haiti-hash 1.3.0 → 1.4.1

Sign up to get free protection for your applications and to get access to all the features.
data/data/prototypes.json CHANGED
@@ -250,7 +250,13 @@
250
250
  "john": "pix-md5",
251
251
  "hashcat": 2400,
252
252
  "extended": false,
253
- "name": "Cisco-PIX(MD5)"
253
+ "name": "Cisco-PIX (MD5)",
254
+ "samples": [
255
+ "dRRVnUmUHXOTt9nk",
256
+ "2KFQnbNIdI.2KYOU",
257
+ "TRPEas6f/aa6JSPL",
258
+ ".7nfVBEIEu4KbF/1"
259
+ ]
254
260
  },
255
261
  {
256
262
  "john": "dynamic_19",
@@ -282,7 +288,8 @@
282
288
  "samples": [
283
289
  "_GW..8841inaTltazRsQ",
284
290
  "_J9..XXXXsqM/YSSP..Y",
285
- "_J9..SDSD5YGyRCr4W4c"
291
+ "_J9..SDSD5YGyRCr4W4c",
292
+ "_EQ0.jzhSVeUyoSqLupI"
286
293
  ]
287
294
  }
288
295
  ]
@@ -339,7 +346,7 @@
339
346
  ]
340
347
  },
341
348
  {
342
- "regex": "^[a-f0-9]{32}(:.+)?$",
349
+ "regex": "^[a-f0-9]{32}(?::.+)?$",
343
350
  "modes": [
344
351
  {
345
352
  "john": "raw-md5",
@@ -360,7 +367,7 @@
360
367
  {
361
368
  "john": null,
362
369
  "hashcat": 2600,
363
- "extended": false,
370
+ "extended": true,
364
371
  "name": "Double MD5"
365
372
  },
366
373
  {
@@ -378,31 +385,31 @@
378
385
  {
379
386
  "john": "dynamic_160",
380
387
  "hashcat": null,
381
- "extended": false,
388
+ "extended": true,
382
389
  "name": "Haval-128 (3 rounds)"
383
390
  },
384
391
  {
385
392
  "john": "dynamic_180",
386
393
  "hashcat": null,
387
- "extended": false,
394
+ "extended": true,
388
395
  "name": "Haval-128 (5 rounds)"
389
396
  },
390
397
  {
391
398
  "john": null,
392
399
  "hashcat": null,
393
- "extended": false,
400
+ "extended": true,
394
401
  "name": "Tiger-128"
395
402
  },
396
403
  {
397
404
  "john": null,
398
405
  "hashcat": null,
399
- "extended": false,
406
+ "extended": true,
400
407
  "name": "Skein-256(128)"
401
408
  },
402
409
  {
403
410
  "john": null,
404
411
  "hashcat": null,
405
- "extended": false,
412
+ "extended": true,
406
413
  "name": "Skein-512(128)"
407
414
  },
408
415
  {
@@ -615,14 +622,46 @@
615
622
  "extended": true,
616
623
  "name": "md5($salt.pad16($pass))"
617
624
  },
625
+ {
626
+ "john": null,
627
+ "hashcat": 4410,
628
+ "extended": true,
629
+ "name": "md5(sha1($pass).$salt)",
630
+ "samples": [
631
+ "bc8319c0220bff8a0d7f5d703114a725:34659348756345251"
632
+ ]
633
+ },
618
634
  {
619
635
  "john": null,
620
636
  "hashcat": null,
621
- "extended": false,
637
+ "extended": true,
622
638
  "name": "MD6-128",
623
639
  "samples": [
624
640
  "8cd9a30bfde990878c06be4a6111f726"
625
641
  ]
642
+ },
643
+ {
644
+ "john": null,
645
+ "hashcat": 2810,
646
+ "extended": false,
647
+ "name": "IPB 2.x (Invision Power Board)",
648
+ "samples": [
649
+ "022f7e02b3314f7d0968f73c00ba759f:67588"
650
+ ]
651
+ }
652
+ ]
653
+ },
654
+ {
655
+ "regex": "^[a-f0-9]{32}(?::.{1,32})?$",
656
+ "modes": [
657
+ {
658
+ "john": null,
659
+ "hashcat": 12,
660
+ "extended": true,
661
+ "name": "PostgreSQL",
662
+ "samples": [
663
+ "93a8cf6a7d43e3b5bcd2dc6abb3e02c6:27032153220030464358344758762807"
664
+ ]
626
665
  }
627
666
  ]
628
667
  },
@@ -753,19 +792,32 @@
753
792
  "john": "md5crypt",
754
793
  "hashcat": 500,
755
794
  "extended": false,
756
- "name": "MD5 Crypt"
795
+ "name": "MD5 Crypt",
796
+ "samples": [
797
+ "$1$38652870$DUjsu4TTlTsOe/xxZ05uf/"
798
+ ]
757
799
  },
758
800
  {
759
801
  "john": "md5crypt",
760
802
  "hashcat": 500,
761
803
  "extended": false,
762
- "name": "Cisco-IOS(MD5)"
763
- },
804
+ "name": "FreeBSD MD5"
805
+ }
806
+ ]
807
+ },
808
+ {
809
+ "regex": "^\\$1\\$[a-z0-9\\/.]{4}\\$[a-z0-9\\/.]{22}(:.*)?$",
810
+ "modes": [
811
+
764
812
  {
765
813
  "john": "md5crypt",
766
814
  "hashcat": 500,
767
815
  "extended": false,
768
- "name": "FreeBSD MD5"
816
+ "name": "Cisco Type 5 (MD5)",
817
+ "samples": [
818
+ "$1$VkQd$Vma3sR7B1LL.v5lgy1NYc/",
819
+ "$1$SpMm$eALjeyED.WSZs0naLNv22/"
820
+ ]
769
821
  }
770
822
  ]
771
823
  },
@@ -930,40 +982,7 @@
930
982
  ]
931
983
  },
932
984
  {
933
- "regex": "^[a-f0-9]{32}:.{5}$",
934
- "modes": [
935
- {
936
- "john": null,
937
- "hashcat": 2811,
938
- "extended": false,
939
- "name": "IP.Board \u2265 v2+"
940
- }
941
- ]
942
- },
943
- {
944
- "regex": "^[a-f0-9]{32}:.{8}$",
945
- "modes": [
946
- {
947
- "john": null,
948
- "hashcat": 2811,
949
- "extended": false,
950
- "name": "MyBB \u2265 v1.2+"
951
- }
952
- ]
953
- },
954
- {
955
- "regex": "^[a-z0-9]{34}$",
956
- "modes": [
957
- {
958
- "john": null,
959
- "hashcat": null,
960
- "extended": false,
961
- "name": "CryptoCurrency(Adress)"
962
- }
963
- ]
964
- },
965
- {
966
- "regex": "^[a-f0-9]{40}(:.+)?$",
985
+ "regex": "^[a-f0-9]{40}(:[^:]+)?$",
967
986
  "modes": [
968
987
  {
969
988
  "john": "raw-sha1",
@@ -998,7 +1017,7 @@
998
1017
  {
999
1018
  "john": null,
1000
1019
  "hashcat": null,
1001
- "extended": false,
1020
+ "extended": true,
1002
1021
  "name": "Tiger-160"
1003
1022
  },
1004
1023
  {
@@ -1166,7 +1185,7 @@
1166
1185
  ]
1167
1186
  },
1168
1187
  {
1169
- "regex": "^(\\$ripemd\\$)?[a-f0-9]{40}(:.+)?$",
1188
+ "regex": "^(\\$ripemd\\$)?[a-f0-9]{40}(:[^:]+)?$",
1170
1189
  "modes": [
1171
1190
  {
1172
1191
  "john": "ripemd-160",
@@ -1181,6 +1200,20 @@
1181
1200
  }
1182
1201
  ]
1183
1202
  },
1203
+ {
1204
+ "regex": "^[a-f0-9]{40}:[a-f0-9]+:[a-f0-9]+$",
1205
+ "modes": [
1206
+ {
1207
+ "john": null,
1208
+ "hashcat": 29000,
1209
+ "extended": true,
1210
+ "name": "sha1($salt.sha1(utf16le($username).':'.utf16le($pass)))",
1211
+ "samples": [
1212
+ "339b5eaa53f28516008e9ca710857d3a4785b6fc:8ca064ff42fcab5a8f0692544b8dd3d3054bd73fe9afaa08c6b6b310538cc9a7:757365726e616d65"
1213
+ ]
1214
+ }
1215
+ ]
1216
+ },
1184
1217
  {
1185
1218
  "regex": "^(\\*)?[a-f0-9]{40}$",
1186
1219
  "modes": [
@@ -1214,7 +1247,10 @@
1214
1247
  "john": null,
1215
1248
  "hashcat": 5700,
1216
1249
  "extended": false,
1217
- "name": "Cisco-IOS(SHA-256)"
1250
+ "name": "Cisco Type 4 (Raw SHA256)",
1251
+ "samples": [
1252
+ "2btjjy78REtmYkkW0csHUbJZOstRXoWdX1mGrmmfeHI"
1253
+ ]
1218
1254
  }
1219
1255
  ]
1220
1256
  },
@@ -1328,7 +1364,7 @@
1328
1364
  ]
1329
1365
  },
1330
1366
  {
1331
- "regex": "^{ssha1}[0-9]{2}\\$[a-z0-9$\\/.]{44}$",
1367
+ "regex": "^{ssha1}\\d{2}\\$[a-z0-9$\\/.]{44}$",
1332
1368
  "modes": [
1333
1369
  {
1334
1370
  "john": "aix-ssha1",
@@ -1356,15 +1392,16 @@
1356
1392
  ]
1357
1393
  },
1358
1394
  {
1359
- "regex": "^(\\$md5,rounds=[0-9]+\\$|\\$md5\\$rounds=[0-9]+\\$|\\$md5\\$)[a-z0-9\\/.]{0,16}(\\$|\\$\\$)[a-z0-9\\/.]{22}$",
1395
+ "regex": "^(\\$md5,rounds=\\d+\\$|\\$md5\\$rounds=\\d+\\$|\\$md5\\$)[a-z0-9\\/.]{0,16}(\\$|\\$\\$)[a-z0-9\\/.]{22}$",
1360
1396
  "modes": [
1361
1397
  {
1362
1398
  "john": "sunmd5",
1363
1399
  "hashcat": 3300,
1364
1400
  "extended": false,
1365
- "name": "Sun MD5 Crypt",
1401
+ "name": "Sun / Solaris MD5 Crypt",
1366
1402
  "samples": [
1367
- "$md5$rounds=904$iPPKEBnEkp3JV8uX$0L6m7rOFTVFn.SGqo2M9W1"
1403
+ "$md5$rounds=904$iPPKEBnEkp3JV8uX$0L6m7rOFTVFn.SGqo2M9W1",
1404
+ "$md5,rounds=5000$GUBv0xjJ$$mSwgIswdjlTY0YxV7HBVm0"
1368
1405
  ]
1369
1406
  }
1370
1407
  ]
@@ -1459,19 +1496,19 @@
1459
1496
  {
1460
1497
  "john": null,
1461
1498
  "hashcat": null,
1462
- "extended": false,
1499
+ "extended": true,
1463
1500
  "name": "Skein-256(224)"
1464
1501
  },
1465
1502
  {
1466
1503
  "john": null,
1467
1504
  "hashcat": null,
1468
- "extended": false,
1505
+ "extended": true,
1469
1506
  "name": "Skein-512(224)"
1470
1507
  },
1471
1508
  {
1472
1509
  "john": "dynamic_330",
1473
1510
  "hashcat": null,
1474
- "extended": false,
1511
+ "extended": true,
1475
1512
  "name": "Skein-224"
1476
1513
  },
1477
1514
  {
@@ -1483,7 +1520,7 @@
1483
1520
  ]
1484
1521
  },
1485
1522
  {
1486
- "regex": "^(\\$2[axy]|\\$2)\\$[0-9]{2}\\$[a-z0-9\\/.]{53}$",
1523
+ "regex": "^(\\$2[abxy]|\\$2)\\$\\d{2}\\$[a-z0-9\\/.]{53}$",
1487
1524
  "modes": [
1488
1525
  {
1489
1526
  "john": "bcrypt",
@@ -1520,6 +1557,15 @@
1520
1557
  "samples": [
1521
1558
  "$2a$05$Uo385Fa0g86uUXHwZxB90.qMMdRFExaXePGka4WGFv.86I45AEjmO"
1522
1559
  ]
1560
+ },
1561
+ {
1562
+ "john": null,
1563
+ "hashcat": 28400,
1564
+ "extended": true,
1565
+ "name": "bcrypt(sha512($pass)) / bcryptsha512",
1566
+ "samples": [
1567
+ "$2a$12$KhivLhCuLhSyMBOxLxCyLu78x4z2X/EJdZNfS3Gy36fvRt56P2jbS"
1568
+ ]
1523
1569
  }
1524
1570
  ]
1525
1571
  },
@@ -1546,7 +1592,7 @@
1546
1592
  ]
1547
1593
  },
1548
1594
  {
1549
- "regex": "^\\$bcrypt-sha256\\$(2[axy]|2)\\,[0-9]+\\$[a-z0-9\\/.]{22}\\$[a-z0-9\\/.]{31}$",
1595
+ "regex": "^\\$bcrypt-sha256\\$(2[axy]|2)\\,\\d+\\$[a-z0-9\\/.]{22}\\$[a-z0-9\\/.]{31}$",
1550
1596
  "modes": [
1551
1597
  {
1552
1598
  "john": null,
@@ -1659,7 +1705,7 @@
1659
1705
  {
1660
1706
  "john": null,
1661
1707
  "hashcat": null,
1662
- "extended": false,
1708
+ "extended": true,
1663
1709
  "name": "Skein-512(256)"
1664
1710
  },
1665
1711
  {
@@ -1712,21 +1758,39 @@
1712
1758
  },
1713
1759
  {
1714
1760
  "john": "dynamic_64",
1715
- "hashcat": null,
1761
+ "hashcat": 21400,
1716
1762
  "extended": true,
1717
- "name": "sha256(sha256_raw($pass))"
1763
+ "name": "sha256(sha256_raw($pass))",
1764
+ "samples": [
1765
+ "0cc1b58a543f372327aa0281e97ab56e345267ee46feabf7709515debb7ec43c"
1766
+ ]
1718
1767
  },
1719
1768
  {
1720
1769
  "john": "dynamic_65",
1721
- "hashcat": null,
1770
+ "hashcat": 20710,
1722
1771
  "extended": true,
1723
- "name": "sha256(sha256($pass).$salt)"
1772
+ "name": "sha256(sha256($pass).$salt)",
1773
+ "samples": [
1774
+ "bfede293ecf6539211a7305ea218b9f3f608953130405cda9eaba6fb6250f824:7218532375810603"
1775
+ ]
1724
1776
  },
1725
1777
  {
1726
1778
  "john": "dynamic_66",
1727
- "hashcat": null,
1779
+ "hashcat": 20720,
1728
1780
  "extended": true,
1729
- "name": "sha256($salt.sha256($pass))"
1781
+ "name": "sha256($salt.sha256($pass))",
1782
+ "samples": [
1783
+ "bae9edada8358fcebcd811f7d362f46277fb9d488379869fba65d79701d48b8b:869dc2ed80187919"
1784
+ ]
1785
+ },
1786
+ {
1787
+ "john": null,
1788
+ "hashcat": 21420,
1789
+ "extended": true,
1790
+ "name": "sha256($salt.sha256_raw($pass))",
1791
+ "samples": [
1792
+ "5934ea4d670c13a71155faba42056b2525f71bdc9215d31108990c11bf3d98e3:9269771356270099311432765354522635185291064175409115041569"
1793
+ ]
1730
1794
  },
1731
1795
  {
1732
1796
  "john": "dynamic_67",
@@ -1780,13 +1844,13 @@
1780
1844
  {
1781
1845
  "john": null,
1782
1846
  "hashcat": null,
1783
- "extended": false,
1847
+ "extended": true,
1784
1848
  "name": "SAM(LM_Hash:NT_Hash)"
1785
1849
  }
1786
1850
  ]
1787
1851
  },
1788
1852
  {
1789
- "regex": "^(\\$chap\\$0\\*)?[a-f0-9]{32}[\\*:][a-f0-9]{32}(:[0-9]{2})?$",
1853
+ "regex": "^(\\$chap\\$0\\*)?[a-f0-9]{32}[\\*:][a-f0-9]{32}(:\\d{2})?$",
1790
1854
  "modes": [
1791
1855
  {
1792
1856
  "john": "chap",
@@ -1814,7 +1878,7 @@
1814
1878
  ]
1815
1879
  },
1816
1880
  {
1817
- "regex": "^{ssha256}[0-9]{2}\\$[a-z0-9$\\/.]{60}$",
1881
+ "regex": "^{ssha256}\\d{2}\\$[a-z0-9$\\/.]{60}$",
1818
1882
  "modes": [
1819
1883
  {
1820
1884
  "john": "aix-ssha256",
@@ -1885,13 +1949,13 @@
1885
1949
  {
1886
1950
  "john": null,
1887
1951
  "hashcat": null,
1888
- "extended": false,
1952
+ "extended": true,
1889
1953
  "name": "Skein-512(384)"
1890
1954
  },
1891
1955
  {
1892
1956
  "john": null,
1893
1957
  "hashcat": null,
1894
- "extended": false,
1958
+ "extended": true,
1895
1959
  "name": "Skein-1024(384)"
1896
1960
  },
1897
1961
  {
@@ -1974,7 +2038,7 @@
1974
2038
  ]
1975
2039
  },
1976
2040
  {
1977
- "regex": "^{ssha512}[0-9]{2}\\$[a-z0-9\\/.]{16,48}\\$[a-z0-9\\/.]{86}$",
2041
+ "regex": "^{ssha512}\\d{2}\\$[a-z0-9\\/.]{16,48}\\$[a-z0-9\\/.]{86}$",
1978
2042
  "modes": [
1979
2043
  {
1980
2044
  "john": "aix-ssha512",
@@ -2038,7 +2102,10 @@
2038
2102
  "john": "raw-blake2",
2039
2103
  "hashcat": null,
2040
2104
  "extended": false,
2041
- "name": "BLAKE2-512"
2105
+ "name": "BLAKE2-512",
2106
+ "samples": [
2107
+ "4245af08b46fbb290222ab8a68613621d92ce78577152d712467742417ebc1153668f1c9e1ec1e152a32a9c242dc686d175e087906377f0c483c5be2cb68953e"
2108
+ ]
2042
2109
  },
2043
2110
  {
2044
2111
  "john": "skein-512",
@@ -2049,7 +2116,7 @@
2049
2116
  {
2050
2117
  "john": null,
2051
2118
  "hashcat": null,
2052
- "extended": false,
2119
+ "extended": true,
2053
2120
  "name": "Skein-1024(512)"
2054
2121
  },
2055
2122
  {
@@ -2136,11 +2203,38 @@
2136
2203
  "john": "raw-blake2",
2137
2204
  "hashcat": 600,
2138
2205
  "extended": false,
2139
- "name": "BLAKE2-512"
2206
+ "name": "BLAKE2-512",
2207
+ "samples": [
2208
+ "$BLAKE2$021ced8799296ceca557832ab941a50b4a11f83478cf141f51f933f653ab9fbcc05a037cddbed06e309bf334942c4e58cdf1a46e237911ccd7fcf9787cbc7fd0",
2209
+ "$BLAKE2$1f7d9b7c9a90f7bfc66e52b69f3b6c3befbd6aee11aac860e99347a495526f30c9e51f6b0db01c24825092a09dd1a15740f0ade8def87e60c15da487571bcef7",
2210
+ "$BLAKE2$296c269e70ac5f0095e6fb47693480f0f7b97ccd0307f5c3bfa4df8f5ca5c9308a0e7108e80a0a9c0ebb715e8b7109b072046c6cd5e155b4cfd2f27216283b1e"
2211
+ ]
2212
+ }
2213
+ ]
2214
+ },
2215
+ {
2216
+ "regex": "^\\$BLAKE2\\$[a-f0-9]{128}(?::.+)$",
2217
+ "modes": [
2218
+ {
2219
+ "john": null,
2220
+ "hashcat": 610,
2221
+ "extended": true,
2222
+ "name": "BLAKE2-512($pass.$salt)",
2223
+ "samples": [
2224
+ "$BLAKE2$41fcd44c789c735c08b43a871b81c8f617ca43918d38aee6cf8291c58a0b00a03115857425e5ff6f044be7a5bec8536b52d6c9992e21cd43cdca8a55bbf1f5c1:1033"
2225
+ ]
2226
+ },
2227
+ {
2228
+ "john": null,
2229
+ "hashcat": 620,
2230
+ "extended": true,
2231
+ "name": "BLAKE2-512($salt.$pass)",
2232
+ "samples": [
2233
+ "$BLAKE2$f0325fdfc3f82a014935442f7adbc069d4636d67276a85b09f8de368f122cf5195a0b780d7fee709fbf1dcd02ddcb581df84508cf1fb0f3393af1be0565491c6:3301"
2234
+ ]
2140
2235
  }
2141
2236
  ]
2142
2237
  },
2143
-
2144
2238
  {
2145
2239
  "regex": "^[a-f0-9]{136}$",
2146
2240
  "modes": [
@@ -2178,7 +2272,7 @@
2178
2272
  ]
2179
2273
  },
2180
2274
  {
2181
- "regex": "^\\$ml\\$[0-9]+\\$[a-f0-9]{64}\\$[a-f0-9]{128}$",
2275
+ "regex": "^\\$ml\\$\\d+\\$[a-f0-9]{64}\\$[a-f0-9]{128}$",
2182
2276
  "modes": [
2183
2277
  {
2184
2278
  "john": "pbkdf2-hmac-sha512",
