haiti-hash 1.1.1 → 1.1.2

checksums.yaml

@@ -1,7 +1,7 @@
 ---
 SHA256:
-  metadata.gz: 482916c210a6e719f9399388f466ff3a394abeea38805aa6075113edcdb24320
-  data.tar.gz: 2ed345caa5a2491c2d6d1e2bd510abd06d7f53a59a46af07a25b08412ff9e4d5
+  metadata.gz: c97cfd3205f66d6279408925c133f2396fe689de4043658ab12dfd6a8fd34dc9
+  data.tar.gz: 24f3fc2682d3a6a43572db3754a5b2338f36584a9cd0c524a50ae4348787e49d
 SHA512:
-  metadata.gz: 51d6ec610fdc96bdd94e84a4ba33eb037fc73c75e91ca329cb5ed9285e603d7899a0ea8c60d687fd6fd7c50c23129f1f193a464a4bfa548c63d8a0417456fa11
-  data.tar.gz: 3ae92a1ddef2d64ed8ee203ba0c592e0e727931e04f1d551ed30bc4824237e9b5496af3f11db98660019bdae5cc80210217f89b6bfc0d6224cb418a44346d961
+  metadata.gz: dd3ad9f60423a751dcfaa424dd82a15dac9c653f982fb393e05355e6a1acaacabf0cb68ca5a5608b053093a9d1bf2a28e53c7113374d397b86fc540669c407ec
+  data.tar.gz: ddcf5251e1c98a7ef95d5e09384cc84ef4a9d41840514be1002875f9a08eaaf937464c65c6176cbe8a1d97060d0cdc3f6b2a99e44f0d6fe1ce52a82e642cfa5d

