When cracking large lists of hashes from multiple file locations, MDSPLIT will help match which files the cracked hashes were found in, while also outputing them into separate files based on hash type. Additionally it will remove the found hashes from the original hash file. COMMAND STRUCTURE THREE METHODS l·STDOUT 2-STDIN 3-File 1- Matching MDXFIND results files with their original hash_orig.txt files. ``` cat hashes_out/out_results.txt I mdsplit hashes_orig/hash_orig.txt ``` OR perform matching against a directory of original hashes and their results. ``` cat hashes_out/* I mdsplit hashes_orig/* ``` 2- Piping [[MDXFIND]] directly into MDSPLIT to sort in real-time results. ``` cat *.txt I mdxfind -h ALL -h 'lsalt,luser,lmdSx' -i 10 dict.txt I mdsplit *.txt ``` 3- Specifying a file location in MDXFIND to match results in real-time. ``` mdxfind -h ALL -f hashes.txt -i 10 dict.txt I mdsplit hashes.txt ``` GENERAL NOTES ABOUT MDSPLIT -MDSPLIT will append the final hash solution to the end of the new filename. For example, if we submitted a 'hashes.txt' and the solution to the hashes was nMD5x01" then the results file would be 'hashes.MD5x01'. If multiple hash solutions are found then MDSPLIT knows how to deal with this, and will then remove each of the solutions from hashes.txt, and place them into 'hashes.MD5x01', 'hashes.MD5x02', 'hashes.SHAl'... and so on. -MDSPLIT can handle sorting multiple hash files, types, and their results all at one time. Any solutions will be automatically removed from all of the source files by MDSPLIT, and tabulated into the correct solved files. For example: ``` cat dirl/*.txt dir2/*.txt dir3/*.txt I mdxfind -h 'Amd5$,Asha1$,Asha256 -i 10 dict.txt I mdsplit dirl/*.txt dir2/*.txt dir3/*.txt ``` [[Home]] #tools