN.DOE.MS.COM$02E837D06B2AC76891F388D9CC36C67A$2A9785BF5036C45D3843490BF9C228E8C18653E10CE58D7F8EF119D2EF4F92B1803B1451",
|
2553
|
+
"$krb5pa$23$$$$afcbe07c32c3450b37d0f2516354570fe7d3e78f829e77cdc1718adf612156507181f7daeb03b6fbcfe91f8346f3c0ae7e8abfe5"
|
2554
|
+
]
|
2419
2555
|
}
|
2420
2556
|
]
|
2421
2557
|
},
|
2422
2558
|
{
|
2423
|
-
"regex": "^\\$krb5tgs\\$23
|
2559
|
+
"regex": "^\\$krb5tgs\\$23\\$(?:[^$]+\\$[^$]+\\$[^$]+\\$)?[a-f0-9]{32}\\$[a-f0-9]{64,40960}$",
|
2424
2560
|
"modes": [
|
2425
2561
|
{
|
2426
2562
|
"john": "krb5tgs",
|
2427
2563
|
"hashcat": 13100,
|
2428
2564
|
"extended": false,
|
2429
|
-
"name": "Kerberos 5 TGS-REP etype 23"
|
2565
|
+
"name": "Kerberos 5 TGS-REP etype 23",
|
2566
|
+
"samples": [
|
2567
|
+
"$krb5tgs$23$*user$realm$test/spn*$b548e10f5694ae018d7ad63c257af7dc$35e8e45658860bc31a859b41a08989265f4ef8afd75652ab4d7a30ef151bf6350d879ae189a8cb769e01fa573c6315232b37e4bcad9105520640a781e5fd85c09615e78267e494f433f067cc6958200a82f70627ce0eebc2ac445729c2a8a0255dc3ede2c4973d2d93ac8c1a56b26444df300cb93045d05ff2326affaa3ae97f5cd866c14b78a459f0933a550e0b6507bf8af27c2391ef69fbdd649dd059a4b9ae2440edd96c82479645ccdb06bae0eead3b7f639178a90cf24d9a",
|
2568
|
+
"$krb5tgs$23$74809c4c83c3c8279c6058d2f206ec2f$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",
|
2569
|
+
"$krb5tgs$23$8bef2ad33c7d5d23c8693ccd868d9f84$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"
|
2570
|
+
]
|
2430
2571
|
}
|
2431
2572
|
]
|
2432
2573
|
},
|
2433
2574
|
{
|
2434
|
-
"regex": "^\\$krb5asrep\\$23\\$[
|
2575
|
+
"regex": "^\\$krb5asrep\\$23\\$(?:[^:$]+:)?[a-f0-9]{32}\\$[a-f0-9]{64,40960}$",
|
2435
2576
|
"modes": [
|
2436
2577
|
{
|
2437
2578
|
"john": "krb5asrep",
|
2438
2579
|
"hashcat": 18200,
|
2439
2580
|
"extended": false,
|
2440
|
-
"name": "Kerberos 5 AS-REP etype 23"
|
2581
|
+
"name": "Kerberos 5 AS-REP etype 23",
|
2582
|
+
"samples": [
|
2583
|
+
"$krb5asrep$23$8cf8eb5287e28a4006c064892150c4fb$3e05ecc13548bec8e1eeb900dea5429cc6931bae9b8524490eb3a8801560871fe44355ed556202afbb39872e1bbb5c3c4f1b37dcd68fda89a23ebad917d4bbb0933edd94331598939e5d0c0c98c7e219a2e9dd6b877280d1bd7c51131413be577a167208bcc21e9fe7ae8f393278d740e72ca5c44c42d5cb0bf6bab0a36f1b88b7ddc4abbc6f152e652f6ba35c2955fb4132e11b7e566f3b422c3740f79847b77783d245a4e570b8a621b4ff6ff4815566446af70313ee78133707a76a4e4424783bd7c04920aa822a1a36b29f7e25cef186e6439fc46e42e23d6bd918969ef49b8388aef158e443b3a57dbde7ada631fbef7326f9046a9b",
|
2584
|
+
"$krb5asrep$23$c447eddaebf22ebf006a8fc6f986488c$eb3a17eb56287b474cecad5d4e0490d949977ba3f5015220bcd3080444d5601d67b76c5453b678e8527624e40c273bea4cfe4a7303e136b9bc3b9e63b6fb492ee4b4d2f830c5fa5a55466b57a678f708438f6712354a2deb851792b09270f4941966b82a2fd5ad8fa1fbd95a60b0f9bcd57774b3e55467a02ffcb3f1379104c24e468342f83df20b571e6f34f9a9842b43735d58d94514dcefa76719c0f5c7c3a3bfa770380924625aa0a3472d7c02d10dbb278fd946f7efcfe59a4d4cb7bdb9c5dbddc027611fe333d3ac940ec5b4ed43b55ab54b03cd2df0a9a2a7b5d235c226b259bd5ff8e0e49680351d4f0c4d13e258bc8d383cad6fc2711be0",
|
2585
|
+
"$krb5asrep$23$771adbc2397abddef676742924414f2b$2df6eb2d9c71820dc3fa2c098e071d920f0e412f5f12411632c5ee70e004da1be6f003b78661f8e4507e173552a52da751c45887c19bc1661ed334e0ccb4ef33975d4bd68b3d24746f281b4ca4fdf98fca0e50a8e845ad7d834e020c05b1495bc473b0295c6e9b94963cb912d3ff0f2f48c9075b0f52d9a31e5f4cc67c7af1d816b6ccfda0da5ccf35820a4d7d79073fa404726407ac840910357ef210fcf19ed81660106dfc3f4d9166a89d59d274f31619ddd9a1e2712c879a4e9c471965098842b44fae7ca6dd389d5d98b7fd7aca566ca399d072025e81cf0ef5075447687f80100307145fade7a8",
|
2586
|
+
"$krb5asrep$23$user@domain.com:3e156ada591263b8aab0965f5aebd837$007497cb51b6c8116d6407a782ea0e1c5402b17db7afa6b05a6d30ed164a9933c754d720e279c6c573679bd27128fe77e5fea1f72334c1193c8ff0b370fadc6368bf2d49bbfdba4c5dccab95e8c8ebfdc75f438a0797dbfb2f8a1a5f4c423f9bfc1fea483342a11bd56a216f4d5158ccc4b224b52894fadfba3957dfe4b6b8f5f9f9fe422811a314768673e0c924340b8ccb84775ce9defaa3baa0910b676ad0036d13032b0dd94e3b13903cc738a7b6d00b0b3c210d1f972a6c7cae9bd3c959acf7565be528fc179118f28c679f6deeee1456f0781eb8154e18e49cb27b64bf74cd7112a0ebae2102ac"
|
2587
|
+
]
|
2441
2588
|
}
|
2442
2589
|
]
|
2443
2590
|
},
|
2444
2591
|
{
|
2445
|
-
"regex": "^\\$krb5asrep\\$18\\$[
|
2592
|
+
"regex": "^\\$krb5asrep\\$18\\$[^$]+\\$[a-f0-9]{542}\\$[a-f0-9]{24}$",
|
2446
2593
|
"modes": [
|
2447
2594
|
{
|
2448
2595
|
"john": "krb5asrep",
|
2449
2596
|
"hashcat": null,
|
2450
2597
|
"extended": false,
|
2451
|
-
"name": "Kerberos 5 AS-REP etype 18"
|
2598
|
+
"name": "Kerberos 5 AS-REP etype 18",
|
2599
|
+
"samples": [
|
2600
|
+
"$krb5asrep$18$EXAMPLE.COMlulu$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$a5245c7f39480a840da0e4c6",
|
2601
|
+
"$krb5asrep$18$EXAMPLE.COMluser$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$420973360c2e907b9053f1db"
|
2602
|
+
]
|
2452
2603
|
}
|
2453
2604
|
]
|
2454
2605
|
},
|
2455
2606
|
{
|
2456
|
-
"regex": "^\\$krb5asrep\\$17\\$[
|
2607
|
+
"regex": "^\\$krb5asrep\\$17\\$[^$]+\\$[a-f0-9]{542}\\$[a-f0-9]{24}$",
|
2457
2608
|
"modes": [
|
2458
2609
|
{
|
2459
2610
|
"john": "krb5asrep",
|
2460
2611
|
"hashcat": null,
|
2461
2612
|
"extended": false,
|
2462
|
-
"name": "Kerberos 5 AS-REP etype 17"
|
2613
|
+
"name": "Kerberos 5 AS-REP etype 17",
|
2614
|
+
"samples": [
|
2615
|
+
"$krb5asrep$17$EXAMPLE.COMhero$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$7ed0277ba9b853008cc62abe"
|
2616
|
+
]
|
2463
2617
|
}
|
2464
2618
|
]
|
2465
2619
|
},
|
@@ -2470,7 +2624,10 @@
|
|
2470
2624
|
"john": null,
|
2471
2625
|
"hashcat": 19600,
|
2472
2626
|
"extended": false,
|
2473
|
-
"name": "Kerberos 5 TGS-REP etype 17 (AES128-CTS-HMAC-SHA1-96)"
|
2627
|
+
"name": "Kerberos 5 TGS-REP etype 17 (AES128-CTS-HMAC-SHA1-96)",
|
2628
|
+
"samples": [
|
2629
|
+
"$krb5tgs$17$srv_http$synacktiv.local$849e31b3db1c1f203fa20b85$948690f5875125348286ad3346d27b43eaabc71896b620c16de7ddcdbd561628c650c508856a3f574261948b6db4b48332d30536e978046a423ad4368f9a69b4dc4642dab4e0d475d8299be718fd6f98ac85a771b457b2453e78c9411dfce572b19660fe7a5a8246d9b2a91ea2f14d1986ea0a77ecf9b8330bc8fd9ab540bcf46b74c5aa7005cfccd89ec05f66aeab30c6b2bf8595cf6c9a1b68ad885258850c4b1dd9265f270fb2af52fd76c16246df51ea67efc58a65c345686c84e43642febe908a"
|
2630
|
+
]
|
2474
2631
|
}
|
2475
2632
|
]
|
2476
2633
|
},
|
@@ -2481,34 +2638,121 @@
|
|
2481
2638
|
"john": null,
|
2482
2639
|
"hashcat": 19700,
|
2483
2640
|
"extended": false,
|
2484
|
-
"name": "Kerberos 5 TGS-REP etype 18 (AES256-CTS-HMAC-SHA1-96)"
|
2641
|
+
"name": "Kerberos 5 TGS-REP etype 18 (AES256-CTS-HMAC-SHA1-96)",
|
2642
|
+
"samples": [
|
2643
|
+
"$krb5tgs$18$srv_http$synacktiv.local$16ce51f6eba20c8ee534ff8a$57d07b23643a516834795f0c010da8f549b7e65063e5a367ca9240f9b800adad1734df7e7d5dd8307e785de4f40aacf901df41aa6ce695f8619ec579c1fa57ee93661cf402aeef4e3a42e7e3477645d52c09dc72feade03512dffe0df517344f673c63532b790c242cc1d50f4b4b34976cb6e08ab325b3aefb2684262a5ee9faacb14d059754f50553be5bfa5c4c51e833ff2b6ac02c6e5d4c4eb193e27d7dde301bd1ddf480e5e282b8c27ef37b136c8f140b56de105b73adeb1de16232fa1ab5c9f6"
|
2644
|
+
]
|
2485
2645
|
}
|
2486
2646
|
]
|
2487
2647
|
},
|
2488
2648
|
{
|
2489
|
-
"regex": "^\\$krb5pa\\$17\\$[^$]{1,512}\\$[^$]{1,512}
|
2649
|
+
"regex": "^\\$krb5pa\\$17\\$[^$]{1,512}\\$[^$]{1,512}(?:\\$[^$]*)?\\$[a-f0-9]{104,112}$",
|
2490
2650
|
"modes": [
|
2491
2651
|
{
|
2492
2652
|
"john": "krb5pa-sha1",
|
2493
2653
|
"hashcat": 19800,
|
2494
2654
|
"extended": false,
|
2495
|
-
"name": "Kerberos 5 AS-REQ Pre-Auth etype 17"
|
2655
|
+
"name": "Kerberos 5 AS-REQ Pre-Auth etype 17",
|
2656
|
+
"samples": [
|
2657
|
+
"$krb5pa$17$hashcat$HASHCATDOMAIN.COM$a17776abe5383236c58582f515843e029ecbff43706d177651b7b6cdb2713b17597ddb35b1c9c470c281589fd1d51cca125414d19e40e333",
|
2658
|
+
"$krb5pa$17$user1$EXAMPLE.COM$$c5461873dc13665771b98ba80be53939e906d90ae1ba79cf2e21f0395e50ee56379fbef4d0298cfccfd6cf8f907329120048fd05e8ae5df4"
|
2659
|
+
]
|
2496
2660
|
}
|
2497
2661
|
]
|
2498
2662
|
},
|
2499
2663
|
{
|
2500
|
-
"regex": "^\\$krb5pa\\$18\\$[^$]{1,512}\\$[^$]{1,512}
|
2664
|
+
"regex": "^\\$krb5pa\\$18\\$[^$]{1,512}\\$[^$]{1,512}(?:\\$[^$]*)?\\$[a-f0-9]{104,112}$",
|
2501
2665
|
"modes": [
|
2502
2666
|
{
|
2503
2667
|
"john": "krb5pa-sha1",
|
2504
2668
|
"hashcat": 19900,
|
2505
2669
|
"extended": false,
|
2506
|
-
"name": "Kerberos 5 AS-REQ Pre-Auth etype 18"
|
2670
|
+
"name": "Kerberos 5 AS-REQ Pre-Auth etype 18",
|
2671
|
+
"samples": [
|
2672
|
+
"$krb5pa$18$hashcat$HASHCATDOMAIN.COM$96c289009b05181bfd32062962740b1b1ce5f74eb12e0266cde74e81094661addab08c0c1a178882c91a0ed89ae4e0e68d2820b9cce69770",
|
2673
|
+
"$krb5pa$18$user1$EXAMPLE.COM$$2a0e68168d1eac344da458599c3a2b33ff326a061449fcbc242b212504e484d45903c6a16e2d593912f56c93883bf697b325193d62a8be9c",
|
2674
|
+
"$krb5pa$18$aduser$AD.EXAMPLE.COM$$64dfeee04be2b2e0423814e0df4d0f960885aca4efffe6cb5694c4d34690406071c4968abd2c153ee42d258c5e09a41269bbcd7799f478d3",
|
2675
|
+
"$krb5pa$18$aduser$AD.EXAMPLE.COM$AD.EXAMPLE.COMaduser$f94f755a8b4493d925094a4eb1cec630ac40411a14c9733a853516fe426637d9daefdedc0567e2bb5a83d4f89a0ad1a4b178662b6106c0ff"
|
2676
|
+
]
|
2677
|
+
}
|
2678
|
+
]
|
2679
|
+
},
|
2680
|
+
{
|
2681
|
+
"regex": "^\\$krb5db\\$17\\$[^$]{1,512}\\$[^$]{1,512}(?:\\$[^$]*)?\\$[a-f0-9]{32}$",
|
2682
|
+
"modes": [
|
2683
|
+
{
|
2684
|
+
"john": null,
|
2685
|
+
"hashcat": 28800,
|
2686
|
+
"extended": false,
|
2687
|
+
"name": "Kerberos 5 DB etype 17",
|
2688
|
+
"samples": [
|
2689
|
+
"$krb5db$17$test$TEST.LOCAL$1c41586d6c060071e08186ee214e725e"
|
2690
|
+
]
|
2691
|
+
}
|
2692
|
+
]
|
2693
|
+
},
|
2694
|
+
{
|
2695
|
+
"regex": "^\\$krb17\\$[^$]{1,512}\\$[a-f0-9]{32}$",
|
2696
|
+
"modes": [
|
2697
|
+
{
|
2698
|
+
"john": "krb5-17",
|
2699
|
+
"hashcat": null,
|
2700
|
+
"extended": false,
|
2701
|
+
"name": "Kerberos 5 DB etype 17",
|
2702
|
+
"samples": [
|
2703
|
+
"$krb17$TEST.LOCALtest$6fb8b78e20ad3df6591cabb9cacf4594",
|
2704
|
+
"$krb17$TEST.LOCALtest$b7dc1cf2b403cf5f27ea9b2ea526dc5a"
|
2705
|
+
]
|
2706
|
+
}
|
2707
|
+
]
|
2708
|
+
},
|
2709
|
+
{
|
2710
|
+
"regex": "^\\$krb5db\\$18\\$[^$]{1,512}\\$[^$]{1,512}(?:\\$[^$]{1,512})?\\$[a-f0-9]{64}$",
|
2711
|
+
"modes": [
|
2712
|
+
{
|
2713
|
+
"john": null,
|
2714
|
+
"hashcat": 28900,
|
2715
|
+
"extended": false,
|
2716
|
+
"name": "Kerberos 5 DB etype 18",
|
2717
|
+
"samples": [
|
2718
|
+
"$krb5db$18$test$TEST.LOCAL$266b5a53a6d663c3f69174f3309acada8e467c097c7973699f86286a6cf1a6c7"
|
2719
|
+
]
|
2720
|
+
}
|
2721
|
+
]
|
2722
|
+
},
|
2723
|
+
{
|
2724
|
+
"regex": "^\\$krb18\\$[^$]{1,512}\\$[a-f0-9]{64}$",
|
2725
|
+
"modes": [
|
2726
|
+
{
|
2727
|
+
"john": "krb5-18",
|
2728
|
+
"hashcat": null,
|
2729
|
+
"extended": false,
|
2730
|
+
"name": "Kerberos 5 DB etype 18",
|
2731
|
+
"samples": [
|
2732
|
+
"$krb18$OLYMPE.OLtest$214bb89cf5b8330112d52189ab05d9d05b03b5a961fe6d06203335ad5f339b26"
|
2733
|
+
]
|
2734
|
+
}
|
2735
|
+
]
|
2736
|
+
},
|
2737
|
+
{
|
2738
|
+
"regex": "^\\$krb3\\$[^$]{1,512}\\$[a-f0-9]{16}$",
|
2739
|
+
"modes": [
|
2740
|
+
{
|
2741
|
+
"john": "krb5-3",
|
2742
|
+
"hashcat": null,
|
2743
|
+
"extended": false,
|
2744
|
+
"name": "Kerberos 5 DB etype 3",
|
2745
|
+
"samples": [
|
2746
|
+
"$krb3$INTERNAL.CORP1user3$eafdc79b7620584a",
|
2747
|
+
"$krb3$EXAMPLE.COMlulu$25bfb33132c11346",
|
2748
|
+
"$krb3$EXAMPLE.COMluluaaaa$97076894ae025738",
|
2749
|
+
"$krb3$EXAMPLE.COMluluaaaa$79850e6e9e5e92d0"
|
2750
|
+
]
|
2507
2751
|
}
|
2508
2752
|
]
|
2509
2753
|
},
|
2510
2754
|
{
|
2511
|
-
"regex": "^\\$scram
|
2755
|
+
"regex": "^\\$scram\\$\\d+\\$[a-z0-9\\/.]{16}\\$sha-1=[a-z0-9\\/.]{27},sha-256=[a-z0-9\\/.]{43},sha-512=[a-z0-9\\/.]{86}$",
|
2512
2756
|
"modes": [
|
2513
2757
|
{
|
2514
2758
|
"john": null,
|
@@ -2597,7 +2841,10 @@
|
|
2597
2841
|
"john": "wbb3",
|
2598
2842
|
"hashcat": 8400,
|
2599
2843
|
"extended": false,
|
2600
|
-
"name": "Woltlab Burning Board 3.x"
|
2844
|
+
"name": "Woltlab Burning Board 3.x",
|
2845
|
+
"samples": [
|
2846
|
+
"8084df19a6dc81e2597d051c3d8b400787e2d5a9:6755045315424852185115352765375338838643"
|
2847
|
+
]
|
2601
2848
|