@@ -2200,13 +2294,13 @@
2200
2294
  {
2201
2295
  "john": null,
2202
2296
  "hashcat": null,
2203
- "extended": false,
2297
+ "extended": true,
2204
2298
  "name": "Skein-1024"
2205
2299
  }
2206
2300
  ]
2207
2301
  },
2208
2302
  {
2209
- "regex": "^grub\\.pbkdf2\\.sha512\\.[0-9]+\\.([a-f0-9]{128,2048}\\.|[0-9]+\\.)?[a-f0-9]{128}$",
2303
+ "regex": "^grub\\.pbkdf2\\.sha512\\.\\d+\\.([a-f0-9]{128,2048}\\.|\\d+\\.)?[a-f0-9]{128}$",
2210
2304
  "modes": [
2211
2305
  {
2212
2306
  "john": null,
@@ -2250,13 +2344,16 @@
2250
2344
  ]
2251
2345
  },
2252
2346
  {
2253
- "regex": "^\\$5\\$(rounds=[0-9]+\\$)?[a-z0-9\\/.]{0,16}\\$[a-z0-9\\/.]{43}$",
2347
+ "regex": "^\\$5\\$(rounds=\\d+\\$)?[a-z0-9\\/.]{0,16}\\$[a-z0-9\\/.]{43}$",
2254
2348
  "modes": [
2255
2349
  {
2256
2350
  "john": "sha256crypt",
2257
2351
  "hashcat": 7400,
2258
2352
  "extended": false,
2259
- "name": "SHA-256 Crypt"
2353
+ "name": "SHA-256 Crypt",
2354
+ "samples": [
2355
+ "$5$9ks3nNEqv31FX.F$gdEoLFsCRsn/WRN3wxUnzfeZLoooVlzeF4WjLomTRFD"
2356
+ ]
2260
2357
  }
2261
2358
  ]
2262
2359
  },
@@ -2272,13 +2369,16 @@
2272
2369
  ]
2273
2370
  },
2274
2371
  {
2275
- "regex": "^\\$6\\$(rounds=[0-9]+\\$)?[a-z0-9\\/.]{0,16}\\$[a-z0-9\\/.]{86}$",
2372
+ "regex": "^\\$6\\$(rounds=\\d+\\$)?[a-z0-9\\/.]{0,16}\\$[a-z0-9\\/.]{86}$",
2276
2373
  "modes": [
2277
2374
  {
2278
2375
  "john": "sha512crypt",
2279
2376
  "hashcat": 1800,
2280
2377
  "extended": false,
2281
- "name": "SHA-512 Crypt"
2378
+ "name": "SHA-512 Crypt",
2379
+ "samples": [
2380
+ "$6$qoE2letU$wWPRl.PVczjzeMVgjiA8LLy2nOyZbf7Amj3qLIL978o18gbMySdKZ7uepq9tmMQXxyTIrS12Pln.2Q/6Xscao0"
2381
+ ]
2282
2382
  }
2283
2383
  ]
2284
2384
  },
@@ -2409,57 +2509,111 @@
2409
2509
  ]
2410
2510
  },
2411
2511
  {
2412
- "regex": "^\\$(krb5pa|mskrb5)\\$([0-9]{2})?\\$.+\\$[a-f0-9]{1,}$",
2512
+ "regex": "^\\$(?:af|k4)\\$[^$]+\\$[a-f0-9]{32}$",
2513
+ "modes": [
2514
+ {
2515
+ "john": "krb4",
2516
+ "hashcat": null,
2517
+ "extended": false,
2518
+ "name": "Kerberos 4 TGT",
2519
+ "samples": [
2520
+ "$af$UMICH.EDU$bb46613c503ad92e649d99d038efddb2",
2521
+ "$af$UMICH.EDU$bebcedf43f7f2aa78cf9c0639e494c92"
2522
+ ]
2523
+ }
2524
+ ]
2525
+ },
2526
+ {
2527
+ "regex": "^\\$krb5\\$[^$]+\\$[^$]+\\$[a-f0-9]{456}$",
2528
+ "modes": [
2529
+ {
2530
+ "john": "krb5",
2531
+ "hashcat": null,
2532
+ "extended": false,
2533
+ "name": "Kerberos 5 TGT",
2534
+ "samples": [
2535
+ "$krb5$oskov$ACM.UIUC.EDU$4730d7249765615d6f3652321c4fb76d09fb9cd06faeb0c31b8737f9fdfcde4bd4259c31cb1dff25df39173b09abdff08373302d99ac09802a290915243d9f0ea0313fdedc7f8d1fae0d9df8f0ee6233818d317f03a72c2e77b480b2bc50d1ca14fba85133ea00e472c50dbc825291e2853bd60a969ddb69dae35b604b34ea2c2265a4ffc72e9fb811da17c7f2887ccb17e2f87cd1f6c28a9afc0c083a9356a9ee2a28d2e4a01fc7ea90cc8836b8e25650c3a1409b811d0bad42a59aa418143291d42d7b1e6cb5b1876a4cc758d721323a762e943f774630385c9faa68df6f3a94422f97",
2536
+ "$krb5$oskov$ACM.UIUC.EDU$6cba0316d38e31ba028f87394792baade516afdfd8c5a964b6a7677adbad7815d778b297beb238394aa97a4d495adb7c9b7298ba7c2a2062fb6c9a4297f12f83755060f4f58a1ea4c7026df585cdfa02372ad619ab1a4ec617ad23e76d6e37e36268d9aa0abcf83f11fa8092b4328c5e6c577f7ec6f1c1684d9c99a309eee1f5bd764c4158a2cf311cded8794b2de83131c3dc51303d5300e563a2b7a230eac67e85b4593e561bf6b88c77b82c729e7ba7f3d2f99b8dc85b07873e40335aff4647833a87681ee557fbd1ffa1a458a5673d1bd3c1587eceeabaebf4e44c24d9a8ac8c1d89"
2537
+ ]
2538
+ }
2539
+ ]
2540
+ },
2541
+ {
2542
+ "regex": "^\\$(?:krb5pa\\$\\d{2}|mskrb5)\\$.+\\$[a-f0-9]+$",
2413
2543
  "modes": [
2414
2544
  {
2415
2545
  "john": "krb5pa-md5",
2416
2546
  "hashcat": 7500,
2417
2547
  "extended": false,
2418
- "name": "Kerberos 5 AS-REQ Pre-Auth etype 23"
2548
+ "name": "Kerberos 5 AS-REQ Pre-Auth etype 23",
2549
+ "samples": [
2550
+ "$krb5pa$23$user$realm$salt$5cbb0c882a2b26956e81644edbdb746326f4f5f0e947144fb3095dffe4b4b03e854fc1d631323632303636373330383333353630",
2551
+ "$krb5pa$23$user$realm$salt$afcbe07c32c3450b37d0f2516354570fe7d3e78f829e77cdc1718adf612156507181f7daeb03b6fbcfe91f8346f3c0ae7e8abfe5",
2552
+ "$mskrb5$john$JOHN.DOE.MS.COM$02E837D06B2AC76891F388D9CC36C67A$2A9785BF5036C45D3843490BF9C228E8C18653E10CE58D7F8EF119D2EF4F92B1803B1451",
2553
+ "$krb5pa$23$$$$afcbe07c32c3450b37d0f2516354570fe7d3e78f829e77cdc1718adf612156507181f7daeb03b6fbcfe91f8346f3c0ae7e8abfe5"
2554
+ ]
2419
2555
  }
2420
2556
  ]
2421
2557
  },
2422
2558
  {
2423
- "regex": "^\\$krb5tgs\\$23\\$\\*[^*]*\\*\\$[a-f0-9]{32}\\$[a-f0-9]{64,40960}$",
2559
+ "regex": "^\\$krb5tgs\\$23\\$(?:[^$]+\\$[^$]+\\$[^$]+\\$)?[a-f0-9]{32}\\$[a-f0-9]{64,40960}$",
2424
2560
  "modes": [
2425
2561
  {
2426
2562
  "john": "krb5tgs",
2427
2563
  "hashcat": 13100,
2428
2564
  "extended": false,
2429
- "name": "Kerberos 5 TGS-REP etype 23"
2565
+ "name": "Kerberos 5 TGS-REP etype 23",
2566
+ "samples": [
2567
+ "$krb5tgs$23$*user$realm$test/spn*$b548e10f5694ae018d7ad63c257af7dc$35e8e45658860bc31a859b41a08989265f4ef8afd75652ab4d7a30ef151bf6350d879ae189a8cb769e01fa573c6315232b37e4bcad9105520640a781e5fd85c09615e78267e494f433f067cc6958200a82f70627ce0eebc2ac445729c2a8a0255dc3ede2c4973d2d93ac8c1a56b26444df300cb93045d05ff2326affaa3ae97f5cd866c14b78a459f0933a550e0b6507bf8af27c2391ef69fbdd649dd059a4b9ae2440edd96c82479645ccdb06bae0eead3b7f639178a90cf24d9a",
2568
+ "$krb5tgs$23$74809c4c83c3c8279c6058d2f206ec2f$78b4bbd4d229487d5afc9a6050d4144ce10e9245cdfc0df542879814ce740cebb970ee820677041596d7e55836a18cc95c04169e7c74a4a22ae94e66f3d37150e26cc9cb99e189ef54feb7a40a8db2cb2c41db80d8927c74da7b33b52c58742d2109036b8ab27184609e7adff27b8f17b2f2a7b7d85e4ad532d8a70d48685a4390a9fc7a0ab47fd17334534d795abf83462f0db3de931c6a2d5988ab5bf3253facfff1381afb192ce385511c9052f2915ffdb7ea28a1bbad0573d9071e79dc15068527d50100de8813793a15c292f145fa3797ba86f373a4f0a05e5f2ec7dbfd8c8b5139cc7fbb098ea1dd91a7440134ffe2aff7174d0df13dcad82c81c680a70127a3ec8792bdecd74a878f97ff2b21277dc8c9a2f7bbcd9f72560dd933d85585259067d45a46a6f505d03f188b62c37edf03f117503a26743ebd674d5b07324c15fc8418881613b365402e0176da97d43cf85e8239b69aee07791233a959bcaf83a7f492fa718dd0a1747eaf5ce626eb11bda89e8235a056e2721f45c3b61442d893ef32a8c192ea0dadb853f3c6f3c75e92f23c744605c6f55578f696b0f33a9586b8aae3e12e38a097692cd9a31d780d973eaaf62ef23b2fc9ae59a38bfd8ea14d3289b46910f61a90aa733e66382bc27f40ba634e55ef1bec0ca7f71546b79566d85664b92f9fae495fcef5cde4c4399a6798569a7e81b9cc4bdde7104f3fe181401f82bba944e3b0a406c7093c00ff9d5984a82517b1a64a8aa561bc1f0cbafbdbbc5654d375c91d4e485e17bb06838109fbc1504147481c91652f545086a84daa423a6286ea6bb13460c5ff3d865a7b37b9ce4e7b07fbe2f6897c12c1e4df2e875c1ec9cfbf84097a7f48b270baf3481263b21849ab93c231490d06a23461a5e00c23df76bca8e5a19256d859304e1f5752bf055ac7f4843e1ad174f1cbbf5c142958f9310025ce439d5979982fb0b8c2ea95e1a22ee8dc63423d9d364cb0b95bcdf89ec4ed485b9005326d728757d77aa3e020a4a61d7deb782bc5264dca350173609772cd6d003ee8104dd24d310c9a18a44f78e27d65095f5bb54f6118c8f0d79ad5a850cec8d40a19bd0134144e904c9eb7fdcff3293696071fc1118f6b2f934281a25bcd5ca7d567714b1e43bd6d09bfcc8744c0ca273a75938394ac2fb31957287093346078577c94a71dfa6ad4a63211f54f00ef7a9064d070aaff84116ee891728915c938a8a32e87aaa00ec18e2b4e9ae88f7e53f08d855052a995f92351be32d8df934eab487103b0f089828e5fb5f73af3a8a05b9fffd25c43a392994743de3de1a2a9b8bba27e02ae2341f09d63aafab291759c41b9635521ca02f08e21e7e5c3ce75c8c3515eaa99aeb9bf8e204663e8b6b8507ecf87230a131687b4770e250ba0ef29fa3ca3b47b34971e17c6a3ef785acdd7c90da9d2",
2569
+ "$krb5tgs$23$8bef2ad33c7d5d23c8693ccd868d9f84$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"
2570
+ ]
2430
2571
  }
2431
2572
  ]
2432
2573
  },
2433
2574
  {
2434
- "regex": "^\\$krb5asrep\\$23\\$[^:]+:[a-f0-9]{32,32}\\$[a-f0-9]{64,40960}$",
2575
+ "regex": "^\\$krb5asrep\\$23\\$(?:[^:$]+:)?[a-f0-9]{32}\\$[a-f0-9]{64,40960}$",
2435
2576
  "modes": [
2436
2577
  {
2437
2578
  "john": "krb5asrep",
2438
2579
  "hashcat": 18200,
2439
2580
  "extended": false,
2440
- "name": "Kerberos 5 AS-REP etype 23"
2581
+ "name": "Kerberos 5 AS-REP etype 23",
2582
+ "samples": [
2583
+ "$krb5asrep$23$8cf8eb5287e28a4006c064892150c4fb$3e05ecc13548bec8e1eeb900dea5429cc6931bae9b8524490eb3a8801560871fe44355ed556202afbb39872e1bbb5c3c4f1b37dcd68fda89a23ebad917d4bbb0933edd94331598939e5d0c0c98c7e219a2e9dd6b877280d1bd7c51131413be577a167208bcc21e9fe7ae8f393278d740e72ca5c44c42d5cb0bf6bab0a36f1b88b7ddc4abbc6f152e652f6ba35c2955fb4132e11b7e566f3b422c3740f79847b77783d245a4e570b8a621b4ff6ff4815566446af70313ee78133707a76a4e4424783bd7c04920aa822a1a36b29f7e25cef186e6439fc46e42e23d6bd918969ef49b8388aef158e443b3a57dbde7ada631fbef7326f9046a9b",
2584
+ "$krb5asrep$23$c447eddaebf22ebf006a8fc6f986488c$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",
2585
+ "$krb5asrep$23$771adbc2397abddef676742924414f2b$2df6eb2d9c71820dc3fa2c098e071d920f0e412f5f12411632c5ee70e004da1be6f003b78661f8e4507e173552a52da751c45887c19bc1661ed334e0ccb4ef33975d4bd68b3d24746f281b4ca4fdf98fca0e50a8e845ad7d834e020c05b1495bc473b0295c6e9b94963cb912d3ff0f2f48c9075b0f52d9a31e5f4cc67c7af1d816b6ccfda0da5ccf35820a4d7d79073fa404726407ac840910357ef210fcf19ed81660106dfc3f4d9166a89d59d274f31619ddd9a1e2712c879a4e9c471965098842b44fae7ca6dd389d5d98b7fd7aca566ca399d072025e81cf0ef5075447687f80100307145fade7a8",
2586
+ "$krb5asrep$23$user@domain.com:3e156ada591263b8aab0965f5aebd837$007497cb51b6c8116d6407a782ea0e1c5402b17db7afa6b05a6d30ed164a9933c754d720e279c6c573679bd27128fe77e5fea1f72334c1193c8ff0b370fadc6368bf2d49bbfdba4c5dccab95e8c8ebfdc75f438a0797dbfb2f8a1a5f4c423f9bfc1fea483342a11bd56a216f4d5158ccc4b224b52894fadfba3957dfe4b6b8f5f9f9fe422811a314768673e0c924340b8ccb84775ce9defaa3baa0910b676ad0036d13032b0dd94e3b13903cc738a7b6d00b0b3c210d1f972a6c7cae9bd3c959acf7565be528fc179118f28c679f6deeee1456f0781eb8154e18e49cb27b64bf74cd7112a0ebae2102ac"
2587
+ ]
2441
2588
  }
2442
2589
  ]
2443
2590
  },
2444
2591
  {
2445
- "regex": "^\\$krb5asrep\\$18\\$[^:]+:[a-f0-9]{32,32}\\$[a-f0-9]{64,40960}$",
2592
+ "regex": "^\\$krb5asrep\\$18\\$[^$]+\\$[a-f0-9]{542}\\$[a-f0-9]{24}$",
2446
2593
  "modes": [
2447
2594
  {
2448
2595
  "john": "krb5asrep",
2449
2596
  "hashcat": null,
2450
2597
  "extended": false,
2451
- "name": "Kerberos 5 AS-REP etype 18"
2598
+ "name": "Kerberos 5 AS-REP etype 18",
2599
+ "samples": [
2600
+ "$krb5asrep$18$EXAMPLE.COMlulu$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$a5245c7f39480a840da0e4c6",
2601
+ "$krb5asrep$18$EXAMPLE.COMluser$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$420973360c2e907b9053f1db"
2602
+ ]
2452
2603
  }
2453
2604
  ]
2454
2605
  },
2455
2606
  {
2456
- "regex": "^\\$krb5asrep\\$17\\$[^:]+:[a-f0-9]{32,32}\\$[a-f0-9]{64,40960}$",
2607
+ "regex": "^\\$krb5asrep\\$17\\$[^$]+\\$[a-f0-9]{542}\\$[a-f0-9]{24}$",
2457
2608
  "modes": [
2458
2609
  {
2459
2610
  "john": "krb5asrep",
2460
2611
  "hashcat": null,
2461
2612
  "extended": false,
2462
- "name": "Kerberos 5 AS-REP etype 17"
2613
+ "name": "Kerberos 5 AS-REP etype 17",
2614
+ "samples": [
2615
+ "$krb5asrep$17$EXAMPLE.COMhero$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$7ed0277ba9b853008cc62abe"
2616
+ ]
2463
2617
  }
2464
2618
  ]
2465
2619
  },
@@ -2470,7 +2624,10 @@
2470
2624
  "john": null,
2471
2625
  "hashcat": 19600,
2472
2626
  "extended": false,
2473
- "name": "Kerberos 5 TGS-REP etype 17 (AES128-CTS-HMAC-SHA1-96)"
2627
+ "name": "Kerberos 5 TGS-REP etype 17 (AES128-CTS-HMAC-SHA1-96)",
2628
+ "samples": [
2629
+ "$krb5tgs$17$srv_http$synacktiv.local$849e31b3db1c1f203fa20b85$948690f5875125348286ad3346d27b43eaabc71896b620c16de7ddcdbd561628c650c508856a3f574261948b6db4b48332d30536e978046a423ad4368f9a69b4dc4642dab4e0d475d8299be718fd6f98ac85a771b457b2453e78c9411dfce572b19660fe7a5a8246d9b2a91ea2f14d1986ea0a77ecf9b8330bc8fd9ab540bcf46b74c5aa7005cfccd89ec05f66aeab30c6b2bf8595cf6c9a1b68ad885258850c4b1dd9265f270fb2af52fd76c16246df51ea67efc58a65c345686c84e43642febe908a"
2630
+ ]
2474
2631
  }
2475
2632
  ]
2476
2633
  },
@@ -2481,34 +2638,121 @@
2481
2638
  "john": null,
2482
2639
  "hashcat": 19700,
2483
2640
  "extended": false,
2484
- "name": "Kerberos 5 TGS-REP etype 18 (AES256-CTS-HMAC-SHA1-96)"
2641
+ "name": "Kerberos 5 TGS-REP etype 18 (AES256-CTS-HMAC-SHA1-96)",
2642
+ "samples": [
2643
+ "$krb5tgs$18$srv_http$synacktiv.local$16ce51f6eba20c8ee534ff8a$57d07b23643a516834795f0c010da8f549b7e65063e5a367ca9240f9b800adad1734df7e7d5dd8307e785de4f40aacf901df41aa6ce695f8619ec579c1fa57ee93661cf402aeef4e3a42e7e3477645d52c09dc72feade03512dffe0df517344f673c63532b790c242cc1d50f4b4b34976cb6e08ab325b3aefb2684262a5ee9faacb14d059754f50553be5bfa5c4c51e833ff2b6ac02c6e5d4c4eb193e27d7dde301bd1ddf480e5e282b8c27ef37b136c8f140b56de105b73adeb1de16232fa1ab5c9f6"
2644
+ ]
2485
2645
  }
2486
2646
  ]
2487
2647
  },
2488
2648
  {
2489
- "regex": "^\\$krb5pa\\$17\\$[^$]{1,512}\\$[^$]{1,512}\\$[a-f0-9]{104,112}$",
2649
+ "regex": "^\\$krb5pa\\$17\\$[^$]{1,512}\\$[^$]{1,512}(?:\\$[^$]*)?\\$[a-f0-9]{104,112}$",
2490
2650
  "modes": [
2491
2651
  {
2492
2652
  "john": "krb5pa-sha1",
2493
2653
  "hashcat": 19800,
2494
2654
  "extended": false,
2495
- "name": "Kerberos 5 AS-REQ Pre-Auth etype 17"
2655
+ "name": "Kerberos 5 AS-REQ Pre-Auth etype 17",
2656
+ "samples": [
2657
+ "$krb5pa$17$hashcat$HASHCATDOMAIN.COM$a17776abe5383236c58582f515843e029ecbff43706d177651b7b6cdb2713b17597ddb35b1c9c470c281589fd1d51cca125414d19e40e333",
2658
+ "$krb5pa$17$user1$EXAMPLE.COM$$c5461873dc13665771b98ba80be53939e906d90ae1ba79cf2e21f0395e50ee56379fbef4d0298cfccfd6cf8f907329120048fd05e8ae5df4"
2659
+ ]
2496
2660
  }
2497
2661
  ]
2498
2662
  },
2499
2663
  {
2500
- "regex": "^\\$krb5pa\\$18\\$[^$]{1,512}\\$[^$]{1,512}\\$[a-f0-9]{104,112}$",
2664
+ "regex": "^\\$krb5pa\\$18\\$[^$]{1,512}\\$[^$]{1,512}(?:\\$[^$]*)?\\$[a-f0-9]{104,112}$",
2501
2665
  "modes": [
2502
2666
  {
2503
2667
  "john": "krb5pa-sha1",
2504
2668
  "hashcat": 19900,
2505
2669
  "extended": false,
2506
- "name": "Kerberos 5 AS-REQ Pre-Auth etype 18"
2670
+ "name": "Kerberos 5 AS-REQ Pre-Auth etype 18",
2671
+ "samples": [
2672
+ "$krb5pa$18$hashcat$HASHCATDOMAIN.COM$96c289009b05181bfd32062962740b1b1ce5f74eb12e0266cde74e81094661addab08c0c1a178882c91a0ed89ae4e0e68d2820b9cce69770",
