philsmd
|
12517f1b7a
|
typo: don't add URI_prefix_len and URI_suffix_len twice
|
2017-02-15 11:50:35 +01:00 |
|
philsmd
|
02480f906a
|
prevent buffer overflow in case of OPTS_TYPE_ST_ADD80 and/or OPTS_TYPE_ST_ADD01
|
2017-02-15 11:33:52 +01:00 |
|
philsmd
|
0993f2e748
|
fixed maximum salt_len for pbkdf2 buffers
|
2017-02-14 22:05:47 +01:00 |
|
philsmd
|
54915e4d7b
|
minor: do not use UINT_MAX as upper bound for the salt_len
|
2017-02-14 21:54:49 +01:00 |
|
philsmd
|
f351461ecd
|
max esalt_buf for sip fixed: we also need to append 0x80
|
2017-02-14 21:45:18 +01:00 |
|
jsteube
|
be3ce44f75
|
Fix CID 1402444 (#1 of 1): Out-of-bounds read
|
2017-02-14 21:40:11 +01:00 |
|
philsmd
|
f535eb2bd0
|
always check the input for NULL before the strtok_r () calls
|
2017-02-14 20:46:03 +01:00 |
|
philsmd
|
12047861c5
|
also double-check input/output of strtok_r ()
|
2017-02-14 20:07:49 +01:00 |
|
philsmd
|
a82f6fb77c
|
our usage of strtok_r () was not totally correct (but almost)
|
2017-02-14 19:48:07 +01:00 |
|
philsmd
|
e5ecbb9a59
|
minor: within parse_and_store_salt () do the initialization of the buffer at the very start
|
2017-02-14 19:30:36 +01:00 |
|
philsmd
|
05f8abdbe7
|
minor: useless code (since we removed the swaps)
|
2017-02-14 19:17:45 +01:00 |
|
philsmd
|
7818712090
|
minor: check for return value of sscanf () within the zip2 parse function
|
2017-02-14 18:58:25 +01:00 |
|
philsmd
|
9efc429928
|
dead code: in office parse functions
|
2017-02-14 18:49:35 +01:00 |
|
philsmd
|
4eadbf221e
|
dead code: already implied length within the android fde parsing function
|
2017-02-14 18:25:20 +01:00 |
|
philsmd
|
8fa361dffa
|
dead code: already implied length within the android fde parsing function
|
2017-02-14 18:22:46 +01:00 |
|
philsmd
|
d366a93bb3
|
we always need to check for NULL after strchr ()
|
2017-02-14 17:54:18 +01:00 |
|
philsmd
|
49ba6cb05d
|
-m 13100 = Kerberos 5 TGS-REP: parser failed to correctly verify the hash
|
2017-02-14 17:45:05 +01:00 |
|
philsmd
|
6915bfad8b
|
keyfiles: for VeraCrypt/TrueCrypt keyfiles we need to free the memory in case of errors
|
2017-02-14 17:32:39 +01:00 |
|
philsmd
|
23368c7304
|
fix: added additional fclose () whenever an hash parsing error occurs
|
2017-02-14 17:22:52 +01:00 |
|
philsmd
|
553eddad49
|
-m 11400 = SIP digest authentication (MD5): added bound checks in parser
|
2017-02-14 15:58:44 +01:00 |
|
philsmd
|
67a8584f7c
|
precompute_salt_md5: don't allow a salt_len > 64
|
2017-02-14 15:27:31 +01:00 |
|
philsmd
|
0771a8e36a
|
fix: we should initialize the aes_key in seven_zip_hook_func ()
|
2017-02-14 11:10:33 +01:00 |
|
jsteube
|
63b7321be2
|
Fixed WPA/WPA2 cracking in case eapol frame is >= 248 byte
|
2017-02-13 18:31:15 +01:00 |
|
jsteube
|
9c5cfd17ac
|
Added support for automatic merge of LM halfes when --show and --left is used
Fixes https://github.com/hashcat/hashcat/issues/1034
|
2017-02-13 16:46:37 +01:00 |
|
philsmd
|
227c0be95e
|
resolves #1018: added -m 3910 = md5(md5($pass).md5($salt))
|
2017-02-12 18:12:17 +01:00 |
|