}
|
2602
2849
|
]
|
2603
2850
|
},
|
@@ -2613,30 +2860,86 @@
|
|
2613
2860
|
]
|
2614
2861
|
},
|
2615
2862
|
{
|
2616
|
-
"regex": "^[a-f0-9]{32}:[
|
2863
|
+
"regex": "^[a-f0-9]{32,64}:\\d{1,6}:[a-z0-9_.+\\-]+@[a-z0-9\\-]+\\.[a-z0-9\\-.]+(?::[a-f0-9]{32})?$",
|
2617
2864
|
"modes": [
|
2618
2865
|
{
|
2619
2866
|
"john": null,
|
2620
2867
|
"hashcat": 6800,
|
2621
2868
|
"extended": false,
|
2622
|
-
"name": "
|
2869
|
+
"name": "LastPass / LastPass sniffed",
|
2870
|
+
"samples": [
|
2871
|
+
"a2d1f7b7a1862d0d4a52644e72d59df5:500:lp@trash-mail.com",
|
2872
|
+
"02eb97e869e0ddc7dc760fc633b4b54d:100100:pmix@trash-mail.com:9b071db7b8e265d4cadd3eb65ac0864a"
|
2873
|
+
]
|
2623
2874
|
}
|
2624
2875
|
]
|
2625
2876
|
},
|
2626
2877
|
{
|
2627
|
-
"regex": "
|
2878
|
+
"regex": "^\\$lp\\$[a-z0-9_.+\\-@]+\\$(?:\\d{1,4}\\$)?[a-f0-9]{32}$",
|
2628
2879
|
"modes": [
|
2629
2880
|
{
|
2630
|
-
"john": "
|
2631
|
-
"hashcat":
|
2881
|
+
"john": "lp",
|
2882
|
+
"hashcat": null,
|
2632
2883
|
"extended": false,
|
2633
|
-
"name": "
|
2634
|
-
|
2635
|
-
|
2636
|
-
|
2637
|
-
|
2638
|
-
|
2639
|
-
|
2884
|
+
"name": "LastPass offline",
|
2885
|
+
"samples": [
|
2886
|
+
"$lp$hackme@mailinator.com$6f5d8cec3615fc9ac7ba2e0569bce4f5",
|
2887
|
+
"$lp$3$27c8641d7f5ab5985569d9d0b499b467",
|
2888
|
+
"$lp$ninechars$d09153108a89347da5c97a4a18f91345",
|
2889
|
+
"$lp$lulu@mailinator.com$5000$d8d1e25680b3d9f73489d5769ac3a9c1"
|
2890
|
+
]
|
2891
|
+
}
|
2892
|
+
]
|
2893
|
+
},
|
2894
|
+
{
|
2895
|
+
"regex": "^\\$lpcli\\$\\d\\$[a-z0-9_.+\\-@]+\\$\\d{1,4}\\$[a-f0-9]{32}\\$[a-f0-9]{32}$",
|
2896
|
+
"modes": [
|
2897
|
+
{
|
2898
|
+
"john": "lpcli",
|
2899
|
+
"hashcat": null,
|
2900
|
+
"extended": false,
|
2901
|
+
"name": "LastPass CLI",
|
2902
|
+
"samples": [
|
2903
|
+
"$lpcli$0$lulu@mailinator.com$1234$3fec6cd2d8c049cbafe9fa6a9343f42f$f21d8e60ad22db53033e431700fb5e0c",
|
2904
|
+
"$lpcli$0$lulu@mailinator.com$1234$fbd97e7e14713363c5567bdc106bb1f4$75ebb9460f9852ccb2382029fe333867",
|
2905
|
+
"$lpcli$0$lulu@mailinator.com$1$9611651d6cbe6ab1dfb035d3874bd803$68bbe1480410c03cc053662658884f2b"
|
2906
|
+
]
|
2907
|
+
}
|
2908
|
+
]
|
2909
|
+
},
|
2910
|
+
{
|
2911
|
+
"regex": "^\\$lastpass\\$[a-z0-9_.+\\-@]+\\$\\d{1,4}\\$[+\\/a-z0-9=]+$",
|
2912
|
+
"modes": [
|
2913
|
+
{
|
2914
|
+
"john": "lastpass",
|
2915
|
+
"hashcat": null,
|
2916
|
+
"extended": false,
|
2917
|
+
"name": "LastPass sniffed",
|
2918
|
+
"samples": [
|
2919
|
+
"$lastpass$hackme@mailinator.com$500$i+hJCwPOj5eQN4tvHcMguoejx4VEmiqzOXOdWIsZKlk=",
|
2920
|
+
"$lastpass$pass_gen@generated.com$500$vgC0g8BxOi4MerkKfZYFFSAJi8riD7k0ROLpBEA3VJk=",
|
2921
|
+
"$lastpass$1@short.com$500$2W/GA8d2N+Z4HGvRYs2R7w=="
|
2922
|
+
]
|
2923
|
+
}
|
2924
|
+
]
|
2925
|
+
},
|
2926
|
+
{
|
2927
|
+
"regex": "^[a-z0-9\\/.]{16}([:$].+)?$",
|
2928
|
+
"modes": [
|
2929
|
+
{
|
2930
|
+
"john": "asa-md5",
|
2931
|
+
"hashcat": 2410,
|
2932
|
+
"extended": false,
|
2933
|
+
"name": "Cisco-ASA (MD5)",
|
2934
|
+
"samples": [
|
2935
|
+
"02dMBMYkTdC5Ziyp:36"
|
2936
|
+
]
|
2937
|
+
},
|
2938
|
+
{
|
2939
|
+
"john": "dynamic_20",
|
2940
|
+
"hashcat": 2410,
|
2941
|
+
"extended": true,
|
2942
|
+
"name": "md5($pass.$salt)"
|
2640
2943
|
}
|
2641
2944
|
]
|
2642
2945
|
},
|
@@ -2652,13 +2955,16 @@
|
|
2652
2955
|
]
|
2653
2956
|
},
|
2654
2957
|
{
|
2655
|
-
"regex": "^[a-z0-9]{32}(:([a-z0-9\\-]+\\.)?[a-z0-9\\-.]+\\.[a-z]{2,7}
|
2958
|
+
"regex": "^[a-z0-9]{32}(:([a-z0-9\\-]+\\.)?[a-z0-9\\-.]+\\.[a-z]{2,7}:.+:\\d+)?$",
|
2656
2959
|
"modes": [
|
2657
2960
|
{
|
2658
2961
|
"john": null,
|
2659
2962
|
"hashcat": 8300,
|
2660
2963
|
"extended": false,
|
2661
|
-
"name": "DNSSEC(NSEC3)"
|
2964
|
+
"name": "DNSSEC (NSEC3)",
|
2965
|
+
"samples": [
|
2966
|
+
"7b5n74kq8r441blc2c5qbbat19baj79r:.lvdsiqfj.net:33164473:1"
|
2967
|
+
]
|
2662
2968
|
}
|
2663
2969
|
]
|
2664
2970
|
},
|
@@ -2669,7 +2975,10 @@
|
|
2669
2975
|
"john": "racf",
|
2670
2976
|
"hashcat": 8500,
|
2671
2977
|
"extended": false,
|
2672
|
-
"name": "RACF"
|
2978
|
+
"name": "RACF",
|
2979
|
+
"samples": [
|
2980
|
+
"$racf$*USER*FC2577C6EBE6265B"
|
2981
|
+
]
|
2673
2982
|
}
|
2674
2983
|
]
|
2675
2984
|
},
|
@@ -2680,12 +2989,15 @@
|
|
2680
2989
|
"john": null,
|
2681
2990
|
"hashcat": null,
|
2682
2991
|
"extended": false,
|
2683
|
-
"name": "NTHash(FreeBSD Variant)"
|
2992
|
+
"name": "NTHash (FreeBSD Variant)",
|
2993
|
+
"samples": [
|
2994
|
+
"$3$$8846f7eaee8fb117ad06bdd830b7586c"
|
2995
|
+
]
|
2684
2996
|
}
|
2685
2997
|
]
|
2686
2998
|
},
|
2687
2999
|
{
|
2688
|
-
"regex": "^\\$sha1
|
3000
|
+
"regex": "^\\$sha1\\$\\d+\\$[a-z0-9\\/.]{0,64}\\$[a-z0-9\\/.]{28}$",
|
2689
3001
|
"modes": [
|
2690
3002
|
{
|
2691
3003
|
"john": "sha1crypt",
|
@@ -2694,7 +3006,8 @@
|
|
2694
3006
|
"name": "SHA-1 Crypt (Juniper/NetBSD)",
|
2695
3007
|
"samples": [
|
2696
3008
|
"$sha1$20000$75552156$HhYMDdaEHiK3eMIzTldOFPnw.s2Q",
|
2697
|
-
"$sha1$64000$wnUR8T1U$azjCegpOIk0FjE61qzGWhdkpuMRL"
|
3009
|
+
"$sha1$64000$wnUR8T1U$azjCegpOIk0FjE61qzGWhdkpuMRL",
|
3010
|
+
"$sha1$40000$jtNX3nZ2$hBNaIXkt4wBI2o5rsi8KejSjNqIq"
|
2698
3011
|
]
|
2699
3012
|
}
|
2700
3013
|
]
|
@@ -2733,7 +3046,7 @@
|
|
2733
3046
|
]
|
2734
3047
|
},
|
2735
3048
|
{
|
2736
|
-
"regex": "^\\$pbkdf2(-hmac)?(-sha1)?\\$(
|
3049
|
+
"regex": "^\\$pbkdf2(-hmac)?(-sha1)?\\$(\\d{1,6}\\$[a-z0-9\\/.]+\\$[a-z0-9\\/.]+|\\d{1,6}\\.[a-f0-9]+\\.[a-f0-9]{40})$",
|
2737
3050
|
"modes": [
|
2738
3051
|
{
|
2739
3052
|
"john": "pbkdf2-hmac-sha1",
|
@@ -2751,7 +3064,7 @@
|
|
2751
3064
|
]
|
2752
3065
|
},
|
2753
3066
|
{
|
2754
|
-
"regex": "^\\$pbkdf2-sha256
|
3067
|
+
"regex": "^\\$pbkdf2-sha256\\$\\d{1,6}\\$[a-z0-9\\/.]+\\$[a-z0-9\\/.]+$",
|
2755
3068
|
"modes": [
|
2756
3069
|
{
|
2757
3070
|
"john": "pbkdf2-hmac-sha256",
|
@@ -2768,7 +3081,7 @@
|
|
2768
3081
|
]
|
2769
3082
|
},
|
2770
3083
|
{
|
2771
|
-
"regex": "^\\$pbkdf2-sha512
|
3084
|
+
"regex": "^\\$pbkdf2-sha512\\$\\d+\\$[a-z0-9\\/.]+\\$[a-z0-9\\/.]{86}$",
|
2772
3085
|
"modes": [
|
2773
3086
|
{
|
2774
3087
|
"john": null,
|
@@ -2779,7 +3092,7 @@
|
|
2779
3092
|
]
|
2780
3093
|
},
|
2781
3094
|
{
|
2782
|
-
"regex": "^\\$p5k2
|
3095
|
+
"regex": "^\\$p5k2\\$\\d+\\$[a-z0-9\\/+=\\-]+\\$[a-z0-9\\/+\\-]{27}=$",
|
2783
3096
|
"modes": [
|
2784
3097
|
{
|
2785
3098
|
"john": null,
|
@@ -2790,7 +3103,7 @@
|
|
2790
3103
|
]
|
2791
3104
|
},
|
2792
3105
|
{
|
2793
|
-
"regex": "^\\$p5k2
|
3106
|
+
"regex": "^\\$p5k2\\$\\d+\\$[a-z0-9\\/.]+\\$[a-z0-9\\/.]{32}$",
|
2794
3107
|
"modes": [
|
2795
3108
|
{
|
2796
3109
|
"john": null,
|
@@ -2801,7 +3114,7 @@
|
|
2801
3114
|
]
|
2802
3115
|
},
|
2803
3116
|
{
|
2804
|
-
"regex": "^{FSHP[0123]
|
3117
|
+
"regex": "^{FSHP[0123]\\|\\d+\\|\\d+}[a-z0-9\\/+=]+$",
|
2805
3118
|
"modes": [
|
2806
3119
|
{
|
2807
3120
|
"john": null,
|
@@ -2823,7 +3136,7 @@
|
|
2823
3136
|
]
|
2824
3137
|
},
|
2825
3138
|
{
|
2826
|
-
"regex": "
|
3139
|
+
"regex": "^\\d{4}:[a-f0-9]{16}:[a-f0-9]{2080}$",
|
2827
3140
|
"modes": [
|
2828
3141
|
{
|
2829
3142
|
"john": null,
|
@@ -2834,7 +3147,7 @@
|
|
2834
3147
|
]
|
2835
3148
|
},
|
2836
3149
|
{
|
2837
|
-
"regex": "^[a-f0-9]{64}:[a-f0-9]{32}
|
3150
|
+
"regex": "^[a-f0-9]{64}:[a-f0-9]{32}:\\d{5}:[a-f0-9]{608}$",
|
2838
3151
|
"modes": [
|
2839
3152
|
{
|
2840
3153
|
"john": null,
|
@@ -2889,7 +3202,7 @@
|
|
2889
3202
|
]
|
2890
3203
|
},
|
2891
3204
|
{
|
2892
|
-
"regex": "^(\\$django\\$\\*1\\*)?pbkdf2_sha256
|
3205
|
+
"regex": "^(\\$django\\$\\*1\\*)?pbkdf2_sha256\\$\\d+\\$[a-z0-9]+\\$[a-z0-9\\/+=]{44}$",
|
2893
3206
|
"modes": [
|
2894
3207
|
{
|
2895
3208
|
"john": "django",
|
@@ -2900,7 +3213,7 @@
|
|
2900
3213
|
]
|
2901
3214
|
},
|
2902
3215
|
{
|
2903
|
-
"regex": "^pbkdf2_sha1
|
3216
|
+
"regex": "^pbkdf2_sha1\\$\\d+\\$[a-z0-9]+\\$[a-z0-9\\/+=]{28}$",
|
2904
3217
|
"modes": [
|
2905
3218
|
{
|
2906
3219
|
"john": null,
|
@@ -2911,7 +3224,7 @@
|
|
2911
3224
|
]
|
2912
3225
|
},
|
2913
3226
|
{
|
2914
|
-
"regex": "^bcrypt(\\$2[axy]|\\$2)
|
3227
|
+
"regex": "^bcrypt(\\$2[axy]|\\$2)\\$\\d{2}\\$[a-z0-9\\/.]{53}$",
|
2915
3228
|
"modes": [
|
2916
3229
|
{
|
2917
3230
|
"john": null,
|
@@ -2944,35 +3257,60 @@
|
|
2944
3257
|
]
|
2945
3258
|
},
|
2946
3259
|
{
|
2947
|
-
"regex": "
|
3260
|
+
"regex": "^\\([a-z0-9\\/+]{49}\\)$",
|
2948
3261
|
"modes": [
|
2949
3262
|
{
|
2950
3263
|
"john": null,
|
2951
|
-
"hashcat":
|
3264
|
+
"hashcat": 9100,
|
2952
3265
|
"extended": false,
|
2953
|
-
"name": "
|
3266
|
+
"name": "Lotus Notes/Domino 8"
|
2954
3267
|
}
|
2955
3268
|
]
|
2956
3269
|
},
|
2957
3270
|
{
|
2958
|
-
"regex": "
|
3271
|
+
"regex": "^SCRYPT:\\d+:\\d{1}:\\d{1}:[a-z0-9:\\/+=]+$",
|
2959
3272
|
"modes": [
|
2960
3273
|
{
|
2961
3274
|
"john": null,
|
2962
|
-
"hashcat":
|
3275
|
+
"hashcat": 8900,
|
2963
3276
|
"extended": false,
|
2964
|
-
"name": "
|
3277
|
+
"name": "scrypt",
|
3278
|
+
"samples": [
|
3279
|
+
"SCRYPT:1024:1:1:MDIwMzMwNTQwNDQyNQ==:5FW+zWivLxgCWj7qLiQbeC8zaNQ+qdO0NUinvqyFcfo="
|
3280
|
+
]
|
2965
3281
|
}
|
2966
3282
|
]
|
2967
3283
|
},
|
2968
3284
|
{
|
2969
|
-
"regex": "
|
3285
|
+
"regex": "^\\$7\\$[.\\/\\\\a-z0-9]{11,97}\\$[.\\/a-z0-9]{43}$",
|
2970
3286
|
"modes": [
|
2971
3287
|
{
|
2972
|
-
"john":
|
2973
|
-
"hashcat":
|
3288
|
+
"john": "scrypt",
|
3289
|
+
"hashcat": null,
|
3290
|
+
"extended": false,
|
3291
|
+
"name": "scrypt Crypt",
|
3292
|
+
"samples": [
|
3293
|
+
"$7$C6..../....SodiumChloride$kBGj9fHznVYFQMEn/qDCfrDevf9YDtcDdKvEqHJLV8D",
|
3294
|
+
"$7$C6..../....\\x01\\x09\\x0a\\x0d\\x20\\x7f\\x80\\xff$b7cKqzsQk7txdc9As1WZBHjUPNWQWJW8A.UUUTA5eD1",
|
3295
|
+
"$7$2/..../....$rNxJWVHNv/mCNcgE/f6/L4zO6Fos5c2uTzhyzoisI62",
|
3296
|
+
"$7$86....E....NaCl$xffjQo7Bm/.SKRS4B2EuynbOLjAmXU5AbDbRXhoBl64"
|
3297
|
+
]
|
3298
|
+
}
|
3299
|
+
]
|
3300
|
+
},
|
3301
|
+
{
|
3302
|
+
"regex": "^\\$ScryptKDF\\.pm\\$\\d{1,5}\\*\\d\\*\\d\\*[a-z0-9:\\/+=]+\\*[a-z0-9:\\/+=]+$",
|
3303
|
+
"modes": [
|
3304
|
+
{
|
3305
|
+
"john": "scrypt",
|
3306
|
+
"hashcat": null,
|
2974
3307
|
"extended": false,
|
2975
|
-
"name": "
|
3308
|
+
"name": "ScryptKDF",
|
3309
|
+
"samples": [
|
3310
|
+
"$ScryptKDF.pm$16384*8*1*bjZkemVmZ3lWVi42*cmBflTPsqGIbg9ZIJRTQdbic8OCUH+904TFmNPBkuEA=",
|
3311
|
+
"$ScryptKDF.pm$16384*8*1*VlVYUzBhQmlNbk5J*bJhm6VUS2UQRwMRqLTvSsljDeq193Ge4aqQDtb94bKg=",
|
3312
|
+
"$ScryptKDF.pm$16384*8*1*VHRuaXZOZ05INWJs*JjrOzA8pdPhLvLh8sY64fLLaAjFUwYCXMmS16NXcn0BhlHpZJ3J2jcozCDM7t+sfjkgQ894R+f+ldVWM5atlkA=="
|
3313
|
+
]
|
2976
3314
|
}
|
2977
3315
|
]
|
2978
3316
|
},
|
@@ -2980,10 +3318,16 @@
|
|
2980
3318
|
"regex": "^\\$8\\$[a-z0-9\\/.]{14}\\$[a-z0-9\\/.]{43}$",
|
2981
3319
|
"modes": [
|
2982
3320
|
{
|
2983
|
-
"john": "
|
3321
|
+
"john": "pbkdf2-hmac-sha256",
|
2984
3322
|
"hashcat": 9200,
|
2985
3323
|
"extended": false,
|
2986
|
-
"name": "Cisco Type 8"
|
3324
|
+
"name": "Cisco Type 8 (PBKDF2-SHA256)",
|
3325
|
+
"samples": [
|
3326
|
+
"$8$TnGX/fE4KGHOVU$pEhnEvxrvaynpi8j4f.EMHr6M.FzU8xnZnBr/tJdFWk",
|
3327
|
+
"$8$dsYGNam3K1SIJO$7nv/35M/qr6t.dVc7UY9zrJDWRVqncHub1PE9UlMQFs",
|
3328
|
+
"$8$6NHinlEjiwvb5J$RjC.H.ydVb34wDLqJvfjyG1ubxYKpfXqv.Ry9mtrNBY",
|
3329
|
+
"$8$lGO8juTOQLPCHw$cBv2WEaFCLUA24Z48CKUGixIywyGFP78r/slQcMXr3M"
|
3330
|
+
]
|
2987
3331
|
}
|
2988
3332
|
]
|
2989
3333
|
},
|
@@ -2991,15 +3335,21 @@
|
|
2991
3335
|
"regex": "^\\$9\\$[a-z0-9\\/.]{14}\\$[a-z0-9\\/.]{43}$",
|
2992
3336
|
"modes": [
|
2993
3337
|
{
|
2994
|
-
"john": "
|
3338
|
+
"john": "scrypt",
|
2995
3339
|
"hashcat": 9300,
|
2996
3340
|
"extended": false,
|
2997
|
-
"name": "Cisco Type 9"
|
3341
|
+
"name": "Cisco Type 9 (scrypt)",
|
3342
|
+
"samples": [
|
3343
|
+
"$9$2MJBozw/9R3UsU$2lFhcKvpghcyw8deP25GOfyZaagyUOGBymkryvOdfo6",
|
3344
|
+
"$9$nhEmQVczB7dqsO$X.HsgL6x1il0RxkOSSvyQYwucySCt7qFm4v7pqCxkKM",
|
3345
|
+
"$9$cvWdfQlRRDKq/U$VFTPha5VHTCbSgSUAo.nPoh50ZiXOw1zmljEjXkaq1g",
|
3346
|
+
"$9$X9fA8mypebLFVj$Klp6X9hxNhkns0kwUIinvLRSIgWOvCwDhVTZqjsycyU"
|
3347
|
+
]
|
2998
3348
|
}
|
2999
3349
|
]
|
3000
3350
|
},
|
3001
3351
|
{
|
3002
|
-
"regex": "^\\$office\\$\\*2007
|
3352
|
+
"regex": "^\\$office\\$\\*2007\\*\\d{2}\\*\\d{3}\\*\\d{2}\\*[a-z0-9]{32}\\*[a-z0-9]{32}\\*[a-z0-9]{40}$",