2673
+ "$krb5pa$18$user1$EXAMPLE.COM$$2a0e68168d1eac344da458599c3a2b33ff326a061449fcbc242b212504e484d45903c6a16e2d593912f56c93883bf697b325193d62a8be9c",
2674
+ "$krb5pa$18$aduser$AD.EXAMPLE.COM$$64dfeee04be2b2e0423814e0df4d0f960885aca4efffe6cb5694c4d34690406071c4968abd2c153ee42d258c5e09a41269bbcd7799f478d3",
2675
+ "$krb5pa$18$aduser$AD.EXAMPLE.COM$AD.EXAMPLE.COMaduser$f94f755a8b4493d925094a4eb1cec630ac40411a14c9733a853516fe426637d9daefdedc0567e2bb5a83d4f89a0ad1a4b178662b6106c0ff"
2676
+ ]
2677
+ }
2678
+ ]
2679
+ },
2680
+ {
2681
+ "regex": "^\\$krb5db\\$17\\$[^$]{1,512}\\$[^$]{1,512}(?:\\$[^$]*)?\\$[a-f0-9]{32}$",
2682
+ "modes": [
2683
+ {
2684
+ "john": null,
2685
+ "hashcat": 28800,
2686
+ "extended": false,
2687
+ "name": "Kerberos 5 DB etype 17",
2688
+ "samples": [
2689
+ "$krb5db$17$test$TEST.LOCAL$1c41586d6c060071e08186ee214e725e"
2690
+ ]
2691
+ }
2692
+ ]
2693
+ },
2694
+ {
2695
+ "regex": "^\\$krb17\\$[^$]{1,512}\\$[a-f0-9]{32}$",
2696
+ "modes": [
2697
+ {
2698
+ "john": "krb5-17",
2699
+ "hashcat": null,
2700
+ "extended": false,
2701
+ "name": "Kerberos 5 DB etype 17",
2702
+ "samples": [
2703
+ "$krb17$TEST.LOCALtest$6fb8b78e20ad3df6591cabb9cacf4594",
2704
+ "$krb17$TEST.LOCALtest$b7dc1cf2b403cf5f27ea9b2ea526dc5a"
2705
+ ]
2706
+ }
2707
+ ]
2708
+ },
2709
+ {
2710
+ "regex": "^\\$krb5db\\$18\\$[^$]{1,512}\\$[^$]{1,512}(?:\\$[^$]{1,512})?\\$[a-f0-9]{64}$",
2711
+ "modes": [
2712
+ {
2713
+ "john": null,
2714
+ "hashcat": 28900,
2715
+ "extended": false,
2716
+ "name": "Kerberos 5 DB etype 18",
2717
+ "samples": [
2718
+ "$krb5db$18$test$TEST.LOCAL$266b5a53a6d663c3f69174f3309acada8e467c097c7973699f86286a6cf1a6c7"
2719
+ ]
2720
+ }
2721
+ ]
2722
+ },
2723
+ {
2724
+ "regex": "^\\$krb18\\$[^$]{1,512}\\$[a-f0-9]{64}$",
2725
+ "modes": [
2726
+ {
2727
+ "john": "krb5-18",
2728
+ "hashcat": null,
2729
+ "extended": false,
2730
+ "name": "Kerberos 5 DB etype 18",
2731
+ "samples": [
2732
+ "$krb18$OLYMPE.OLtest$214bb89cf5b8330112d52189ab05d9d05b03b5a961fe6d06203335ad5f339b26"
2733
+ ]
2734
+ }
2735
+ ]
2736
+ },
2737
+ {
2738
+ "regex": "^\\$krb3\\$[^$]{1,512}\\$[a-f0-9]{16}$",
2739
+ "modes": [
2740
+ {
2741
+ "john": "krb5-3",
2742
+ "hashcat": null,
2743
+ "extended": false,
2744
+ "name": "Kerberos 5 DB etype 3",
2745
+ "samples": [
2746
+ "$krb3$INTERNAL.CORP1user3$eafdc79b7620584a",
2747
+ "$krb3$EXAMPLE.COMlulu$25bfb33132c11346",
2748
+ "$krb3$EXAMPLE.COMluluaaaa$97076894ae025738",
2749
+ "$krb3$EXAMPLE.COMluluaaaa$79850e6e9e5e92d0"
2750
+ ]
2507
2751
  }
2508
2752
  ]
2509
2753
  },
2510
2754
  {
2511
- "regex": "^\\$scram\\$[0-9]+\\$[a-z0-9\\/.]{16}\\$sha-1=[a-z0-9\\/.]{27},sha-256=[a-z0-9\\/.]{43},sha-512=[a-z0-9\\/.]{86}$",
2755
+ "regex": "^\\$scram\\$\\d+\\$[a-z0-9\\/.]{16}\\$sha-1=[a-z0-9\\/.]{27},sha-256=[a-z0-9\\/.]{43},sha-512=[a-z0-9\\/.]{86}$",
2512
2756
  "modes": [
2513
2757
  {
2514
2758
  "john": null,
@@ -2597,7 +2841,10 @@
2597
2841
  "john": "wbb3",
2598
2842
  "hashcat": 8400,
2599
2843
  "extended": false,
2600
- "name": "Woltlab Burning Board 3.x"
2844
+ "name": "Woltlab Burning Board 3.x",
2845
+ "samples": [
2846
+ "8084df19a6dc81e2597d051c3d8b400787e2d5a9:6755045315424852185115352765375338838643"
2847
+ ]
2601
2848
  }
2602
2849
  ]
2603
2850
  },
@@ -2613,30 +2860,86 @@
2613
2860
  ]
2614
2861
  },
2615
2862
  {
2616
- "regex": "^[a-f0-9]{32}:[0-9]+:[a-z0-9_.+\\-]+@[a-z0-9\\-]+\\.[a-z0-9\\-.]+$",
2863
+ "regex": "^[a-f0-9]{32,64}:\\d{1,6}:[a-z0-9_.+\\-]+@[a-z0-9\\-]+\\.[a-z0-9\\-.]+(?::[a-f0-9]{32})?$",
2617
2864
  "modes": [
2618
2865
  {
2619
2866
  "john": null,
2620
2867
  "hashcat": 6800,
2621
2868
  "extended": false,
2622
- "name": "Lastpass"
2869
+ "name": "LastPass / LastPass sniffed",
2870
+ "samples": [
2871
+ "a2d1f7b7a1862d0d4a52644e72d59df5:500:lp@trash-mail.com",
2872
+ "02eb97e869e0ddc7dc760fc633b4b54d:100100:pmix@trash-mail.com:9b071db7b8e265d4cadd3eb65ac0864a"
2873
+ ]
2623
2874
  }
2624
2875
  ]
2625
2876
  },
2626
2877
  {
2627
- "regex": "^[a-z0-9\\/.]{16}([:$].{1,})?$",
2878
+ "regex": "^\\$lp\\$[a-z0-9_.+\\-@]+\\$(?:\\d{1,4}\\$)?[a-f0-9]{32}$",
2628
2879
  "modes": [
2629
2880
  {
2630
- "john": "asa-md5",
2631
- "hashcat": 2410,
2881
+ "john": "lp",
2882
+ "hashcat": null,
2632
2883
  "extended": false,
2633
- "name": "Cisco-ASA(MD5)"
2634
- },
2635
- {
2636
- "john": "dynamic_20",
2637
- "hashcat": 2410,
2638
- "extended": true,
2639
- "name": "md5($pass.$salt)"
2884
+ "name": "LastPass offline",
2885
+ "samples": [
2886
+ "$lp$hackme@mailinator.com$6f5d8cec3615fc9ac7ba2e0569bce4f5",
2887
+ "$lp$3$27c8641d7f5ab5985569d9d0b499b467",
2888
+ "$lp$ninechars$d09153108a89347da5c97a4a18f91345",
2889
+ "$lp$lulu@mailinator.com$5000$d8d1e25680b3d9f73489d5769ac3a9c1"
2890
+ ]
2891
+ }
2892
+ ]
2893
+ },
2894
+ {
2895
+ "regex": "^\\$lpcli\\$\\d\\$[a-z0-9_.+\\-@]+\\$\\d{1,4}\\$[a-f0-9]{32}\\$[a-f0-9]{32}$",
2896
+ "modes": [
2897
+ {
2898
+ "john": "lpcli",
2899
+ "hashcat": null,
2900
+ "extended": false,
2901
+ "name": "LastPass CLI",
2902
+ "samples": [
2903
+ "$lpcli$0$lulu@mailinator.com$1234$3fec6cd2d8c049cbafe9fa6a9343f42f$f21d8e60ad22db53033e431700fb5e0c",
2904
+ "$lpcli$0$lulu@mailinator.com$1234$fbd97e7e14713363c5567bdc106bb1f4$75ebb9460f9852ccb2382029fe333867",
2905
+ "$lpcli$0$lulu@mailinator.com$1$9611651d6cbe6ab1dfb035d3874bd803$68bbe1480410c03cc053662658884f2b"
2906
+ ]
2907
+ }
2908
+ ]
2909
+ },
2910
+ {
2911
+ "regex": "^\\$lastpass\\$[a-z0-9_.+\\-@]+\\$\\d{1,4}\\$[+\\/a-z0-9=]+$",
2912
+ "modes": [
2913
+ {
2914
+ "john": "lastpass",
2915
+ "hashcat": null,
2916
+ "extended": false,
2917
+ "name": "LastPass sniffed",
2918
+ "samples": [
2919
+ "$lastpass$hackme@mailinator.com$500$i+hJCwPOj5eQN4tvHcMguoejx4VEmiqzOXOdWIsZKlk=",
2920
+ "$lastpass$pass_gen@generated.com$500$vgC0g8BxOi4MerkKfZYFFSAJi8riD7k0ROLpBEA3VJk=",
2921
+ "$lastpass$1@short.com$500$2W/GA8d2N+Z4HGvRYs2R7w=="
2922
+ ]
2923
+ }
2924
+ ]
2925
+ },
2926
+ {
2927
+ "regex": "^[a-z0-9\\/.]{16}([:$].+)?$",
2928
+ "modes": [
2929
+ {
2930
+ "john": "asa-md5",
2931
+ "hashcat": 2410,
2932
+ "extended": false,
2933
+ "name": "Cisco-ASA (MD5)",
2934
+ "samples": [
2935
+ "02dMBMYkTdC5Ziyp:36"
2936
+ ]
2937
+ },
2938
+ {
2939
+ "john": "dynamic_20",
2940
+ "hashcat": 2410,
2941
+ "extended": true,
2942
+ "name": "md5($pass.$salt)"
2640
2943
  }
2641
2944
  ]
2642
2945
  },
@@ -2652,13 +2955,16 @@
2652
2955
  ]
2653
2956
  },
2654
2957
  {
2655
- "regex": "^[a-z0-9]{32}(:([a-z0-9\\-]+\\.)?[a-z0-9\\-.]+\\.[a-z]{2,7}:.+:[0-9]+)?$",
2958
+ "regex": "^[a-z0-9]{32}(:([a-z0-9\\-]+\\.)?[a-z0-9\\-.]+\\.[a-z]{2,7}:.+:\\d+)?$",
2656
2959
  "modes": [
2657
2960
  {
2658
2961
  "john": null,
2659
2962
  "hashcat": 8300,
2660
2963
  "extended": false,
2661
- "name": "DNSSEC(NSEC3)"
2964
+ "name": "DNSSEC (NSEC3)",
2965
+ "samples": [
2966
+ "7b5n74kq8r441blc2c5qbbat19baj79r:.lvdsiqfj.net:33164473:1"
2967
+ ]
2662
2968
  }
2663
2969
  ]
2664
2970
  },
@@ -2669,7 +2975,10 @@
2669
2975
  "john": "racf",
2670
2976
  "hashcat": 8500,
2671
2977
  "extended": false,
2672
- "name": "RACF"
2978
+ "name": "RACF",
2979
+ "samples": [
2980
+ "$racf$*USER*FC2577C6EBE6265B"
2981
+ ]
2673
2982
  }
2674
2983
  ]
2675
2984
  },
@@ -2680,12 +2989,15 @@
2680
2989
  "john": null,
2681
2990
  "hashcat": null,
2682
2991
  "extended": false,
2683
- "name": "NTHash(FreeBSD Variant)"
2992
+ "name": "NTHash (FreeBSD Variant)",
2993
+ "samples": [
2994
+ "$3$$8846f7eaee8fb117ad06bdd830b7586c"
2995
+ ]
2684
2996
  }
2685
2997
  ]
2686
2998
  },
2687
2999
  {
2688
- "regex": "^\\$sha1\\$[0-9]+\\$[a-z0-9\\/.]{0,64}\\$[a-z0-9\\/.]{28}$",
3000
+ "regex": "^\\$sha1\\$\\d+\\$[a-z0-9\\/.]{0,64}\\$[a-z0-9\\/.]{28}$",
2689
3001
  "modes": [
2690
3002
  {
2691
3003
  "john": "sha1crypt",
@@ -2694,7 +3006,8 @@
2694
3006
  "name": "SHA-1 Crypt (Juniper/NetBSD)",
2695
3007
  "samples": [
2696
3008
  "$sha1$20000$75552156$HhYMDdaEHiK3eMIzTldOFPnw.s2Q",
2697
- "$sha1$64000$wnUR8T1U$azjCegpOIk0FjE61qzGWhdkpuMRL"
3009
+ "$sha1$64000$wnUR8T1U$azjCegpOIk0FjE61qzGWhdkpuMRL",
3010
+ "$sha1$40000$jtNX3nZ2$hBNaIXkt4wBI2o5rsi8KejSjNqIq"
2698
3011
  ]
2699
3012
  }
2700
3013
  ]
@@ -2733,7 +3046,7 @@
2733
3046
  ]
2734
3047
  },
2735
3048
  {
2736
- "regex": "^\\$pbkdf2(-hmac)?(-sha1)?\\$([0-9]{1,6}\\$[a-z0-9\\/.]+\\$[a-z0-9\\/.]+|[0-9]{1,6}\\.[a-f0-9]+\\.[a-f0-9]{40})$",
3049
+ "regex": "^\\$pbkdf2(-hmac)?(-sha1)?\\$(\\d{1,6}\\$[a-z0-9\\/.]+\\$[a-z0-9\\/.]+|\\d{1,6}\\.[a-f0-9]+\\.[a-f0-9]{40})$",
2737
3050
  "modes": [
2738
3051
  {
2739
3052
  "john": "pbkdf2-hmac-sha1",
@@ -2751,7 +3064,7 @@
2751
3064
  ]
2752
3065
  },
2753
3066
  {
2754
- "regex": "^\\$pbkdf2-sha256\\$[0-9]{1,6}\\$[a-z0-9\\/.]+\\$[a-z0-9\\/.]+$",
3067
+ "regex": "^\\$pbkdf2-sha256\\$\\d{1,6}\\$[a-z0-9\\/.]+\\$[a-z0-9\\/.]+$",
2755
3068
  "modes": [
2756
3069
  {
2757
3070
  "john": "pbkdf2-hmac-sha256",
@@ -2768,7 +3081,7 @@
2768
3081
  ]
2769
3082
  },
2770
3083
  {
2771
- "regex": "^\\$pbkdf2-sha512\\$[0-9]+\\$[a-z0-9\\/.]+\\$[a-z0-9\\/.]{86}$",
3084
+ "regex": "^\\$pbkdf2-sha512\\$\\d+\\$[a-z0-9\\/.]+\\$[a-z0-9\\/.]{86}$",
2772
3085
  "modes": [
2773
3086
  {
2774
3087
  "john": null,
@@ -2779,7 +3092,7 @@
2779
3092
  ]
2780
3093
  },
2781
3094
  {
2782
- "regex": "^\\$p5k2\\$[0-9]+\\$[a-z0-9\\/+=\\-]+\\$[a-z0-9\\/+\\-]{27}=$",
3095
+ "regex": "^\\$p5k2\\$\\d+\\$[a-z0-9\\/+=\\-]+\\$[a-z0-9\\/+\\-]{27}=$",
2783
3096
  "modes": [
2784
3097
  {
2785
3098
  "john": null,
@@ -2790,7 +3103,7 @@
2790
3103
  ]
2791
3104
  },
2792
3105
  {
2793
- "regex": "^\\$p5k2\\$[0-9]+\\$[a-z0-9\\/.]+\\$[a-z0-9\\/.]{32}$",
3106
+ "regex": "^\\$p5k2\\$\\d+\\$[a-z0-9\\/.]+\\$[a-z0-9\\/.]{32}$",
2794
3107
  "modes": [
2795
3108
  {
2796
3109
  "john": null,
@@ -2801,7 +3114,7 @@
2801
3114
  ]
2802
3115
  },
2803
3116
  {
2804
- "regex": "^{FSHP[0123]\\|[0-9]+\\|[0-9]+}[a-z0-9\\/+=]+$",
3117
+ "regex": "^{FSHP[0123]\\|\\d+\\|\\d+}[a-z0-9\\/+=]+$",
2805
3118
  "modes": [
2806
3119
  {
2807
3120
  "john": null,
@@ -2823,7 +3136,7 @@
2823
3136
  ]
2824
3137
  },
2825
3138
  {
2826
- "regex": "^[0-9]{4}:[a-f0-9]{16}:[a-f0-9]{2080}$",
3139
+ "regex": "^\\d{4}:[a-f0-9]{16}:[a-f0-9]{2080}$",
2827
3140
  "modes": [
2828
3141
  {
2829
3142
  "john": null,
@@ -2834,7 +3147,7 @@
2834
3147
  ]
2835
3148
  },
2836
3149
  {
2837
- "regex": "^[a-f0-9]{64}:[a-f0-9]{32}:[0-9]{5}:[a-f0-9]{608}$",
3150
+ "regex": "^[a-f0-9]{64}:[a-f0-9]{32}:\\d{5}:[a-f0-9]{608}$",
2838
3151
  "modes": [
2839
3152
  {
2840
3153
  "john": null,
@@ -2889,7 +3202,7 @@
2889
3202
  ]
2890
3203
  },
2891
3204
  {
2892
- "regex": "^(\\$django\\$\\*1\\*)?pbkdf2_sha256\\$[0-9]+\\$[a-z0-9]+\\$[a-z0-9\\/+=]{44}$",
3205
+ "regex": "^(\\$django\\$\\*1\\*)?pbkdf2_sha256\\$\\d+\\$[a-z0-9]+\\$[a-z0-9\\/+=]{44}$",
2893
3206
  "modes": [
2894
3207
  {
2895
3208
  "john": "django",
@@ -2900,7 +3213,7 @@
2900
3213
  ]
2901
3214
  },
2902
3215
  {
2903
- "regex": "^pbkdf2_sha1\\$[0-9]+\\$[a-z0-9]+\\$[a-z0-9\\/+=]{28}$",
3216
+ "regex": "^pbkdf2_sha1\\$\\d+\\$[a-z0-9]+\\$[a-z0-9\\/+=]{28}$",
2904
3217
  "modes": [
2905
3218
  {
2906
3219
  "john": null,
@@ -2911,7 +3224,7 @@
2911
3224
  ]
2912
3225
  },
2913
3226
  {
2914
- "regex": "^bcrypt(\\$2[axy]|\\$2)\\$[0-9]{2}\\$[a-z0-9\\/.]{53}$",
3227
+ "regex": "^bcrypt(\\$2[axy]|\\$2)\\$\\d{2}\\$[a-z0-9\\/.]{53}$",
2915
3228
  "modes": [
2916
3229
  {
2917
3230
  "john": null,
@@ -2944,35 +3257,60 @@
2944
3257
  ]
2945
3258
  },
2946
3259
  {
2947
- "regex": "^md5[a-f0-9]{32}$",
3260
+ "regex": "^\\([a-z0-9\\/+]{49}\\)$",
2948
3261
  "modes": [
2949
3262
  {
2950
3263
  "john": null,
2951
- "hashcat": null,
3264
+ "hashcat": 9100,
2952
3265
  "extended": false,
2953
- "name": "PostgreSQL MD5"
3266
+ "name": "Lotus Notes/Domino 8"
2954
3267
  }
2955
3268
  ]
2956
3269
  },
2957
3270
  {
2958
- "regex": "^\\([a-z0-9\\/+]{49}\\)$",
3271
+ "regex": "^SCRYPT:\\d+:\\d{1}:\\d{1}:[a-z0-9:\\/+=]+$",
2959
3272
  "modes": [
2960
3273
  {
2961
3274
  "john": null,
2962
- "hashcat": 9100,
3275
+ "hashcat": 8900,
2963
3276
  "extended": false,
2964
- "name": "Lotus Notes/Domino 8"
3277
+ "name": "scrypt",
3278
+ "samples": [
3279
+ "SCRYPT:1024:1:1:MDIwMzMwNTQwNDQyNQ==:5FW+zWivLxgCWj7qLiQbeC8zaNQ+qdO0NUinvqyFcfo="
3280
+ ]
2965
3281
  }
2966
3282
  ]
2967
3283
  },
2968
3284
  {
2969
- "regex": "^SCRYPT:[0-9]{1,}:[0-9]{1}:[0-9]{1}:[a-z0-9:\\/+=]{1,}$",
3285
+ "regex": "^\\$7\\$[.\\/\\\\a-z0-9]{11,97}\\$[.\\/a-z0-9]{43}$",
2970
3286
  "modes": [
2971
3287
  {
2972
- "john": null,
2973
- "hashcat": 8900,
3288
+ "john": "scrypt",
3289
+ "hashcat": null,
3290
+ "extended": false,
3291
+ "name": "scrypt Crypt",
3292
+ "samples": [
3293
+ "$7$C6..../....SodiumChloride$kBGj9fHznVYFQMEn/qDCfrDevf9YDtcDdKvEqHJLV8D",
3294
+ "$7$C6..../....\\x01\\x09\\x0a\\x0d\\x20\\x7f\\x80\\xff$b7cKqzsQk7txdc9As1WZBHjUPNWQWJW8A.UUUTA5eD1",
3295
+ "$7$2/..../....$rNxJWVHNv/mCNcgE/f6/L4zO6Fos5c2uTzhyzoisI62",
3296
+ "$7$86....E....NaCl$xffjQo7Bm/.SKRS4B2EuynbOLjAmXU5AbDbRXhoBl64"
3297
+ ]
3298
+ }
3299
+ ]
3300
+ },
3301
+ {
3302
+ "regex": "^\\$ScryptKDF\\.pm\\$\\d{1,5}\\*\\d\\*\\d\\*[a-z0-9:\\/+=]+\\*[a-z0-9:\\/+=]+$",
3303
+ "modes": [
3304
+ {
3305
+ "john": "scrypt",
3306
+ "hashcat": null,
2974
3307
  "extended": false,
2975
- "name": "scrypt"
3308
+ "name": "ScryptKDF",
3309
+ "samples": [
3310
+ "$ScryptKDF.pm$16384*8*1*bjZkemVmZ3lWVi42*cmBflTPsqGIbg9ZIJRTQdbic8OCUH+904TFmNPBkuEA=",
3311
+ "$ScryptKDF.pm$16384*8*1*VlVYUzBhQmlNbk5J*bJhm6VUS2UQRwMRqLTvSsljDeq193Ge4aqQDtb94bKg=",
3312
+ "$ScryptKDF.pm$16384*8*1*VHRuaXZOZ05INWJs*JjrOzA8pdPhLvLh8sY64fLLaAjFUwYCXMmS16NXcn0BhlHpZJ3J2jcozCDM7t+sfjkgQ894R+f+ldVWM5atlkA=="
3313
+ ]
2976
3314
  }
2977
3315
  ]
2978
3316
  },
@@ -2980,10 +3318,16 @@
2980
3318
  "regex": "^\\$8\\$[a-z0-9\\/.]{14}\\$[a-z0-9\\/.]{43}$",
2981
3319
  "modes": [
2982
3320
  {
2983
- "john": "cisco8",
3321
+ "john": "pbkdf2-hmac-sha256",
2984
3322
  "hashcat": 9200,
2985
3323
  "extended": false,
2986
- "name": "Cisco Type 8"
3324
+ "name": "Cisco Type 8 (PBKDF2-SHA256)",
3325
+ "samples": [
3326
+ "$8$TnGX/fE4KGHOVU$pEhnEvxrvaynpi8j4f.EMHr6M.FzU8xnZnBr/tJdFWk",
3327