data/data/prototypes.json

@@ -231,6 +231,18 @@
                 "hashcat": null,
                 "extended": false,
                 "name": "CRC-96(ZIP)"
+            },
+            {
+                "john": null,
+                "hashcat": 20500,
+                "extended": false,
+                "name": "PKZIP Master Key"
+            },
+            {
+                "john": null,
+                "hashcat": 20510,
+                "extended": false,
+                "name": "PKZIP Master Key (6 byte optimization)"
             }
         ]
     },
@@ -1761,7 +1773,7 @@
             },
             {
                 "john": "raw-blake2",
-                "hashcat": 600,
+                "hashcat": null,
                 "extended": false,
                 "name": "BLAKE2-512"
             },
@@ -1845,6 +1857,18 @@
             }
         ]
     },
+    {
+        "regex": "^\\$BLAKE2\\$[a-f0-9]{128}$",
+        "modes": [
+            {
+                "john": "raw-blake2",
+                "hashcat": 600,
+                "extended": false,
+                "name": "BLAKE2-512"
+            }
+        ]
+    },
+
     {
         "regex": "^[a-f0-9]{136}$",
         "modes": [
@@ -2648,7 +2672,7 @@
         "regex": "^\\$office\\$\\*2010\\*[0-9]{6}\\*[0-9]{3}\\*[0-9]{2}\\*[a-z0-9]{32}\\*[a-z0-9]{32}\\*[a-z0-9]{64}$",
         "modes": [
             {
-                "john": null,
+                "john": "office",
                 "hashcat": 9500,
                 "extended": false,
                 "name": "Microsoft Office 2010"
@@ -2659,10 +2683,21 @@
         "regex": "^\\$office\\$\\*2013\\*[0-9]{6}\\*[0-9]{3}\\*[0-9]{2}\\*[a-z0-9]{32}\\*[a-z0-9]{32}\\*[a-z0-9]{64}$",
         "modes": [
             {
-                "john": null,
+                "john": "office",
                 "hashcat": 9600,
                 "extended": false,
-                "name": "Microsoft Office 2013"
+                "name": "Microsoft Office 2013 - 2019"
+            }
+        ]
+    },
+    {
+        "regex": "^\\$office\\$2016\\$[0-9]\\$[0-9]{6}\\$[^$]{24}\\$[^$]{88}$",
+        "modes": [
+            {
+                "john": null,
+                "hashcat": 25300,
+                "extended": false,
+                "name": "Microsoft Office 2016 - SheetProtection"
             }
         ]
     },
@@ -2704,19 +2739,19 @@
         "regex": "^\\$oldoffice\\$[34]\\*[a-f0-9]{32}\\*[a-f0-9]{32}\\*[a-f0-9]{40}$",
         "modes": [
             {
-                "john": null,
+                "john": "oldoffice",
                 "hashcat": 9800,
                 "extended": false,
                 "name": "Microsoft Office \u2264 2003 (SHA1+RC4)"
             },
             {
-                "john": null,
+                "john": "oldoffice",
                 "hashcat": 9810,
                 "extended": false,
                 "name": "Microsoft Office \u2264 2003 (SHA1+RC4) collider-mode #1"
             },
             {
-                "john": null,
+                "john": "oldoffice",
                 "hashcat": 9820,
                 "extended": false,
                 "name": "Microsoft Office \u2264 2003 (SHA1+RC4) collider-mode #2"
@@ -2878,7 +2913,35 @@
         ]
     },
     {
-        "regex": "^\\$pdf\\$[24]\\*[34]\\*128\\*[0-9\\-]{1,5}\\*1\\*(16|32)\\*[a-f0-9]{32,64}\\*32\\*[a-f0-9]{64}\\*(8|16|32)\\*[a-f0-9]{16,64}$",
+        "regex": "^\\$pdf\\$1\\*2\\*[0-9]{2}\\*[-0-9]{1,6}\\*[0-9]\\*[0-9]{2}\\*[a-f0-9]{32}\\*[0-9]{2}\\*[a-f0-9]{64}\\*[0-9]{2}\\*[a-f0-9]{64}$",
+        "modes": [
+            {
+                "john": "pdf",
+                "hashcat": 10400,
+                "extended": false,
+                "name": "PDF 1.1 - 1.3 (Acrobat 2 - 4)"
+            },
+            {
+                "john": "pdf",
+                "hashcat": 10410,
+                "extended": false,
+                "name": "PDF 1.1 - 1.3 (Acrobat 2 - 4), collider #1"
+            }
+        ]
+    },
+    {
+        "regex": "^\\$pdf\\$1\\*2\\*[0-9]{2}\\*[-0-9]{1,6}\\*[0-9]\\*[0-9]{2}\\*[a-f0-9]{32}\\*[0-9]{2}\\*[a-f0-9]{64}\\*[0-9]{2}\\*[a-f0-9]{64}:[a-f0-9]{10}$",
+        "modes": [
+            {
+                "john": "pdf",
+                "hashcat": 10420,
+                "extended": false,
+                "name": "PDF 1.1 - 1.3 (Acrobat 2 - 4), collider #2"
+            }