|
3003
3353
|
"modes": [
|
3004
3354
|
{
|
3005
3355
|
"john": "office",
|
@@ -3010,7 +3360,7 @@
|
|
3010
3360
|
]
|
3011
3361
|
},
|
3012
3362
|
{
|
3013
|
-
"regex": "^\\$office\\$\\*2010
|
3363
|
+
"regex": "^\\$office\\$\\*2010\\*\\d{6}\\*\\d{3}\\*\\d{2}\\*[a-z0-9]{32}\\*[a-z0-9]{32}\\*[a-z0-9]{64}$",
|
3014
3364
|
"modes": [
|
3015
3365
|
{
|
3016
3366
|
"john": "office",
|
@@ -3021,7 +3371,7 @@
|
|
3021
3371
|
]
|
3022
3372
|
},
|
3023
3373
|
{
|
3024
|
-
"regex": "^\\$office\\$\\*2013
|
3374
|
+
"regex": "^\\$office\\$\\*2013\\*\\d{6}\\*\\d{3}\\*\\d{2}\\*[a-z0-9]{32}\\*[a-z0-9]{32}\\*[a-z0-9]{64}$",
|
3025
3375
|
"modes": [
|
3026
3376
|
{
|
3027
3377
|
"john": "office",
|
@@ -3032,7 +3382,7 @@
|
|
3032
3382
|
]
|
3033
3383
|
},
|
3034
3384
|
{
|
3035
|
-
"regex": "^\\$office\\$2016
|
3385
|
+
"regex": "^\\$office\\$2016\\$\\d\\$\\d{6}\\$[^$]{24}\\$[^$]{88}$",
|
3036
3386
|
"modes": [
|
3037
3387
|
{
|
3038
3388
|
"john": null,
|
@@ -3046,7 +3396,7 @@
|
|
3046
3396
|
]
|
3047
3397
|
},
|
3048
3398
|
{
|
3049
|
-
"regex": "^\\$fde
|
3399
|
+
"regex": "^\\$fde\\$\\d{2}\\$[a-f0-9]{32}\\$\\d{2}\\$[a-f0-9]{32}\\$[a-f0-9]{3072}$",
|
3050
3400
|
"modes": [
|
3051
3401
|
{
|
3052
3402
|
"john": "fde",
|
@@ -3109,12 +3459,15 @@
|
|
3109
3459
|
"john": "radmin",
|
3110
3460
|
"hashcat": 9900,
|
3111
3461
|
"extended": false,
|
3112
|
-
"name": "RAdmin v2.x"
|
3462
|
+
"name": "RAdmin v2.x",
|
3463
|
+
"samples": [
|
3464
|
+
"22527bee5c29ce95373c4e0f359f079b"
|
3465
|
+
]
|
3113
3466
|
}
|
3114
3467
|
]
|
3115
3468
|
},
|
3116
3469
|
{
|
3117
|
-
"regex": "^{x-issha,\\s
|
3470
|
+
"regex": "^{x-issha,\\s\\d{4}}[a-z0-9\\/+=]+$",
|
3118
3471
|
"modes": [
|
3119
3472
|
{
|
3120
3473
|
"john": "saph",
|
@@ -3142,7 +3495,10 @@
|
|
3142
3495
|
"john": null,
|
3143
3496
|
"hashcat": 10100,
|
3144
3497
|
"extended": false,
|
3145
|
-
"name": "SipHash"
|
3498
|
+
"name": "SipHash",
|
3499
|
+
"samples": [
|
3500
|
+
"ad61d78c06037cd9:2:4:81533218127174468417660201434054"
|
3501
|
+
]
|
3146
3502
|
}
|
3147
3503
|
]
|
3148
3504
|
},
|
@@ -3153,7 +3509,13 @@
|
|
3153
3509
|
"john": null,
|
3154
3510
|
"hashcat": null,
|
3155
3511
|
"extended": true,
|
3156
|
-
"name": "Cisco Type 7"
|
3512
|
+
"name": "Cisco Type 7 (XOR)",
|
3513
|
+
"samples": [
|
3514
|
+
"046E1803362E595C260E0B240619050A2D",
|
3515
|
+
"062B0A33",
|
3516
|
+
"095C4F1A0A1218000F",
|
3517
|
+
"0309540539022E58710D1C3A0713181F01"
|
3518
|
+
]
|
3157
3519
|
}
|
3158
3520
|
]
|
3159
3521
|
},
|
@@ -3172,15 +3534,21 @@
|
|
3172
3534
|
"regex": "^(\\$cisco4\\$)?[a-z0-9\\/.]{43}$",
|
3173
3535
|
"modes": [
|
3174
3536
|
{
|
3175
|
-
"john": "
|
3537
|
+
"john": "raw-sha256",
|
3176
3538
|
"hashcat": null,
|
3177
3539
|
"extended": false,
|
3178
|
-
"name": "Cisco Type 4"
|
3540
|
+
"name": "Cisco Type 4 (Raw SHA256)",
|
3541
|
+
"samples": [
|
3542
|
+
"$cisco4$LcV6aBcc/53FoCJjXQMd7rBUDEpeevrK8V5jQVoJEhU",
|
3543
|
+
"$cisco4$OsOmQzwozC4ROs/CzpczJoShdCeW9lp7k/tGrPS5Kog",
|
3544
|
+
"$cisco4$d7kgbEk.P6mpKdduC66fUy1BF0MImo3eyJ9uI/JbMRk",
|
3545
|
+
"$cisco4$hUsuWZSE8dZERUBYNwRK8Aa8VxEGIHsuZFUCjNj2.Ac"
|
3546
|
+
]
|
3179
3547
|
}
|
3180
3548
|
]
|
3181
3549
|
},
|
3182
3550
|
{
|
3183
|
-
"regex": "^bcrypt_sha256\\$\\$(2[axy]|2)
|
3551
|
+
"regex": "^bcrypt_sha256\\$\\$(2[axy]|2)\\$\\d+\\$[a-z0-9\\/.]{53}$",
|
3184
3552
|
"modes": [
|
3185
3553
|
{
|
3186
3554
|
"john": null,
|
@@ -3191,18 +3559,24 @@
|
|
3191
3559
|
]
|
3192
3560
|
},
|
3193
3561
|
{
|
3194
|
-
"regex": "^\\$postgres
|
3562
|
+
"regex": "^\\$postgres?\\$(?:[^*]{0,32})?\\*[a-f0-9]{8}\\*[a-f0-9]{32}$",
|
3195
3563
|
"modes": [
|
3196
3564
|
{
|
3197
3565
|
"john": "postgres",
|
3198
3566
|
"hashcat": 11100,
|
3199
3567
|
"extended": false,
|
3200
|
-
"name": "PostgreSQL
|
3568
|
+
"name": "PostgreSQL CRAM (MD5)",
|
3569
|
+
"samples": [
|
3570
|
+
"$postgres$postgres*74402844*4e7fabaaf34d780c4a5822d28ee1c83e",
|
3571
|
+
"$postgres$postgres*f063f05d*1d586cc8d137e5f1733f234d224393e8",
|
3572
|
+
"$postgre$postgres*684697c8*bf2a64f35feba7bf1b633d60393c1356",
|
3573
|
+
"$postgres$Twelve_chars*55393156*c01df9affa7573ef32ec143759f3e005"
|
3574
|
+
]
|
3201
3575
|
}
|
3202
3576
|
]
|
3203
3577
|
},
|
3204
3578
|
{
|
3205
|
-
"regex": "^\\$siemens-s7
|
3579
|
+
"regex": "^\\$siemens-s7\\$\\d{1}\\$[a-f0-9]{40}\\$[a-f0-9]{40}$",
|
3206
3580
|
"modes": [
|
3207
3581
|
{
|
3208
3582
|
"john": "siemens-s7",
|
@@ -3224,7 +3598,7 @@
|
|
3224
3598
|
]
|
3225
3599
|
},
|
3226
3600
|
{
|
3227
|
-
"regex": "^sha256[:$]
|
3601
|
+
"regex": "^sha256[:$]\\d+[:$][a-z0-9\\/+]+[:$][a-z0-9\\/+]{32,128}$",
|
3228
3602
|
"modes": [
|
3229
3603
|
{
|
3230
3604
|
"john": null,
|
@@ -3287,7 +3661,7 @@
|
|
3287
3661
|
]
|
3288
3662
|
},
|
3289
3663
|
{
|
3290
|
-
"regex": "^\\$pdf\\$1\\*2
|
3664
|
+
"regex": "^\\$pdf\\$1\\*2\\*\\d{2}\\*[-0-9]{1,6}\\*\\d\\*\\d{2}\\*[a-f0-9]{32}\\*\\d{2}\\*[a-f0-9]{64}\\*\\d{2}\\*[a-f0-9]{64}$",
|
3291
3665
|
"modes": [
|
3292
3666
|
{
|
3293
3667
|
"john": "pdf",
|
@@ -3304,7 +3678,7 @@
|
|
3304
3678
|
]
|
3305
3679
|
},
|
3306
3680
|
{
|
3307
|
-
"regex": "^\\$pdf\\$1\\*2
|
3681
|
+
"regex": "^\\$pdf\\$1\\*2\\*\\d{2}\\*[-0-9]{1,6}\\*\\d\\*\\d{2}\\*[a-f0-9]{32}\\*\\d{2}\\*[a-f0-9]{64}\\*\\d{2}\\*[a-f0-9]{64}:[a-f0-9]{10}$",
|
3308
3682
|
"modes": [
|
3309
3683
|
{
|
3310
3684
|
"john": "pdf",
|
@@ -3338,7 +3712,7 @@
|
|
3338
3712
|
]
|
3339
3713
|
},
|
3340
3714
|
{
|
3341
|
-
"regex": "^\\$pdf\\$5\\*[5|6]
|
3715
|
+
"regex": "^\\$pdf\\$5\\*[5|6]\\*\\d{3}\\*[-0-9]{1,6}\\*\\d\\*\\d{1,4}\\*[a-f0-9]{0,1024}\\*\\d{1,4}\\*[a-f0-9]{0,1024}\\*\\d{1,4}\\*[a-f0-9]{0,1024}\\*\\d{1,4}\\*[a-f0-9]{0,1024}\\*\\d{1,4}\\*[a-f0-9]{0,1024}$",
|
3342
3716
|
"modes": [
|
3343
3717
|
{
|
3344
3718
|
"john": "pdf",
|
@@ -3355,7 +3729,7 @@
|
|
3355
3729
|
]
|
3356
3730
|
},
|
3357
3731
|
{
|
3358
|
-
"regex": "^\\$bitcoin
|
3732
|
+
"regex": "^\\$bitcoin\\$\\d{2,4}\\$[a-f0-9$]{250,360}$",
|
3359
3733
|
"modes": [
|
3360
3734
|
{
|
3361
3735
|
"john": "bitcoin",
|
@@ -3404,7 +3778,7 @@
|
|
3404
3778
|
]
|
3405
3779
|
},
|
3406
3780
|
{
|
3407
|
-
"regex": "^\\$ab
|
3781
|
+
"regex": "^\\$ab\\$\\d{1}\\*\\d{1}\\*\\d{1,6}\\*[a-f0-9]{128}\\*[a-f0-9]{128}\\*[a-f0-9]{32}\\*[a-f0-9]{192}$",
|
3408
3782
|
"modes": [
|
3409
3783
|
{
|
3410
3784
|
"john": "AndroidBackup",
|
@@ -3415,18 +3789,24 @@
|
|
3415
3789
|
]
|
3416
3790
|
},
|
3417
3791
|
{
|
3418
|
-
"regex": "^\\$zip2
|
3792
|
+
"regex": "^\\$zip2\\$\\*\\d{1}\\*\\d{1}\\*\\d{1}\\*[a-f0-9]{16,32}\\*[a-f0-9]{1,6}\\*[a-f0-9]{1,6}\\*[a-f0-9]*\\*[a-f0-9]{20}\\*\\$\/zip2\\$$",
|
3419
3793
|
"modes": [
|
3420
3794
|
{
|
3421
3795
|
"john": "zip",
|
3422
3796
|
"hashcat": 13600,
|
3423
3797
|
"extended": false,
|
3424
|
-
"name": "WinZip"
|
3798
|
+
"name": "WinZip",
|
3799
|
+
"samples": [
|
3800
|
+
"$zip2$*0*1*0*0675369741458183*5dc5*0**36b85538918416712640*$/zip2$",
|
3801
|
+
"$zip2$*0*1*0*9ffba76344938a7d*cc41*210*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*bd2e946811c4c5b09694*$/zip2$",
|
3802
|
+
"$zip2$*0*2*0*c702895e204a15d8016cd436*7688*32*f1e0c797182c9231ebbdfb23111203131d9c949b45396f6ea233ac41c056f938a68869400bc25123bd61f8d7bd4930a6440c*3f229b45b30739ab4867*$/zip2$",
|
3803
|
+
"$zip2$*0*3*0*855f69693734c7be8c1093ea5bae6114*f035*210*c02aa1d42cc7623c0746979c6c2ce78e8492e9ab1d0954b76d328c52c4d555fbdc2af52822c7b6f4548fc5cca615cd0510f699d4b6007551c38b4183cafba7b073a5ba86745f0c3842896b87425d5247d3b09e0f9f701b50866e1636ef62ee20343ea6982222434fdaf2e52fe1c90f0c30cf2b4528b79abd2824e14869846c26614d9cbc156964d63041bfab66260821bedc151663adcb2c9ac8399d921ddac06c9a4cd8b442472409356cfe0655c9dbbec36b142611ad5604b68108be3321b2324d5783938e52e5c15ec4d8beb2b5010fad66d8cf6a490370ec86878ad2b393c5aa4523b95ae21f8dd5f0ae9f24581e94793a01246a4cc5a0f772e041b3a604ae334e43fe41d32058f857c227cee567254e9c760d472af416abedf8a87e67b309d30bc94d77ef6617b0867976a4b3824c0c1c4aa2b2668f9eb70c493d20d7fab69436c59e47db40f343d98a3b7503e07969d26afa92552d15009542bf2af9b47f2cfa0c2283883e99d0966e5165850663a2deed557fb8554a16f3a9cb04b9010c4b70576b18695dfea973aa4bc607069a1d90e890973825415b717c7bdf183937fa8a3aa985be1eadc8303f756ebd07f864082b775d7788ee8901bb212e69f01836d45db320ff1ea741fa8a3c13fa49ebc34418442e6bd8b1845c56d5c798767c92a503228148a6db44a08fc4a1c1d55eea73dbb2bd4f2ab09f00b043ee0df740681f5c5579ecbb1dbb7f7f3f67ffe2*c6b781ef18c5ccd83869*$/zip2$"
|
3804
|
+
]
|
3425
3805
|
}
|
3426
3806
|
]
|
3427
3807
|
},
|
3428
3808
|
{
|
3429
|
-
"regex": "^\\$itunes_backup
|
3809
|
+
"regex": "^\\$itunes_backup\\$\\*\\d{1,2}\\*[a-f0-9]{80}\\*\\d{1,6}\\*[a-f0-9]{40}\\*\\d{0,10}\\*[a-f0-9]{0,40}$",
|
3430
3810
|
"modes": [
|
3431
3811
|
{
|
3432
3812
|
"john": "itunes-backup",
|
@@ -3443,7 +3823,7 @@
|
|
3443
3823
|
]
|
3444
3824
|
},
|
3445
3825
|
{
|
3446
|
-
"regex": "^\\$telegram\\$0\\*[a-f0-9]{64}
|
3826
|
+
"regex": "^\\$telegram\\$0\\*[a-f0-9]{64}\\*\\d{32}$",
|
3447
3827
|
"modes": [
|
3448
3828
|
{
|
3449
3829
|
"john": null,
|
@@ -3480,46 +3860,73 @@
|
|
3480
3860
|
]
|
3481
3861
|
},
|
3482
3862
|
{
|
3483
|
-
"regex": "^\\$7z
|
3863
|
+
"regex": "^\\$7z\\$\\d{1,3}\\$\\d{1,2}\\$\\d{1}\\$[^$]{0,64}\\$\\d{1,2}\\$[a-f0-9]{32}\\$\\d{1,10}\\$\\d+\\$\\d+\\$[a-f0-9]{2,}(?:\\$\\d+\\$[a-f0-9]{0,10}(?:\\$[a-f0-9]{0,10})?)?$",
|
3484
3864
|
"modes": [
|
3485
3865
|
{
|
3486
3866
|
"john": "7z",
|
3487
3867
|
"hashcat": 11600,
|
3488
3868
|
"extended": false,
|
3489
|
-
"name": "7-zip"
|
3869
|
+
"name": "7-zip",
|
3870
|
+
"samples": [
|
3871
|
+
"$7z$0$14$0$$11$33363437353138333138300000000000$2365089182$16$12$d00321533b483f54a523f624a5f63269",
|
3872
|
+
"$7z$128$19$0$1122$8$a264c94f2cd72bec0000000000000000$725883103$112$108$64749c0963e20c74602379ca740165b9511204619859d1914819bc427b7e5f0f8fc67f53a0b53c114f6fcf4542a28e4a9d3914b4bc76baaa616d6a7ec9efc3f051cb330b682691193e6fa48159208329460c3025fb273232b82450645f2c12a9ea38b53a2331a1d0858813c8bf25a831",
|
3873
|
+
"$7z$1$19$0$1122$8$732b59fd26896e410000000000000000$2955316379$192$183$7544a3a7ec3eb99a33d80e57907e28fb8d0e140ec85123cf90740900429136dcc8ba0692b7e356a4d4e30062da546a66b92ec04c64c0e85b22e3c9a823abef0b57e8d7b8564760611442ecceb2ca723033766d9f7c848e5d234ca6c7863a2683f38d4605322320765938049305655f7fb0ad44d8781fec1bf7a2cb3843f269c6aca757e509577b5592b60b8977577c20aef4f990d2cb665de948004f16da9bf5507bf27b60805f16a9fcc4983208297d3affc4455ca44f9947221216f58c337f$232$5d00000100",
|
3874
|
+
"$7z$0$19$0$1122$8$d1f50227759415890000000000000000$1412385885$112$112$5e5b8b734adf52a64c541a5a5369023d7cccb78bd910c0092535dfb013a5df84ac692c5311d2e7bbdc580f5b867f7b5dd43830f7b4f37e41c7277e228fb92a6dd854a31646ad117654182253706dae0c069d3f4ce46121d52b6f20741a0bb39fc61113ce14d22f9184adafd6b5333fb1",
|
3875
|
+
"$7z$0$19$0$1122$8$d1f50227759415890000000000000000$1412385885$112$112$5e5b8b734adf52a64c541a5a5369023d7cccb78bd910c0092535dfb013a5df84ac692c5311d2e7bbdc580f5b867f7b5dd43830f7b4f37e41c7277e228fb92a6dd854a31646ad117654182253706dae0c069d3f4ce46121d52b6f20741a0bb39fc61113ce14d22f9184adafd6b5333fb1",
|
3876
|
+
"$7z$7$19$0$$8$8a9fc71fabb004c40000000000000000$1263025034$32$29$f84a72524bf817740f312a33e71d32bfa27f3652706d3e9590a118f70aca7757$24$",
|
3877
|
+
"$7z$129$19$0$$16$e69f6cbb583ea5fe2bd2fa577bf35d7c$1528797878$64$51$aef4bf018d0340cf086526f856a95526e4d587799f3c9adaa57bee6f7086e1eebae13ec751deee6ec6e343ef0a6171ba6b608433461235ef2fcbb8ead742d9ca$658$5d00100000$05",
|
3878
|
+
"$7z$1$19$0$1122$8$5fdbec1569ff58060000000000000000$2465353234$112$112$58ba7606aafc7918e3db7f6e0920f410f61f01e9c1533c40850992fee4c5e5215bc6b4ea145313d0ac065b8ec5b47d9fb895bb7f97609be46107d71e219544cfd24b52c2ecd65477f72c466915dcd71b80782b1ac46678ab7f437fd9f7b8e9d9fad54281d252de2a7ae386a65fc69eda$176$5d00000100",
|
3879
|
+
"$7z$2$19$0$$8$055c46385a7995490000000000000000$1263025034$32$28$1abc552f80372f1c1fea1bab9583599b844b25f0b06afacfbf322ef3d396126a$24$00",
|
3880
|
+
"$7z$128$19$0$1122$8$94fb9024fdd3e6c40000000000000000$3965424295$112$99$1127828817ff126bc45ff3c5225d9d0c5d00a52094909674e6ed3dc431546d9a672738f2fa07556340d604d2efd2901b9d2ac2c0686c25af9c520c137b16c50c54df8703fd0b0606fa721ad70aafb9c4e3b288ef49864e6034021969b4ce11e3b8e269a92090ccf593c6a0da06262116",
