+- Hack Forums (https://hackforums.net)
+-- Forum: Hacks, Exploits, and Various Discussions (https://hackforums.net/forumdisplay.php?fid=45)
+--- Forum: Grayhat • Purple Team • Hybrid Security (https://hackforums.net/forumdisplay.php?fid=449)
+---- Forum: Beginner Hacking (https://hackforums.net/forumdisplay.php?fid=4)
+---- Thread: Brute Forcing a RAR3 hash (/showthread.php?tid=5982447)
Brute Forcing a RAR3 hash - dunkermex - Jun 23, 2019
so i have a hash for a Rar file its very small 164 bytes, however i need to know the contents of whats inside of this rar file and there is currently no clue about what the password might be, here is the hash extracted by john the ripper and reached 6/15 characters with hashcat brute forcing, but i guess my hardware isnt doing this fast enough, any ideas would be greatly appreciated
Code
$RAR3$*0*03ff96533b4193ca*19e0098d2c0baa80ded217ce658beca5if we could maybe guess how long the password is or something, or any ideas would be very helpfull to get this cracked
RE: Brute Forcing a RAR3 hash - CyberStrike - Jun 23, 2019
John the ripper or hashcat /rarcrack will help greatly, RAR files which are encrypted with 128/256 AES which basically means that it'd be cracked in time for Pangea to be once again. You can try bruteforcing of course who knows some people have crummy passwords. If you want to have an idea of the contents you can use less command in Linux I used this a few times with zip files not yet with rar files, but worth a try unrar has a "list" option once again not sure how it would work since without the password the files are not extracted.
RE: Brute Forcing a RAR3 hash - dunkermex - Jun 23, 2019
(Jun 23, 2019 06:46 AM)CyberStrike Wrote: John the ripper or hashcat /rarcrack will help greatly, RAR files which are encrypted with 128/256 AES which basically means that it'd be cracked in time for Pangea to be once again. You can try bruteforcing of course who knows some people have crummy passwords. If you want to have an idea of the contents you can use less command in Linux I used this a few times with zip files not yet with rar files, but worth a try unrar has a "list" option once again not sure how it would work since without the password the files are not extracted.
thanks for the hint i'll give that a try maybe we get something out of it
just to confirm using less against the rar file didnt work
RE: Brute Forcing a RAR3 hash - CyberStrike - Jun 24, 2019
(Jun 23, 2019 06:49 AM)dunkermex Wrote: thanks for the hint i'll give that a try maybe we get something out of it
just to confirm using less against the rar file didnt work
Tell ya what I'll do some testing and see where it goes.
Edit: I made an excrypted rar and opened it in ghex I oddly found the file which I had compressed and the file is encrypted.
![[Image: rar-hex.png]](https://i.ibb.co/TPzwGnb/rar-hex.png)
Now I used WinRAR 5.20
unrar l also produced a file list
RE: Brute Forcing a RAR3 hash - dunkermex - Jun 25, 2019
thats intersting, cuze i just hit a wall on cracking the hash with hashcat xD it will take a million years so no thanks, i'll attempte this approach and see what i get
doesnt seem like it will work on my case
RE: Brute Forcing a RAR3 hash - CyberStrike - Jun 25, 2019
(Jun 25, 2019 12:10 AM)dunkermex Wrote: thats intersting, cuze i just hit a wall on cracking the hash with hashcat xD it will take a million years so no thanks, i'll attempte this approach and see what i get
doesnt seem like it will work on my case
I am not cracking or messing with the password simply listing the files that is all that way you can make a decision on whether or not you wish to crack or attempt to crack it.
RE: Brute Forcing a RAR3 hash - DramaKing - Aug 26, 2023
(Aug 26, 2023 03:16 AM)lilone Wrote: hello friend sorry for the inconvenience
I have a big problem right now is that I have a $RAR3$*1 file and I tried all the possible ways that I found on forums like John or HashCat but nothing or impossible for me
Reviving a 4-year-old post? Anyway, you just haven't tried the right password yet. Password cracking is playing percentages.
RE: Brute Forcing a RAR3 hash - account_ - Aug 26, 2023
(Aug 26, 2023 03:16 AM)lilone Wrote: hello friend sorry for the inconvenience
I have a big problem right now is that I have a $RAR3$*1 file and I tried all the possible ways that I found on forums like John or HashCat but nothing or impossible for me
Post the hash when you have it.