+ "$8$dsYGNam3K1SIJO$7nv/35M/qr6t.dVc7UY9zrJDWRVqncHub1PE9UlMQFs",
3328
+ "$8$6NHinlEjiwvb5J$RjC.H.ydVb34wDLqJvfjyG1ubxYKpfXqv.Ry9mtrNBY",
3329
+ "$8$lGO8juTOQLPCHw$cBv2WEaFCLUA24Z48CKUGixIywyGFP78r/slQcMXr3M"
3330
+ ]
2987
3331
  }
2988
3332
  ]
2989
3333
  },
@@ -2991,15 +3335,21 @@
2991
3335
  "regex": "^\\$9\\$[a-z0-9\\/.]{14}\\$[a-z0-9\\/.]{43}$",
2992
3336
  "modes": [
2993
3337
  {
2994
- "john": "cisco9",
3338
+ "john": "scrypt",
2995
3339
  "hashcat": 9300,
2996
3340
  "extended": false,
2997
- "name": "Cisco Type 9"
3341
+ "name": "Cisco Type 9 (scrypt)",
3342
+ "samples": [
3343
+ "$9$2MJBozw/9R3UsU$2lFhcKvpghcyw8deP25GOfyZaagyUOGBymkryvOdfo6",
3344
+ "$9$nhEmQVczB7dqsO$X.HsgL6x1il0RxkOSSvyQYwucySCt7qFm4v7pqCxkKM",
3345
+ "$9$cvWdfQlRRDKq/U$VFTPha5VHTCbSgSUAo.nPoh50ZiXOw1zmljEjXkaq1g",
3346
+ "$9$X9fA8mypebLFVj$Klp6X9hxNhkns0kwUIinvLRSIgWOvCwDhVTZqjsycyU"
3347
+ ]
2998
3348
  }
2999
3349
  ]
3000
3350
  },
3001
3351
  {
3002
- "regex": "^\\$office\\$\\*2007\\*[0-9]{2}\\*[0-9]{3}\\*[0-9]{2}\\*[a-z0-9]{32}\\*[a-z0-9]{32}\\*[a-z0-9]{40}$",
3352
+ "regex": "^\\$office\\$\\*2007\\*\\d{2}\\*\\d{3}\\*\\d{2}\\*[a-z0-9]{32}\\*[a-z0-9]{32}\\*[a-z0-9]{40}$",
3003
3353
  "modes": [
3004
3354
  {
3005
3355
  "john": "office",
@@ -3010,7 +3360,7 @@
3010
3360
  ]
3011
3361
  },
3012
3362
  {
3013
- "regex": "^\\$office\\$\\*2010\\*[0-9]{6}\\*[0-9]{3}\\*[0-9]{2}\\*[a-z0-9]{32}\\*[a-z0-9]{32}\\*[a-z0-9]{64}$",
3363
+ "regex": "^\\$office\\$\\*2010\\*\\d{6}\\*\\d{3}\\*\\d{2}\\*[a-z0-9]{32}\\*[a-z0-9]{32}\\*[a-z0-9]{64}$",
3014
3364
  "modes": [
3015
3365
  {
3016
3366
  "john": "office",
@@ -3021,7 +3371,7 @@
3021
3371
  ]
3022
3372
  },
3023
3373
  {
3024
- "regex": "^\\$office\\$\\*2013\\*[0-9]{6}\\*[0-9]{3}\\*[0-9]{2}\\*[a-z0-9]{32}\\*[a-z0-9]{32}\\*[a-z0-9]{64}$",
3374
+ "regex": "^\\$office\\$\\*2013\\*\\d{6}\\*\\d{3}\\*\\d{2}\\*[a-z0-9]{32}\\*[a-z0-9]{32}\\*[a-z0-9]{64}$",
3025
3375
  "modes": [
3026
3376
  {
3027
3377
  "john": "office",
@@ -3032,7 +3382,7 @@
3032
3382
  ]
3033
3383
  },
3034
3384
  {
3035
- "regex": "^\\$office\\$2016\\$[0-9]\\$[0-9]{6}\\$[^$]{24}\\$[^$]{88}$",
3385
+ "regex": "^\\$office\\$2016\\$\\d\\$\\d{6}\\$[^$]{24}\\$[^$]{88}$",
3036
3386
  "modes": [
3037
3387
  {
3038
3388
  "john": null,
@@ -3046,7 +3396,7 @@
3046
3396
  ]
3047
3397
  },
3048
3398
  {
3049
- "regex": "^\\$fde\\$[0-9]{2}\\$[a-f0-9]{32}\\$[0-9]{2}\\$[a-f0-9]{32}\\$[a-f0-9]{3072}$",
3399
+ "regex": "^\\$fde\\$\\d{2}\\$[a-f0-9]{32}\\$\\d{2}\\$[a-f0-9]{32}\\$[a-f0-9]{3072}$",
3050
3400
  "modes": [
3051
3401
  {
3052
3402
  "john": "fde",
@@ -3109,12 +3459,15 @@
3109
3459
  "john": "radmin",
3110
3460
  "hashcat": 9900,
3111
3461
  "extended": false,
3112
- "name": "RAdmin v2.x"
3462
+ "name": "RAdmin v2.x",
3463
+ "samples": [
3464
+ "22527bee5c29ce95373c4e0f359f079b"
3465
+ ]
3113
3466
  }
3114
3467
  ]
3115
3468
  },
3116
3469
  {
3117
- "regex": "^{x-issha,\\s[0-9]{4}}[a-z0-9\\/+=]+$",
3470
+ "regex": "^{x-issha,\\s\\d{4}}[a-z0-9\\/+=]+$",
3118
3471
  "modes": [
3119
3472
  {
3120
3473
  "john": "saph",
@@ -3142,7 +3495,10 @@
3142
3495
  "john": null,
3143
3496
  "hashcat": 10100,
3144
3497
  "extended": false,
3145
- "name": "SipHash"
3498
+ "name": "SipHash",
3499
+ "samples": [
3500
+ "ad61d78c06037cd9:2:4:81533218127174468417660201434054"
3501
+ ]
3146
3502
  }
3147
3503
  ]
3148
3504
  },
@@ -3153,7 +3509,13 @@
3153
3509
  "john": null,
3154
3510
  "hashcat": null,
3155
3511
  "extended": true,
3156
- "name": "Cisco Type 7"
3512
+ "name": "Cisco Type 7 (XOR)",
3513
+ "samples": [
3514
+ "046E1803362E595C260E0B240619050A2D",
3515
+ "062B0A33",
3516
+ "095C4F1A0A1218000F",
3517
+ "0309540539022E58710D1C3A0713181F01"
3518
+ ]
3157
3519
  }
3158
3520
  ]
3159
3521
  },
@@ -3172,15 +3534,21 @@
3172
3534
  "regex": "^(\\$cisco4\\$)?[a-z0-9\\/.]{43}$",
3173
3535
  "modes": [
3174
3536
  {
3175
- "john": "cisco4",
3537
+ "john": "raw-sha256",
3176
3538
  "hashcat": null,
3177
3539
  "extended": false,
3178
- "name": "Cisco Type 4"
3540
+ "name": "Cisco Type 4 (Raw SHA256)",
3541
+ "samples": [
3542
+ "$cisco4$LcV6aBcc/53FoCJjXQMd7rBUDEpeevrK8V5jQVoJEhU",
3543
+ "$cisco4$OsOmQzwozC4ROs/CzpczJoShdCeW9lp7k/tGrPS5Kog",
3544
+ "$cisco4$d7kgbEk.P6mpKdduC66fUy1BF0MImo3eyJ9uI/JbMRk",
3545
+ "$cisco4$hUsuWZSE8dZERUBYNwRK8Aa8VxEGIHsuZFUCjNj2.Ac"
3546
+ ]
3179
3547
  }
3180
3548
  ]
3181
3549
  },
3182
3550
  {
3183
- "regex": "^bcrypt_sha256\\$\\$(2[axy]|2)\\$[0-9]+\\$[a-z0-9\\/.]{53}$",
3551
+ "regex": "^bcrypt_sha256\\$\\$(2[axy]|2)\\$\\d+\\$[a-z0-9\\/.]{53}$",
3184
3552
  "modes": [
3185
3553
  {
3186
3554
  "john": null,
@@ -3191,18 +3559,24 @@
3191
3559
  ]
3192
3560
  },
3193
3561
  {
3194
- "regex": "^\\$postgres\\$.[^\\*]+[*:][a-f0-9]{1,32}[*:][a-f0-9]{32}$",
3562
+ "regex": "^\\$postgres?\\$(?:[^*]{0,32})?\\*[a-f0-9]{8}\\*[a-f0-9]{32}$",
3195
3563
  "modes": [
3196
3564
  {
3197
3565
  "john": "postgres",
3198
3566
  "hashcat": 11100,
3199
3567
  "extended": false,
3200
- "name": "PostgreSQL Challenge-Response Authentication (MD5)"
3568
+ "name": "PostgreSQL CRAM (MD5)",
3569
+ "samples": [
3570
+ "$postgres$postgres*74402844*4e7fabaaf34d780c4a5822d28ee1c83e",
3571
+ "$postgres$postgres*f063f05d*1d586cc8d137e5f1733f234d224393e8",
3572
+ "$postgre$postgres*684697c8*bf2a64f35feba7bf1b633d60393c1356",
3573
+ "$postgres$Twelve_chars*55393156*c01df9affa7573ef32ec143759f3e005"
3574
+ ]
3201
3575
  }
3202
3576
  ]
3203
3577
  },
3204
3578
  {
3205
- "regex": "^\\$siemens-s7\\$[0-9]{1}\\$[a-f0-9]{40}\\$[a-f0-9]{40}$",
3579
+ "regex": "^\\$siemens-s7\\$\\d{1}\\$[a-f0-9]{40}\\$[a-f0-9]{40}$",
3206
3580
  "modes": [
3207
3581
  {
3208
3582
  "john": "siemens-s7",
@@ -3224,7 +3598,7 @@
3224
3598
  ]
3225
3599
  },
3226
3600
  {
3227
- "regex": "^sha256[:$][0-9]+[:$][a-z0-9\\/+]+[:$][a-z0-9\\/+]{32,128}$",
3601
+ "regex": "^sha256[:$]\\d+[:$][a-z0-9\\/+]+[:$][a-z0-9\\/+]{32,128}$",
3228
3602
  "modes": [
3229
3603
  {
3230
3604
  "john": null,
@@ -3287,7 +3661,7 @@
3287
3661
  ]
3288
3662
  },
3289
3663
  {
3290
- "regex": "^\\$pdf\\$1\\*2\\*[0-9]{2}\\*[-0-9]{1,6}\\*[0-9]\\*[0-9]{2}\\*[a-f0-9]{32}\\*[0-9]{2}\\*[a-f0-9]{64}\\*[0-9]{2}\\*[a-f0-9]{64}$",
3664
+ "regex": "^\\$pdf\\$1\\*2\\*\\d{2}\\*[-0-9]{1,6}\\*\\d\\*\\d{2}\\*[a-f0-9]{32}\\*\\d{2}\\*[a-f0-9]{64}\\*\\d{2}\\*[a-f0-9]{64}$",
3291
3665
  "modes": [
3292
3666
  {
3293
3667
  "john": "pdf",
@@ -3304,7 +3678,7 @@
3304
3678
  ]
3305
3679
  },
3306
3680
  {
3307
- "regex": "^\\$pdf\\$1\\*2\\*[0-9]{2}\\*[-0-9]{1,6}\\*[0-9]\\*[0-9]{2}\\*[a-f0-9]{32}\\*[0-9]{2}\\*[a-f0-9]{64}\\*[0-9]{2}\\*[a-f0-9]{64}:[a-f0-9]{10}$",
3681
+ "regex": "^\\$pdf\\$1\\*2\\*\\d{2}\\*[-0-9]{1,6}\\*\\d\\*\\d{2}\\*[a-f0-9]{32}\\*\\d{2}\\*[a-f0-9]{64}\\*\\d{2}\\*[a-f0-9]{64}:[a-f0-9]{10}$",
3308
3682
  "modes": [
3309
3683
  {
3310
3684
  "john": "pdf",
@@ -3338,7 +3712,7 @@
3338
3712
  ]
3339
3713
  },
3340
3714
  {
3341
- "regex": "^\\$pdf\\$5\\*[5|6]\\*[0-9]{3}\\*[-0-9]{1,6}\\*[0-9]\\*[0-9]{1,4}\\*[a-f0-9]{0,1024}\\*[0-9]{1,4}\\*[a-f0-9]{0,1024}\\*[0-9]{1,4}\\*[a-f0-9]{0,1024}\\*[0-9]{1,4}\\*[a-f0-9]{0,1024}\\*[0-9]{1,4}\\*[a-f0-9]{0,1024}$",
3715
+ "regex": "^\\$pdf\\$5\\*[5|6]\\*\\d{3}\\*[-0-9]{1,6}\\*\\d\\*\\d{1,4}\\*[a-f0-9]{0,1024}\\*\\d{1,4}\\*[a-f0-9]{0,1024}\\*\\d{1,4}\\*[a-f0-9]{0,1024}\\*\\d{1,4}\\*[a-f0-9]{0,1024}\\*\\d{1,4}\\*[a-f0-9]{0,1024}$",
3342
3716
  "modes": [
3343
3717
  {
3344
3718
  "john": "pdf",
@@ -3355,7 +3729,7 @@
3355
3729
  ]
3356
3730
  },
3357
3731
  {
3358
- "regex": "^\\$bitcoin\\$[0-9]{2,4}\\$[a-f0-9$]{250,360}$",
3732
+ "regex": "^\\$bitcoin\\$\\d{2,4}\\$[a-f0-9$]{250,360}$",
3359
3733
  "modes": [
3360
3734
  {
3361
3735
  "john": "bitcoin",
@@ -3404,7 +3778,7 @@
3404
3778
  ]
3405
3779
  },
3406
3780
  {
3407
- "regex": "^\\$ab\\$[0-9]{1}\\*[0-9]{1}\\*[0-9]{1,6}\\*[a-f0-9]{128}\\*[a-f0-9]{128}\\*[a-f0-9]{32}\\*[a-f0-9]{192}$",
3781
+ "regex": "^\\$ab\\$\\d{1}\\*\\d{1}\\*\\d{1,6}\\*[a-f0-9]{128}\\*[a-f0-9]{128}\\*[a-f0-9]{32}\\*[a-f0-9]{192}$",
3408
3782
  "modes": [
3409
3783
  {
3410
3784
  "john": "AndroidBackup",
@@ -3415,18 +3789,24 @@
3415
3789
  ]
3416
3790
  },
3417
3791
  {
3418
- "regex": "^\\$zip2\\$\\*[0-9]{1}\\*[0-9]{1}\\*[0-9]{1}\\*[a-f0-9]{16,32}\\*[a-f0-9]{1,6}\\*[a-f0-9]{1,6}\\*[a-f0-9]{0,16384}\\*[a-f0-9]{20}\\*\\$\/zip2\\$$",
3792
+ "regex": "^\\$zip2\\$\\*\\d{1}\\*\\d{1}\\*\\d{1}\\*[a-f0-9]{16,32}\\*[a-f0-9]{1,6}\\*[a-f0-9]{1,6}\\*[a-f0-9]*\\*[a-f0-9]{20}\\*\\$\/zip2\\$$",
3419
3793
  "modes": [
3420
3794
  {
3421
3795
  "john": "zip",
3422
3796
  "hashcat": 13600,
3423
3797
  "extended": false,
3424
- "name": "WinZip"
3798
+ "name": "WinZip",
3799
+ "samples": [
3800
+ "$zip2$*0*1*0*0675369741458183*5dc5*0**36b85538918416712640*$/zip2$",
3801
+ "$zip2$*0*1*0*9ffba76344938a7d*cc41*210*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*bd2e946811c4c5b09694*$/zip2$",
3802
+ "$zip2$*0*2*0*c702895e204a15d8016cd436*7688*32*f1e0c797182c9231ebbdfb23111203131d9c949b45396f6ea233ac41c056f938a68869400bc25123bd61f8d7bd4930a6440c*3f229b45b30739ab4867*$/zip2$",
3803
+ "$zip2$*0*3*0*855f69693734c7be8c1093ea5bae6114*f035*210*c02aa1d42cc7623c0746979c6c2ce78e8492e9ab1d0954b76d328c52c4d555fbdc2af52822c7b6f4548fc5cca615cd0510f699d4b6007551c38b4183cafba7b073a5ba86745f0c3842896b87425d5247d3b09e0f9f701b50866e1636ef62ee20343ea6982222434fdaf2e52fe1c90f0c30cf2b4528b79abd2824e14869846c26614d9cbc156964d63041bfab66260821bedc151663adcb2c9ac8399d921ddac06c9a4cd8b442472409356cfe0655c9dbbec36b142611ad5604b68108be3321b2324d5783938e52e5c15ec4d8beb2b5010fad66d8cf6a490370ec86878ad2b393c5aa4523b95ae21f8dd5f0ae9f24581e94793a01246a4cc5a0f772e041b3a604ae334e43fe41d32058f857c227cee567254e9c760d472af416abedf8a87e67b309d30bc94d77ef6617b0867976a4b3824c0c1c4aa2b2668f9eb70c493d20d7fab69436c59e47db40f343d98a3b7503e07969d26afa92552d15009542bf2af9b47f2cfa0c2283883e99d0966e5165850663a2deed557fb8554a16f3a9cb04b9010c4b70576b18695dfea973aa4bc607069a1d90e890973825415b717c7bdf183937fa8a3aa985be1eadc8303f756ebd07f864082b775d7788ee8901bb212e69f01836d45db320ff1ea741fa8a3c13fa49ebc34418442e6bd8b1845c56d5c798767c92a503228148a6db44a08fc4a1c1d55eea73dbb2bd4f2ab09f00b043ee0df740681f5c5579ecbb1dbb7f7f3f67ffe2*c6b781ef18c5ccd83869*$/zip2$"
3804
+ ]
3425
3805
  }
3426
3806
  ]
3427
3807
  },
3428
3808
  {
3429
- "regex": "^\\$itunes_backup\\$\\*[0-9]{1,2}\\*[a-f0-9]{80}\\*[0-9]{1,6}\\*[a-f0-9]{40}\\*[0-9]{0,10}\\*[a-f0-9]{0,40}$",
3809
+ "regex": "^\\$itunes_backup\\$\\*\\d{1,2}\\*[a-f0-9]{80}\\*\\d{1,6}\\*[a-f0-9]{40}\\*\\d{0,10}\\*[a-f0-9]{0,40}$",
3430
3810
  "modes": [
3431
3811
  {
3432
3812
  "john": "itunes-backup",
@@ -3443,7 +3823,7 @@
3443
3823
  ]
3444
3824
  },
3445
3825
  {
3446
- "regex": "^\\$telegram\\$0\\*[a-f0-9]{64}\\*[0-9]{32}$",
3826
+ "regex": "^\\$telegram\\$0\\*[a-f0-9]{64}\\*\\d{32}$",
3447
3827
  "modes": [
3448
3828
  {
3449
3829
  "john": null,
@@ -3480,46 +3860,73 @@
3480
3860
  ]
3481
3861
  },
3482
3862
  {
3483
- "regex": "^\\$7z\\$[0-9]{1,3}\\$[0-9]{1,2}\\$[0-9]{1}\\$[^$]{0,64}\\$[0-9]{1,2}\\$[a-f0-9]{32}\\$[0-9]{1,10}\\$[0-9]{1,6}\\$[0-9]{1,6}\\$[a-f0-9]{2,}$",
3863
+ "regex": "^\\$7z\\$\\d{1,3}\\$\\d{1,2}\\$\\d{1}\\$[^$]{0,64}\\$\\d{1,2}\\$[a-f0-9]{32}\\$\\d{1,10}\\$\\d+\\$\\d+\\$[a-f0-9]{2,}(?:\\$\\d+\\$[a-f0-9]{0,10}(?:\\$[a-f0-9]{0,10})?)?$",
3484
3864
  "modes": [
3485
3865
  {
3486
3866
  "john": "7z",
3487
3867
  "hashcat": 11600,
3488
3868
  "extended": false,
3489
- "name": "7-zip"
3869
+ "name": "7-zip",
3870
+ "samples": [
3871
+ "$7z$0$14$0$$11$33363437353138333138300000000000$2365089182$16$12$d00321533b483f54a523f624a5f63269",
3872
+ "$7z$128$19$0$1122$8$a264c94f2cd72bec0000000000000000$725883103$112$108$64749c0963e20c74602379ca740165b9511204619859d1914819bc427b7e5f0f8fc67f53a0b53c114f6fcf4542a28e4a9d3914b4bc76baaa616d6a7ec9efc3f051cb330b682691193e6fa48159208329460c3025fb273232b82450645f2c12a9ea38b53a2331a1d0858813c8bf25a831",
3873
+ "$7z$1$19$0$1122$8$732b59fd26896e410000000000000000$2955316379$192$183$7544a3a7ec3eb99a33d80e57907e28fb8d0e140ec85123cf90740900429136dcc8ba0692b7e356a4d4e30062da546a66b92ec04c64c0e85b22e3c9a823abef0b57e8d7b8564760611442ecceb2ca723033766d9f7c848e5d234ca6c7863a2683f38d4605322320765938049305655f7fb0ad44d8781fec1bf7a2cb3843f269c6aca757e509577b5592b60b8977577c20aef4f990d2cb665de948004f16da9bf5507bf27b60805f16a9fcc4983208297d3affc4455ca44f9947221216f58c337f$232$5d00000100",
3874
+ "$7z$0$19$0$1122$8$d1f50227759415890000000000000000$1412385885$112$112$5e5b8b734adf52a64c541a5a5369023d7cccb78bd910c0092535dfb013a5df84ac692c5311d2e7bbdc580f5b867f7b5dd43830f7b4f37e41c7277e228fb92a6dd854a31646ad117654182253706dae0c069d3f4ce46121d52b6f20741a0bb39fc61113ce14d22f9184adafd6b5333fb1",
3875
+ "$7z$0$19$0$1122$8$d1f50227759415890000000000000000$1412385885$112$112$5e5b8b734adf52a64c541a5a5369023d7cccb78bd910c0092535dfb013a5df84ac692c5311d2e7bbdc580f5b867f7b5dd43830f7b4f37e41c7277e228fb92a6dd854a31646ad117654182253706dae0c069d3f4ce46121d52b6f20741a0bb39fc61113ce14d22f9184adafd6b5333fb1",
3876
+ "$7z$7$19$0$$8$8a9fc71fabb004c40000000000000000$1263025034$32$29$f84a72524bf817740f312a33e71d32bfa27f3652706d3e9590a118f70aca7757$24$",
3877
+ "$7z$129$19$0$$16$e69f6cbb583ea5fe2bd2fa577bf35d7c$1528797878$64$51$aef4bf018d0340cf086526f856a95526e4d587799f3c9adaa57bee6f7086e1eebae13ec751deee6ec6e343ef0a6171ba6b608433461235ef2fcbb8ead742d9ca$658$5d00100000$05",
3878
+ "$7z$1$19$0$1122$8$5fdbec1569ff58060000000000000000$2465353234$112$112$58ba7606aafc7918e3db7f6e0920f410f61f01e9c1533c40850992fee4c5e5215bc6b4ea145313d0ac065b8ec5b47d9fb895bb7f97609be46107d71e219544cfd24b52c2ecd65477f72c466915dcd71b80782b1ac46678ab7f437fd9f7b8e9d9fad54281d252de2a7ae386a65fc69eda$176$5d00000100",
3879
+ "$7z$2$19$0$$8$055c46385a7995490000000000000000$1263025034$32$28$1abc552f80372f1c1fea1bab9583599b844b25f0b06afacfbf322ef3d396126a$24$00",
3880
+ "$7z$128$19$0$1122$8$94fb9024fdd3e6c40000000000000000$3965424295$112$99$1127828817ff126bc45ff3c5225d9d0c5d00a52094909674e6ed3dc431546d9a672738f2fa07556340d604d2efd2901b9d2ac2c0686c25af9c520c137b16c50c54df8703fd0b0606fa721ad70aafb9c4e3b288ef49864e6034021969b4ce11e3b8e269a92090ccf593c6a0da06262116",
3881