|
3881
|
+
"$7z$128$19$0$1122$8$e24e93c7a9ebde080000000000000000$718561925$112$99$580bf36388526c932c22e3227b51774b6963a9c5b96fc8e2ac70a4302864fa88f50e7c00d9a79e0bca0f07a236e51200dc23435b7680e6fa99b19d790ac093af615a972f8b232686c21279234a2582f9714c5a1a2d326084158eba3e81b4f8ad40784d84baa8ddbed19f1c6603156d2c",
|
3882
|
+
"$7z$128$19$0$1122$8$6fbd519735b131710000000000000000$1248418560$112$99$cc9e3c97073d7fd37f04d4e6983b386e3ac00f6292dedb0f566dccf22cdbbb55fee8669edade383e96aa0a740e2b42aa7fddbe5831cac10828c624ee03a1a256c6e777c3d714c55296cb815c509a252b9426fe8d4566c944efe3fac5ea94910e55a390aef2c729a031e832c406049810"
|
3883
|
+
]
|
3490
3884
|
}
|
3491
3885
|
]
|
3492
3886
|
},
|
3493
3887
|
{
|
3494
|
-
"regex": "^\\$zip3
|
3888
|
+
"regex": "^\\$zip3\\$\\*\\d\\*\\d\\*128\\*\\d\\*[a-f0-9]{0,32}\\*[a-f0-9]{288}\\*\\d\\*\\d\\*\\d\\*[^\\s]{0,64}$",
|
3495
3889
|
"modes": [
|
3496
3890
|
{
|
3497
3891
|
"john": "securezip",
|
3498
3892
|
"hashcat": 23001,
|
3499
3893
|
"extended": false,
|
3500
|
-
"name": "SecureZIP AES-128"
|
3894
|
+
"name": "SecureZIP AES-128",
|
3895
|
+
"samples": [
|
3896
|
+
"$zip3$*0*1*128*0*b4630625c92b6e7848f6fd86*df2f62611b3d02d2c7e05a48dad57c7d93b0bac1362261ab533807afb69db856676aa6e350320130b5cbf27c55a48c0f75739654ac312f1cf5c37149557fc88a92c7e3dde8d23edd2b839036e88092a708b7e818bf1b6de92f0efb5cce184cceb11db6b3ca0527d0bdf1f1137ee6660d9890928cd80542ac1f439515519147c14d965b5ba107c6227f971e3e115170bf*0*0*0*file.txt"
|
3897
|
+
]
|
3501
3898
|
}
|
3502
3899
|
]
|
3503
3900
|
},
|
3504
3901
|
{
|
3505
|
-
"regex": "^\\$zip3
|
3902
|
+
"regex": "^\\$zip3\\$\\*\\d\\*\\d\\*192\\*\\d\\*[a-f0-9]{0,32}\\*[a-f0-9]{288}\\*\\d\\*\\d\\*\\d\\*[^\\s]{0,64}$",
|
3506
3903
|
"modes": [
|
3507
3904
|
{
|
3508
3905
|
"john": "securezip",
|
3509
3906
|
"hashcat": 23002,
|
3510
3907
|
"extended": false,
|
3511
|
-
"name": "SecureZIP AES-192"
|
3908
|
+
"name": "SecureZIP AES-192",
|
3909
|
+
"samples": [
|
3910
|
+
"$zip3$*0*1*192*0*53ff2de8c280778e1e0ab997*603eb37dbab9ea109e2c405e37d8cae1ec89e1e0d0b9ce5bf55d1b571c343b6a3df35fe381c30249cb0738a9b956ba8e52dfc5552894296300446a771032776c811ff8a71d9bb3c4d6c37016c027e41fea2d157d5b0ce17804b1d7c1606b7c1121d37851bd705e001f2cd755bbf305966d129a17c1d48ff8e87cfa41f479090cd456527db7d1d43f9020ad8e73f851a5*0*0*0*file.txt",
|
3911
|
+
"$zip3$*0*1*192*0*edb47a990800000000000000*ba4288c0572f6043b21eba768ca8854fbec62c644f29cdc9652f037b3600dcc761dd07645cbaa1ebec1140e21e19a1cf4b43a82cb47e71e6ac82d3387581996e3fb201328dd5ad8a5be841e2cc9bee7e940da5b55b8a385df87d2431e24baf9a050ea550bd8ea00d2271f9e9d06b32222b8e5815a9db7e75655937c8437332b5b5b08e4c1800976b528322df6ba9653e*0*0*0*secret.txt",
|
3912
|
+
"$zip3$*0*1*192*0*a5763deec28f57f7c3218289*7c789a396b6935a2595da1045728aec01572ed0834bc0baa1ab43a186265be83135359ddf2e2f1a2c42f88879617922687131720e8238b006ba10f1caead1d6fbcabbacf32bc3aeda76747d26671f3a94f2037b330a3a790eb72564b05e064747e042c3112d42e739907fdded43c5c4fbf1a5f831cf77bb47f838c75d30a95215b6457a0d4ffc6d408da6be86a04c0d2*0*0*0*1"
|
3913
|
+
]
|
3512
3914
|
}
|
3513
3915
|
]
|
3514
3916
|
},
|
3515
3917
|
{
|
3516
|
-
"regex": "^\\$zip3
|
3918
|
+
"regex": "^\\$zip3\\$\\*\\d\\*\\d\\*256\\*\\d\\*[a-f0-9]{0,32}\\*[a-f0-9]{288}\\*\\d\\*\\d\\*\\d\\*[^\\s]{0,64}$",
|
3517
3919
|
"modes": [
|
3518
3920
|
{
|
3519
3921
|
"john": "securezip",
|
3520
3922
|
"hashcat": 23003,
|
3521
3923
|
"extended": false,
|
3522
|
-
"name": "SecureZIP AES-256"
|
3924
|
+
"name": "SecureZIP AES-256",
|
3925
|
+
"samples": [
|
3926
|
+
"$zip3$*0*1*256*0*39bff47df6152a0214d7a967*65ff418ffb3b1198cccdef0327c03750f328d6dd5287e00e4c467f33b92a6ef40a74bb11b5afad61a6c3c9b279d8bd7961e96af7b470c36fc186fd3cfe059107021c9dea0cf206692f727eeca71f18f5b0b6ee1f702b648bba01aa21c7b7f3f0f7d547838aad46868155a04214f22feef7b31d7a15e1abe6dba5e569c62ee640783bb4a54054c2c69e93ece9f1a2af9d*0*0*0*file.txt",
|
3927
|
+
"$zip3$*0*1*256*0*edb47a990800000000000000*32f884f9fbb54360920a50ec37cc0651fe7b0d9892de44eed17696186139a09c1530e0522abfd9777d18441739cdc7107fdfd252ecd0c8dbbba8181bd09436e9a6a918e385cbab26bee49cd0e3182e67df3fe8c3cdc9e58d6166a0f550969cc456b4a881524e6e66a14e30196b972e260c509fce918736465aea1d00bd5871876e263635be4700ef081117ed896e1504*0*0*0*secret.txt",
|
3928
|
+
"$zip3$*0*1*256*0*3f2f7f230e00000000000000*c75ed4a3ec89c22cda7aa3faa9a11cdcca9f5a2f45fe2844d963b2b76b8f98f43a907997557fc2b0eb8cb590b130c573ddfac3f5e70997d6a4539e10728317bdcd70eb74b82bafa2e4871488984db8522c4c4c8ff28fd2dd62c26be9d24246f80ddbdfa8d3b9e81b775dbdb84371446564df3effdbea48713dd223a2bb9afddffc9b8e60f41939f7577f9f30b0a28b78*0*0*0*code.txt"
|
3929
|
+
]
|
3523
3930
|
}
|
3524
3931
|
]
|
3525
3932
|
},
|
@@ -3528,14 +3935,56 @@
|
|
3528
3935
|
"modes": [
|
3529
3936
|
{
|
3530
3937
|
"john": "pkzip",
|
3531
|
-
"hashcat":
|
3938
|
+
"hashcat": 17200,
|
3939
|
+
"extended": false,
|
3940
|
+
"name": "PKZIP (Compressed)",
|
3941
|
+
"samples": [
|
3942
|
+
"$pkzip2$1*1*2*0*e3*1c5*eda7a8de*0*28*8*e3*eda7*5096*a9fc1f4e951c8fb3031a6f903e5f4e3211c8fdc4671547bf77f6f682afbfcc7475d83898985621a7af9bccd1349d1976500a68c48f630b7f22d7a0955524d768e34868880461335417ddd149c65a917c0eb0a4bf7224e24a1e04cf4ace5eef52205f4452e66ded937db9545f843a68b1e84a2e933cc05fb36d3db90e6c5faf1bee2249fdd06a7307849902a8bb24ec7e8a0886a4544ca47979a9dfeefe034bdfc5bd593904cfe9a5309dd199d337d3183f307c2cb39622549a5b9b8b485b7949a4803f63f67ca427a0640ad3793a519b2476c52198488e3e2e04cac202d624fb7d13c2*$/pkzip2$",
|
3943
|
+
"$pkzip$1*1*2*0*e4*1c5*eda7a8de*0*4c*8*e4*eda7*194883130e4c7419bd735c53dec36f0c4b6de6daefea0f507d67ff7256a49b5ea93ccfd9b12f2ee99053ee0b1c9e1c2b88aeaeb6bd4e60094a1ea118785d4ded6dae94cade41199330f4f11b37cba7cda5d69529bdfa43e2700ba517bd2f7ff4a0d4b3d7f2559690ec044deb818c44844d6dd50adbebf02cec663ae8ebb0dde05d2abc31eaf6de36a2fc19fda65dd6a7e449f669d1f8c75e9daa0a3f7be8feaa43bf84762d6dbcc9424285a93cedfa3a75dadc11e969065f94fe3991bc23c9b09eaa5318aa29fa02e83b6bee26cafec0a5e189242ac9e562c7a5ed673f599cefcd398617*$/pkzip$",
|
3944
|
+
"$pkzip$1*2*2*0*e4*1c5*eda7a8de*0*47*8*e4*4bb6*436c9ffa4328870f6272349b591095e1b1126420c3041744650282bc4f575d0d4a5fc5fb34724e6a1cde742192387b9ed749ab5c72cd6bb0206f102e9216538f095fb773661cfde82c2e2a619332998124648bf4cd0da56279f0c297567d9b5d684125ee92920dd513fd18c27afba2a9633614f75d8f8b9a14095e3fafe8165330871287222e6681dd9c0f830cf5d464457b257d0900eed29107fad8af3ac4f87cf5af5183ff0516ccd9aeac1186006c8d11b18742dfb526aadbf2906772fbfe8fb18798967fd397a724d59f6fcd4c32736550986d227a6b447ef70585c049a1a4d7bf25*$/pkzip$"
|
3945
|
+
]
|
3946
|
+
},
|
3947
|
+
{
|
3948
|
+
"john": "pkzip",
|
3949
|
+
"hashcat": 17210,
|
3950
|
+
"extended": false,
|
3951
|
+
"name": "PKZIP (Uncompressed)",
|
3952
|
+
"samples": [
|
3953
|
+
"$pkzip2$1*1*2*0*1d1*1c5*eda7a8de*0*28*0*1d1*eda7*5096*1dea673da43d9fc7e2be1a1f4f664269fceb6cb88723a97408ae1fe07f774d31d1442ea8485081e63f919851ca0b7588d5e3442317fff19fe547a4ef97492ed75417c427eea3c4e146e16c100a2f8b6abd7e5988dc967e5a0e51f641401605d673630ea52ebb04da4b388489901656532c9aa474ca090dbac7cf8a21428d57b42a71da5f3d83fed927361e5d385ca8e480a6d42dea5b4bf497d3a24e79fc7be37c8d1721238cbe9e1ea3ae1eb91fc02aabdf33070d718d5105b70b3d7f3d2c28b3edd822e89a5abc0c8fee117c7fbfbfd4b4c8e130977b75cb0b1da080bfe1c0859e6483c42f459c8069d45a76220e046e6c2a2417392fd87e4aa4a2559eaab3baf78a77a1b94d8c8af16a977b4bb45e3da211838ad044f209428dba82666bf3d54d4eed82c64a9b3444a44746b9e398d0516a2596d84243b4a1d7e87d9843f38e45b6be67fd980107f3ad7b8453d87300e6c51ac9f5e3f6c3b702654440c543b1d808b62f7a313a83b31a6faaeedc2620de7057cd0df80f70346fe2d4dccc318f0b5ed128bcf0643e63d754bb05f53afb2b0fa90b34b538b2ad3648209dff587df4fa18698e4fa6d858ad44aa55d2bba3b08dfdedd3e28b8b7caf394d5d9d95e452c2ab1c836b9d74538c2f0d24b9b577*$/pkzip2$"
|
3954
|
+
]
|
3955
|
+
},
|
3956
|
+
{
|
3957
|
+
"john": "pkzip",
|
3958
|
+
"hashcat": 17220,
|
3959
|
+
"extended": false,
|
3960
|
+
"name": "PKZIP (Compressed Multi-File)",
|
3961
|
+
"samples": [
|
3962
|
+
"$pkzip2$3*1*1*0*8*24*a425*8827*d1730095cd829e245df04ebba6c52c0573d49d3bbeab6cb385b7fa8a28dcccd3098bfdd7*1*0*8*24*2a74*882a*51281ac874a60baedc375ca645888d29780e20d4076edd1e7154a99bde982152a736311f*2*0*e3*1c5*eda7a8de*0*29*8*e3*eda7*5096*1455781b59707f5151139e018bdcfeebfc89bc37e372883a7ec0670a5eafc622feb338f9b021b6601a674094898a91beac70e41e675f77702834ca6156111a1bf7361bc9f3715d77dfcdd626634c68354c6f2e5e0a7b1e1ce84a44e632d0f6e36019feeab92fb7eac9dda8df436e287aafece95d042059a1b27d533c5eab62c1c559af220dc432f2eb1a38a70f29e8f3cb5a207704274d1e305d7402180fd47e026522792f5113c52a116d5bb25b67074ffd6f4926b221555234aabddc69775335d592d5c7d22462b75de1259e8342a9ba71cb06223d13c7f51f13be2ad76352c3b8ed*$/pkzip2$",
|
3963
|
+
"$pkzip$3*1*1*0*8*24*4001*8986ec4d693e86c1a42c1bd2e6a994cb0b98507a6ec937fe0a41681c02fe52c61e3cc046*1*0*8*24*4003*a087adcda58de2e14e73db0043a4ff0ed3acc6a9aee3985d7cb81d5ddb32b840ea2057d9*2*0*e4*1c5*eda7a8de*0*4c*8*e4*eda7*89a792af804bf38e31fdccc8919a75ab6eb75d1fd6e7ecefa3c5b9c78c3d50d656f42e582af95882a38168a8493b2de5031bb8b39797463cb4769a955a2ba72abe48ee75b103f93ef9984ae740559b9bd84cf848d693d86acabd84749853675fb1a79edd747867ef52f4ee82435af332d43f0d0bb056c49384d740523fa75b86a6d29a138da90a8de31dbfa89f2f6b0550c2b47c43d907395904453ddf42a665b5f7662de170986f89d46d944b519e1db9d13d4254a6b0a5ac02b3cfdd468d7a4965e4af05699a920e6f3ddcedb57d956a6b2754835b14e174070ba6aec4882d581c9f30*$/pkzip$"
|
3964
|
+
]
|
3965
|
+
},
|
3966
|
+
{
|
3967
|
+
"john": "pkzip",
|
3968
|
+
"hashcat": 17225,
|
3969
|
+
"extended": false,
|
3970
|
+
"name": "PKZIP (Mixed Multi-File)",
|
3971
|
+
"samples": [
|
3972
|
+
"$pkzip2$3*1*1*0*0*24*3e2c*3ef8*0619e9d17ff3f994065b99b1fa8aef41c056edf9fa4540919c109742dcb32f797fc90ce0*1*0*8*24*431a*3f26*18e2461c0dbad89bd9cc763067a020c89b5e16195b1ac5fa7fb13bd246d000b6833a2988*2*0*23*17*1e3c1a16*2e4*2f*0*23*1e3c*3f2d*54ea4dbc711026561485bbd191bf300ae24fa0997f3779b688cdad323985f8d3bb8b0c*$/pkzip2$"
|
3973
|
+
]
|
3974
|
+
},
|
3975
|
+
{
|
3976
|
+
"john": "pkzip",
|
3977
|
+
"hashcat": 17230,
|
3532
3978
|
"extended": false,
|
3533
|
-
"name": "PKZIP"
|
3979
|
+
"name": "PKZIP (Mixed Multi-File Checksum-Only)",
|
3980
|
+
"samples": [
|
3981
|
+
"$pkzip2$8*1*1*0*8*24*a425*8827*3bd479d541019c2f32395046b8fbca7e1dca218b9b5414975be49942c3536298e9cc939e*1*0*8*24*2a74*882a*537af57c30fd9fd4b3eefa9ce55b6bff3bbfada237a7c1dace8ebf3bb0de107426211da3*1*0*8*24*2a74*882a*5f406b4858d3489fd4a6a6788798ac9b924b5d0ca8b8e5a6371739c9edcfd28c82f75316*1*0*8*24*2a74*882a*1843aca546b2ea68bd844d1e99d4f74d86417248eb48dd5e956270e42a331c18ea13f5ed*1*0*8*24*2a74*882a*aca3d16543bbfb2e5d2659f63802e0fa5b33e0a1f8ae47334019b4f0b6045d3d8eda3af1*1*0*8*24*2a74*882a*fbe0efc9e10ae1fc9b169bd060470bf3e39f09f8d83bebecd5216de02b81e35fe7e7b2f2*1*0*8*24*2a74*882a*537886dbabffbb7cac77deb01dc84760894524e6966183b4478a4ef56f0c657375a235a1*1*0*8*24*eda7*5096*40eb30ef1ddd9b77b894ed46abf199b480f1e5614fde510855f92ae7b8026a11f80e4d5f*$/pkzip2$"
|
3982
|
+
]
|
3534
3983
|
}
|
3535
3984
|
]
|
3536
3985
|
},
|
3537
3986
|
{
|
3538
|
-
"regex": "^\\$argon2d\\$v=19\\$m
|
3987
|
+
"regex": "^\\$argon2d\\$v=19\\$m=\\d{1,6},t=\\d{1,2},p=\\d{1,2}\\$[^$]+\\$[^\\s]{6,}$",
|
3539
3988
|
"modes": [
|
3540
3989
|
{
|
3541
3990
|
"john": "argon2",
|
@@ -3552,7 +4001,7 @@
|
|
3552
4001
|
]
|
3553
4002
|
},
|
3554
4003
|
{
|
3555
|
-
"regex": "^\\$argon2i\\$v=19\\$m
|
4004
|
+
"regex": "^\\$argon2i\\$v=19\\$m=\\d{1,6},t=\\d{1,2},p=\\d{1,2}\\$[^$]+\\$[^\\s]{6,}$",
|
3556
4005
|
"modes": [
|
3557
4006
|
{
|
3558
4007
|
"john": "argon2",
|
@@ -3569,7 +4018,7 @@
|
|
3569
4018
|
]
|
3570
4019
|
},
|
3571
4020
|
{
|
3572
|
-
"regex": "^\\$argon2id\\$v=19\\$m
|
4021
|
+
"regex": "^\\$argon2id\\$v=19\\$m=\\d{1,6},t=\\d{1,2},p=\\d{1,2}\\$[^$]+\\$[^\\s]{6,}$",
|
3573
4022
|
"modes": [
|
3574
4023
|
{
|
3575
4024
|
"john": null,
|
@@ -3580,7 +4029,7 @@
|
|
3580
4029
|
]
|
3581
4030
|
},
|
3582
4031
|
{
|
3583
|
-
"regex": "^\\$axcrypt\\$\\*2
|
4032
|
+
"regex": "^\\$axcrypt\\$\\*2\\*\\d{1,7}\\*[a-f0-9]{128}\\*[a-f0-9]{288}\\*\\d{1,7}\\*[a-f0-9]{64}$",
|
3584
4033
|
"modes": [
|
3585
4034
|
{
|
3586