Rosen Penev
|
a3d04a40b0
|
Fix more cppcheck warnings
|
2017-02-10 16:10:21 -08:00 |
|
jsteube
|
9aabc20248
|
Add a warning message if old hccap file is detected and abort
|
2017-02-08 20:25:04 +01:00 |
|
jsteube
|
5b922a6b8d
|
Fix for https://github.com/hashcat/hashcat/issues/1029
|
2017-02-07 16:23:42 +01:00 |
|
jsteube
|
717da7f4f2
|
Added support for loading hccapx files
|
2017-02-06 17:03:42 +01:00 |
|
philsmd
|
15a9644f2a
|
fixes #943: added -m 15000 = FileZilla Server >= 0.9.55
|
2017-02-03 00:07:31 +01:00 |
|
philsmd
|
fe6309caa7
|
fixes #398: added -m 4110 md5($salt.md5($pass.$salt))
|
2017-02-01 19:56:49 +01:00 |
|
philsmd
|
8e689058d0
|
#398: add -m 4010 = md5($salt.md5($salt.$pass))
|
2017-02-01 16:56:14 +01:00 |
|
jsteube
|
2135ea3329
|
WPA: Changed format for outfile and potfile from essid:mac1:mac2 to hash:essid
WPA: Changed format for outfile_check from essid:mac1:mac2 to hash
|
2017-02-01 12:25:21 +01:00 |
|
philsmd
|
ed74ce1aca
|
fixes #928: new mode -m 1411 = SSHA-256(Base64), LDAP {SSHA256}
|
2017-01-31 12:40:43 +01:00 |
|
jsteube
|
e0c3f447da
|
Added hash-mode 4520 = sha1($salt.sha1($pass))
Added hash-mode 4522 = PunBB
OpenCL Kernel: Renumbered hash-mode 7600 to 4521
The mode 4520 is the first to support salt length up to 64
|
2017-01-31 11:44:58 +01:00 |
|
philsmd
|
96e312ccb6
|
fixes #537: added -m 7000 = Fortigate (FortiOS)
|
2017-01-30 21:18:37 +01:00 |
|
jsteube
|
1b8c2a29f1
|
Added hash-mode 14900 = Skip32
|
2017-01-29 16:43:08 +01:00 |
|
Jens Steube
|
07c89833c9
|
Added hash-mode 14800 = iTunes Backup >= 10.0
|
2017-01-26 21:16:29 +01:00 |
|
philsmd
|
78fc0e87bd
|
minor: we actually could/should omit the use of wpky_buf_ptr here
|
2017-01-25 20:08:41 +01:00 |
|
philsmd
|
7660b06e1c
|
minor: changed grouping of byte_swap_32 () and u32_to_hex_lower () for -m 14700
|
2017-01-25 19:56:34 +01:00 |
|
philsmd
|
0201d89099
|
fixed offset for dpsl buffer
|
2017-01-25 19:44:13 +01:00 |
|
philsmd
|
9327475b41
|
added -m 14700 = iTunes Backup < 10.0
|
2017-01-25 19:07:07 +01:00 |
|
philsmd
|
2bf49d424c
|
-m 11600: additional check for padding attack in case of unsupported coder
|
2017-01-24 16:32:31 +01:00 |
|
philsmd
|
2845f0e716
|
-m 11600: additional check for padding attack in case of unsupported coder
|
2017-01-24 16:28:00 +01:00 |
|
philsmd
|
b22b2012b8
|
-m 11600: allow hashes with compressions different from LZMA1/LZMA2
|
2017-01-24 16:11:47 +01:00 |
|
philsmd
|
297c797521
|
hook code: refactored the hook salt to be part of the hash_t struct
|
2017-01-24 15:23:48 +01:00 |
|
philsmd
|
6fe0173a79
|
#965: new hook function to support LZMA1/LZMA2 decompression for -m 11600 = 7-Zip
|
2017-01-24 10:28:35 +01:00 |
|
jsteube
|
8d6170d66e
|
Simply do not use __builtin_bswap16() this causes all kinds of problems, use our own implementation
|
2017-01-21 18:23:11 +01:00 |
|
jsteube
|
53d467abf8
|
Fix travis-ci error caused by __builtin_bswapXX()
|
2017-01-21 18:03:47 +01:00 |
|
jsteube
|
8257883ec1
|
Added hash-mode 14600 = LUKS
|
2017-01-21 15:37:44 +01:00 |
|