+ "$7z$128$19$0$1122$8$e24e93c7a9ebde080000000000000000$718561925$112$99$580bf36388526c932c22e3227b51774b6963a9c5b96fc8e2ac70a4302864fa88f50e7c00d9a79e0bca0f07a236e51200dc23435b7680e6fa99b19d790ac093af615a972f8b232686c21279234a2582f9714c5a1a2d326084158eba3e81b4f8ad40784d84baa8ddbed19f1c6603156d2c",
3882
+ "$7z$128$19$0$1122$8$6fbd519735b131710000000000000000$1248418560$112$99$cc9e3c97073d7fd37f04d4e6983b386e3ac00f6292dedb0f566dccf22cdbbb55fee8669edade383e96aa0a740e2b42aa7fddbe5831cac10828c624ee03a1a256c6e777c3d714c55296cb815c509a252b9426fe8d4566c944efe3fac5ea94910e55a390aef2c729a031e832c406049810"
3883
+ ]
3490
3884
  }
3491
3885
  ]
3492
3886
  },
3493
3887
  {
3494
- "regex": "^\\$zip3\\$\\*[0-9]\\*[0-9]\\*128\\*[0-9]\\*[a-f0-9]{0,32}\\*[a-f0-9]{288}\\*[0-9]\\*[0-9]\\*[0-9]\\*[^\\s]{0,64}$",
3888
+ "regex": "^\\$zip3\\$\\*\\d\\*\\d\\*128\\*\\d\\*[a-f0-9]{0,32}\\*[a-f0-9]{288}\\*\\d\\*\\d\\*\\d\\*[^\\s]{0,64}$",
3495
3889
  "modes": [
3496
3890
  {
3497
3891
  "john": "securezip",
3498
3892
  "hashcat": 23001,
3499
3893
  "extended": false,
3500
- "name": "SecureZIP AES-128"
3894
+ "name": "SecureZIP AES-128",
3895
+ "samples": [
3896
+ "$zip3$*0*1*128*0*b4630625c92b6e7848f6fd86*df2f62611b3d02d2c7e05a48dad57c7d93b0bac1362261ab533807afb69db856676aa6e350320130b5cbf27c55a48c0f75739654ac312f1cf5c37149557fc88a92c7e3dde8d23edd2b839036e88092a708b7e818bf1b6de92f0efb5cce184cceb11db6b3ca0527d0bdf1f1137ee6660d9890928cd80542ac1f439515519147c14d965b5ba107c6227f971e3e115170bf*0*0*0*file.txt"
3897
+ ]
3501
3898
  }
3502
3899
  ]
3503
3900
  },
3504
3901
  {
3505
- "regex": "^\\$zip3\\$\\*[0-9]\\*[0-9]\\*192\\*[0-9]\\*[a-f0-9]{0,32}\\*[a-f0-9]{288}\\*[0-9]\\*[0-9]\\*[0-9]\\*[^\\s]{0,64}$",
3902
+ "regex": "^\\$zip3\\$\\*\\d\\*\\d\\*192\\*\\d\\*[a-f0-9]{0,32}\\*[a-f0-9]{288}\\*\\d\\*\\d\\*\\d\\*[^\\s]{0,64}$",
3506
3903
  "modes": [
3507
3904
  {
3508
3905
  "john": "securezip",
3509
3906
  "hashcat": 23002,
3510
3907
  "extended": false,
3511
- "name": "SecureZIP AES-192"
3908
+ "name": "SecureZIP AES-192",
3909
+ "samples": [
3910
+ "$zip3$*0*1*192*0*53ff2de8c280778e1e0ab997*603eb37dbab9ea109e2c405e37d8cae1ec89e1e0d0b9ce5bf55d1b571c343b6a3df35fe381c30249cb0738a9b956ba8e52dfc5552894296300446a771032776c811ff8a71d9bb3c4d6c37016c027e41fea2d157d5b0ce17804b1d7c1606b7c1121d37851bd705e001f2cd755bbf305966d129a17c1d48ff8e87cfa41f479090cd456527db7d1d43f9020ad8e73f851a5*0*0*0*file.txt",
3911
+ "$zip3$*0*1*192*0*edb47a990800000000000000*ba4288c0572f6043b21eba768ca8854fbec62c644f29cdc9652f037b3600dcc761dd07645cbaa1ebec1140e21e19a1cf4b43a82cb47e71e6ac82d3387581996e3fb201328dd5ad8a5be841e2cc9bee7e940da5b55b8a385df87d2431e24baf9a050ea550bd8ea00d2271f9e9d06b32222b8e5815a9db7e75655937c8437332b5b5b08e4c1800976b528322df6ba9653e*0*0*0*secret.txt",
3912
+ "$zip3$*0*1*192*0*a5763deec28f57f7c3218289*7c789a396b6935a2595da1045728aec01572ed0834bc0baa1ab43a186265be83135359ddf2e2f1a2c42f88879617922687131720e8238b006ba10f1caead1d6fbcabbacf32bc3aeda76747d26671f3a94f2037b330a3a790eb72564b05e064747e042c3112d42e739907fdded43c5c4fbf1a5f831cf77bb47f838c75d30a95215b6457a0d4ffc6d408da6be86a04c0d2*0*0*0*1"
3913
+ ]
3512
3914
  }
3513
3915
  ]
3514
3916
  },
3515
3917
  {
3516
- "regex": "^\\$zip3\\$\\*[0-9]\\*[0-9]\\*256\\*[0-9]\\*[a-f0-9]{0,32}\\*[a-f0-9]{288}\\*[0-9]\\*[0-9]\\*[0-9]\\*[^\\s]{0,64}$",
3918
+ "regex": "^\\$zip3\\$\\*\\d\\*\\d\\*256\\*\\d\\*[a-f0-9]{0,32}\\*[a-f0-9]{288}\\*\\d\\*\\d\\*\\d\\*[^\\s]{0,64}$",
3517
3919
  "modes": [
3518
3920
  {
3519
3921
  "john": "securezip",
3520
3922
  "hashcat": 23003,
3521
3923
  "extended": false,
3522
- "name": "SecureZIP AES-256"
3924
+ "name": "SecureZIP AES-256",
3925
+ "samples": [
3926
+ "$zip3$*0*1*256*0*39bff47df6152a0214d7a967*65ff418ffb3b1198cccdef0327c03750f328d6dd5287e00e4c467f33b92a6ef40a74bb11b5afad61a6c3c9b279d8bd7961e96af7b470c36fc186fd3cfe059107021c9dea0cf206692f727eeca71f18f5b0b6ee1f702b648bba01aa21c7b7f3f0f7d547838aad46868155a04214f22feef7b31d7a15e1abe6dba5e569c62ee640783bb4a54054c2c69e93ece9f1a2af9d*0*0*0*file.txt",
3927
+ "$zip3$*0*1*256*0*edb47a990800000000000000*32f884f9fbb54360920a50ec37cc0651fe7b0d9892de44eed17696186139a09c1530e0522abfd9777d18441739cdc7107fdfd252ecd0c8dbbba8181bd09436e9a6a918e385cbab26bee49cd0e3182e67df3fe8c3cdc9e58d6166a0f550969cc456b4a881524e6e66a14e30196b972e260c509fce918736465aea1d00bd5871876e263635be4700ef081117ed896e1504*0*0*0*secret.txt",
3928
+ "$zip3$*0*1*256*0*3f2f7f230e00000000000000*c75ed4a3ec89c22cda7aa3faa9a11cdcca9f5a2f45fe2844d963b2b76b8f98f43a907997557fc2b0eb8cb590b130c573ddfac3f5e70997d6a4539e10728317bdcd70eb74b82bafa2e4871488984db8522c4c4c8ff28fd2dd62c26be9d24246f80ddbdfa8d3b9e81b775dbdb84371446564df3effdbea48713dd223a2bb9afddffc9b8e60f41939f7577f9f30b0a28b78*0*0*0*code.txt"
3929
+ ]
3523
3930
  }
3524
3931
  ]
3525
3932
  },
@@ -3528,14 +3935,56 @@
3528
3935
  "modes": [
3529
3936
  {
3530
3937
  "john": "pkzip",
3531
- "hashcat": null,
3938
+ "hashcat": 17200,
3939
+ "extended": false,
3940
+ "name": "PKZIP (Compressed)",
3941
+ "samples": [
3942
+ "$pkzip2$1*1*2*0*e3*1c5*eda7a8de*0*28*8*e3*eda7*5096*a9fc1f4e951c8fb3031a6f903e5f4e3211c8fdc4671547bf77f6f682afbfcc7475d83898985621a7af9bccd1349d1976500a68c48f630b7f22d7a0955524d768e34868880461335417ddd149c65a917c0eb0a4bf7224e24a1e04cf4ace5eef52205f4452e66ded937db9545f843a68b1e84a2e933cc05fb36d3db90e6c5faf1bee2249fdd06a7307849902a8bb24ec7e8a0886a4544ca47979a9dfeefe034bdfc5bd593904cfe9a5309dd199d337d3183f307c2cb39622549a5b9b8b485b7949a4803f63f67ca427a0640ad3793a519b2476c52198488e3e2e04cac202d624fb7d13c2*$/pkzip2$",
3943
+ "$pkzip$1*1*2*0*e4*1c5*eda7a8de*0*4c*8*e4*eda7*194883130e4c7419bd735c53dec36f0c4b6de6daefea0f507d67ff7256a49b5ea93ccfd9b12f2ee99053ee0b1c9e1c2b88aeaeb6bd4e60094a1ea118785d4ded6dae94cade41199330f4f11b37cba7cda5d69529bdfa43e2700ba517bd2f7ff4a0d4b3d7f2559690ec044deb818c44844d6dd50adbebf02cec663ae8ebb0dde05d2abc31eaf6de36a2fc19fda65dd6a7e449f669d1f8c75e9daa0a3f7be8feaa43bf84762d6dbcc9424285a93cedfa3a75dadc11e969065f94fe3991bc23c9b09eaa5318aa29fa02e83b6bee26cafec0a5e189242ac9e562c7a5ed673f599cefcd398617*$/pkzip$",
3944
+ "$pkzip$1*2*2*0*e4*1c5*eda7a8de*0*47*8*e4*4bb6*436c9ffa4328870f6272349b591095e1b1126420c3041744650282bc4f575d0d4a5fc5fb34724e6a1cde742192387b9ed749ab5c72cd6bb0206f102e9216538f095fb773661cfde82c2e2a619332998124648bf4cd0da56279f0c297567d9b5d684125ee92920dd513fd18c27afba2a9633614f75d8f8b9a14095e3fafe8165330871287222e6681dd9c0f830cf5d464457b257d0900eed29107fad8af3ac4f87cf5af5183ff0516ccd9aeac1186006c8d11b18742dfb526aadbf2906772fbfe8fb18798967fd397a724d59f6fcd4c32736550986d227a6b447ef70585c049a1a4d7bf25*$/pkzip$"
3945
+ ]
3946
+ },
3947
+ {
3948
+ "john": "pkzip",
3949
+ "hashcat": 17210,
3950
+ "extended": false,
3951
+ "name": "PKZIP (Uncompressed)",
3952
+ "samples": [
3953
+ "$pkzip2$1*1*2*0*1d1*1c5*eda7a8de*0*28*0*1d1*eda7*5096*1dea673da43d9fc7e2be1a1f4f664269fceb6cb88723a97408ae1fe07f774d31d1442ea8485081e63f919851ca0b7588d5e3442317fff19fe547a4ef97492ed75417c427eea3c4e146e16c100a2f8b6abd7e5988dc967e5a0e51f641401605d673630ea52ebb04da4b388489901656532c9aa474ca090dbac7cf8a21428d57b42a71da5f3d83fed927361e5d385ca8e480a6d42dea5b4bf497d3a24e79fc7be37c8d1721238cbe9e1ea3ae1eb91fc02aabdf33070d718d5105b70b3d7f3d2c28b3edd822e89a5abc0c8fee117c7fbfbfd4b4c8e130977b75cb0b1da080bfe1c0859e6483c42f459c8069d45a76220e046e6c2a2417392fd87e4aa4a2559eaab3baf78a77a1b94d8c8af16a977b4bb45e3da211838ad044f209428dba82666bf3d54d4eed82c64a9b3444a44746b9e398d0516a2596d84243b4a1d7e87d9843f38e45b6be67fd980107f3ad7b8453d87300e6c51ac9f5e3f6c3b702654440c543b1d808b62f7a313a83b31a6faaeedc2620de7057cd0df80f70346fe2d4dccc318f0b5ed128bcf0643e63d754bb05f53afb2b0fa90b34b538b2ad3648209dff587df4fa18698e4fa6d858ad44aa55d2bba3b08dfdedd3e28b8b7caf394d5d9d95e452c2ab1c836b9d74538c2f0d24b9b577*$/pkzip2$"
3954
+ ]
3955
+ },
3956
+ {
3957
+ "john": "pkzip",
3958
+ "hashcat": 17220,
3959
+ "extended": false,
3960
+ "name": "PKZIP (Compressed Multi-File)",
3961
+ "samples": [
3962
+ "$pkzip2$3*1*1*0*8*24*a425*8827*d1730095cd829e245df04ebba6c52c0573d49d3bbeab6cb385b7fa8a28dcccd3098bfdd7*1*0*8*24*2a74*882a*51281ac874a60baedc375ca645888d29780e20d4076edd1e7154a99bde982152a736311f*2*0*e3*1c5*eda7a8de*0*29*8*e3*eda7*5096*1455781b59707f5151139e018bdcfeebfc89bc37e372883a7ec0670a5eafc622feb338f9b021b6601a674094898a91beac70e41e675f77702834ca6156111a1bf7361bc9f3715d77dfcdd626634c68354c6f2e5e0a7b1e1ce84a44e632d0f6e36019feeab92fb7eac9dda8df436e287aafece95d042059a1b27d533c5eab62c1c559af220dc432f2eb1a38a70f29e8f3cb5a207704274d1e305d7402180fd47e026522792f5113c52a116d5bb25b67074ffd6f4926b221555234aabddc69775335d592d5c7d22462b75de1259e8342a9ba71cb06223d13c7f51f13be2ad76352c3b8ed*$/pkzip2$",
3963
+ "$pkzip$3*1*1*0*8*24*4001*8986ec4d693e86c1a42c1bd2e6a994cb0b98507a6ec937fe0a41681c02fe52c61e3cc046*1*0*8*24*4003*a087adcda58de2e14e73db0043a4ff0ed3acc6a9aee3985d7cb81d5ddb32b840ea2057d9*2*0*e4*1c5*eda7a8de*0*4c*8*e4*eda7*89a792af804bf38e31fdccc8919a75ab6eb75d1fd6e7ecefa3c5b9c78c3d50d656f42e582af95882a38168a8493b2de5031bb8b39797463cb4769a955a2ba72abe48ee75b103f93ef9984ae740559b9bd84cf848d693d86acabd84749853675fb1a79edd747867ef52f4ee82435af332d43f0d0bb056c49384d740523fa75b86a6d29a138da90a8de31dbfa89f2f6b0550c2b47c43d907395904453ddf42a665b5f7662de170986f89d46d944b519e1db9d13d4254a6b0a5ac02b3cfdd468d7a4965e4af05699a920e6f3ddcedb57d956a6b2754835b14e174070ba6aec4882d581c9f30*$/pkzip$"
3964
+ ]
3965
+ },
3966
+ {
3967
+ "john": "pkzip",
3968
+ "hashcat": 17225,
3969
+ "extended": false,
3970
+ "name": "PKZIP (Mixed Multi-File)",
3971
+ "samples": [
3972
+ "$pkzip2$3*1*1*0*0*24*3e2c*3ef8*0619e9d17ff3f994065b99b1fa8aef41c056edf9fa4540919c109742dcb32f797fc90ce0*1*0*8*24*431a*3f26*18e2461c0dbad89bd9cc763067a020c89b5e16195b1ac5fa7fb13bd246d000b6833a2988*2*0*23*17*1e3c1a16*2e4*2f*0*23*1e3c*3f2d*54ea4dbc711026561485bbd191bf300ae24fa0997f3779b688cdad323985f8d3bb8b0c*$/pkzip2$"
3973
+ ]
3974
+ },
3975
+ {
3976
+ "john": "pkzip",
3977
+ "hashcat": 17230,
3532
3978
  "extended": false,
3533
- "name": "PKZIP"
3979
+ "name": "PKZIP (Mixed Multi-File Checksum-Only)",
3980
+ "samples": [
3981
+ "$pkzip2$8*1*1*0*8*24*a425*8827*3bd479d541019c2f32395046b8fbca7e1dca218b9b5414975be49942c3536298e9cc939e*1*0*8*24*2a74*882a*537af57c30fd9fd4b3eefa9ce55b6bff3bbfada237a7c1dace8ebf3bb0de107426211da3*1*0*8*24*2a74*882a*5f406b4858d3489fd4a6a6788798ac9b924b5d0ca8b8e5a6371739c9edcfd28c82f75316*1*0*8*24*2a74*882a*1843aca546b2ea68bd844d1e99d4f74d86417248eb48dd5e956270e42a331c18ea13f5ed*1*0*8*24*2a74*882a*aca3d16543bbfb2e5d2659f63802e0fa5b33e0a1f8ae47334019b4f0b6045d3d8eda3af1*1*0*8*24*2a74*882a*fbe0efc9e10ae1fc9b169bd060470bf3e39f09f8d83bebecd5216de02b81e35fe7e7b2f2*1*0*8*24*2a74*882a*537886dbabffbb7cac77deb01dc84760894524e6966183b4478a4ef56f0c657375a235a1*1*0*8*24*eda7*5096*40eb30ef1ddd9b77b894ed46abf199b480f1e5614fde510855f92ae7b8026a11f80e4d5f*$/pkzip2$"
3982
+ ]
3534
3983
  }
3535
3984
  ]
3536
3985
  },
3537
3986
  {
3538
- "regex": "^\\$argon2d\\$v=19\\$m=[0-9]{1,6},t=[0-9]{1,2},p=[0-9]{1,2}\\$[^$]+\\$[^\\s]{6,}$",
3987
+ "regex": "^\\$argon2d\\$v=19\\$m=\\d{1,6},t=\\d{1,2},p=\\d{1,2}\\$[^$]+\\$[^\\s]{6,}$",
3539
3988
  "modes": [
3540
3989
  {
3541
3990
  "john": "argon2",
@@ -3552,7 +4001,7 @@
3552
4001
  ]
3553
4002
  },
3554
4003
  {
3555
- "regex": "^\\$argon2i\\$v=19\\$m=[0-9]{1,6},t=[0-9]{1,2},p=[0-9]{1,2}\\$[^$]+\\$[^\\s]{6,}$",
4004
+ "regex": "^\\$argon2i\\$v=19\\$m=\\d{1,6},t=\\d{1,2},p=\\d{1,2}\\$[^$]+\\$[^\\s]{6,}$",
3556
4005
  "modes": [
3557
4006
  {
3558
4007
  "john": "argon2",
@@ -3569,7 +4018,7 @@
3569
4018
  ]
3570
4019
  },
3571
4020
  {
3572
- "regex": "^\\$argon2id\\$v=19\\$m=[0-9]{1,6},t=[0-9]{1,2},p=[0-9]{1,2}\\$[^$]+\\$[^\\s]{6,}$",
4021
+ "regex": "^\\$argon2id\\$v=19\\$m=\\d{1,6},t=\\d{1,2},p=\\d{1,2}\\$[^$]+\\$[^\\s]{6,}$",
3573
4022
  "modes": [
3574
4023
  {
3575
4024
  "john": null,
@@ -3580,7 +4029,7 @@
3580
4029
  ]
3581
4030
  },
3582
4031
  {
3583
- "regex": "^\\$axcrypt\\$\\*2\\*[0-9]{1,7}\\*[a-f0-9]{128}\\*[a-f0-9]{288}\\*[0-9]{1,7}\\*[a-f0-9]{64}$",
4032
+ "regex": "^\\$axcrypt\\$\\*2\\*\\d{1,7}\\*[a-f0-9]{128}\\*[a-f0-9]{288}\\*\\d{1,7}\\*[a-f0-9]{64}$",
3584
4033
  "modes": [
3585
4034
  {
3586
4035
  "john": "axcrypt",
@@ -3596,7 +4045,7 @@
3596
4045
  ]
3597
4046
  },
3598
4047
  {
3599
- "regex": "^\\$axcrypt\\$\\*1\\*[0-9]{1,7}\\*[a-f0-9]{32}\\*[a-f0-9]{48}(?:\\*[a-z0-9]+)?$",
4048
+ "regex": "^\\$axcrypt\\$\\*1\\*\\d{1,7}\\*[a-f0-9]{32}\\*[a-f0-9]{48}(?:\\*[a-z0-9]+)?$",
3600
4049
  "modes": [
3601
4050
  {
3602
4051
  "john": "axcrypt",
@@ -3613,7 +4062,7 @@
3613
4062
  ]
3614
4063
  },
3615
4064
  {
3616
- "regex": "^\\$rar5\\$[0-9]{2}\\$[a-f0-9]{32}\\$[0-9]{2}\\$[a-f0-9]{32}\\$[0-9]{1}\\$[a-f0-9]{16}$",
4065
+ "regex": "^\\$rar5\\$\\d{2}\\$[a-f0-9]{32}\\$\\d{2}\\$[a-f0-9]{32}\\$\\d{1}\\$[a-f0-9]{16}$",
3617
4066
  "modes": [
3618
4067
  {
3619
4068
  "john": "rar5",
@@ -3629,7 +4078,7 @@
3629
4078
  ]
3630
4079
  },
3631
4080
  {
3632
- "regex": "^\\$RAR3\\$\\*[0-9]{1}\\*[a-f0-9]{16}\\*[a-f0-9]{8}\\*[0-9]{1,7}\\*[0-9]{1,6}\\*[0-9]{1}\\*[a-f0-9]{2,}\\*[0-9]{2}$",
4081
+ "regex": "^\\$RAR3\\$\\*\\d{1}\\*[a-f0-9]{16}\\*[a-f0-9]{8}\\*\\d{1,7}\\*\\d{1,6}\\*\\d{1}\\*[a-f0-9]{2,}\\*\\d{2}$",
3633
4082
  "modes": [
3634
4083
  {
3635
4084
  "john": "rar",
@@ -3654,7 +4103,7 @@
3654
4103
  ]
3655
4104
  },
3656
4105
  {
3657
- "regex": "^\\$RAR3\\$\\*[0-9]{1}\\*[a-f0-9]{16}\\*[a-f0-9]{32}$",
4106
+ "regex": "^\\$RAR3\\$\\*\\d{1}\\*[a-f0-9]{16}\\*[a-f0-9]{32}$",
3658
4107
  "modes": [
3659
4108
  {
3660
4109
  "john": "rar",
@@ -3684,7 +4133,7 @@
3684
4133
  ]
3685
4134
  },
3686
4135
  {
3687
- "regex": "^\\$metamask\\$(?=.{44}\\$)(?:[a-z0-9+\\/]{4})*(?:|(?:[a-z0-9+\\/]{3}=)|(?:[a-z0-9+\\/]{2}==)|(?:[a-z0-9+\\/]{1}===))\\$(?=.{24}\\$)(?:[a-z0-9+\\/]{4})*(?:|(?:[a-z0-9+\\/]{3}=)|(?:[a-z0-9+\\/]{2}==)|(?:[a-z0-9+\\/]{1}===))\\$(?=.{64,})(?:[a-z0-9+\\/]{4})*(?:|(?:[a-z0-9+\\/]{3}=)|(?:[a-z0-9+\\/]{2}==)|(?:[a-z0-9+\\/]{1}===))$",
4136
+ "regex": "^\\$metamask\\$(?=[^$]{44}\\$)(?:[a-z0-9+\\/]{4})*(?:|(?:[a-z0-9+\\/]{3}=)|(?:[a-z0-9+\\/]{2}==)|(?:[a-z0-9+\\/]{1}===))\\$(?=[^$]{24}\\$)(?:[a-z0-9+\\/]{4})*(?:|(?:[a-z0-9+\\/]{3}=)|(?:[a-z0-9+\\/]{2}==)|(?:[a-z0-9+\\/]{1}===))\\$(?=[^$]{64,})(?:[a-z0-9+\\/]{4})*(?:|(?:[a-z0-9+\\/]{3}=)|(?:[a-z0-9+\\/]{2}==)|(?:[a-z0-9+\\/]{1}===))$",