4035
|
"john": "axcrypt",
|
@@ -3596,7 +4045,7 @@
|
|
3596
4045
|
]
|
3597
4046
|
},
|
3598
4047
|
{
|
3599
|
-
"regex": "^\\$axcrypt\\$\\*1
|
4048
|
+
"regex": "^\\$axcrypt\\$\\*1\\*\\d{1,7}\\*[a-f0-9]{32}\\*[a-f0-9]{48}(?:\\*[a-z0-9]+)?$",
|
3600
4049
|
"modes": [
|
3601
4050
|
{
|
3602
4051
|
"john": "axcrypt",
|
@@ -3613,7 +4062,7 @@
|
|
3613
4062
|
]
|
3614
4063
|
},
|
3615
4064
|
{
|
3616
|
-
"regex": "^\\$rar5
|
4065
|
+
"regex": "^\\$rar5\\$\\d{2}\\$[a-f0-9]{32}\\$\\d{2}\\$[a-f0-9]{32}\\$\\d{1}\\$[a-f0-9]{16}$",
|
3617
4066
|
"modes": [
|
3618
4067
|
{
|
3619
4068
|
"john": "rar5",
|
@@ -3629,7 +4078,7 @@
|
|
3629
4078
|
]
|
3630
4079
|
},
|
3631
4080
|
{
|
3632
|
-
"regex": "^\\$RAR3
|
4081
|
+
"regex": "^\\$RAR3\\$\\*\\d{1}\\*[a-f0-9]{16}\\*[a-f0-9]{8}\\*\\d{1,7}\\*\\d{1,6}\\*\\d{1}\\*[a-f0-9]{2,}\\*\\d{2}$",
|
3633
4082
|
"modes": [
|
3634
4083
|
{
|
3635
4084
|
"john": "rar",
|
@@ -3654,7 +4103,7 @@
|
|
3654
4103
|
]
|
3655
4104
|
},
|
3656
4105
|
{
|
3657
|
-
"regex": "^\\$RAR3
|
4106
|
+
"regex": "^\\$RAR3\\$\\*\\d{1}\\*[a-f0-9]{16}\\*[a-f0-9]{32}$",
|
3658
4107
|
"modes": [
|
3659
4108
|
{
|
3660
4109
|
"john": "rar",
|
@@ -3684,7 +4133,7 @@
|
|
3684
4133
|
]
|
3685
4134
|
},
|
3686
4135
|
{
|
3687
|
-
"regex": "^\\$metamask\\$(
|
4136
|
+
"regex": "^\\$metamask\\$(?=[^$]{44}\\$)(?:[a-z0-9+\\/]{4})*(?:|(?:[a-z0-9+\\/]{3}=)|(?:[a-z0-9+\\/]{2}==)|(?:[a-z0-9+\\/]{1}===))\\$(?=[^$]{24}\\$)(?:[a-z0-9+\\/]{4})*(?:|(?:[a-z0-9+\\/]{3}=)|(?:[a-z0-9+\\/]{2}==)|(?:[a-z0-9+\\/]{1}===))\\$(?=[^$]{64,})(?:[a-z0-9+\\/]{4})*(?:|(?:[a-z0-9+\\/]{3}=)|(?:[a-z0-9+\\/]{2}==)|(?:[a-z0-9+\\/]{1}===))$",
|
3688
4137
|
"modes": [
|
3689
4138
|
{
|
3690
4139
|
"john": null,
|
@@ -3757,7 +4206,7 @@
|
|
3757
4206
|
]
|
3758
4207
|
},
|
3759
4208
|
{
|
3760
|
-
"regex": "^\\$mongodb-scram\\$\\*\\d\\*(
|
4209
|
+
"regex": "^\\$mongodb-scram\\$\\*\\d\\*(?=[^*]{0,76}\\*)(?:[a-z0-9+\\/]{4})*(?:|(?:[a-z0-9+\\/]{3}=)|(?:[a-z0-9+\\/]{2}==)|(?:[a-z0-9+\\/]{1}===))\\*\\d{1,7}\\*(?=[^*]{24}\\*)(?:[a-z0-9+\\/]{4})*(?:|(?:[a-z0-9+\\/]{3}=)|(?:[a-z0-9+\\/]{2}==)|(?:[a-z0-9+\\/]{1}===))\\*(?=[^*]{28})(?:[a-z0-9+\\/]{4})*(?:|(?:[a-z0-9+\\/]{3}=)|(?:[a-z0-9+\\/]{2}==)|(?:[a-z0-9+\\/]{1}===))$",
|
3761
4210
|
"modes": [
|
3762
4211
|
{
|
3763
4212
|
"john": null,
|
@@ -3771,7 +4220,7 @@
|
|
3771
4220
|
]
|
3772
4221
|
},
|
3773
4222
|
{
|
3774
|
-
"regex": "^\\$mongodb-scram\\$\\*\\d\\*(
|
4223
|
+
"regex": "^\\$mongodb-scram\\$\\*\\d\\*(?=[^*]{0,88}\\*)(?:[a-z0-9+\\/]{4})*(?:|(?:[a-z0-9+\\/]{3}=)|(?:[a-z0-9+\\/]{2}==)|(?:[a-z0-9+\\/]{1}===))\\*\\d{1,7}\\*(?=[^*]{40}\\*)(?:[a-z0-9+\\/]{4})*(?:|(?:[a-z0-9+\\/]{3}=)|(?:[a-z0-9+\\/]{2}==)|(?:[a-z0-9+\\/]{1}===))\\*(?=[^*]{44})(?:[a-z0-9+\\/]{4})*(?:|(?:[a-z0-9+\\/]{3}=)|(?:[a-z0-9+\\/]{2}==)|(?:[a-z0-9+\\/]{1}===))$",
|
3775
4224
|
"modes": [
|
3776
4225
|
{
|
3777
4226
|
"john": null,
|
@@ -3861,7 +4310,7 @@
|
|
3861
4310
|
]
|
3862
4311
|
},
|
3863
4312
|
{
|
3864
|
-
"regex": "^\\$stellar\\$(
|
4313
|
+
"regex": "^\\$stellar\\$(?=[^$]{24}\\$)(?:[a-z0-9+\\/]{4})*(?:|(?:[a-z0-9+\\/]{3}=)|(?:[a-z0-9+\\/]{2}==)|(?:[a-z0-9+\\/]{1}===))\\$(?=[^$]{16}\\$)(?:[a-z0-9+\\/]{4})*(?:|(?:[a-z0-9+\\/]{3}=)|(?:[a-z0-9+\\/]{2}==)|(?:[a-z0-9+\\/]{1}===))\\$(?=[^$]{96}$)(?:[a-z0-9+\\/]{4})*(?:|(?:[a-z0-9+\\/]{3}=)|(?:[a-z0-9+\\/]{2}==)|(?:[a-z0-9+\\/]{1}===))$",
|
3865
4314
|
"modes": [
|
3866
4315
|
{
|
3867
4316
|
"john": null,
|
@@ -4198,5 +4647,559 @@
|
|
4198
4647
|
]
|
4199
4648
|
}
|
4200
4649
|
]
|
4650
|
+
},
|
4651
|
+
{
|
4652
|
+
"regex": "^v1;PPH1_MD4,[a-f0-9]{20},\\d{1,6},[a-f0-9]{64};?$",
|
4653
|
+
"modes": [
|
4654
|
+
{
|
4655
|
+
"john": "azuread",
|
4656
|
+
"hashcat": 12800,
|
4657
|
+
"extended": false,
|
4658
|
+
"name": "AzureAD (MS-AzureSync) PBKDF2-HMAC-SHA256",
|
4659
|
+
"samples": [
|
4660
|
+
"v1;PPH1_MD4,54188415275183448824,100,55b530f052a9af79a7ba9c466dddcb8b116f8babf6c3873a51a3898fb008e123",
|
4661
|
+
"v1;PPH1_MD4,724b754c4b6d30526f36,100,367ff0ac2a1cb334bb26609c8bfc8ae5f619d1eaf07568df040f407504a20241;",
|
4662
|
+
"v1;PPH1_MD4,465564476f786e705069,100,612a80cb011bee1f929c7a9e2bd16d98a79f2deb9f44919100f7c0ec74508560;",
|
4663
|
+
"v1;PPH1_MD4,31414275383876386e32,100,102ce242cde4339e934d7c6b539d49ae340b02dd380815666b98bd036cd4dc4f;"
|
4664
|
+
]
|
4665
|
+
}
|
4666
|
+
]
|
4667
|
+
},
|
4668
|
+
{
|
4669
|
+
"regex": "^\\$response\\$[a-f0-9]{32}\\$.+\\$.+\\$.+\\$.+\\$.+(?:\\$\\d{8}\\$[a-f0-9]{4,16}\\$.+)?$",
|
4670
|
+
"modes": [
|
4671
|
+
{
|
4672
|
+
"john": "hdaa",
|
4673
|
+
"hashcat": null,
|
4674
|
+
"extended": false,
|
4675
|
+
"name": "HTTP Digest access authentication",
|
4676
|
+
"samples": [
|
4677
|
+
"$response$679066476e67b5c7c4e88f04be567f8b$user$myrealm$GET$/$8c12bd8f728afe56d45a0ce846b70e5a$00000001$4b61913cec32e2c9$auth",
|
4678
|
+
"$response$faa6cb7d676e5b7c17fcbf966436aa0c$moi$myrealm$GET$/$af32592775d27b1cd06356b3a0db9ddf$00000001$8e1d49754a25aea7$auth",
|
4679
|
+
"$response$56940f87f1f53ade8b7d3c5a102c2bf3$usrx$teN__chars$GET$/4TLHS1TMN9cfsbqSUAdTG3CRq7qtXMptnYfn7mIIi3HRKOMhOks56e$2c0366dcbc$00000001$0153$auth",
|
4680
|
+
"$response$8663faf2337dbcb2c52882807592ec2c$user$myrealm$GET$/$8c12bd8f728afe56d45a0ce846b70e5a$",
|
4681
|
+
"$response$8663faf2337dbcb2c52882807592ec2c$user$myrealm$GET$/$8c12bd8f728afe56d45a0ce846b70e5a",
|
4682
|
+
"$response$b9b9cb1fcce017ec497b31cc33a572b0$lulu$hyperion$GET$/$IERozb5mBQA=de6a5916efca4c24959b5be7e4ed3fc0c7f1f765$00000006$1bd5678ca084bc0d$auth",
|
4683
|
+
"$response$abe32fa35969fd6d77bad0ce3dbfdd3a$lulu$hyperion$GET$/icons/poweredby.png$XkZ1Dr9mBQA=6258d402c7c95b352bab0ba774d6974506e3318b$00000003$bd29e3b874427c73$auth"
|
4684
|
+
]
|
4685
|
+
}
|
4686
|
+
]
|
4687
|
+
},
|
4688
|
+
{
|
4689
|
+
"regex": "^\\$IPB2\\$[a-f0-9]{2,}\\$[a-f0-9]{32}$",
|
4690
|
+
"modes": [
|
4691
|
+
{
|
4692
|
+
"john": "ipb2",
|
4693
|
+
"hashcat": null,
|
4694
|
+
"extended": false,
|
4695
|
+
"name": "IPB 2.x (Invision Power Board)",
|
4696
|
+
"samples": [
|
4697
|
+
"$IPB2$2e75504633$d891f03a7327639bc632d62a7f302604",
|
4698
|
+
"$IPB2$735a213a4e$4f23de7bb115139660db5e953153f28a",
|
4699
|
+
"$IPB2$5d75343455$de98ba8ca7bb16f43af05e9e4fb8afee",
|
4700
|
+
"$IPB2$556c576c39$16d4f29c71b05bd75e61d0254800bfa3"
|
4701
|
+
]
|
4702
|
+
}
|
4703
|
+
]
|
4704
|
+
},
|
4705
|
+
{
|
4706
|
+
"regex": "^\\$AWS-Sig-v4\\$0\\$[^$]{16}\\$[^$]{1,16}\\$[^$]{1,16}\\$[a-f0-9]{64}\\$[a-f0-9]{64}$",
|
4707
|
+
"modes": [
|
4708
|
+
{
|
4709
|
+
"john": null,
|
4710
|
+
"hashcat": 28700,
|
4711
|
+
"extended": false,
|
4712
|
+
"name": "Amazon AWS4-HMAC-SHA256",
|
4713
|
+
"samples": [
|
4714
|
+
"$AWS-Sig-v4$0$20220221T000000Z$us-east-1$s3$421ab6e4af9f49fa30fa9c253fcfeb2ce91668e139e6b23303c5f75b04f8a3c4$3755ed2bc1b2346e003ccaa7d02ae8b73c72bcbe9f452ccf066c78504d786bbb"
|
4715
|
+
]
|
4716
|
+
}
|
4717
|
+
]
|
4718
|
+
},
|
4719
|
+
{
|
4720
|
+
"regex": "^[a-z0-9]{26,34}$",
|
4721
|
+
"modes": [
|
4722
|
+
{
|
4723
|
+
"john": null,
|
4724
|
+
"hashcat": 28501,
|
4725
|
+
"extended": false,
|
4726
|
+
"name": "Bitcoin WIF private key (P2PKH), compressed",
|
4727
|
+
"samples": [
|
4728
|
+
"1Jv6EonXm9x4Dw4QjEPAhGfmzFxTL7b3Zj"
|
4729
|
+
]
|
4730
|
+
},
|
4731
|
+
{
|
4732
|
+
"john": null,
|
4733
|
+
"hashcat": 28502,
|
4734
|
+
"extended": false,
|
4735
|
+
"name": "Bitcoin WIF private key (P2PKH), uncompressed",
|
4736
|
+
"samples": [
|
4737
|
+
"1L9nr4GX4Zmd7gDL1UT75QPUqxSgNTvdHb"
|
4738
|
+
]
|
4739
|
+
}
|
4740
|
+
]
|
4741
|
+
},
|
4742
|
+
{
|
4743
|
+
"regex": "^bc1[a-z0-9]{39}$",
|
4744
|
+
"modes": [
|
4745
|
+
{
|
4746
|
+
"john": null,
|
4747
|
+
"hashcat": 28503,
|
4748
|
+
"extended": false,
|
4749
|
+
"name": "Bitcoin WIF private key (P2WPKH, Bech32), compressed",
|
4750
|
+
"samples": [
|
4751
|
+
"bc1qxd76a5zamfyw0g2d2rxkdh0zt9m0uzmxmwjf0q"
|
4752
|
+
]
|
4753
|
+
},
|
4754
|
+
{
|
4755
|
+
"john": null,
|
4756
|
+
"hashcat": 28504,
|
4757
|
+
"extended": false,
|
4758
|
+
"name": "Bitcoin WIF private key (P2WPKH, Bech32), uncompressed",
|
4759
|
+
"samples": [
|
4760
|
+
"bc1qv8e65p73gmp4w3z6fqnyu8t6ct69vetsda3snd"
|
4761
|
+
]
|
4762
|
+
}
|
4763
|
+
]
|
4764
|
+
},
|
4765
|
+
{
|
4766
|
+
"regex": "^[a-z0-9]{34}$",
|
4767
|
+
"modes": [
|
4768
|
+
{
|
4769
|
+
"john": null,
|
4770
|
+
"hashcat": 28505,
|
4771
|
+
"extended": false,
|
4772
|
+
"name": "Bitcoin WIF private key (P2SH(P2WPKH)), compressed",
|
4773
|
+
"samples": [
|
4774
|
+
"3H1YvmSdrjEfj9LvtiKJ8XiYq5htJRuejA"
|
4775
|
+
]
|
4776
|
+
},
|
4777
|
+
{
|
4778
|
+
"john": null,
|
4779
|
+
"hashcat": 28506,
|
4780
|
+
"extended": false,
|
4781
|
+
"name": "Bitcoin WIF private key (P2SH(P2WPKH)), uncompressed",
|
4782
|
+
"samples": [
|
4783
|
+
"3LovFVx5zBRvusVcj7pf3JxV9V46kjKhKu"
|
4784
|
+
]
|
4785
|
+
}
|
4786
|
+
]
|
4787
|
+
},
|
4788
|
+
{
|
4789
|
+
"regex": "^\\$DPAPImk\\$1\\*[12]\\*[S\\-0-9]{10,60}\\*[^*]{4,6}\\*[^*]{4,6}\\*\\d{1,6}\\*[a-f0-9]{32}\\*\\d{1,6}\\*[a-f0-9]{0,1024}$",
|
4790
|
+
"modes": [
|
4791
|
+
{
|
4792
|
+
"john": "DPAPImk",
|
4793
|
+
"hashcat": 15300,
|
4794
|
+
"extended": false,
|
4795
|
+
"name": "DPAPI masterkey file v1 (context 1 and 2)",
|
4796
|
+
"samples": [
|
4797
|
+
"$DPAPImk$1*1*S-15-21-466364039-425773974-453930460-1925*des3*sha1*24000*b038489dee5ad04e3e3cab4d957258b5*208*cb9b5b7d96a0d2a00305ca403d3fd9c47c561e35b4b2cf3aebfd1d3199a6481d56972be7ebd6c291b199e6f1c2ffaee91978706737e9b1209e6c7d3aa3d8c3c3e38ad1ccfa39400d62c2415961c17fd0bd6b0f7bbd49cc1de1a394e64b7237f56244238da8d37d78",
|
4798
|
+
"$DPAPImk$1*1*S-15-21-447321867-460417387-480872410-1240*des3*sha1*24000*9b49e2d3b25103d03e936fdf66b94d26*208*ec96025ed4b023ebfa52bdfd91dfeb64edf3f3970b347ee8bb8adfb2a686a0a34792d40074edd372f346da8fcd02cc5d4182c2fd09f4549ec106273926edd05c42e4b5fc8b8758a7c48f6ddae273f357bcb645c8ad16e3161e8a9dbb5002454f4db5ef0d5d7a93ac",
|
4799
|
+
"$DPAPImk$1*2*S-15-21-458698633-447735394-485599537-1788*des3*sha1*24000*96b957d9bf0f8846399e70a84431b595*208*0ee9fa2baf2cf0efda81514376aef853c6c93a5776fa6af66a869f44c50ac80148b7488f52b4c52c305e89a497a583e17cca4a9bab580668a8a5ce2eee083382c98049e481e47629b5815fb16247e3bbfa62c454585aaaf51ef15555a355fcf925cff16c0bb006f8",
|
4800
|
+
"$DPAPImk$1*1*S-1-5-21-1482476501-1659004503-725345543-1003*des3*sha1*4000*b3d62a0b06cecc236fe3200460426a13*208*d3841257348221cd92caf4427a59d785ed1474cab3d0101fc8d37137dbb598ff1fd2455826128b2594b846934c073528f8648d750d3c8e6621e6f706d79b18c22f172c0930d9a934de73ea2eb63b7b44810d332f7d03f14d1c153de16070a5cab9324da87405c1c0"
|
4801
|
+
]
|
4802
|
+
}
|
4803
|
+
]
|
4804
|
+
},
|
4805
|
+
{
|
4806
|
+
"regex": "^\\$DPAPImk\\$1\\*3\\*[S\\-0-9]{10,60}\\*[^*]{4,6}\\*[^*]{4,6}\\*\\d{1,6}\\*[a-f0-9]{32}\\*\\d{1,6}\\*[a-f0-9]{0,1024}$",
|
4807
|
+
"modes": [
|
4808
|
+
{
|
4809
|
+
"john": "DPAPImk",
|
4810
|
+
"hashcat": 15310,
|
4811
|
+
"extended": false,
|
4812
|
+
"name": "DPAPI masterkey file v1 (context 3)",
|
4813
|
+
"samples": [
|
4814
|
+
"$DPAPImk$1*3*S-15-21-407415836-404165111-436049749-1915*des3*sha1*14825*3e86e7d8437c4d5582ff668a83632cb2*208*96ad763b59e67c9f5c3d925e42bbe28a1412b919d1dc4abf03b2bed4c5c244056c14931d94d441117529b7171dfd6ebbe6eecf5d958b65574c293778fbadb892351cc59d5c65d65d2fcda73f5b056548a4a5550106d03d0c39d3cca7e5cdc0d521f48ac9e51cecc5",
|
4815
|
+
"$DPAPImk$1*3*S-1-5-21-1857904334-2267218879-1458651445-1123*des3*sha1*18000*e4c529ba8975e4ed56f5fb8b1e85be43*208*af96b391f1d6e2d37a4de3b4c412ce78f032d446d77ea1fb6a0782f47c390c844349c2bcaeba9fd570b39def6f67a369aa2e266e8d017689d8a09667fdfb640feb3e19ca22067cc5704644c1dcc43d4cccac667391f4918d0de77f36569fd2e104ef0619a46edcfc"
|
4816
|
+
]
|
4817
|
+
}
|
4818
|
+
]
|
4819
|
+
},
|
4820
|
+
{
|
4821
|
+
"regex": "^\\$DPAPImk\\$2\\*[12]\\*[S\\-0-9]{10,60}\\*[^*]{4,6}\\*[^*]{4,6}\\*\\d{1,6}\\*[a-f0-9]{32}\\*\\d{1,6}\\*[a-f0-9]{0,1024}$",
|
4822
|
+
"modes": [
|
4823
|
+
{
|
4824
|
+
"john": "DPAPImk",
|
4825
|
+
"hashcat": 15900,
|
4826
|
+
"extended": false,
|
4827
|
+
"name": "DPAPI masterkey file v2 (context 1 and 2)",
|
4828
|
+
"samples": [
|
4829
|
+
