This works on rsa known_hosts hashes, what about ecdsa-sha2-nistp256 or ecdsa-sha2-nistp521

[robertstrom]

My known_hosts file contains ssh-rsa and ecdsa-sha2-nistp521 and ecdsa-sha2-nistp256 entries

I have successfully converted an ssh-rsa entry and retrieved the IP address but the other entries error.

I've been running the converter script against one of the 512 entries and trying different hashcat hash types. I have tried these hash types

• 160
• 1460
• 1760

all with no results

I get this error

Hashfile 'decode_known_hosts_file_single_ecdsa-sha2_converted' on line 1 (1d806a...7ae280f65490648d8801b35c88ad09f4): Token length exception
No hashes loaded.

Have you tried, or been able, to decode known_hosts file entries with these other hash types?

Thanks,

Robert

[M-Davies]

I have tried this against a ecdsa-sha2-nistp256 hash with the default 160 mode and had no issues. It cracked the IP no problem