3688
4137
  "modes": [
3689
4138
  {
3690
4139
  "john": null,
@@ -3757,7 +4206,7 @@
3757
4206
  ]
3758
4207
  },
3759
4208
  {
3760
- "regex": "^\\$mongodb-scram\\$\\*\\d\\*(?=.{0,76}\\*)(?:[a-z0-9+\\/]{4})*(?:|(?:[a-z0-9+\\/]{3}=)|(?:[a-z0-9+\\/]{2}==)|(?:[a-z0-9+\\/]{1}===))\\*\\d{1,7}\\*(?=.{24}\\*)(?:[a-z0-9+\\/]{4})*(?:|(?:[a-z0-9+\\/]{3}=)|(?:[a-z0-9+\\/]{2}==)|(?:[a-z0-9+\\/]{1}===))\\*(?=.{28})(?:[a-z0-9+\\/]{4})*(?:|(?:[a-z0-9+\\/]{3}=)|(?:[a-z0-9+\\/]{2}==)|(?:[a-z0-9+\\/]{1}===))$",
4209
+ "regex": "^\\$mongodb-scram\\$\\*\\d\\*(?=[^*]{0,76}\\*)(?:[a-z0-9+\\/]{4})*(?:|(?:[a-z0-9+\\/]{3}=)|(?:[a-z0-9+\\/]{2}==)|(?:[a-z0-9+\\/]{1}===))\\*\\d{1,7}\\*(?=[^*]{24}\\*)(?:[a-z0-9+\\/]{4})*(?:|(?:[a-z0-9+\\/]{3}=)|(?:[a-z0-9+\\/]{2}==)|(?:[a-z0-9+\\/]{1}===))\\*(?=[^*]{28})(?:[a-z0-9+\\/]{4})*(?:|(?:[a-z0-9+\\/]{3}=)|(?:[a-z0-9+\\/]{2}==)|(?:[a-z0-9+\\/]{1}===))$",
3761
4210
  "modes": [
3762
4211
  {
3763
4212
  "john": null,
@@ -3771,7 +4220,7 @@
3771
4220
  ]
3772
4221
  },
3773
4222
  {
3774
- "regex": "^\\$mongodb-scram\\$\\*\\d\\*(?=.{0,88}\\*)(?:[a-z0-9+\\/]{4})*(?:|(?:[a-z0-9+\\/]{3}=)|(?:[a-z0-9+\\/]{2}==)|(?:[a-z0-9+\\/]{1}===))\\*\\d{1,7}\\*(?=.{40}\\*)(?:[a-z0-9+\\/]{4})*(?:|(?:[a-z0-9+\\/]{3}=)|(?:[a-z0-9+\\/]{2}==)|(?:[a-z0-9+\\/]{1}===))\\*(?=.{44})(?:[a-z0-9+\\/]{4})*(?:|(?:[a-z0-9+\\/]{3}=)|(?:[a-z0-9+\\/]{2}==)|(?:[a-z0-9+\\/]{1}===))$",
4223
+ "regex": "^\\$mongodb-scram\\$\\*\\d\\*(?=[^*]{0,88}\\*)(?:[a-z0-9+\\/]{4})*(?:|(?:[a-z0-9+\\/]{3}=)|(?:[a-z0-9+\\/]{2}==)|(?:[a-z0-9+\\/]{1}===))\\*\\d{1,7}\\*(?=[^*]{40}\\*)(?:[a-z0-9+\\/]{4})*(?:|(?:[a-z0-9+\\/]{3}=)|(?:[a-z0-9+\\/]{2}==)|(?:[a-z0-9+\\/]{1}===))\\*(?=[^*]{44})(?:[a-z0-9+\\/]{4})*(?:|(?:[a-z0-9+\\/]{3}=)|(?:[a-z0-9+\\/]{2}==)|(?:[a-z0-9+\\/]{1}===))$",
3775
4224
  "modes": [
3776
4225
  {
3777
4226
  "john": null,
@@ -3861,7 +4310,7 @@
3861
4310
  ]
3862
4311
  },
3863
4312
  {
3864
- "regex": "^\\$stellar\\$(?=.{24}\\$)(?:[a-z0-9+\\/]{4})*(?:|(?:[a-z0-9+\\/]{3}=)|(?:[a-z0-9+\\/]{2}==)|(?:[a-z0-9+\\/]{1}===))\\$(?=.{16}\\$)(?:[a-z0-9+\\/]{4})*(?:|(?:[a-z0-9+\\/]{3}=)|(?:[a-z0-9+\\/]{2}==)|(?:[a-z0-9+\\/]{1}===))\\$(?=.{96}$)(?:[a-z0-9+\\/]{4})*(?:|(?:[a-z0-9+\\/]{3}=)|(?:[a-z0-9+\\/]{2}==)|(?:[a-z0-9+\\/]{1}===))$",
4313
+ "regex": "^\\$stellar\\$(?=[^$]{24}\\$)(?:[a-z0-9+\\/]{4})*(?:|(?:[a-z0-9+\\/]{3}=)|(?:[a-z0-9+\\/]{2}==)|(?:[a-z0-9+\\/]{1}===))\\$(?=[^$]{16}\\$)(?:[a-z0-9+\\/]{4})*(?:|(?:[a-z0-9+\\/]{3}=)|(?:[a-z0-9+\\/]{2}==)|(?:[a-z0-9+\\/]{1}===))\\$(?=[^$]{96}$)(?:[a-z0-9+\\/]{4})*(?:|(?:[a-z0-9+\\/]{3}=)|(?:[a-z0-9+\\/]{2}==)|(?:[a-z0-9+\\/]{1}===))$",
3865
4314
  "modes": [
3866
4315
  {
3867
4316
  "john": null,
@@ -4198,5 +4647,559 @@
4198
4647
  ]
4199
4648
  }
4200
4649
  ]
4650
+ },
4651
+ {
4652
+ "regex": "^v1;PPH1_MD4,[a-f0-9]{20},\\d{1,6},[a-f0-9]{64};?$",
4653
+ "modes": [
4654
+ {
4655
+ "john": "azuread",
4656
+ "hashcat": 12800,
4657
+ "extended": false,
4658
+ "name": "AzureAD (MS-AzureSync) PBKDF2-HMAC-SHA256",
4659
+ "samples": [
4660
+ "v1;PPH1_MD4,54188415275183448824,100,55b530f052a9af79a7ba9c466dddcb8b116f8babf6c3873a51a3898fb008e123",
4661
+ "v1;PPH1_MD4,724b754c4b6d30526f36,100,367ff0ac2a1cb334bb26609c8bfc8ae5f619d1eaf07568df040f407504a20241;",
4662
+ "v1;PPH1_MD4,465564476f786e705069,100,612a80cb011bee1f929c7a9e2bd16d98a79f2deb9f44919100f7c0ec74508560;",
4663
+ "v1;PPH1_MD4,31414275383876386e32,100,102ce242cde4339e934d7c6b539d49ae340b02dd380815666b98bd036cd4dc4f;"
4664
+ ]
4665
+ }
4666
+ ]
4667
+ },
4668
+ {
4669
+ "regex": "^\\$response\\$[a-f0-9]{32}\\$.+\\$.+\\$.+\\$.+\\$.+(?:\\$\\d{8}\\$[a-f0-9]{4,16}\\$.+)?$",
4670
+ "modes": [
4671
+ {
4672
+ "john": "hdaa",
4673
+ "hashcat": null,
4674
+ "extended": false,
4675
+ "name": "HTTP Digest access authentication",
4676
+ "samples": [
4677
+ "$response$679066476e67b5c7c4e88f04be567f8b$user$myrealm$GET$/$8c12bd8f728afe56d45a0ce846b70e5a$00000001$4b61913cec32e2c9$auth",
4678
+ "$response$faa6cb7d676e5b7c17fcbf966436aa0c$moi$myrealm$GET$/$af32592775d27b1cd06356b3a0db9ddf$00000001$8e1d49754a25aea7$auth",
4679
+ "$response$56940f87f1f53ade8b7d3c5a102c2bf3$usrx$teN__chars$GET$/4TLHS1TMN9cfsbqSUAdTG3CRq7qtXMptnYfn7mIIi3HRKOMhOks56e$2c0366dcbc$00000001$0153$auth",
4680
+ "$response$8663faf2337dbcb2c52882807592ec2c$user$myrealm$GET$/$8c12bd8f728afe56d45a0ce846b70e5a$",
4681
+ "$response$8663faf2337dbcb2c52882807592ec2c$user$myrealm$GET$/$8c12bd8f728afe56d45a0ce846b70e5a",
4682
+ "$response$b9b9cb1fcce017ec497b31cc33a572b0$lulu$hyperion$GET$/$IERozb5mBQA=de6a5916efca4c24959b5be7e4ed3fc0c7f1f765$00000006$1bd5678ca084bc0d$auth",
4683
+ "$response$abe32fa35969fd6d77bad0ce3dbfdd3a$lulu$hyperion$GET$/icons/poweredby.png$XkZ1Dr9mBQA=6258d402c7c95b352bab0ba774d6974506e3318b$00000003$bd29e3b874427c73$auth"
4684
+ ]
4685
+ }
4686
+ ]
4687
+ },
4688
+ {
4689
+ "regex": "^\\$IPB2\\$[a-f0-9]{2,}\\$[a-f0-9]{32}$",
4690
+ "modes": [
4691
+ {
4692
+ "john": "ipb2",
4693
+ "hashcat": null,
4694
+ "extended": false,
4695
+ "name": "IPB 2.x (Invision Power Board)",
4696
+ "samples": [
4697
+ "$IPB2$2e75504633$d891f03a7327639bc632d62a7f302604",
4698
+ "$IPB2$735a213a4e$4f23de7bb115139660db5e953153f28a",
4699
+ "$IPB2$5d75343455$de98ba8ca7bb16f43af05e9e4fb8afee",
4700
+ "$IPB2$556c576c39$16d4f29c71b05bd75e61d0254800bfa3"
4701
+ ]
4702
+ }
4703
+ ]
4704
+ },
4705
+ {
4706
+ "regex": "^\\$AWS-Sig-v4\\$0\\$[^$]{16}\\$[^$]{1,16}\\$[^$]{1,16}\\$[a-f0-9]{64}\\$[a-f0-9]{64}$",
4707
+ "modes": [
4708
+ {
4709
+ "john": null,
4710
+ "hashcat": 28700,
4711
+ "extended": false,
4712
+ "name": "Amazon AWS4-HMAC-SHA256",
4713
+ "samples": [
4714
+ "$AWS-Sig-v4$0$20220221T000000Z$us-east-1$s3$421ab6e4af9f49fa30fa9c253fcfeb2ce91668e139e6b23303c5f75b04f8a3c4$3755ed2bc1b2346e003ccaa7d02ae8b73c72bcbe9f452ccf066c78504d786bbb"
4715
+ ]
4716
+ }
4717
+ ]
4718
+ },
4719
+ {
4720
+ "regex": "^[a-z0-9]{26,34}$",
4721
+ "modes": [
4722
+ {
4723
+ "john": null,
4724
+ "hashcat": 28501,
4725
+ "extended": false,
4726
+ "name": "Bitcoin WIF private key (P2PKH), compressed",
4727
+ "samples": [
4728
+ "1Jv6EonXm9x4Dw4QjEPAhGfmzFxTL7b3Zj"
4729
+ ]
4730
+ },
4731
+ {
4732
+ "john": null,
4733
+ "hashcat": 28502,
4734
+ "extended": false,
4735
+ "name": "Bitcoin WIF private key (P2PKH), uncompressed",
4736
+ "samples": [
4737
+ "1L9nr4GX4Zmd7gDL1UT75QPUqxSgNTvdHb"
4738
+ ]
4739
+ }
4740
+ ]
4741
+ },
4742
+ {
4743
+ "regex": "^bc1[a-z0-9]{39}$",
4744
+ "modes": [
4745
+ {
4746
+ "john": null,
4747
+ "hashcat": 28503,
4748
+ "extended": false,
4749
+ "name": "Bitcoin WIF private key (P2WPKH, Bech32), compressed",
4750
+ "samples": [
4751
+ "bc1qxd76a5zamfyw0g2d2rxkdh0zt9m0uzmxmwjf0q"
4752
+ ]
4753
+ },
4754
+ {
4755
+ "john": null,
4756
+ "hashcat": 28504,
4757
+ "extended": false,
4758
+ "name": "Bitcoin WIF private key (P2WPKH, Bech32), uncompressed",
4759
+ "samples": [
4760
+ "bc1qv8e65p73gmp4w3z6fqnyu8t6ct69vetsda3snd"
4761
+ ]
4762
+ }
4763
+ ]
4764
+ },
4765
+ {
4766
+ "regex": "^[a-z0-9]{34}$",
4767
+ "modes": [
4768
+ {
4769
+ "john": null,
4770
+ "hashcat": 28505,
4771
+ "extended": false,
4772
+ "name": "Bitcoin WIF private key (P2SH(P2WPKH)), compressed",
4773
+ "samples": [
4774
+ "3H1YvmSdrjEfj9LvtiKJ8XiYq5htJRuejA"
4775
+ ]
4776
+ },
4777
+ {
4778
+ "john": null,
4779
+ "hashcat": 28506,
4780
+ "extended": false,
4781
+ "name": "Bitcoin WIF private key (P2SH(P2WPKH)), uncompressed",
4782
+ "samples": [
4783
+ "3LovFVx5zBRvusVcj7pf3JxV9V46kjKhKu"
4784
+ ]
4785
+ }
4786
+ ]
4787
+ },
4788
+ {
4789
+ "regex": "^\\$DPAPImk\\$1\\*[12]\\*[S\\-0-9]{10,60}\\*[^*]{4,6}\\*[^*]{4,6}\\*\\d{1,6}\\*[a-f0-9]{32}\\*\\d{1,6}\\*[a-f0-9]{0,1024}$",
4790
+ "modes": [
4791
+ {
4792
+ "john": "DPAPImk",
4793
+ "hashcat": 15300,
4794
+ "extended": false,
4795
+ "name": "DPAPI masterkey file v1 (context 1 and 2)",
4796
+ "samples": [
4797
+ "$DPAPImk$1*1*S-15-21-466364039-425773974-453930460-1925*des3*sha1*24000*b038489dee5ad04e3e3cab4d957258b5*208*cb9b5b7d96a0d2a00305ca403d3fd9c47c561e35b4b2cf3aebfd1d3199a6481d56972be7ebd6c291b199e6f1c2ffaee91978706737e9b1209e6c7d3aa3d8c3c3e38ad1ccfa39400d62c2415961c17fd0bd6b0f7bbd49cc1de1a394e64b7237f56244238da8d37d78",
4798
+ "$DPAPImk$1*1*S-15-21-447321867-460417387-480872410-1240*des3*sha1*24000*9b49e2d3b25103d03e936fdf66b94d26*208*ec96025ed4b023ebfa52bdfd91dfeb64edf3f3970b347ee8bb8adfb2a686a0a34792d40074edd372f346da8fcd02cc5d4182c2fd09f4549ec106273926edd05c42e4b5fc8b8758a7c48f6ddae273f357bcb645c8ad16e3161e8a9dbb5002454f4db5ef0d5d7a93ac",
4799
+ "$DPAPImk$1*2*S-15-21-458698633-447735394-485599537-1788*des3*sha1*24000*96b957d9bf0f8846399e70a84431b595*208*0ee9fa2baf2cf0efda81514376aef853c6c93a5776fa6af66a869f44c50ac80148b7488f52b4c52c305e89a497a583e17cca4a9bab580668a8a5ce2eee083382c98049e481e47629b5815fb16247e3bbfa62c454585aaaf51ef15555a355fcf925cff16c0bb006f8",
4800
+ "$DPAPImk$1*1*S-1-5-21-1482476501-1659004503-725345543-1003*des3*sha1*4000*b3d62a0b06cecc236fe3200460426a13*208*d3841257348221cd92caf4427a59d785ed1474cab3d0101fc8d37137dbb598ff1fd2455826128b2594b846934c073528f8648d750d3c8e6621e6f706d79b18c22f172c0930d9a934de73ea2eb63b7b44810d332f7d03f14d1c153de16070a5cab9324da87405c1c0"
4801
+ ]
4802
+ }
4803
+ ]
4804
+ },
4805
+ {
4806
+ "regex": "^\\$DPAPImk\\$1\\*3\\*[S\\-0-9]{10,60}\\*[^*]{4,6}\\*[^*]{4,6}\\*\\d{1,6}\\*[a-f0-9]{32}\\*\\d{1,6}\\*[a-f0-9]{0,1024}$",
4807
+ "modes": [
4808
+ {
4809
+ "john": "DPAPImk",
4810
+ "hashcat": 15310,
4811
+ "extended": false,
4812
+ "name": "DPAPI masterkey file v1 (context 3)",
4813
+ "samples": [
4814
+ "$DPAPImk$1*3*S-15-21-407415836-404165111-436049749-1915*des3*sha1*14825*3e86e7d8437c4d5582ff668a83632cb2*208*96ad763b59e67c9f5c3d925e42bbe28a1412b919d1dc4abf03b2bed4c5c244056c14931d94d441117529b7171dfd6ebbe6eecf5d958b65574c293778fbadb892351cc59d5c65d65d2fcda73f5b056548a4a5550106d03d0c39d3cca7e5cdc0d521f48ac9e51cecc5",
4815
+ "$DPAPImk$1*3*S-1-5-21-1857904334-2267218879-1458651445-1123*des3*sha1*18000*e4c529ba8975e4ed56f5fb8b1e85be43*208*af96b391f1d6e2d37a4de3b4c412ce78f032d446d77ea1fb6a0782f47c390c844349c2bcaeba9fd570b39def6f67a369aa2e266e8d017689d8a09667fdfb640feb3e19ca22067cc5704644c1dcc43d4cccac667391f4918d0de77f36569fd2e104ef0619a46edcfc"
4816
+ ]
4817
+ }
4818
+ ]
4819
+ },
4820
+ {
4821
+ "regex": "^\\$DPAPImk\\$2\\*[12]\\*[S\\-0-9]{10,60}\\*[^*]{4,6}\\*[^*]{4,6}\\*\\d{1,6}\\*[a-f0-9]{32}\\*\\d{1,6}\\*[a-f0-9]{0,1024}$",
4822
+ "modes": [
4823
+ {
4824
+ "john": "DPAPImk",
4825
+ "hashcat": 15900,
4826
+ "extended": false,
4827
+ "name": "DPAPI masterkey file v2 (context 1 and 2)",
4828
+ "samples": [
4829
+ "$DPAPImk$2*1*S-15-21-439882973-489230393-482956683-1522*aes256*sha512*12900*79f7ca399f2626e21aad108c3922af7c*288*c47bc8a985ca6aa708b01c97b004bff20cc52379dc2635b4acf59ce17970a2cb47ace98c7e8de977f265243c5c03d0a97e4b954b494d9e38d9158d0c1e729d16a28ba69e2e7c6c3bc0e3afc9c9b6306b83372ccb35d89b98925728fd36315b8ee95b4d4eccdcb31564769f9a4b9ee10828184e16d4af336675d5e31d987dd87233d34fbbb98880c5e1f64cbb9b043ad8",
4830
+ "$DPAPImk$2*1*S-15-21-417226446-481759312-475941522-1494*aes256*sha512*8000*1e6b7a71a079bc12e71c75a6bcfd865c*288*5b5d651e538e5185f7d6939ba235ca2d8a2b9726a6e95b59844320ba1d1f22282527210bc784d22075e596d113927761a644ad4057cb4dbb497bd64ee6c630930a4ba388eadb59484ec2be7fb4cc79299a87f341d002d25b5b187c71fa19417ec9d1b65568a79c962cb3b5bcb1b8df5f968669af35eec5a24ed5dcee46deef42bfee5ad665dd4de56ccd9c6ba26b2acd",
4831
+ "$DPAPImk$2*2*S-15-21-402916398-457068774-444912990-1699*aes256*sha512*17000*4c51109a901e4be7f1e208f82a56e690*288*bb80d538ac4185eb0382080fda0d405bb74da3a6b98e96f222292b819fa9168cf1571e9bc9c698ad10daf850ab34de1a1765cfd5c0fb8a63a413a767d241dfe6355804af259d24f6be7282daac0a9e02d7fbe20675afb3733141995990a6d11012edfb7e81b49c0e1132dbc4503dd2206489e4f512e4fe9d573566c9d8973188b8d1a87610b8bef09e971270a376a52b"
4832
+ ]
4833
+ }
4834
+ ]
4835
+ },
4836
+ {
4837
+ "regex": "^\\$DPAPImk\\$2\\*3\\*[S\\-0-9]{10,60}\\*[^*]{4,6}\\*[^*]{4,6}\\*\\d{1,6}\\*[a-f0-9]{32}\\*\\d{1,6}\\*[a-f0-9]{0,1024}$",
4838
+ "modes": [
4839
+ {
4840
+ "john": "DPAPImk",
4841
+ "hashcat": 15910,
4842
+ "extended": false,
4843
+ "name": "DPAPI masterkey file v2 (context 3)",
4844
+ "samples": [
4845
+ "$DPAPImk$2*3*S-15-21-464497560-472124119-475628788-1088*aes256*sha512*13450*685165fdb6d0627a15100215ec331ed8*288*7e1ea6f7ec3c2111f2a3903c73aefe66e524d8b241dc1482d0bd07cc1f3ccdadd8cebd4263b3b7c2496da48f40d2eb4890513e6624aeefbe6bbc6ea73f2f71fecf9cc5fef3891a2e697a4415ba7a069642069c142335d53cc750d42a4f4d2b0592956b4a0e57a5d5b1bfd27f0a8eac9d0d5fc5c5e5e23af18ce1a8eff442ed335e5db3bad6e89146f71aa9351e132fd9"
4846
+ ]
4847
+ }
4848
+ ]
4849
+ },
4850
+ {
4851
+ "regex": "^EXODUS:\\d{1,6}:\\d{1,6}:\\d{1,6}:(?=[^:]{44})(?:[a-z0-9+\/]{4})*(?:|(?:[a-z0-9+\/]{3}=)|(?:[a-z0-9+\/]{2}==)|(?:[a-z0-9+\/]{1}===)):(?=[^:]{16})(?:[a-z0-9+\/]{4})*(?:|(?:[a-z0-9+\/]{3}=)|(?:[a-z0-9+\/]{2}==)|(?:[a-z0-9+\/]{1}===)):(?=[^:]{44})(?:[a-z0-9+\/]{4})*(?:|(?:[a-z0-9+\/]{3}=)|(?:[a-z0-9+\/]{2}==)|(?:[a-z0-9+\/]{1}===)):(?=[^:]{24})(?:[a-z0-9+\/]{4})*(?:|(?:[a-z0-9+\/]{3}=)|(?:[a-z0-9+\/]{2}==)|(?:[a-z0-9+\/]{1}===))$",
4852
+ "modes": [
4853
+ {
4854
+ "john": null,
4855
+ "hashcat": 28200,
4856
+ "extended": false,
4857
+ "name": "Exodus Desktop Wallet (scrypt)",
4858
+ "samples": [
4859
+ "EXODUS:16384:8:1:IYkXZgFETRmFp4wQXyP8XMe3LtuOw8wMdLcBVQ+9YWE=:lq0W9ekN5sC0O7Xw:UD4a6mUUhkTbQtGWitXHZUg0pQ4RHI6W/KUyYE95m3k=:ZuNQckXOtr4r21x+DT1zpQ=="
4860
+ ]
4861
+ }
4862
+ ]
4863
+ },
4864
+ {
4865
+ "regex": "^[a-z0-9\\-_]+\\.[a-z0-9\\-_]{1,6}\\.[a-z0-9\\-_]{20,27}$",
4866
+ "modes": [
4867
+ {
4868
+ "john": null,
4869
+ "hashcat": 29100,
4870
+ "extended": false,
4871
+ "name": "Flask Session Cookie ($salt.$salt.$pass)",
4872
+ "samples": [
4873
+ "eyJ1c2VybmFtZSI6ImFkbWluIn0.YjdgRQ.1OTlf1PD0H9wXsu_qS0aywAJVD8"
4874
+ ]
4875
+ }
4876
+ ]
4877
+ },
4878
+ {
4879
+ "regex": "^\\$keepass\\$\\*1\\*\\d{1,10}\\*\\d{1,3}\\*[a-f0-9]{32}\\*[a-f0-9]{64}\\*[a-f0-9]{32}\\*[a-f0-9]{64}\\*\\d\\*\\d{1,8}\\*[a-f0-9]{2,}$",
4880
+ "modes": [
4881