+        ]
+    },
+    {
+        "regex": "^\\$pdf\\$[24]\\*[34]\\*128\\*[0-9\\-]{1,6}\\*1\\*(16|32)\\*[a-f0-9]{32,64}\\*32\\*[a-f0-9]{64}\\*(8|16|32)\\*[a-f0-9]{16,64}$",
         "modes": [
             {
                 "john": "pdf",
@@ -2888,6 +2951,23 @@
             }
         ]
     },
+    {
+        "regex": "^\\$pdf\\$5\\*[5|6]\\*[0-9]{3}\\*[-0-9]{1,6}\\*[0-9]\\*[0-9]{1,4}\\*[a-f0-9]{0,1024}\\*[0-9]{1,4}\\*[a-f0-9]{0,1024}\\*[0-9]{1,4}\\*[a-f0-9]{0,1024}\\*[0-9]{1,4}\\*[a-f0-9]{0,1024}\\*[0-9]{1,4}\\*[a-f0-9]{0,1024}$",
+        "modes": [
+            {
+                "john": "pdf",
+                "hashcat": 10600,
+                "extended": false,
+                "name": "PDF 1.7 Level 3 (Acrobat 9)"
+            },
+            {
+                "john": "pdf",
+                "hashcat": 10700,
+                "extended": false,
+                "name": "PDF 1.7 Level 8 (Acrobat 10 - 11)"
+            }
+        ]
+    },
     {
         "regex": "^\\$bitcoin\\$[0-9]{2,4}\\$[a-fA-F0-9$]{250,350}$",
         "modes": [
@@ -2970,5 +3050,93 @@
                 "name": "iTunes backup >= 10.0"
             }
         ]
+    },
+    {
+        "regex": "^\\$telegram\\$0\\*[a-f0-9]{64}\\*[0-9]{32}$",
+        "modes": [
+            {
+                "john": null,
+                "hashcat": 22301,
+                "extended": false,
+                "name": "Telegram Mobile App Passcode (SHA256)"
+            }
+        ]
+    },
+    {
+        "regex": "^\\$telegram\\$1\\*4000\\*[a-f0-9]{64}\\*[a-f0-9]{576}$",
+        "modes": [
+            {
+                "john": "telegram",
+                "hashcat": null,
+                "extended": false,
+                "name": "Telegram Desktop 1.3.9"
+            }
+        ]
+    },
+    {
+        "regex": "^\\$telegram\\$2\\*100000\\*[a-f0-9]{64}\\*[a-f0-9]{576}$",
+        "modes": [
+            {
+                "john": "telegram",
+                "hashcat": null,
+                "extended": false,
+                "name": "Telegram Desktop \u2265 2.1.14-beta / 2.2.0"
+            }
+        ]
+    },
+    {
+        "regex": "^\\$7z\\$[0-9]{1,3}\\$[0-9]{1,2}\\$[0-9]{1}\\$[^$]{0,64}\\$[0-9]{1,2}\\$[a-f0-9]{32}\\$[0-9]{1,10}\\$[0-9]{1,6}\\$[0-9]{1,6}\\$[a-f0-9]{2,}$",
+        "modes": [
+            {
+                "john": "7z",
+                "hashcat": 11600,
+                "extended": false,
+                "name": "7-zip"
+            }
+        ]
+    },
+    {
+        "regex": "^\\$zip3\\$\\*[0-9]\\*[0-9]\\*128\\*[0-9]\\*[a-f0-9]{0,32}\\*[a-f0-9]{288}\\*[0-9]\\*[0-9]\\*[0-9]\\*[^\\s]{0,64}$",
+        "modes": [
+            {
+                "john": "securezip",
+                "hashcat": 23001,
+                "extended": false,
+                "name": "SecureZIP AES-128"
+            }
+        ]
+    },
+    {
+        "regex": "^\\$zip3\\$\\*[0-9]\\*[0-9]\\*192\\*[0-9]\\*[a-f0-9]{0,32}\\*[a-f0-9]{288}\\*[0-9]\\*[0-9]\\*[0-9]\\*[^\\s]{0,64}$",
+        "modes": [
+            {
+                "john": "securezip",
+                "hashcat": 23002,
+                "extended": false,
+                "name": "SecureZIP AES-192"
+            }
+        ]
+    },
+    {
+        "regex": "^\\$zip3\\$\\*[0-9]\\*[0-9]\\*256\\*[0-9]\\*[a-f0-9]{0,32}\\*[a-f0-9]{288}\\*[0-9]\\*[0-9]\\*[0-9]\\*[^\\s]{0,64}$",
+        "modes": [
+            {
+                "john": "securezip",
+                "hashcat": 23003,
+                "extended": false,
+                "name": "SecureZIP AES-256"
+            }
+        ]
+    },
+    {
+        "regex": "^\\$pkzip2?\\$[a-f0-9\\*]+\\$\/pkzip2?\\$$",
+        "modes": [
+            {
+                "john": "pkzip",
+                "hashcat": null,
+                "extended": false,
+                "name": "PKZIP"
+            }
+        ]
     }
 ]

data/lib/haiti/version.rb

@@ -1,5 +1,5 @@
 # frozen_string_literal: true
 
 module Version
-  VERSION = '1.1.1'
+  VERSION = '1.1.2'
 end

metadata

@@ -1,14 +1,14 @@
 --- !ruby/object:Gem::Specification
 name: haiti-hash
 version: !ruby/object:Gem::Version
-  version: 1.1.1
+  version: 1.1.2
 platform: ruby
 authors:
 - Alexandre ZANNI
 autorequire:
 bindir: bin
 cert_chain: []
-date: 2021-04-27 00:00:00.000000000 Z
+date: 2021-06-10 00:00:00.000000000 Z
 dependencies:
 - !ruby/object:Gem::Dependency
   name: docopt