"$DPAPImk$2*1*S-15-21-439882973-489230393-482956683-1522*aes256*sha512*12900*79f7ca399f2626e21aad108c3922af7c*288*c47bc8a985ca6aa708b01c97b004bff20cc52379dc2635b4acf59ce17970a2cb47ace98c7e8de977f265243c5c03d0a97e4b954b494d9e38d9158d0c1e729d16a28ba69e2e7c6c3bc0e3afc9c9b6306b83372ccb35d89b98925728fd36315b8ee95b4d4eccdcb31564769f9a4b9ee10828184e16d4af336675d5e31d987dd87233d34fbbb98880c5e1f64cbb9b043ad8",
|
4830
|
+
"$DPAPImk$2*1*S-15-21-417226446-481759312-475941522-1494*aes256*sha512*8000*1e6b7a71a079bc12e71c75a6bcfd865c*288*5b5d651e538e5185f7d6939ba235ca2d8a2b9726a6e95b59844320ba1d1f22282527210bc784d22075e596d113927761a644ad4057cb4dbb497bd64ee6c630930a4ba388eadb59484ec2be7fb4cc79299a87f341d002d25b5b187c71fa19417ec9d1b65568a79c962cb3b5bcb1b8df5f968669af35eec5a24ed5dcee46deef42bfee5ad665dd4de56ccd9c6ba26b2acd",
|
4831
|
+
"$DPAPImk$2*2*S-15-21-402916398-457068774-444912990-1699*aes256*sha512*17000*4c51109a901e4be7f1e208f82a56e690*288*bb80d538ac4185eb0382080fda0d405bb74da3a6b98e96f222292b819fa9168cf1571e9bc9c698ad10daf850ab34de1a1765cfd5c0fb8a63a413a767d241dfe6355804af259d24f6be7282daac0a9e02d7fbe20675afb3733141995990a6d11012edfb7e81b49c0e1132dbc4503dd2206489e4f512e4fe9d573566c9d8973188b8d1a87610b8bef09e971270a376a52b"
|
4832
|
+
]
|
4833
|
+
}
|
4834
|
+
]
|
4835
|
+
},
|
4836
|
+
{
|
4837
|
+
"regex": "^\\$DPAPImk\\$2\\*3\\*[S\\-0-9]{10,60}\\*[^*]{4,6}\\*[^*]{4,6}\\*\\d{1,6}\\*[a-f0-9]{32}\\*\\d{1,6}\\*[a-f0-9]{0,1024}$",
|
4838
|
+
"modes": [
|
4839
|
+
{
|
4840
|
+
"john": "DPAPImk",
|
4841
|
+
"hashcat": 15910,
|
4842
|
+
"extended": false,
|
4843
|
+
"name": "DPAPI masterkey file v2 (context 3)",
|
4844
|
+
"samples": [
|
4845
|
+
"$DPAPImk$2*3*S-15-21-464497560-472124119-475628788-1088*aes256*sha512*13450*685165fdb6d0627a15100215ec331ed8*288*7e1ea6f7ec3c2111f2a3903c73aefe66e524d8b241dc1482d0bd07cc1f3ccdadd8cebd4263b3b7c2496da48f40d2eb4890513e6624aeefbe6bbc6ea73f2f71fecf9cc5fef3891a2e697a4415ba7a069642069c142335d53cc750d42a4f4d2b0592956b4a0e57a5d5b1bfd27f0a8eac9d0d5fc5c5e5e23af18ce1a8eff442ed335e5db3bad6e89146f71aa9351e132fd9"
|
4846
|
+
]
|
4847
|
+
}
|
4848
|
+
]
|
4849
|
+
},
|
4850
|
+
{
|
4851
|
+
"regex": "^EXODUS:\\d{1,6}:\\d{1,6}:\\d{1,6}:(?=[^:]{44})(?:[a-z0-9+\/]{4})*(?:|(?:[a-z0-9+\/]{3}=)|(?:[a-z0-9+\/]{2}==)|(?:[a-z0-9+\/]{1}===)):(?=[^:]{16})(?:[a-z0-9+\/]{4})*(?:|(?:[a-z0-9+\/]{3}=)|(?:[a-z0-9+\/]{2}==)|(?:[a-z0-9+\/]{1}===)):(?=[^:]{44})(?:[a-z0-9+\/]{4})*(?:|(?:[a-z0-9+\/]{3}=)|(?:[a-z0-9+\/]{2}==)|(?:[a-z0-9+\/]{1}===)):(?=[^:]{24})(?:[a-z0-9+\/]{4})*(?:|(?:[a-z0-9+\/]{3}=)|(?:[a-z0-9+\/]{2}==)|(?:[a-z0-9+\/]{1}===))$",
|
4852
|
+
"modes": [
|
4853
|
+
{
|
4854
|
+
"john": null,
|
4855
|
+
"hashcat": 28200,
|
4856
|
+
"extended": false,
|
4857
|
+
"name": "Exodus Desktop Wallet (scrypt)",
|
4858
|
+
"samples": [
|
4859
|
+
"EXODUS:16384:8:1:IYkXZgFETRmFp4wQXyP8XMe3LtuOw8wMdLcBVQ+9YWE=:lq0W9ekN5sC0O7Xw:UD4a6mUUhkTbQtGWitXHZUg0pQ4RHI6W/KUyYE95m3k=:ZuNQckXOtr4r21x+DT1zpQ=="
|
4860
|
+
]
|
4861
|
+
}
|
4862
|
+
]
|
4863
|
+
},
|
4864
|
+
{
|
4865
|
+
"regex": "^[a-z0-9\\-_]+\\.[a-z0-9\\-_]{1,6}\\.[a-z0-9\\-_]{20,27}$",
|
4866
|
+
"modes": [
|
4867
|
+
{
|
4868
|
+
"john": null,
|
4869
|
+
"hashcat": 29100,
|
4870
|
+
"extended": false,
|
4871
|
+
"name": "Flask Session Cookie ($salt.$salt.$pass)",
|
4872
|
+
"samples": [
|
4873
|
+
"eyJ1c2VybmFtZSI6ImFkbWluIn0.YjdgRQ.1OTlf1PD0H9wXsu_qS0aywAJVD8"
|
4874
|
+
]
|
4875
|
+
}
|
4876
|
+
]
|
4877
|
+
},
|
4878
|
+
{
|
4879
|
+
"regex": "^\\$keepass\\$\\*1\\*\\d{1,10}\\*\\d{1,3}\\*[a-f0-9]{32}\\*[a-f0-9]{64}\\*[a-f0-9]{32}\\*[a-f0-9]{64}\\*\\d\\*\\d{1,8}\\*[a-f0-9]{2,}$",
|
4880
|
+
"modes": [
|
4881
|
+
{
|
4882
|
+
"john": "keepass",
|
4883
|
+
"hashcat": 13400,
|
4884
|
+
"extended": false,
|
4885
|
+
"name": "KeePass 1 AES / without keyfile",
|
4886
|
+
"samples": [
|
4887
|
+
"$keepass$*1*50000*0*375756b9e6c72891a8e5645a3338b8c8*82afc053e8e1a6cfa39adae4f5fe5e59f545a54d6956593d1709b39cacd7f796*c698fbfc7d1b71431d10611e2216ab21*24a63140f4eb3bfd7d59b7694eea38d1d93a43bc3af989755d2b326286c4d510*1*192*1a65072f436e9da0c9e832eca225a04ab78821b55d9f550860ade2ef8126a2c4050cf4d033374abd3dac6d0c5907c6cbb033643b203825c12e6c9853b5ac17a4809559fe723e01b4a2ab87cc83c8ba7ee4a757b8a0cf1674106f21f6675cba12064443d65436650df10ea0923c4cadfd4bfe341a6f4fa23a1a67f7d12a489fc5410ef6db9f6607905de491d3b3b915852a1b6c231c96366cbdee5ea9bd7f73ffd2f7a579215528ae1bf0ea540947ebfe39ca84bc6cbeded4f8e8fb6ed8f32dd5",
|
4888
|
+
"$keepass$*1*50000*124*60eed105dac456cfc37d89d950ca846e*72ffef7c0bc3698b8eca65184774f6cd91a9356d338e5140e47e319a87f5e46a*8725bdfd3580cf054a1564dc724aaffe*8e58cc08af2462ddffe2ee39735ad14b15e8cb96dc05ef70d8e64d475eca7bf5*1*752*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"
|
4889
|
+
]
|
4890
|
+
},
|
4891
|
+
{
|
4892
|
+
"john": "keepass",
|
4893
|
+
"hashcat": null,
|
4894
|
+
"extended": false,
|
4895
|
+
"name": "KeePass 1 Twofish / without keyfile",
|
4896
|
+
"samples": [
|
4897
|
+
"$keepass$*1*50000*1*1ff21bd79aa8e9c3f439281a4ce6a97b*cfbdb00057ee0c9e889ca9d93b069ab5ae19f78852bc21aae4f60d0d325e0034*c1a7e6138a49a2dcfb3a84afbc1d918b*a704f9d060f0de5a070155d1d5a8727da92f404242cb3aa2b9aa53a145f87474*1*608*c2d3d18e416af56788d1c3e4257da9ce6e5dcad4db012d7422d17b4527bbb2bb994d9db03907ae01cc1565f5fd0729b930c9ee352426c57de5dee7e941e1d6aedeaf2b0e6509819385de9b4dd6a09979b3edfa0959a7186c422031e426f18d295c55ac616aabeec99f89e696be1d585950ef16a94ae610f2449cc3964bb63ec6043ef36c89117bc78e99e5fbf083b48cb84f85a964e8a037018b3afc2cc55fbe7d74cbdb53d5a54bcd202a1d0a342dbf48a8f7a24264cde8d800a506bf134008b1d8d9b8dd80c19511d9f43b3c23b19eb4a7dcf584f80c49961f73dcba3d2d0390a39a683ddcc8771b49cc3c673ea0aa902d075e25bc814608e2e6d1d6218a6379fd677bc5daaa18b6f5a021d2f661338ca8cc3645dc6cddb860af222a5cdb59a5e2a2c1921203344ced4e2154446239f6c1af8c1bace8207e0f519ea9c08db2f5d0bde0416b09ef6c530213e648641ae56c9af9fbdcb0a286cc4de121655697b9eb00c0fd89ed7269c3859eca20e0c7b60be8d2a1323eb915139cf90c55f9cff01a5bdf757e09ee6d64c2de9aec8d3ea42feeb67caf51b9ba1a80b435e271fdb7f9144ca31e41671768b2c5e8adf70245fdf52005de418efbe2a156d19eeb2ed9e97a0ddb133d11bd8655356d9d3edbbdbf9d0db345b2eb2c1f550ce070f5b0f8f8e58a6ffd52ae8089627dc4a0dac4b4846349066bfa0d2f395d2cb3871e57e353d622e0904a9f54a3e4706797d95b34619f792c15ab8efb3ac523becc3023f01aaad169bc08db8d01e2dd22eff8f6b4f7b741d196bc3de466590011e6d5c9703a19c07d96d26fe1ad93d0931454730ee1f3146428a126d1ed02763f827ff4"
|
4898
|
+
]
|
4899
|
+
}
|
4900
|
+
]
|
4901
|
+
},
|
4902
|
+
{
|
4903
|
+
"regex": "^\\$keepass\\$\\*1\\*\\d{1,10}\\*\\d{1,3}\\*[a-f0-9]{32}\\*[a-f0-9]{64}\\*[a-f0-9]{32}\\*[a-f0-9]{64}\\*\\d\\*\\d{1,8}\\*[a-f0-9]{2,}\\*\\d\\*\\d{2}\\*[a-f0-9]{64}$",
|
4904
|
+
"modes": [
|
4905
|
+
{
|
4906
|
+
"john": "keepass",
|
4907
|
+
"hashcat": 13400,
|
4908
|
+
"extended": false,
|
4909
|
+
"name": "KeePass 1 Twofish / with keyfile",
|
4910
|
+
"samples": [
|
4911
|
+
"$keepass$*1*6000*1*31c087828b0bb76362c10cae773aacdf*6d6c78b4f82ecbcd3b96670cf490914c25ea8c31bc3aeb3fc56e65fac16d721f*a735ec88c01816bc66200c8e17ee9110*08334be8523f4b69bd4e2328db854329bfc81e2ea5a46d8ccf3bccf7c03d879d*1*1360*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*1*64*bbc3babf62557aa4dfba705e24274e1aebf43907fe12f52eaf5395066f7cbdba",
|
4912
|
+
"$keepass$*1*6000*0*1a1d38235ccbeae4ca2a9edfbd3b290c*8e1e81b37a6161b6033fbd6dd350aaeaa0712cf2649fe40e3fbbaa4b61684f54*d9517d352aea00c2b7f57f1154b9c0a0*0a8ae9b13347402c242d7cde4d58d01f1e129287eaf62df768856bbb9d0633a1*1*1360*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*1*64*3a96fb77fbbbca7336ee699f17be31fde552191128553c6d89bfce4035dc0af0"
|
4913
|
+
]
|
4914
|
+
}
|
4915
|
+
]
|
4916
|
+
},
|
4917
|
+
{
|
4918
|
+
"regex": "^\\$keepass\\$\\*2\\*\\d{1,10}\\*\\d{1,3}\\*[a-f0-9]{64}\\*[a-f0-9]{64}\\*[a-f0-9]{32}\\*[a-f0-9]{64}\\*[a-f0-9]{64}$",
|
4919
|
+
"modes": [
|
4920
|
+
{
|
4921
|
+
"john": "keepass",
|
4922
|
+
"hashcat": 13400,
|
4923
|
+
"extended": false,
|
4924
|
+
"name": "KeePass 2 AES / without keyfile",
|
4925
|
+
"samples": [
|
4926
|
+
"$keepass$*2*6000*222*a279e37c38b0124559a83fa452a0269d56dc4119a5866d18e76f1f3fd536d64d*7ec7a06bc975ea2ae7c8dcb99e826a308564849b6b25d858cbbc78475af3733f*d477c849bf2278b7a1f626c81e343553*38c8ec186141c2705f2bcb334a730933ed3b0ee11391e1100fbaf429f6c99078*1ada85fe78cf36ab0537562a787dd83e446f13cd3d9a60fd495003de3537b702",
|
4927
|
+
"$keepass$*2*6000*222*e54497d3d9be3e310a817a13515225a87773ba71557a88673c34db824550be7b*d405c4f7e3c7b2b142fda44c3d55d3afab1c91a6aca7c81c1ff7e61b3f03be85*7eb45af0af777ecb57f0159b9ffa528b*0af7d9facefb20378e8666389de7586ea72e9527dc78bf5dfe5f1b455060a3e6*9b0d1893678dea77f88bf66e6986adbc5a8095e4a09c7e9744bad42ac49133a7",
|
4928
|
+
"$keepass$*2*6000*222*a279e37c38b0124559a83fa452a0269d56dc4119a5866d18e76f1f3fd536d64d*7ec7a06bc975ea2ae7c8dcb99e826a308564849b6b25d858cbbc78475af3733f*d477c849bf2278b7a1f626c81e343553*e61db922e9b77a161e9b674ddadfb8c660d61b5f68d97a3b1596ae94cfa9d169*7c80c7db9de77f176e86ba11697152c4c8f182bdb8133ad1bca22e9ec5bc275b"
|
4929
|
+
]
|
4930
|
+
}
|
4931
|
+
]
|
4932
|
+
},
|
4933
|
+
{
|
4934
|
+
"regex": "^\\$keepass\\$\\*2\\*\\d{1,10}\\*\\d{1,3}\\*[a-f0-9]{64}\\*[a-f0-9]{64}\\*[a-f0-9]{32}\\*[a-f0-9]{64}\\*[a-f0-9]{64}\\*\\d\\*\\d{2}\\*[a-f0-9]{64}$",
|
4935
|
+
"modes": [
|
4936
|
+
{
|
4937
|
+
"john": "keepass",
|
4938
|
+
"hashcat": 13400,
|
4939
|
+
"extended": false,
|
4940
|
+
"name": "Keepass 2 AES / with keyfile",
|
4941
|
+
"samples": [
|
4942
|
+
"$keepass$*2*6000*222*15b6b685bae998f2f608c909dc554e514f2843fbac3c7c16ea3600cc0de30212*c417098b445cfc7a87d56ba17200836f30208d38f75a4169c0280bab3b10ca2a*0d15a81eadccc58b1d3942090cd0ba66*57c4aa5ac7295a97da10f8b2f2d2bfd7a98b0faf75396bc1b55164a1e1dc7e52*2b822bb7e7d060bb42324459cb24df4d3ecd66dc5fc627ac50bf2d7c4255e4f8*1*64*aaf72933951a03351e032b382232bcafbeeabc9bc8e6988b18407bc5b8f0e3cc",
|
4943
|
+
"$keepass$*2*24569*0*c40432355cce7348c48053ceea0a28e7d18859c4ea47e3a799c6300861f64b95*265dafcc42e1537ff42e97e1e283c70014133be0fe2d420b4d24c6d57c9d2207*a00e20a852694c15aabb074d61b902fa*48dd553fb96f7996635f2414bfe6a1a8429ef0ffb71a1752abbef31853172c35*a44ae659958ad7fae8c8952cb83f3cf03fec2371ce22a8bf7fac1e687af2f249*1*64*5a26ea376cc5afc955104c334571d30486acbac512a94b75ca82a9e31dd97bf7",
|
4944
|
+
"$keepass$*2*6000*222*aa511591cb50394d044f31abb2febdb2788c9ee41d78a53f3efe0f83fdd64e81*7ceab79302a794cef818d9426e53a78458f82e72575967c4fb3788d4bc685874*1c5c1c0c475ee2f22bd56e9c75cfd67c*e7bf79115c83a0236260c71c17a816f9bd9288a683eb4b5e0d48666c66e97774*53f26838a293b392bfde1ad21b444b834cf5c02155a1378ac496653b2f3779ec*1*64*98df4f35fe74c031992d81a639305c4520f303fd1ca4bb09b53e33032b44c46a"
|
4945
|
+
]
|
4946
|
+
}
|
4947
|
+
]
|
4948
|
+
},
|
4949
|
+
{
|
4950
|
+
"regex": "^\\$keepass\\$\\*2\\*\\d{1,10}\\*\\d{1,3}\\*[a-f0-9]{64}\\*[a-f0-9]{64}\\*[a-f0-9]{24}\\*[a-f0-9]{64}\\*[a-f0-9]{64}$",
|
4951
|
+
"modes": [
|
4952
|
+
{
|
4953
|
+
"john": "keepass",
|
4954
|
+
"hashcat": null,
|
4955
|
+
"extended": false,
|
4956
|
+
"name": "KeePass 2 ChaCha20 (KDBX 3) / without keyfile",
|
4957
|
+
"samples": [
|
4958
|
+
"$keepass$*2*6000*2*e852737a797fb642a2814e5965aba3473644a56ea67998526ce5e6f0e256a56a*fb300459b1e8c52fefa8e72676b57563565475b1c1306c266a48ccc2010e6a94*03027f86819941d1d0f3f2f5*af0f6c5e4319e6c10fdb95f44ded70f3115ae7dc28ec83fd3676c92076505ded*e0ab7f438903eb91dd8bc13c52c5a1c02e34b107ae16710bc57858c8c85fecd0"
|
4959
|
+
]
|
4960
|
+
}
|
4961
|
+
]
|
4962
|
+
},
|
4963
|
+
{
|
4964
|
+
"regex": "^SCRAM-SHA-256\\$\\d{1,7}:(?=[^:$]{1,88}\\$)(?:[a-z0-9+\/]{4})*(?:|(?:[a-z0-9+\/]{3}=)|(?:[a-z0-9+\/]{2}==)|(?:[a-z0-9+\/]{1}===))\\$(?=[^:]{44}:)(?:[a-z0-9+\/]{4})*(?:|(?:[a-z0-9+\/]{3}=)|(?:[a-z0-9+\/]{2}==)|(?:[a-z0-9+\/]{1}===)):(?=[^:]{44})(?:[a-z0-9+\/]{4})*(?:|(?:[a-z0-9+\/]{3}=)|(?:[a-z0-9+\/]{2}==)|(?:[a-z0-9+\/]{1}===))$",
|
4965
|
+
"modes": [
|
4966
|
+
{
|
4967
|
+
"john": null,
|
4968
|
+
"hashcat": 28600,
|
4969
|
+
"extended": false,
|
4970
|
+
"name": "PostgreSQL SCRAM-SHA-256",
|
4971
|
+
"samples": [
|
4972
|
+
"SCRAM-SHA-256$4096:IKfxzJ8Nq4PkLJCfgKcPmA==$iRw3qwTp18uaBnsTOEExbtgWdKeBMbSSnZvqD4sdqLQ=:hPciC1CcnBna3szR8Mf3MVc8t0W7QPbIHoMMrh4zRV0="
|
4973
|
+
]
|
4974
|
+
}
|
4975
|
+
]
|
4976
|
+
},
|
4977
|
+
{
|
4978
|