+ {
4882
+ "john": "keepass",
4883
+ "hashcat": 13400,
4884
+ "extended": false,
4885
+ "name": "KeePass 1 AES / without keyfile",
4886
+ "samples": [
4887
+ "$keepass$*1*50000*0*375756b9e6c72891a8e5645a3338b8c8*82afc053e8e1a6cfa39adae4f5fe5e59f545a54d6956593d1709b39cacd7f796*c698fbfc7d1b71431d10611e2216ab21*24a63140f4eb3bfd7d59b7694eea38d1d93a43bc3af989755d2b326286c4d510*1*192*1a65072f436e9da0c9e832eca225a04ab78821b55d9f550860ade2ef8126a2c4050cf4d033374abd3dac6d0c5907c6cbb033643b203825c12e6c9853b5ac17a4809559fe723e01b4a2ab87cc83c8ba7ee4a757b8a0cf1674106f21f6675cba12064443d65436650df10ea0923c4cadfd4bfe341a6f4fa23a1a67f7d12a489fc5410ef6db9f6607905de491d3b3b915852a1b6c231c96366cbdee5ea9bd7f73ffd2f7a579215528ae1bf0ea540947ebfe39ca84bc6cbeded4f8e8fb6ed8f32dd5",
4888
+ "$keepass$*1*50000*124*60eed105dac456cfc37d89d950ca846e*72ffef7c0bc3698b8eca65184774f6cd91a9356d338e5140e47e319a87f5e46a*8725bdfd3580cf054a1564dc724aaffe*8e58cc08af2462ddffe2ee39735ad14b15e8cb96dc05ef70d8e64d475eca7bf5*1*752*71d7e65fb3e20b288da8cd582b5c2bc3b63162eef6894e5e92eea73f711fe86e7a7285d5ac9d5ffd07798b83673b06f34180b7f5f3d05222ebf909c67e6580c646bcb64ad039fcdc6f33178fe475739a562dc78012f6be3104da9af69e0e12c2c9c5cd7134bb99d5278f2738a40155acbe941ff2f88db18daf772c7b5fc1855ff9e93ceb35a1db2c30cabe97a96c58b07c16912b2e095e530cc8c24041e7d4876b842f2e7c6df41d08da8c5c4f2402dd3241c3367b6e6e06cd0fa369934e78a6aab1479756a15264af09e3c8e1037f07a58f70f4bf634737ff58725414db10d7b2f61a7ed69878bc0de8bb99f3795bf9980d87992848cd9b9abe0fa6205a117ab1dd5165cf11ffa10b765e8723251ea0907bbc5f3eef8cf1f08bb89e193842b40c95922f38c44d0c3197033a5c7c926a33687aa71c482c48381baa4a34a46b8a4f78715f42eccbc8df80ee3b43335d92bdeb3bb0667cf6da83a018e4c0cd5803004bf6c300b9bee029246d16bd817ff235fcc22bb8c729929499afbf90bf787e98479db5ff571d3d727059d34c1f14454ff5f0a1d2d025437c2d8db4a7be7b901c067b929a0028fe8bb74fa96cb84831ccd89138329708d12c76bd4f5f371e43d0a2d234e5db2b3d6d5164e773594ab201dc9498078b48d4303dd8a89bf81c76d1424084ebf8d96107cb2623fb1cb67617257a5c7c6e56a8614271256b9dd80c76b6d668de4ebe17574ad617f5b1133f45a6d8621e127fcc99d8e788c535da9f557d91903b4e388108f02e9539a681d42e61f8e2f8b06654d4dec308690902a5c76f55b3d79b7c9a0ce994494bc60eff79ff41debc3f2684f40fc912f09035aae022148238ba6f5cfb92f54a5fb28cbb417ff01f39cc464e95929fba5e19be0251bef59879303063e6392c3a49032af3d03d5c9027868d5d6a187698dd75dfc295d2789a0e6cf391a380cc625b0a49f3084f45558ac273b0bbe62a8614db194983b2e207cef7deb1fa6a0bd39b0215d72bf646b599f187ee0009b7b458bb4930a1aea55222099446a0250a975447ff52"
4889
+ ]
4890
+ },
4891
+ {
4892
+ "john": "keepass",
4893
+ "hashcat": null,
4894
+ "extended": false,
4895
+ "name": "KeePass 1 Twofish / without keyfile",
4896
+ "samples": [
4897
+ "$keepass$*1*50000*1*1ff21bd79aa8e9c3f439281a4ce6a97b*cfbdb00057ee0c9e889ca9d93b069ab5ae19f78852bc21aae4f60d0d325e0034*c1a7e6138a49a2dcfb3a84afbc1d918b*a704f9d060f0de5a070155d1d5a8727da92f404242cb3aa2b9aa53a145f87474*1*608*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"
4898
+ ]
4899
+ }
4900
+ ]
4901
+ },
4902
+ {
4903
+ "regex": "^\\$keepass\\$\\*1\\*\\d{1,10}\\*\\d{1,3}\\*[a-f0-9]{32}\\*[a-f0-9]{64}\\*[a-f0-9]{32}\\*[a-f0-9]{64}\\*\\d\\*\\d{1,8}\\*[a-f0-9]{2,}\\*\\d\\*\\d{2}\\*[a-f0-9]{64}$",
4904
+ "modes": [
4905
+ {
4906
+ "john": "keepass",
4907
+ "hashcat": 13400,
4908
+ "extended": false,
4909
+ "name": "KeePass 1 Twofish / with keyfile",
4910
+ "samples": [
4911
+ "$keepass$*1*6000*1*31c087828b0bb76362c10cae773aacdf*6d6c78b4f82ecbcd3b96670cf490914c25ea8c31bc3aeb3fc56e65fac16d721f*a735ec88c01816bc66200c8e17ee9110*08334be8523f4b69bd4e2328db854329bfc81e2ea5a46d8ccf3bccf7c03d879d*1*1360*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*1*64*bbc3babf62557aa4dfba705e24274e1aebf43907fe12f52eaf5395066f7cbdba",
4912
+ "$keepass$*1*6000*0*1a1d38235ccbeae4ca2a9edfbd3b290c*8e1e81b37a6161b6033fbd6dd350aaeaa0712cf2649fe40e3fbbaa4b61684f54*d9517d352aea00c2b7f57f1154b9c0a0*0a8ae9b13347402c242d7cde4d58d01f1e129287eaf62df768856bbb9d0633a1*1*1360*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*1*64*3a96fb77fbbbca7336ee699f17be31fde552191128553c6d89bfce4035dc0af0"
4913
+ ]
4914
+ }
4915
+ ]
4916
+ },
4917
+ {
4918
+ "regex": "^\\$keepass\\$\\*2\\*\\d{1,10}\\*\\d{1,3}\\*[a-f0-9]{64}\\*[a-f0-9]{64}\\*[a-f0-9]{32}\\*[a-f0-9]{64}\\*[a-f0-9]{64}$",
4919
+ "modes": [
4920
+ {
4921
+ "john": "keepass",
4922
+ "hashcat": 13400,
4923
+ "extended": false,
4924
+ "name": "KeePass 2 AES / without keyfile",
4925
+ "samples": [
4926
+ "$keepass$*2*6000*222*a279e37c38b0124559a83fa452a0269d56dc4119a5866d18e76f1f3fd536d64d*7ec7a06bc975ea2ae7c8dcb99e826a308564849b6b25d858cbbc78475af3733f*d477c849bf2278b7a1f626c81e343553*38c8ec186141c2705f2bcb334a730933ed3b0ee11391e1100fbaf429f6c99078*1ada85fe78cf36ab0537562a787dd83e446f13cd3d9a60fd495003de3537b702",
4927
+ "$keepass$*2*6000*222*e54497d3d9be3e310a817a13515225a87773ba71557a88673c34db824550be7b*d405c4f7e3c7b2b142fda44c3d55d3afab1c91a6aca7c81c1ff7e61b3f03be85*7eb45af0af777ecb57f0159b9ffa528b*0af7d9facefb20378e8666389de7586ea72e9527dc78bf5dfe5f1b455060a3e6*9b0d1893678dea77f88bf66e6986adbc5a8095e4a09c7e9744bad42ac49133a7",
4928
+ "$keepass$*2*6000*222*a279e37c38b0124559a83fa452a0269d56dc4119a5866d18e76f1f3fd536d64d*7ec7a06bc975ea2ae7c8dcb99e826a308564849b6b25d858cbbc78475af3733f*d477c849bf2278b7a1f626c81e343553*e61db922e9b77a161e9b674ddadfb8c660d61b5f68d97a3b1596ae94cfa9d169*7c80c7db9de77f176e86ba11697152c4c8f182bdb8133ad1bca22e9ec5bc275b"
4929
+ ]
4930
+ }
4931
+ ]
4932
+ },
4933
+ {
4934
+ "regex": "^\\$keepass\\$\\*2\\*\\d{1,10}\\*\\d{1,3}\\*[a-f0-9]{64}\\*[a-f0-9]{64}\\*[a-f0-9]{32}\\*[a-f0-9]{64}\\*[a-f0-9]{64}\\*\\d\\*\\d{2}\\*[a-f0-9]{64}$",
4935
+ "modes": [
4936
+ {
4937
+ "john": "keepass",
4938
+ "hashcat": 13400,
4939
+ "extended": false,
4940
+ "name": "Keepass 2 AES / with keyfile",
4941
+ "samples": [
4942
+ "$keepass$*2*6000*222*15b6b685bae998f2f608c909dc554e514f2843fbac3c7c16ea3600cc0de30212*c417098b445cfc7a87d56ba17200836f30208d38f75a4169c0280bab3b10ca2a*0d15a81eadccc58b1d3942090cd0ba66*57c4aa5ac7295a97da10f8b2f2d2bfd7a98b0faf75396bc1b55164a1e1dc7e52*2b822bb7e7d060bb42324459cb24df4d3ecd66dc5fc627ac50bf2d7c4255e4f8*1*64*aaf72933951a03351e032b382232bcafbeeabc9bc8e6988b18407bc5b8f0e3cc",
4943
+ "$keepass$*2*24569*0*c40432355cce7348c48053ceea0a28e7d18859c4ea47e3a799c6300861f64b95*265dafcc42e1537ff42e97e1e283c70014133be0fe2d420b4d24c6d57c9d2207*a00e20a852694c15aabb074d61b902fa*48dd553fb96f7996635f2414bfe6a1a8429ef0ffb71a1752abbef31853172c35*a44ae659958ad7fae8c8952cb83f3cf03fec2371ce22a8bf7fac1e687af2f249*1*64*5a26ea376cc5afc955104c334571d30486acbac512a94b75ca82a9e31dd97bf7",
4944
+ "$keepass$*2*6000*222*aa511591cb50394d044f31abb2febdb2788c9ee41d78a53f3efe0f83fdd64e81*7ceab79302a794cef818d9426e53a78458f82e72575967c4fb3788d4bc685874*1c5c1c0c475ee2f22bd56e9c75cfd67c*e7bf79115c83a0236260c71c17a816f9bd9288a683eb4b5e0d48666c66e97774*53f26838a293b392bfde1ad21b444b834cf5c02155a1378ac496653b2f3779ec*1*64*98df4f35fe74c031992d81a639305c4520f303fd1ca4bb09b53e33032b44c46a"
4945
+ ]
4946
+ }
4947
+ ]
4948
+ },
4949
+ {
4950
+ "regex": "^\\$keepass\\$\\*2\\*\\d{1,10}\\*\\d{1,3}\\*[a-f0-9]{64}\\*[a-f0-9]{64}\\*[a-f0-9]{24}\\*[a-f0-9]{64}\\*[a-f0-9]{64}$",
4951
+ "modes": [
4952
+ {
4953
+ "john": "keepass",
4954
+ "hashcat": null,
4955
+ "extended": false,
4956
+ "name": "KeePass 2 ChaCha20 (KDBX 3) / without keyfile",
4957
+ "samples": [
4958
+ "$keepass$*2*6000*2*e852737a797fb642a2814e5965aba3473644a56ea67998526ce5e6f0e256a56a*fb300459b1e8c52fefa8e72676b57563565475b1c1306c266a48ccc2010e6a94*03027f86819941d1d0f3f2f5*af0f6c5e4319e6c10fdb95f44ded70f3115ae7dc28ec83fd3676c92076505ded*e0ab7f438903eb91dd8bc13c52c5a1c02e34b107ae16710bc57858c8c85fecd0"
4959
+ ]
4960
+ }
4961
+ ]
4962
+ },
4963
+ {
4964
+ "regex": "^SCRAM-SHA-256\\$\\d{1,7}:(?=[^:$]{1,88}\\$)(?:[a-z0-9+\/]{4})*(?:|(?:[a-z0-9+\/]{3}=)|(?:[a-z0-9+\/]{2}==)|(?:[a-z0-9+\/]{1}===))\\$(?=[^:]{44}:)(?:[a-z0-9+\/]{4})*(?:|(?:[a-z0-9+\/]{3}=)|(?:[a-z0-9+\/]{2}==)|(?:[a-z0-9+\/]{1}===)):(?=[^:]{44})(?:[a-z0-9+\/]{4})*(?:|(?:[a-z0-9+\/]{3}=)|(?:[a-z0-9+\/]{2}==)|(?:[a-z0-9+\/]{1}===))$",
4965
+ "modes": [
4966
+ {
4967
+ "john": null,
4968
+ "hashcat": 28600,
4969
+ "extended": false,
4970
+ "name": "PostgreSQL SCRAM-SHA-256",
4971
+ "samples": [
4972
+ "SCRAM-SHA-256$4096:IKfxzJ8Nq4PkLJCfgKcPmA==$iRw3qwTp18uaBnsTOEExbtgWdKeBMbSSnZvqD4sdqLQ=:hPciC1CcnBna3szR8Mf3MVc8t0W7QPbIHoMMrh4zRV0="
4973
+ ]
4974
+ }
4975
+ ]
4976
+ },
4977
+ {
4978
+ "regex": "^\\$radmin3\\$[^*]{0,511}\\*[a-f0-9]{64}\\*[a-f0-9]{512}$",
4979
+ "modes": [
4980
+ {
4981
+ "john": null,
4982
+ "hashcat": 29200,
4983
+ "extended": false,
4984
+ "name": "Radmin3",
4985
+ "samples": [
4986
+ "$radmin3$75007300650072006e0061006d006500*c63bf695069d564844c4849e7df6d41f1fbc5f3a7d8fe27c5f20545a238398fa*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"
4987
+ ]
4988
+ }
4989
+ ]
4990
+ },
4991
+ {
4992
+ "regex": "^\\$teamspeak\\$3\\$(?=[^$]{28}\\$)(?:[a-z0-9+\/]{4})*(?:|(?:[a-z0-9+\/]{3}=)|(?:[a-z0-9+\/]{2}==)|(?:[a-z0-9+\/]{1}===))\\$(?=[^$]{152}$)(?:[a-z0-9+\/]{4})*(?:|(?:[a-z0-9+\/]{3}=)|(?:[a-z0-9+\/]{2}==)|(?:[a-z0-9+\/]{1}===))$",
4993
+ "modes": [
4994
+ {
4995
+ "john": null,
4996
+ "hashcat": 28300,
4997
+ "extended": false,
4998
+ "name": "Teamspeak 3 (channel hash)",
4999
+ "samples": [
5000
+ "$teamspeak$3$E0aV0IQ29EDyxRfkFoQflUGJ6zo=$mRgDUkNpd0IwUEcTJQBmE0NHYwdDEhFzQ0VgMRcFJUIRYnaHBwNXRZJwk2ZUaURzdXkVYiUROERmI0hYYGFYCDiIJCeIU3N5EhRVcZFnSIRCJlkUFkY4YFMDcheYeTl4RYZEdpKGJYhxAIQJEYGYEA=="
5001
+ ]
5002
+ }
5003
+ ]
5004
+ },
5005
+ {
5006
+ "regex": "^[a-f0-9]{32}[a-f0-9]{32}(?=[^$]{108}$)(?:[a-z0-9+\/]{4})*(?:|(?:[a-z0-9+\/]{3}=)|(?:[a-z0-9+\/]{2}==)|(?:[a-z0-9+\/]{1}===))$",
5007
+ "modes": [
5008
+ {
5009
+ "john": null,
5010
+ "hashcat": 29600,
5011
+ "extended": false,
5012
+ "name": "Terra Station Wallet (AES256-CBC(PBKDF2($pass)))",
5013
+ "samples": [
5014
+ "67445496c838e96c1424a8dae4b146f0fc247c8c34ef33feffeb1e4412018512wZGtBMeN84XZE2LoOKwTGvA4Ee4m7PR1lDGIdWUV6OSUZKRiKFx9tlrnZLt8r8OfOzbwUS2a2Uo+nrrP6F85fh4eHstwPJw0KwzHWB8br58="
5015
+ ]
5016
+ }
5017
+ ]
5018
+ },
5019
+ {
5020
+ "regex": "^\\$y\\$[.\\/a-z0-9]+\\$[.\\/a-z0-9]{0,86}\\$[.\\/a-z0-9]{43}$",
5021
+ "modes": [
5022
+ {
5023
+ "john": null,
5024
+ "hashcat": null,
5025
+ "extended": false,
5026
+ "name": "yescrypt",
5027
+ "samples": [
5028
+ "$y$j9T$.9s2wZRY3hcP/udKIFher1$sIBIYsiMmFlXhKOO4ZDJDXo54byuq7a4xAD0k9jw2m4",
5029
+ "$y$j9T$o8MJgcu/zxjLLjo3pBk4A.$SPwoNr7I95/JHVKBeTnsu1mSC//M76vfmKc6mE6lSe2",
5030
+ "$y$j9T$F5Jx5fExrKuPp53xLKQ..1$X3DX6M94c7o.9agCG9G317fhZg9SqC.5i5rd.RhAtQ7"
5031
+ ]
5032
+ }
5033
+ ]
5034
+ },
5035
+ {
5036
+ "regex": "^\\$gy\\$[.\\/a-z0-9]+\\$[.\\/a-z0-9]{0,86}\\$[.\\/a-z0-9]{43}$",
5037
+ "modes": [
5038
+ {
5039
+ "john": null,
5040
+ "hashcat": null,
5041
+ "extended": false,
5042
+ "name": "gost-yescrypt",
5043
+ "samples": [
5044
+ "$gy$jCT$HM87v.7RwpQLba8fDjNSk1$VgqS7k2OZWhFbAJVBye2vaA7ex/1VtU3a5fmL8Wv/26",
5045
+ "$gy$j9T$.......$.xOKFTJExrsAB12xqOm7X4K3mMPTwx0aMN1dx5PQnQ5"
5046
+ ]
5047
+ }
5048
+ ]
5049
+ },
5050
+ {
5051
+ "regex": "^\\$sshng\\$0\\$\\d\\$[a-f0-9]{16}\\$\\d{1,8}\\$[a-f0-9]{64,65536}$",
5052
+ "modes": [
5053
+ {
5054
+ "john": "ssh",
5055
+ "hashcat": 22911,
5056
+ "extended": false,
5057
+ "name": "OpenSSH private key (RSA/DSA/EC)",
5058
+ "samples": [
5059
+ "$sshng$0$8$7532262427635482$1224$e1b1690703b83fd0ab6677c89a00dfce57fc2f345ebd2b2993bf0d8bb267449d08839213dc234dd23c7a181077e00080ced2700a161c4352ce5574b9758926f09106157715b6d756cf6dd844e473c6bb3c2b591cdbf684394a49935f7d62bcc324c1392aee499e3d6235db0556d27adc6e35ef4654ee5fc72e60dff605484e75c6fd6ae29cb476f8a658dbcce9f9591a9dad023f6d9aa223c3d56261e056c5cafa93438937e0762b989cd10e6280a09488be07423c549514ff9686338e72dbe6bdc5015944739a9f183cacf04c1c141dc8c8d8aa8636c85a6c0578a5983ed33d5ff5ee6a66a54d86defd1c4f9d6a59446861bf4cc7bd667bc92b9d328c154f442d1d03d4d370dcc065a1d5420c5b71e4c35a457e11a0c9f489636559a2ac53bb4cfee2b0058f8a9d1ccc38a844ee0d1ff5d6938427bf24d6e4c69f10e6ebce9187d51e867ac3b362b9c6149712e8378a9ac91d1aab1a7a5f088ddbdead0cc754c30961b7a71284b5c6658f7219632de6007d5145a1ae062f807234230ff73a3436ce28ae3bfa0f880d1e49ec8a288da18db14905bc7a7b061a51c429876db81ad528efb469ba2bf46c7344aadc7d082efc83ede3894bf6b1738151e642f6f60a41069ad862d2f4f8d55733bd6d85086d1d9bb1913a9d4680ea0b49f712c590a3c18b91ef745b9bdf461af67879d94f9672de4abe0b7d2e4efba1f8bb6ffbb4a095742d5cff0e225b1b5e166854bb9821e4283d97f80855c81efea1eb3e7881a6049186650bfbf68f30302c069883668e373c12ce9a39de8d7c1be22a717d9c74410c45093aae03c5de8cc0ec662fe3bb81bf952e17b854001bcad9b36cab2f473a609878a419b735c66f3732bd5540fb1cba9fe081f87cecf63a6243cd2049dfa25a763ef2e0633bfb13a411207d8ca1c8f3c0c30b8a7583436cad7bd8c28ba625b9c53dc280b314671b0a55d75a28d3b21de250e3c554b86ca5d32821ab912c6607687c4dc5b3214216a7409621ce6fb89bd5309a7dd8ec9ae4b751bdfb6b5d12d733a89d87722dbdb1b15df5463241f0f56c401e095ea5dee07c0ded1f11ffbd7c93a41add0cfd8c57b44f255fdfd1929cd7d068d6cf951ba8ab0d718996fec10aaa26a4314d4c1272f744adf3c7e4d710ae171c072a7c61c2b020a445cf32be3083d3bc62083f2385bbae4fadddf8714258b996abd574638891bb918e877fdef3a4856b910999a6dc9dbd13c0e938825cd895c96d39cb86bb283a53fac7090c71a9320c6a34af309d2218af64c895f5eff8eee28cf94e7a7437a0922d83bfa39f08bb40e354d9ace07aa586a446dc217ede98b6ca9637545cc11ef56732fc9cd3dc06e459d868137b75d39a87e6721a95f2b84e57c94ef703486a2857821e497b990c95080015d825b6dc63d666f66cfa35912e607c3b650d81dc98c0c53322796ff9249cdfe7a375e1d01607816a85bb43f3969767a9aaed07161344e714d7e875b40f3524f95e476e605dbd2ac51e36075701fa93b66f36470796ebf5d35690a297e19729f9ac59d98622e3ad3e45a2914bdd2b807446c8b430e54c1a607fd25a69bf469a61d2e3bc3697b786c047bc60dbeabe6372d71e9b7c9787bb2559c663a011f864ecf32793e65f4bdd76370d99f602ddcbc7e5aa7d2749f36e8d0f209a378782882bc06ee5b5014c2a6248469f0fe0fc5369383db0bc898c0760b8c40fe20342fa5b"
5060
+ ]
5061
+ }
5062
+ ]
5063
+ },
5064
+ {
5065
+ "regex": "^\\$sshng\\$6\\$\\d\\$[a-f0-9]{16}\\$\\d{1,8}\\$[a-f0-9]{64,65536}$",
5066
+ "modes": [
5067
+ {
5068
+ "john": "ssh",
5069
+ "hashcat": 22921,
5070
+ "extended": false,
5071
+ "name": "OpenSSH private key (RSA/DSA/EC)",
