Hashcat#

hello as md5, candidate=hello:

hashcat -a3 -m0 -o2 -w2 -O -D2 $(echo -n hello | md5sum | awk '{ print $1 }') hello

hello as md5, candidate=<any string of 5 alpha chars>:

hashcat -a3 -m0 -o2 -w2 -O -D2 $(echo -n hello | md5sum | awk '{ print $1 }') '?l?l?l?l?l'

<something random with 5 chars> as md5, candidate=<any string of 5 alpha chars>:

s=$(pwgen --no-numerals --no-capitalize 5 1)
echo $s
echo =====
hashcat -a3 -m0 -o2 -w2 -O -D2 $(echo -n $s | md5sum | awk '{ print $1 }') '?l?l?l?l?l'

<something random with 8 chars> as md5, candidate=<any string of 8 alpha chars> –> seconds:

n=8
s=$(pwgen --no-numerals --no-capitalize $n 1)
echo $s
echo =====
hashcat -a3 -m0 -o2 -w2 -O -D2 $(echo -n $s | md5sum | awk '{ print $1 }') $(python -c "print('?l'*$n)")

<something random with 8 lowercase + numerics> as md5, candidate=<any string of 8 alphanumerics> –> XXX:

n=8
s=$(pwgen --numerals --no-capitalize $n 1)
# pw as input:
# read -p 'Password: ' -s s
cs=?l?d
echo $s
echo =====
hashcat -1 $cs -a3 -m0 -o2 -w2 -O -D2 $(echo -n $s | md5sum | awk '{ print $1 }') $(python -c "print('?1'*$n)")

<something random with 8 alphanumerics> as md5, candidate=<any string of 8 alphanumerics> –> ~2h:

n=8
s=$(pwgen --numerals --capitalize $n 1)
cs=?l?u?d
echo $s
echo =====
hashcat -1 $cs -a3 -m0 -o2 -w2 -O -D2 $(echo -n $s | md5sum | awk '{ print $1 }') $(python -c "print('?1'*$n)")

syntax: https://hashcat.net/wiki/doku.php?id=mask_attack

TBD: firefox master hash: lclevy/firepwd

cd ~/.mozilla/firefox/*.default/
file key4.db
# key4.db: SQLite 3.x database