+
"regex": "^\\$radmin3\\$[^*]{0,511}\\*[a-f0-9]{64}\\*[a-f0-9]{512}$",
|
4979
|
+
"modes": [
|
4980
|
+
{
|
4981
|
+
"john": null,
|
4982
|
+
"hashcat": 29200,
|
4983
|
+
"extended": false,
|
4984
|
+
"name": "Radmin3",
|
4985
|
+
"samples": [
|
4986
|
+
"$radmin3$75007300650072006e0061006d006500*c63bf695069d564844c4849e7df6d41f1fbc5f3a7d8fe27c5f20545a238398fa*0062fb848c21d606baa0a91d7177daceb69ad2f6d090c2f1b3a654cfb417be66f739ae952f5c7c5170743459daf854a22684787b24f8725337b3c3bd1e0f2a6285768ceccca77f26c579d42a66372df7782b2eefccb028a0efb51a4257dd0804d05e0a83f611f2a0f10ffe920568cc7af1ec426f450ec99ade1f2a4905fd319f8c190c2db0b0e24627d635bc2b4a2c4c9ae956b1e02784c9ce958eb9883c60ba8ea2731dd0e515f492c44f39324e4027587c1330f14216e17f212eaec949273797ae74497782ee8b6f640dd2d124c59db8c37724c8a5a63bad005f8e491b459ff1b92f861ab6d99a2548cb8902b0840c7f20a108ede6bf9a60093053781216fe"
|
4987
|
+
]
|
4988
|
+
}
|
4989
|
+
]
|
4990
|
+
},
|
4991
|
+
{
|
4992
|
+
"regex": "^\\$teamspeak\\$3\\$(?=[^$]{28}\\$)(?:[a-z0-9+\/]{4})*(?:|(?:[a-z0-9+\/]{3}=)|(?:[a-z0-9+\/]{2}==)|(?:[a-z0-9+\/]{1}===))\\$(?=[^$]{152}$)(?:[a-z0-9+\/]{4})*(?:|(?:[a-z0-9+\/]{3}=)|(?:[a-z0-9+\/]{2}==)|(?:[a-z0-9+\/]{1}===))$",
|
4993
|
+
"modes": [
|
4994
|
+
{
|
4995
|
+
"john": null,
|
4996
|
+
"hashcat": 28300,
|
4997
|
+
"extended": false,
|
4998
|
+
"name": "Teamspeak 3 (channel hash)",
|
4999
|
+
"samples": [
|
5000
|
+
"$teamspeak$3$E0aV0IQ29EDyxRfkFoQflUGJ6zo=$mRgDUkNpd0IwUEcTJQBmE0NHYwdDEhFzQ0VgMRcFJUIRYnaHBwNXRZJwk2ZUaURzdXkVYiUROERmI0hYYGFYCDiIJCeIU3N5EhRVcZFnSIRCJlkUFkY4YFMDcheYeTl4RYZEdpKGJYhxAIQJEYGYEA=="
|
5001
|
+
]
|
5002
|
+
}
|
5003
|
+
]
|
5004
|
+
},
|
5005
|
+
{
|
5006
|
+
"regex": "^[a-f0-9]{32}[a-f0-9]{32}(?=[^$]{108}$)(?:[a-z0-9+\/]{4})*(?:|(?:[a-z0-9+\/]{3}=)|(?:[a-z0-9+\/]{2}==)|(?:[a-z0-9+\/]{1}===))$",
|
5007
|
+
"modes": [
|
5008
|
+
{
|
5009
|
+
"john": null,
|
5010
|
+
"hashcat": 29600,
|
5011
|
+
"extended": false,
|
5012
|
+
"name": "Terra Station Wallet (AES256-CBC(PBKDF2($pass)))",
|
5013
|
+
"samples": [
|
5014
|
+
"67445496c838e96c1424a8dae4b146f0fc247c8c34ef33feffeb1e4412018512wZGtBMeN84XZE2LoOKwTGvA4Ee4m7PR1lDGIdWUV6OSUZKRiKFx9tlrnZLt8r8OfOzbwUS2a2Uo+nrrP6F85fh4eHstwPJw0KwzHWB8br58="
|
5015
|
+
]
|
5016
|
+
}
|
5017
|
+
]
|
5018
|
+
},
|
5019
|
+
{
|
5020
|
+
"regex": "^\\$y\\$[.\\/a-z0-9]+\\$[.\\/a-z0-9]{0,86}\\$[.\\/a-z0-9]{43}$",
|
5021
|
+
"modes": [
|
5022
|
+
{
|
5023
|
+
"john": null,
|
5024
|
+
"hashcat": null,
|
5025
|
+
"extended": false,
|
5026
|
+
"name": "yescrypt",
|
5027
|
+
"samples": [
|
5028
|
+
"$y$j9T$.9s2wZRY3hcP/udKIFher1$sIBIYsiMmFlXhKOO4ZDJDXo54byuq7a4xAD0k9jw2m4",
|
5029
|
+
"$y$j9T$o8MJgcu/zxjLLjo3pBk4A.$SPwoNr7I95/JHVKBeTnsu1mSC//M76vfmKc6mE6lSe2",
|
5030
|
+
"$y$j9T$F5Jx5fExrKuPp53xLKQ..1$X3DX6M94c7o.9agCG9G317fhZg9SqC.5i5rd.RhAtQ7"
|
5031
|
+
]
|
5032
|
+
}
|
5033
|
+
]
|
5034
|
+
},
|
5035
|
+
{
|
5036
|
+
"regex": "^\\$gy\\$[.\\/a-z0-9]+\\$[.\\/a-z0-9]{0,86}\\$[.\\/a-z0-9]{43}$",
|
5037
|
+
"modes": [
|
5038
|
+
{
|
5039
|
+
"john": null,
|
5040
|
+
"hashcat": null,
|
5041
|
+
"extended": false,
|
5042
|
+
"name": "gost-yescrypt",
|
5043
|
+
"samples": [
|
5044
|
+
"$gy$jCT$HM87v.7RwpQLba8fDjNSk1$VgqS7k2OZWhFbAJVBye2vaA7ex/1VtU3a5fmL8Wv/26",
|
5045
|
+
"$gy$j9T$.......$.xOKFTJExrsAB12xqOm7X4K3mMPTwx0aMN1dx5PQnQ5"
|
5046
|
+
]
|
5047
|
+
}
|
5048
|
+
]
|
5049
|
+
},
|
5050
|
+
{
|
5051
|
+
"regex": "^\\$sshng\\$0\\$\\d\\$[a-f0-9]{16}\\$\\d{1,8}\\$[a-f0-9]{64,65536}$",
|
5052
|
+
"modes": [
|
5053
|
+
{
|
5054
|
+
"john": "ssh",
|
5055
|
+
"hashcat": 22911,
|
5056
|
+
"extended": false,
|
5057
|
+
"name": "OpenSSH private key (RSA/DSA/EC)",
|
5058
|
+
"samples": [
|
5059
|
+
"$sshng$0$8$7532262427635482$1224$e1b1690703b83fd0ab6677c89a00dfce57fc2f345ebd2b2993bf0d8bb267449d08839213dc234dd23c7a181077e00080ced2700a161c4352ce5574b9758926f09106157715b6d756cf6dd844e473c6bb3c2b591cdbf684394a49935f7d62bcc324c1392aee499e3d6235db0556d27adc6e35ef4654ee5fc72e60dff605484e75c6fd6ae29cb476f8a658dbcce9f9591a9dad023f6d9aa223c3d56261e056c5cafa93438937e0762b989cd10e6280a09488be07423c549514ff9686338e72dbe6bdc5015944739a9f183cacf04c1c141dc8c8d8aa8636c85a6c0578a5983ed33d5ff5ee6a66a54d86defd1c4f9d6a59446861bf4cc7bd667bc92b9d328c154f442d1d03d4d370dcc065a1d5420c5b71e4c35a457e11a0c9f489636559a2ac53bb4cfee2b0058f8a9d1ccc38a844ee0d1ff5d6938427bf24d6e4c69f10e6ebce9187d51e867ac3b362b9c6149712e8378a9ac91d1aab1a7a5f088ddbdead0cc754c30961b7a71284b5c6658f7219632de6007d5145a1ae062f807234230ff73a3436ce28ae3bfa0f880d1e49ec8a288da18db14905bc7a7b061a51c429876db81ad528efb469ba2bf46c7344aadc7d082efc83ede3894bf6b1738151e642f6f60a41069ad862d2f4f8d55733bd6d85086d1d9bb1913a9d4680ea0b49f712c590a3c18b91ef745b9bdf461af67879d94f9672de4abe0b7d2e4efba1f8bb6ffbb4a095742d5cff0e225b1b5e166854bb9821e4283d97f80855c81efea1eb3e7881a6049186650bfbf68f30302c069883668e373c12ce9a39de8d7c1be22a717d9c74410c45093aae03c5de8cc0ec662fe3bb81bf952e17b854001bcad9b36cab2f473a609878a419b735c66f3732bd5540fb1cba9fe081f87cecf63a6243cd2049dfa25a763ef2e0633bfb13a411207d8ca1c8f3c0c30b8a7583436cad7bd8c28ba625b9c53dc280b314671b0a55d75a28d3b21de250e3c554b86ca5d32821ab912c6607687c4dc5b3214216a7409621ce6fb89bd5309a7dd8ec9ae4b751bdfb6b5d12d733a89d87722dbdb1b15df5463241f0f56c401e095ea5dee07c0ded1f11ffbd7c93a41add0cfd8c57b44f255fdfd1929cd7d068d6cf951ba8ab0d718996fec10aaa26a4314d4c1272f744adf3c7e4d710ae171c072a7c61c2b020a445cf32be3083d3bc62083f2385bbae4fadddf8714258b996abd574638891bb918e877fdef3a4856b910999a6dc9dbd13c0e938825cd895c96d39cb86bb283a53fac7090c71a9320c6a34af309d2218af64c895f5eff8eee28cf94e7a7437a0922d83bfa39f08bb40e354d9ace07aa586a446dc217ede98b6ca9637545cc11ef56732fc9cd3dc06e459d868137b75d39a87e6721a95f2b84e57c94ef703486a2857821e497b990c95080015d825b6dc63d666f66cfa35912e607c3b650d81dc98c0c53322796ff9249cdfe7a375e1d01607816a85bb43f3969767a9aaed07161344e714d7e875b40f3524f95e476e605dbd2ac51e36075701fa93b66f36470796ebf5d35690a297e19729f9ac59d98622e3ad3e45a2914bdd2b807446c8b430e54c1a607fd25a69bf469a61d2e3bc3697b786c047bc60dbeabe6372d71e9b7c9787bb2559c663a011f864ecf32793e65f4bdd76370d99f602ddcbc7e5aa7d2749f36e8d0f209a378782882bc06ee5b5014c2a6248469f0fe0fc5369383db0bc898c0760b8c40fe20342fa5b"
|
5060
|
+
]
|
5061
|
+
}
|
5062
|
+
]
|
5063
|
+
},
|
5064
|
+
{
|
5065
|
+
"regex": "^\\$sshng\\$6\\$\\d\\$[a-f0-9]{16}\\$\\d{1,8}\\$[a-f0-9]{64,65536}$",
|
5066
|
+
"modes": [
|
5067
|
+
{
|
5068
|
+
"john": "ssh",
|
5069
|
+
"hashcat": 22921,
|
5070
|
+
"extended": false,
|
5071
|
+
"name": "OpenSSH private key (RSA/DSA/EC)",
|
5072
|
+
"samples": [
|
5073
|
+
"$sshng$6$8$7620048997557487$1224$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"
|
5074
|
+
]
|
5075
|
+
}
|
5076
|
+
]
|
5077
|
+
},
|
5078
|
+
{
|
5079
|
+
"regex": "^\\$sshng\\$[13]\\$\\d{2}\\$[a-f0-9]{32}\\$\\d{1,8}\\$[a-f0-9]{64,65536}$",
|
5080
|
+
"modes": [
|
5081
|
+
{
|
5082
|
+
"john": "ssh",
|
5083
|
+
"hashcat": 22931,
|
5084
|
+
"extended": false,
|
5085
|
+
"name": "OpenSSH private key (RSA/DSA/EC)",
|
5086
|
+
"samples": [
|
5087
|
+
"$sshng$1$16$14987802644369864387956120434709$1232$ffa56007ed83e49fdc439c776a9dec9656521385073bf71931a2c6503c93917e560cc98940c8cdcf2c709265e9ba20783a3bacc63423a98e40ea8999182613e1f5a80084719ca0e5c390299de1ea947df41f2ff1489bddfe13c6128612c5c82b7fc1ef5105ea28adda7b415729c66fb6cbc4b6b51ef518f74e1971f88e0cfabd69e8c4270678e360149ce15716fef4736df296a20d2607ef269a3c69896fc423683d6057e00064f84e04caf4d4663b51b307cfb1d1dbd6b3bf67764a08847c7b83fa5544e6a1e950f16acda8c8bac30675bc3cea9c7e06790ddc7cd1e4177b93bdd0d9edf9cdceb4a4444b437d967acdb92274a7b10d9cd1073ab4e9b5dd468aabe1f40a02b2e51f19840798c2311b625037eba5f0a0256638b42577385f4d4c730a9cedf4e244ce74656a21bf16756857866433dbb1feff9c4323d234d4235b72ed5a3adc3a6c9bae373472d64b7882d1762911326f330cb42d8ab7931f1ad2de56c4e6e8a6e838108cf9a2728ffa356796f63d94723b1d0aad5b4fcea16ab0730e7553804ad9ffb6ecdbdd925fca05ca1c076ed09a30df8a5add44a43c36b92248dc8dd4605bc2ee557e6e4438abf9ea7d047f764c55a5ba46a41719b9c55e54ad5fbfce6a89b9283c163d8464ecdda5aaf113d038b659950b8c79e87abad019eb77535cc8e63f760a4c87ca344a563475361766df718519b1b7e4b3ab511952fcc9b011f1d8971f9261509139b739afcc2c9acd006ee714dffc8c9a4df0d54770d70c8c28c27cdf9ee7301fd64530ef0ec3eb044fb891b193a7aaa9158625ed9f5a842c86ed09e5377d90a69aea4c5fd321bc3ac9b2a0d34509a5de0b72ac3f81304895c4381e01136b1e8654cec20c220c0ac6a1300f031ffc68ddeab554279024c122589b91556feef394a1663b42fb8460af5fe881cb1cd4984b84be75125411b1d3fc236dd81f99b872aad511d28944e91d2f8853f11be85b6930a15b4d0b3d215d76416970ade5726979c1d737980fb68ecb03d1196a69f4013dd2e296a75a4c69664b0162cb8b22af18c536a8ce51f39b1282f2fe07e6b034627f075cfb20dffee62817aabeea60befea1ac93ba608d957e4030e41be7bc55275bc4037300f6ba736370eb7c9240629853c95f9304b7ffd26a10d55ae735fa943e29aa9ed437b61955fc16cde9ea7a3658d831bdbc38befa45cec80da9ccb6d21da83ff666e32d7c5c0ca0ade2cd685407ee701c1c707fc5c80b22f3af42ac1353fcdc09a459086434db7c78792decdc91572363478a14d1256346a9ac6336b8183ed6252106aa546dd092c0bbb464cdb44ae165d67d1be135877587de3bbbd02b5ef6473f125366f6dae0536ebbe18ab8de8ce2ef3d26d6dd400319e7d07ae276b081e94446e9a72877cf23e9ba52406b1842e3a0dcf7bbdc63a1336b894be475613cc917eb47724f64e621bfc3053d7423e3e2fb141a3368dc8881fa20e040e9a6bc2e7348e923e4c20e506566b8663bf7d557e792cbe4adffcf9c520d58565d77f6bf1c9ed5fa3209f8047765d01b9c264e97a3ef9ff90766ad69a4f508041e168bf0f7419e54ec88bdc4c858231cdba60774a27cc459cd65b46e26a620a43033788c6e2ee8916670568d6e6c700515f2cbca3eef62028ce75245cf8f99cd6e0ba7839a7b335c797a06ff80571950ebec2fccebb89265025b3250e4a5c9c3a62f471324556fc4db044cebe97f62c86913"
|
5088
|
+
]
|
5089
|
+
}
|
5090
|
+
]
|
5091
|
+
},
|
5092
|
+
{
|
5093
|
+
"regex": "^\\$sshng\\$4\\$\\d{2}\\$[a-f0-9]{32}\\$\\d{1,8}\\$[a-f0-9]{64,65536}$",
|
5094
|
+
"modes": [
|
5095
|
+
{
|
5096
|
+
"john": "ssh",
|
5097
|
+
"hashcat": 22941,
|
5098
|
+
"extended": false,
|
5099
|
+
"name": "OpenSSH private key (RSA/DSA/EC)",
|
5100
|
+
"samples": [
|
5101
|
+
"$sshng$4$16$01684556100059289727957814500256$1232$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"
|
5102
|
+
]
|
5103
|
+
}
|
5104
|
+
]
|
5105
|
+
},
|
5106
|
+
{
|
5107
|
+
"regex": "^\\$sshng\\$5\\$\\d{2}\\$[a-f0-9]{32}\\$\\d{1,8}\\$[a-f0-9]{64,65536}$",
|
5108
|
+
"modes": [
|
5109
|
+
{
|
5110
|
+
"john": "ssh",
|
5111
|
+
"hashcat": 22951,
|
5112
|
+
"extended": false,
|
5113
|
+
"name": "OpenSSH private key (RSA/DSA/EC)",
|
5114
|
+
"samples": [
|
5115
|
+
"$sshng$5$16$52935050547964524511665675049973$1232$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"
|
5116
|
+
]
|
5117
|
+
}
|
5118
|
+
]
|
5119
|
+
},
|
5120
|
+
{
|
5121
|
+
"regex": "^\\$bitlocker\\$\\d\\$\\d{2}\\$[a-f0-9]{32}\\$\\d{7}\\$\\d{2}\\$[a-f0-9]{24}\\$\\d{2}\\$[a-f0-9]{120}$",
|
5122
|
+
"modes": [
|
5123
|
+
{
|
5124
|
+
"john": "bitlocker",
|
5125
|
+
"hashcat": 22100,
|
5126
|
+
"extended": false,
|
5127
|
+
"name": "BitLocker",
|
5128
|
+
"samples": [
|
5129
|
+
"$bitlocker$1$16$6f972989ddc209f1eccf07313a7266a2$1048576$12$3a33a8eaff5e6f81d907b591$60$316b0f6d4cb445fb056f0e3e0633c413526ff4481bbf588917b70a4e8f8075f5ceb45958a800b42cb7ff9b7f5e17c6145bf8561ea86f52d3592059fb",
|
5130
|
+
"$bitlocker$0$16$134bd2634ba580adc3758ca5a84d8666$1048576$12$9080903a0d9dd20103000000$60$0c52fdd87f17ac55d4f4b82a00b264070f36a84ead6d4cd330368f7dddfde1bdc9f5d08fa526dae361b3d64875f76a077fe9c67f44e08d56f0131bb2",
|
5131
|
+
"$bitlocker$0$16$9079aaee7be0923b529f069012f30b13$1048576$12$40ea50c2b79fd20103000000$60$caca601f042fae0eb697593e559760f8209d495ed0b61eda9c83a79f0abb3f598853b6f89cdffd3b5b66b90b321b822c90c8ef5dac464ef6edd06881",
|
5132
|
+
"$bitlocker$0$16$c971c02f4f7bb07a196ff8cdf6a3f588$1048576$12$00bf2f62c726d30103000000$60$000000000000000000000000000000001f7b4f5bfb33b1261d9134e2b37039b1a6955748f43207cccb1adfe14c2347e288d36b5384df57099f57cd41",
|
5133
|
+
"$bitlocker$0$16$c7258b6a1824c5f57e7456d8304c9bb2$1048576$12$f0b876adc826d30103000000$60$00000000000000000000000000000000695f6c513124321aaf9d27fa1330c03445a34401a430b0fcfb258cbb53d1af466f06ef8127ef37bef2787c81",
|
5134
|
+
"$bitlocker$3$16$432dd19f37dd413a88552225628c8ae5$1048576$12$a0da3fc75f6cd30106000000$60$3e57c68216ef3d2b8139fdb0ec74254bdf453e688401e89b41cae7c250739a8b36edd4fe86a597b5823cf3e0f41c98f623b528960a4bee00c42131ef"