5072
+ "samples": [
5073
+ "$sshng$6$8$7620048997557487$1224$13517a1204dc69528c474ef5cbb02d548698771f2a607c04ea54eb92f13dedba0f2185d2884b4db0c95ce6432856108ea2db858be443e0f8004ffcd60857e4ff1e42b17f056998ec5f96806a06e39cc6e6d7ef4ce8ae62b57b2ec0d0236c35cf4bc00dd6fda45e4788dcca0f0e44dddae1dad2d6e7b705d076f2f8fc5837eec4a002d9633bcad1f395ca8e85e78459abe293451567494d440c3f087bb7fe4d6588018f92ca327dda514a99d7b4b32434da0e3b1bf9344afb2fe29f8d8315a385fe8b81fd4c202c7d82cd9f0bb1600e59762ab6ea1b42e4e299f0a59ce510767e1e1138453d362d0a1aa6680e86b5aa0bd5c62165f4fe7c2867f9533578085adc36739d6c9cf7b36899aac39dcabac8b39194433423e8e18ba28496bbe14dd01231eb5b091ae9de0f7f9ea714c22edac394077fb758fe496e1880571ade399ac229457ddd98577f8a01a036ad3bc8b03a9fb02e26b4b76f6cb676eabe82d1606fca0c5fca62cd1d82c3df1ed58ab4acd4611b2827ebde722bc05e471a427225818aa36dabf5bf1203ccb0ebc8dec097e49f7f948bfe7b939e6d0ff1125b863c033768f588964f8b77ca1e2425751f873f80e5d6a0671f7860cf4a46533585094726c3afe5f7203fa4a01650fa9839772c713a033139cfc6a6e6f7dc62e5844d4c57ef4fc3321bc85d597a54bd6fe37e9e696cf3b5ec66f55232e0964dc5cf880d8a41a9891150618bd9c088fd9824af0d86f817f2c79429c3d56cd6eb41eb6120f9accc10a863f23a2bb6c57d4bd6193f2283ae0215e2e87e672a8438e2550c044fa9556bdb4afc40d8c2752ffbc6c95571756a3c230bb2fa95f519f8da238ef0857ecf860247a8b26e28269f9bad564e7d8bfba2eac9760b52449251cb35e183f5b309a09071535154c6f1013b58f305b544f3589c9eb0e9ac4267a84374a3eab49c53aa9bedbf97f8f19ebc212d8db74ee03554a3514140667fa4ce8e06aad3f32d1b00015be0e8979fe66736018589beee06d6f318851dbe8d9689e70202185d71fc5e5a3d2996ddb8ae1d7718c49855c6f8c43301e0915f324f30d0d9c6a8504a91ad5a7179aafb87ede58598394949910874850994abe815817359152ff6a7c8cc6f19524dfc5e50ddfd038a2275bf809e3c8f05ed3e3137ebd62d91cd3578533787c3847e3c5e07e5a891480e5ceabcf6c344e7bec8b640ab9a03e90b846b35d2f46ba150accef32d2597b064810b15fd54fca6d2b146feabcd05c0b51617ae95e36f6817a62c3ff42c5c2f6f1d20a8a1fd334d3b7d3f83bba057b79d9b5508bb0cb706ba00acb0ab797401fdcfac80b5b6e38e51aec0b38f33ff4690425ca28d88a2e876591521230150b4e20a4a82e50061cee9c0705100bfe5fdbd8ef27aec20387cf32455ef305bce2a91ae6da91fc41376b97149e9b41c901b24811df9272ff09718923b8d94e8e459a164a22b0eca47653f3efcbf08188c5da78cd9fb9eda1761094f9d8bc3d479e9f40c7d79ebaaba2a5c632329f20a9962040ff8f512b42c5f32a8460d87b8e93c6f980a1562c436eea1c8994fbf671dda3c4ccd3c142acfcdde2ab61227289ad408213ac8e22d9ef487f36925f5ba3b8e7e913d25c4a8592c861d13f03b615bc2760aabc61d68db80d35296a3312fdf4b56c0fbee5ab3fea1cf9caf3960a564046939e8002d2dd909db446d85aeae9dd42a33fe28684f722172e6"
5074
+ ]
5075
+ }
5076
+ ]
5077
+ },
5078
+ {
5079
+ "regex": "^\\$sshng\\$[13]\\$\\d{2}\\$[a-f0-9]{32}\\$\\d{1,8}\\$[a-f0-9]{64,65536}$",
5080
+ "modes": [
5081
+ {
5082
+ "john": "ssh",
5083
+ "hashcat": 22931,
5084
+ "extended": false,
5085
+ "name": "OpenSSH private key (RSA/DSA/EC)",
5086
+ "samples": [
5087
+ "$sshng$1$16$14987802644369864387956120434709$1232$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"
5088
+ ]
5089
+ }
5090
+ ]
5091
+ },
5092
+ {
5093
+ "regex": "^\\$sshng\\$4\\$\\d{2}\\$[a-f0-9]{32}\\$\\d{1,8}\\$[a-f0-9]{64,65536}$",
5094
+ "modes": [
5095
+ {
5096
+ "john": "ssh",
5097
+ "hashcat": 22941,
5098
+ "extended": false,
5099
+ "name": "OpenSSH private key (RSA/DSA/EC)",
5100
+ "samples": [
5101
+ "$sshng$4$16$01684556100059289727957814500256$1232$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"
5102
+ ]
5103
+ }
5104
+ ]
5105
+ },
5106
+ {
5107
+ "regex": "^\\$sshng\\$5\\$\\d{2}\\$[a-f0-9]{32}\\$\\d{1,8}\\$[a-f0-9]{64,65536}$",
5108
+ "modes": [
5109
+ {
5110
+ "john": "ssh",
5111
+ "hashcat": 22951,
5112
+ "extended": false,
5113
+ "name": "OpenSSH private key (RSA/DSA/EC)",
5114
+ "samples": [
5115
+ "$sshng$5$16$52935050547964524511665675049973$1232$febee392e88cea0086b3cdefd3efec8aedb6011ca4ca9884ef9776d09559109c328fd4daef62ea4094a588d90d4617bc0348cc1205ae140e5bdca4e81bf7a8ff4fcc9954d3548ba9a0d143a504750d04d41c455d6100b33dacc5f9a10036ae75be69a81471e945554a52ca12b95640a08f607eab70c4a750dc48917f3c9ee23c537e9b4a49728a9773a999dfd842cf9a38155029ea5d42f617dbec630889d078ffadaf3ff28eed65389a73528f3d0863fffd9a740edd59ca223595e330bca37ac5a003ac556d2b6232f9900fc8654586e73e7b2d83327d61b2fc561a78aacc8aff473bb3d18ddccae87d84de143a8a98550d955d01d4e6074ac62aa0af0bca58a0c53d0d7cf1a26345c1bd3eca7a0c0e711f5c7f942d50bc872be971d0c17dbc5a88f043a937ff5d28c5ef8d8d291e511d070b14a0cc696ee5088a944b113bc7e697cdc793e931c3f0f3a892b44aad1468e6c45becdcaa89febda17fcd5fe6ff430695e04b5b6271e032e3529315367e56337777a5b342c19d3ebc7441ac0f79b93749ad4526b8be0a5cf5756363aac93da6dc19dbfff15bacbbf2dae7a549afdab8e0589321ac0a612576bbfe06fde086075d1244450a3667f793ccc81fd5ccc5b1d08e6f447e3e0cd89b901049bedb1e65b23ede0d8f00ff1c984743b50342c50408e9060ed6a809a7b068972c9542cd91de0767c02a73d192ea600008bf4a6ef339c7f2db767346cc479e61abedb4ba4a67f72e91ac49a2e92bb4bacd97aed0b044c258e2004fa0fb8da3678a57d37187c1246c90a107540161462145fa7307a6d4db34694fb1b090f07bedb9ca0e71aefd3ce5601b87778fd6b66391c3c61d528a5965f91370f52a72f0622620329f96c5dd68561e0f6576f3a2bc5c21a95aed569edc4ed979746b32909178e550907c5f41d7b24480e81a874b931c23f13517ab5f9331f11819d982bf9e5b8a03034b47c8785f8902611eac26716976bccd51d19864f10ee1fbd62f8b0149c22ab06205a20f9f9fcb0a5279552a8923c3ace2e134f6b190653f430c1a4b82f762283028d9c0c8d1a3428731f4f405f40f947f297a43aa3ba2267bbc749a5677da92a63d51d24aa5ca3e9e1d35a8143d7b4bac481f0c56754e980a60cf2d330797fc81f6c6f405760f1257103ac6edf10976c9005f4a261f7aad055400c4f18dc445eb3a403740ad6c58afa4e8edb30fad907488baf0ede2eb3d3687d1e8724dd69c7bd14b90d4f113fc9f84a2c01ab00917f53cd879a4031b1c91a4d4d7d9e712a584959137001d331f6725dca81ea6cc55fac7fc0e8b578dec0983ca98c3789cdf83507e4c3ba056fdcbea26693a313077290d7c6695f4cc6de4848532f0149cc06dbf4c76d02944178520585923b636196ea2cbcacc43950b308fc7929e85de076a2ab65c9bd8ebb0c04c041281178a48d8d2165d315b3e74abf0a38505b71ae5b2a6e7f87861e174cff873a1f61980b53ef3acdd2ea6a25425b162e5dc0bc1aa2992585d2da1625a6593cc2d4fe8c86eeb4df0e27cda54685f7245e5c48063d489e8d93bd5303bebe633139dcdd04afa005d03d1185a64e8711c0b09d9d0b38b35d6ef1b1e35353a7a4396863650a3843c687a00396dd3db53e8d28baf29101abb9f628ba896b091618f24187f6eeb814e4b64130768fb37e89b9b3230e50a7e5aba852a983525c8f193deb1fe27b334cdc3bdfa4c301d04907ee29a848393"
5116
+ ]
5117
+ }
5118
+ ]
5119
+ },
5120
+ {
5121
+ "regex": "^\\$bitlocker\\$\\d\\$\\d{2}\\$[a-f0-9]{32}\\$\\d{7}\\$\\d{2}\\$[a-f0-9]{24}\\$\\d{2}\\$[a-f0-9]{120}$",
5122
+ "modes": [
5123
+ {
5124
+ "john": "bitlocker",
5125
+ "hashcat": 22100,
5126
+ "extended": false,
5127
+ "name": "BitLocker",
5128
+ "samples": [
5129
+ "$bitlocker$1$16$6f972989ddc209f1eccf07313a7266a2$1048576$12$3a33a8eaff5e6f81d907b591$60$316b0f6d4cb445fb056f0e3e0633c413526ff4481bbf588917b70a4e8f8075f5ceb45958a800b42cb7ff9b7f5e17c6145bf8561ea86f52d3592059fb",
5130
+ "$bitlocker$0$16$134bd2634ba580adc3758ca5a84d8666$1048576$12$9080903a0d9dd20103000000$60$0c52fdd87f17ac55d4f4b82a00b264070f36a84ead6d4cd330368f7dddfde1bdc9f5d08fa526dae361b3d64875f76a077fe9c67f44e08d56f0131bb2",
5131
+ "$bitlocker$0$16$9079aaee7be0923b529f069012f30b13$1048576$12$40ea50c2b79fd20103000000$60$caca601f042fae0eb697593e559760f8209d495ed0b61eda9c83a79f0abb3f598853b6f89cdffd3b5b66b90b321b822c90c8ef5dac464ef6edd06881",
5132
+ "$bitlocker$0$16$c971c02f4f7bb07a196ff8cdf6a3f588$1048576$12$00bf2f62c726d30103000000$60$000000000000000000000000000000001f7b4f5bfb33b1261d9134e2b37039b1a6955748f43207cccb1adfe14c2347e288d36b5384df57099f57cd41",
5133
+ "$bitlocker$0$16$c7258b6a1824c5f57e7456d8304c9bb2$1048576$12$f0b876adc826d30103000000$60$00000000000000000000000000000000695f6c513124321aaf9d27fa1330c03445a34401a430b0fcfb258cbb53d1af466f06ef8127ef37bef2787c81",
5134
+ "$bitlocker$3$16$432dd19f37dd413a88552225628c8ae5$1048576$12$a0da3fc75f6cd30106000000$60$3e57c68216ef3d2b8139fdb0ec74254bdf453e688401e89b41cae7c250739a8b36edd4fe86a597b5823cf3e0f41c98f623b528960a4bee00c42131ef"
5135
+ ]
5136
+ }
5137
+ ]
5138
+ },
5139
+ {
5140
+ "regex": "^\\$odf\\$\\*1\\*1\\*\\d{4,6}\\*\\d{2}\\*[a-f0-9]{64}\\*\\d{2}\\*[a-f0-9]{32}\\*\\d{2}\\*[a-f0-9]{32}\\*\\d\\*[a-f0-9]{2048}$",
5141
+ "modes": [
5142
+ {
5143
+ "john": "odf",
5144
+ "hashcat": 18400,
5145
+ "extended": false,
5146
+ "name": "Open Document Format (ODF) 1.2 (SHA-256, AES)",
5147
+ "samples": [
5148
+ "$odf$*1*1*100000*32*751854d8b90731ce0579f96bea6f0d4ac2fb2f546b31f1b6af9a5f66952a0bf4*16*2185a966155baa9e2fb597298febecbc*16*c18eaae34bcbbe9119be017fe5f8b52d*0*051e0f1ce0e866f2b771029e03a6c7119aad132af54c4e45824f16f61f357a40407ab82744fe6370c7b2346075fcd4c2e58ab244411b3ab1d532a46e2321599ef13c3d3472fc2f14d480d8c33215e473da67f90540279d3ef1f62dde314fa222796046e496c951235ddf88aa754620b7810d22ebc8835c90dce9276946f52b8ea7d95d2f86e4cc725366a8b3edacc2ce88518e535991a5f84d5ea8795dc02bfb731b5f202ecaf7d4b245d928c4248709fcdf3fba2acf1a08be0c1eee7dbeda07e8c3a6983565635e99952b8ad79d31c965f245ae90b5cc3dba6387898c66fa35cad9ac9595c41b62e68efcdd73185b38e220cf004269b77ec6974474b03b7569afc3b503a2bf8b2d035756f3f4cb880d9ba815e5c944508a0bde214076c35bf0e0814a96d21ccaa744c9056948ed935209f5c7933841d2ede3d28dd84da89d477d4a0041ce6d8ddab891d929340db6daa921d69b46fd5aee306d0bcef88c38acbb495d0466df7e2f744e3d10201081215c02db5dd479a4cda15a3338969c7baec9d3d2c378a8dd30449319b149dc3b4e7f00996a59fcb5f243d0df2cbaf749241033f7865aefa960adfeb8ebf205b270f90b1f82c34f80d5a8a0db7aec89972a32f5daa2a73c5895d1fced01b3ab8e576bd2630eff01cad97781f4966d4b528e1b15f011f28ae907a352073c96b203adc7742d2b79b2e2f440b17e7856ae119e08d15d8bdf951f6d4a3f9b516da2d9a8f9dd93488f8e0119f3da19138ab787f0d7098a652cccd914aa0ff81d375bd6a5a165acc936f591639059287975cfc3ca4342e5f9501b3249a76d14e56d6d56b319e036bc0449ac7b5afa24ffbea11babed8183edf8d4fdca1c3f0d23bfd4a02797627d556634f1a9304e03737604bd86f6b5a26aa687d6df73383e0f7dfe62a131e8dbb8c3f4f13d24857dd29d76984eac6c45df7428fc79323ffa1f4e7962d705df74320141ed1f16d1ad483b872168df60315ffadbfa1b7f4afaed8a0017421bf5e05348cb5c707a5e852d6fee6077ec1c33bc707bcd97b7701ee05a03d6fa78b0d31c8c97ea16e0edf434961bd5cc7cbb7eb2553730f0405c9bd21cee09b3f7c1bc57779fdfc15f3935985737a1b522004c4436b631a39a66e8577a03f5020e6aa41952c0662c8c57f66caa483b47af38b8cb5d457245fd3241749e17433e6f929233e8862d7c584111b1991b2d6e94278e7e6e1908cee5a83d94c78b75a84a695d25aeb9fdde72174fe6dd75e8d406671f44892a385a4a1e249f61ebc993e985607423a0a5742e668d52c1ebf5cecae7c2b7908f4627b92ec49354a9ccff8cb5763ad074a00e65a485a41bf4c25ce7e6fae49358a58547b1c0ca79713e297310c0a367c3de196f1dd685ca4be643bdf1e4f6b034211d020557e37a3b6614d061010b4a3416b6b279728c245d3322",
5149
+ "$odf$*1*1*1024*32*61802eba18eab842de1d053809ba40927fd40b26c69ddeca6a8a652ed9c16a28*16*c5c0815b931f313627100d592a9c972f*16*e9a48b7daff738deaabe442007fb2ec4*0*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",
5150
+ "$odf$*1*1*1024*32*7db40092b3857fa319bc0d717b60cefc40b1d51ef92ebc893c518ffebffdf200*16*5f7c8ab6e5d1c41dbd23c384fee957ed*16*9ff092f2dd29dab6ce5fb43ad7bbdd5a*0*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",
5151
+ "$odf$*1*1*100000*32*3d7d3b74666814c1a50e4a68ce264198db4730ddc4f07f57647b6147143db261*16*60b496b3fee4ccfbc4512ff9a9ec2d59*16*841daefbb62e7b5ea50a4838f310ef7b*0*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"
5152
+ ]
5153
+ }
5154
+ ]
5155
+ },
5156
+ {
5157
+ "regex": "^\\$odf\\$\\*0\\*0\\*\\d{4,6}\\*\\d{2}\\*[a-f0-9]{40}\\*\\d\\*[a-f0-9]{16}\\*\\d{2}\\*[a-f0-9]{32}\\*\\d\\*[a-f0-9]{2048}$",
5158
+ "modes": [
5159
+ {
5160
+ "john": "odf",
5161
+ "hashcat": 18600,
5162
+ "extended": false,
5163
+ "name": "Open Document Format (ODF) 1.1 (SHA-1, Blowfish)",
5164
+ "samples": [
5165
+ "$odf$*0*0*1024*16*bff753835f4ea15644b8a2f8e4b5be3d147b9576*8*ee371da34333b69d*16*a902eff54a4d782a26a899a31f97bef4*0*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",
5166
+ "$odf$*0*0*1024*16*df6c10f64d191a841812af53874b636d014ce3fe*8*07e28aff39d2660e*16*b124be9f3346fb77e0ebcc3bb80028f8*0*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"
5167
+ ]
5168
+ }
5169
+ ]
5170
+ },
5171
+ {
5172
+ "regex": "^\\$sxc\\$\\*0\\*0\\*\\d{4,6}\\*\\d{2}\\*[a-f0-9]{40}\\*\\d\\*[a-f0-9]{16}\\*\\d{2}\\*[a-f0-9]{32}\\*\\d{1,4}\\*\\d{1,4}\\*[a-f0-9]+$",
5173
+ "modes": [
5174
+ {
5175
+ "john": "odf",
5176
+ "hashcat": null,
5177
+ "extended": false,
5178
+ "name": "Open Document Format (ODF) 1.1 (SHA-1, Blowfish) (buggy StarOffice)",
5179
+ "samples": [
5180
+ "$sxc$*0*0*1024*16*00c20dee73d4990cfe1c8faf92ab5b0f517e0e19*8*36a0707abdd14c24*16*b6763f444c0a350458f25cf3957ca293*756*760*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",
5181
+ "$sxc$*0*0*1024*16*4448359828281a1e6842c31453473abfeae584fb*8*dc0248bea0c7508c*16*1d53770002fe9d8016064e5ef9423174*860*864*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",
5182
+ "$sxc$*0*0*1024*16*64983af0b26a6ee614e6c65b32c1d906f70c6397*8*259cafe530bd09f8*16*8f53ea878d0795cfe05dcc65fb272c20*1024*1024*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"
5183
+ ]
5184
+ }
5185
+ ]
5186
+ },
5187
+ {
5188
+ "regex": "^\\$sip\\$\\*[^*]{0,512}\\*[^*]{0,512}\\*[^*]{0,116}\\*[^*]{0,116}\\*[^*]{0,246}\\*[^*]{0,245}\\*[^*]{0,246}\\*[^*]{0,245}\\*[^*]{1,1024}\\*[^*]{0,1024}\\*[^*]{0,1024}\\*[^*]{0,1024}\\*[^*]{3}\\*[a-f0-9]{32}$",
5189
+ "modes": [
5190
+ {
5191
+ "john": "sip",
5192
+ "hashcat": 11400,
5193
+ "extended": false,
5194
+ "name": "SIP digest authentication (MD5)",
5195
+ "samples": [
5196
+ "$sip$*72087*1215344588738747***342210558720*737232616*1215344588738747*8867133055*65600****MD5*e9980869221f9d1182c83b0d5e56a7db",
5197
+ "$sip$*192.168.100.100*192.168.100.121*username*asterisk*REGISTER*sip*192.168.100.121**2b01df0b****MD5*ad0520061ca07c120d7e8ce696a6df2d",
5198
+ "$sip$*192.168.1.111*192.168.1.104*200*asterisk*REGISTER*sip*192.168.1.104**46cce857****MD5*4dfc7515936a667565228dbaa0293dfc",
5199
+ "$sip$*192.168.1.110*192.168.1.110*user151*Apple*REGISTER*sip*192.168.1.110*5060*b57aa7088ae5cac88d298d66f2c809cd****MD5*77795e92300dcc3c2fd974b2b47e5f0c",
5200
+ "$sip$*192.168.44.162*192.168.44.11*12315*asterisk*REGISTER*sip*192.168.44.11**825f321ad9886ef434788ebfb8dbf150*b78b5a31*00000001*auth*MD5*23802bb930873797f0c7a1f0e595a94e"
5201
+ ]
5202
+ }
5203
+ ]
4201
5204
  }
4202
5205
  ]