|
5135
|
+
]
|
5136
|
+
}
|
5137
|
+
]
|
5138
|
+
},
|
5139
|
+
{
|
5140
|
+
"regex": "^\\$odf\\$\\*1\\*1\\*\\d{4,6}\\*\\d{2}\\*[a-f0-9]{64}\\*\\d{2}\\*[a-f0-9]{32}\\*\\d{2}\\*[a-f0-9]{32}\\*\\d\\*[a-f0-9]{2048}$",
|
5141
|
+
"modes": [
|
5142
|
+
{
|
5143
|
+
"john": "odf",
|
5144
|
+
"hashcat": 18400,
|
5145
|
+
"extended": false,
|
5146
|
+
"name": "Open Document Format (ODF) 1.2 (SHA-256, AES)",
|
5147
|
+
"samples": [
|
5148
|
+
"$odf$*1*1*100000*32*751854d8b90731ce0579f96bea6f0d4ac2fb2f546b31f1b6af9a5f66952a0bf4*16*2185a966155baa9e2fb597298febecbc*16*c18eaae34bcbbe9119be017fe5f8b52d*0*051e0f1ce0e866f2b771029e03a6c7119aad132af54c4e45824f16f61f357a40407ab82744fe6370c7b2346075fcd4c2e58ab244411b3ab1d532a46e2321599ef13c3d3472fc2f14d480d8c33215e473da67f90540279d3ef1f62dde314fa222796046e496c951235ddf88aa754620b7810d22ebc8835c90dce9276946f52b8ea7d95d2f86e4cc725366a8b3edacc2ce88518e535991a5f84d5ea8795dc02bfb731b5f202ecaf7d4b245d928c4248709fcdf3fba2acf1a08be0c1eee7dbeda07e8c3a6983565635e99952b8ad79d31c965f245ae90b5cc3dba6387898c66fa35cad9ac9595c41b62e68efcdd73185b38e220cf004269b77ec6974474b03b7569afc3b503a2bf8b2d035756f3f4cb880d9ba815e5c944508a0bde214076c35bf0e0814a96d21ccaa744c9056948ed935209f5c7933841d2ede3d28dd84da89d477d4a0041ce6d8ddab891d929340db6daa921d69b46fd5aee306d0bcef88c38acbb495d0466df7e2f744e3d10201081215c02db5dd479a4cda15a3338969c7baec9d3d2c378a8dd30449319b149dc3b4e7f00996a59fcb5f243d0df2cbaf749241033f7865aefa960adfeb8ebf205b270f90b1f82c34f80d5a8a0db7aec89972a32f5daa2a73c5895d1fced01b3ab8e576bd2630eff01cad97781f4966d4b528e1b15f011f28ae907a352073c96b203adc7742d2b79b2e2f440b17e7856ae119e08d15d8bdf951f6d4a3f9b516da2d9a8f9dd93488f8e0119f3da19138ab787f0d7098a652cccd914aa0ff81d375bd6a5a165acc936f591639059287975cfc3ca4342e5f9501b3249a76d14e56d6d56b319e036bc0449ac7b5afa24ffbea11babed8183edf8d4fdca1c3f0d23bfd4a02797627d556634f1a9304e03737604bd86f6b5a26aa687d6df73383e0f7dfe62a131e8dbb8c3f4f13d24857dd29d76984eac6c45df7428fc79323ffa1f4e7962d705df74320141ed1f16d1ad483b872168df60315ffadbfa1b7f4afaed8a0017421bf5e05348cb5c707a5e852d6fee6077ec1c33bc707bcd97b7701ee05a03d6fa78b0d31c8c97ea16e0edf434961bd5cc7cbb7eb2553730f0405c9bd21cee09b3f7c1bc57779fdfc15f3935985737a1b522004c4436b631a39a66e8577a03f5020e6aa41952c0662c8c57f66caa483b47af38b8cb5d457245fd3241749e17433e6f929233e8862d7c584111b1991b2d6e94278e7e6e1908cee5a83d94c78b75a84a695d25aeb9fdde72174fe6dd75e8d406671f44892a385a4a1e249f61ebc993e985607423a0a5742e668d52c1ebf5cecae7c2b7908f4627b92ec49354a9ccff8cb5763ad074a00e65a485a41bf4c25ce7e6fae49358a58547b1c0ca79713e297310c0a367c3de196f1dd685ca4be643bdf1e4f6b034211d020557e37a3b6614d061010b4a3416b6b279728c245d3322",
|
5149
|
+
"$odf$*1*1*1024*32*61802eba18eab842de1d053809ba40927fd40b26c69ddeca6a8a652ed9c16a28*16*c5c0815b931f313627100d592a9c972f*16*e9a48b7daff738deaabe442007fb2ec4*0*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",
|
5150
|
+
"$odf$*1*1*1024*32*7db40092b3857fa319bc0d717b60cefc40b1d51ef92ebc893c518ffebffdf200*16*5f7c8ab6e5d1c41dbd23c384fee957ed*16*9ff092f2dd29dab6ce5fb43ad7bbdd5a*0*bac8343436715b40aaf4690a7dc57b0f82b8f25f8ad0f9833e32468410d4dd02e387a067872b5847adc9a276c86a03113e11b903854202eec361c5b7ba74bcb254a4f76d97ca45dbe30fe49f78ce9cf7df0246ae4524b8f13ad28357838559c116d9ed59267f4df91da3ea9758c132e2ebc40fd4ee8e9978921a0847d7ca5c30ef911e0b88f9fc84039633eacf5e023c82dd1a573abd7663b8f36a039d42ed91b4a0665902f174be8cefefd367ba9b5da95768550e567242f1b2e2c3866eb8aa3c12d0b34277929616319ea29dd9a3b9addb963d45c7d4c2b54a99b0c1cf24cac3e981ed4e178e621938b83be30f54d37d6425a0b7ac9dff5504830fe1d1f136913c32d8f732eb55e6179ad2699fd851af3a44f8ca914117344e6fadf501bf6f6e0ae7970a2b58eb3af0d89c78411c6adde8aa1f0e8b69c261fd04835cdc3ddf0a6d67ddff33995b5cc7439db83f90c8a2e07e2513771fffcf8b55ce1a382b14ffbf22be9bdd6f83a9b7602995c9793dfffb32c9eb16930c0bb55e5a8364fa06a59fca5af27df4a02565db2b4718ed44405f67a052738692c189039a7fd63713207616eeeebace3c0a3963dd882c485523f49fa0bc2663fc6ef090a220dd5c6554bc0702da8c3122383ea8a009837d549d58ad688c9cc4b8461fe70f4600539cd1d82edd4e110b1c1472dae40adc3126e2a09dd2753dcd83799841745160e235652f601d1257268321f22d19bd9dc811afaf143765c7cb53717ea329e9e4064a3cf54b33d006e93b83102e2ad3327f6d995cb598bd96466b1287e6da9967f4f034c63fd06c6e5c7ec25008c122385f271d18918cff3823f9fbdb37791e7371ce1d6a4ab08c12eca5fceb7c9aa7ce25a8bd640a68c622ddd858973426cb28e65c4c3421b98ebf4916b8c2bfe71b2afec4ab2f99291a4c4d3312521850d46436aecd9e2e93a8619dbc3c1caf4507bb488ce921cd8d13a1640e6c49403e0416924b3b1a01c9939c7bcdec50f057d6f4dccf0afc8c2ad37c4f8429c77cf19ad49db5e5219e965a3ed5d56d799689bd93642602d7959df0493ea62cccff83e66d85bf45d6b5b03e8cfca84daf37ecfccb60f85f3c5102900a02a5df015b1bf1ef55dfb2ab20321bcf3325d1adce22d4456837dcc589ef36d4f06ccdcc96ef10ff806d76f0044e92e192b946ae0f09860a38c2a6052fe84c3e9bb9380e2b344812376c6bbd5c9858745dbd072798a3d7eff31ae5d509c11b5269ec6f2108cb6e72a5ab495ea7aed5bf3dabedbb517dc4ceff818a8e890a6ea9a91bab37e8a463a9d04993c5ba7e40e743e033842540806d4a65258d0f4d5988e1e0011f0e85fcae3b2819c1f17f5c7980ecd87aee425cdab4f34bfb7a31ee7936c60f2f4f52aea67aef4736a419dc9c559279b569f61995eb2d6b7c204c3e9f56ca5c8a889812a30c33",
|
5151
|
+
"$odf$*1*1*100000*32*3d7d3b74666814c1a50e4a68ce264198db4730ddc4f07f57647b6147143db261*16*60b496b3fee4ccfbc4512ff9a9ec2d59*16*841daefbb62e7b5ea50a4838f310ef7b*0*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"
|
5152
|
+
]
|
5153
|
+
}
|
5154
|
+
]
|
5155
|
+
},
|
5156
|
+
{
|
5157
|
+
"regex": "^\\$odf\\$\\*0\\*0\\*\\d{4,6}\\*\\d{2}\\*[a-f0-9]{40}\\*\\d\\*[a-f0-9]{16}\\*\\d{2}\\*[a-f0-9]{32}\\*\\d\\*[a-f0-9]{2048}$",
|
5158
|
+
"modes": [
|
5159
|
+
{
|
5160
|
+
"john": "odf",
|
5161
|
+
"hashcat": 18600,
|
5162
|
+
"extended": false,
|
5163
|
+
"name": "Open Document Format (ODF) 1.1 (SHA-1, Blowfish)",
|
5164
|
+
"samples": [
|
5165
|
+
"$odf$*0*0*1024*16*bff753835f4ea15644b8a2f8e4b5be3d147b9576*8*ee371da34333b69d*16*a902eff54a4d782a26a899a31f97bef4*0*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",
|
5166
|
+
"$odf$*0*0*1024*16*df6c10f64d191a841812af53874b636d014ce3fe*8*07e28aff39d2660e*16*b124be9f3346fb77e0ebcc3bb80028f8*0*2276a1077f6a2a027bd565ce89824d6a20086e378876be05c4b8e3796a460e828c9803a692caf7a53492c220d1d7ecbf4e2d336c7abf5a7672acc804ca267318252cbc13676616d1fde38820f9fbeef1360067d9de096ba8c1032ae947bde1d0fedaf37b6020663d49faf36b7c095c5b9aae11c8fc2be74148f008edbdbb180b44028ad8259f1215b483542bf3027f56dee5f962448333b30f88e6ae4790b60d24abb286edff9adee831a4b3351fc47259043f0d683d7a25be7e47aff3aedca140005d866e218c8efcca32093c19bbece50bd96656d0f94a712d3c60d1e5342db86482fc73f05faf513ca0b137378126597b95986c372b412c953e97011259aab0839fe453c756559497a28ba88dce009e1e7980436131029d38e56a34f608e6471970d9959068808c898608024db9eb394c4feae7a364ea9272ec4ea2315a9f0407a4b27d5e49a8ab1e3ddce5c84927d5aecd7e68e4437a820ea8743c6b5b4e2abbb47b0001e2f77ceac4603e8774e4ccbc1adde794428c11ae4a7492727b620334302e63f72b0c06c1cf83800366916ee8295176819272d557863a831ee0a576841191482959aad69095831fa1d64e3e0e6f6c6a751bcdadf0fbaa27a17458709f708c04587cb208984c9525da6786e0e5aabefe30ad1dbbef66e85ce9d6dbe456fd85e4135de5cf16d9455976d7ca8de7b1b530661c74c0fae90c0fff1a2b5fcdfab19fcff75fadcec445ed8af6ab5babf1463e08458918be8045083de6db988c37e4be582cfac5cdf741d1f0322fb2902665c7ff347813348109e5d442e91fcb010c28f042da481e807084fcb4759b40ccf2cae77bad00cdfbfba4acf36aa1f74c30a315e3d7f1ca522b6306e8903352aafa51dc523d582d418934398d5eb88120e3656bfb640a239db507b285302a86855ea850ddc9af72fc62dc79336c9bc29ee8314c65adb0574e9c701d73d7fa977edd1d52a1ff2da5b8b94e1a0fdd01ffcc6583758f0a1f51750e45f12b58c6d38b140e5676cf3474224520ef7c52ca5e634f85456651f3d6f43d016ed7cc5da54ea640a3bc50c2b9d3dea8f93c0340d66ccd06efc5ae002108c33cf3a470c4a50f6a6ca2f11b8ad15511688c282b94ba6f1c332e239d10946dc46f763f08d12cb9edc1e79c0e07f7151f548e6d7d20ec13b52d911bf980cac60694e192651403c9a69abea045190e847be093fc9ba43fec55b32f77f5796ddca25b441f259d5c51e06df6c6588c6414899481ba9e06bcebec58f82ff3021b09c6beae13a5d22bc94870f72ab813d0c0be01d91f3d075192e7a5de765599d72244757d09539529a8347e077a36678166e5ed9f73a5aad2e147d8154095c397e3e5e4ba1987ca64c1301a0c6c3e438097ede9b701a105ec38fcb54abb31b367c7740cd9ac459e561094a34f01acee555e60267157e6"
|
5167
|
+
]
|
5168
|
+
}
|
5169
|
+
]
|
5170
|
+
},
|
5171
|
+
{
|
5172
|
+
"regex": "^\\$sxc\\$\\*0\\*0\\*\\d{4,6}\\*\\d{2}\\*[a-f0-9]{40}\\*\\d\\*[a-f0-9]{16}\\*\\d{2}\\*[a-f0-9]{32}\\*\\d{1,4}\\*\\d{1,4}\\*[a-f0-9]+$",
|
5173
|
+
"modes": [
|
5174
|
+
{
|
5175
|
+
"john": "odf",
|
5176
|
+
"hashcat": null,
|
5177
|
+
"extended": false,
|
5178
|
+
"name": "Open Document Format (ODF) 1.1 (SHA-1, Blowfish) (buggy StarOffice)",
|
5179
|
+
"samples": [
|
5180
|
+
"$sxc$*0*0*1024*16*00c20dee73d4990cfe1c8faf92ab5b0f517e0e19*8*36a0707abdd14c24*16*b6763f444c0a350458f25cf3957ca293*756*760*0b73bae4a465a7afa6573251583defc55496bf565cfd824a98c1c3ba05a07c5891286f89974f12193582c8b04597e7c539eead4afb84cbfd4e13e278ca29804ddb190efb8d5d3ea2b4919b2d84f39186971c33c67b0db0841ea1caeb94f65b5d6be4b69e5651eea303da4e79ac8509dc8bd5f7567e698f8422c847600fc4ab19ebabaf0ec84e0fb3900e584598d22465320ea7aa1ee77909378f41257a78aeca2b699c3d6b7481efd6a124e9e4ea8f8eeb7c4e9c7226ff1665cc37095254eed618cbeba9f383fed9983441606380bef22289408109a08b7d31c01c885a53292407a036a4ae41b1e91004aa46ed0c0d5b2462d37696c57e008335228071265edf4bcae020536ca4f7fd0d71ceb3f418d62cd07a884f646ad6e5392d4f84d5a8424a91e264988cfa3df9ed4c44d2c5018c905641cfe546ec4d2b9b0da4fb4e11241e7b26b38898a5acfd7679e3e0f5fb843b2690b3a43a29f26990e102434dfd80908319e12c96f7a0697a1fe3812ef10240eefff7295b5c884212cc3d1d4139e3ba65ae715317d76774a0c90e93a20d4f508c502cd8bbbebf1a9eb4c64cb9d40231f7d355582c44c4fad1634adc2c68e75694b0c45d05e89a766a513d7eb0d8ce2467463506ed5374a3ce2bbdc45d5f2858bf70a4ddf47c6f41a50691aebeee797d21f685aff45cfb6a99f34720665c5b8aac0bdda78b21876e73d5361888c0eda04c3f4ab7d40164b34f543d59c25258c6d0a1817c50a18d08109e905e754ac76748574434d5e6be04bc18736674c7d14a79929cccf57f6ecc169d5bf6e1e2beca732728e10e03002035d4e0ea0680c4a1471af374d86a891e4c1dce6266fccfa537174b243c583a9150c4df4102c943aad869bc72d8d6310eadc72dc4b7eeccf053dc0c3dacb4bc572045f4c76a521d84d1154b616b89f76d1a0cc4ce353d001f86353b7a4879e9f7846cd0b1d55ee85a6f57ec27583da7137c99752ed24ed69197c80e22a58f6302eee6af2f2a41ca3270f09f317ebd5a0ad799ad8f250d535c648ebedbfdba9770f2ea33492a057019a915c130303030",
|
5181
|
+
"$sxc$*0*0*1024*16*4448359828281a1e6842c31453473abfeae584fb*8*dc0248bea0c7508c*16*1d53770002fe9d8016064e5ef9423174*860*864*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",
|
5182
|
+
"$sxc$*0*0*1024*16*64983af0b26a6ee614e6c65b32c1d906f70c6397*8*259cafe530bd09f8*16*8f53ea878d0795cfe05dcc65fb272c20*1024*1024*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"
|
5183
|
+
]
|
5184
|
+
}
|
5185
|
+
]
|
5186
|
+
},
|
5187
|
+
{
|
5188
|
+
"regex": "^\\$sip\\$\\*[^*]{0,512}\\*[^*]{0,512}\\*[^*]{0,116}\\*[^*]{0,116}\\*[^*]{0,246}\\*[^*]{0,245}\\*[^*]{0,246}\\*[^*]{0,245}\\*[^*]{1,1024}\\*[^*]{0,1024}\\*[^*]{0,1024}\\*[^*]{0,1024}\\*[^*]{3}\\*[a-f0-9]{32}$",
|
5189
|
+
"modes": [
|
5190
|
+
{
|
5191
|
+
"john": "sip",
|
5192
|
+
"hashcat": 11400,
|
5193
|
+
"extended": false,
|
5194
|
+
"name": "SIP digest authentication (MD5)",
|
5195
|
+
"samples": [
|
5196
|
+
"$sip$*72087*1215344588738747***342210558720*737232616*1215344588738747*8867133055*65600****MD5*e9980869221f9d1182c83b0d5e56a7db",
|
5197
|
+
"$sip$*192.168.100.100*192.168.100.121*username*asterisk*REGISTER*sip*192.168.100.121**2b01df0b****MD5*ad0520061ca07c120d7e8ce696a6df2d",
|
5198
|
+
"$sip$*192.168.1.111*192.168.1.104*200*asterisk*REGISTER*sip*192.168.1.104**46cce857****MD5*4dfc7515936a667565228dbaa0293dfc",
|
5199
|
+
"$sip$*192.168.1.110*192.168.1.110*user151*Apple*REGISTER*sip*192.168.1.110*5060*b57aa7088ae5cac88d298d66f2c809cd****MD5*77795e92300dcc3c2fd974b2b47e5f0c",
|
5200
|
+
"$sip$*192.168.44.162*192.168.44.11*12315*asterisk*REGISTER*sip*192.168.44.11**825f321ad9886ef434788ebfb8dbf150*b78b5a31*00000001*auth*MD5*23802bb930873797f0c7a1f0e595a94e"
|
5201
|
+
]
|
5202
|
+
}
|
5203
|
+
]
|
4201
5204
|
}
|
4202
5205
|
]
|