hashcat Forum
Syntax question - Printable Version

+- hashcat Forum (https://hashcat.net/forum)
+-- Forum: Deprecated; Previous versions (https://hashcat.net/forum/forum-29.html)
+--- Forum: General Help (https://hashcat.net/forum/forum-8.html)
+--- Thread: Syntax question (/thread-4232.html)



Syntax question - codeacad12 - 03-30-2015

I have a wordlist that i would like to use to recover a password with the following properties:

- 1 upper case
- 1 substitution
- ending with punctuation + digit

Ilustration of the password (the pictures in the first line): http://xkcd.com/936/

The wordlist only contains lower case words without digits or punctuation. I guess I would have to use a hybrid attack, but I am struggling with the syntax, as I am new to hashcat.

Thanks for your help.


RE: Syntax question - epixoip - 03-30-2015

Would be more appropriate to use rules, not hybrid.


RE: Syntax question - codeacad12 - 03-31-2015

Thanks. I used the predefined rules (toggle, leetspeak...) to expand my wordlist and I was able to crack the hash.

Code:
hashcat -r toggles.rule --stdout wordlist.txt > new-wordlist.txt



RE: Syntax question - hashmepls - 03-31-2015

Could please explain how exaktly you did it? I have a very similar task and tried your suggestion without success...


RE: Syntax question - kartan - 04-01-2015

He did actually...
You can prepare and pipe as you feel like it.
hashcat -r toggles.rule --stdout wordlist.txt | oclhashcat -a0 hashlist.txt -r leet.rules


RE: Syntax question - epixoip - 04-01-2015

Would be more efficient to use rule chaining here.

oclHashcat hashlist.txt wordlist.txt -r toggles.rule -r leet.rule


RE: Syntax question - hashmepls - 04-01-2015

(04-01-2015, 01:29 AM)epixoip Wrote: Would be more efficient to use rule chaining here.

oclHashcat hashlist.txt wordlist.txt -r toggles.rule -r leet.rule

When i use that rule chaining (.\hashcat-cli64.exe -r .\rules\toggles1.rule -r \rules\leetspeak.rule --stdout wordlist.txt > new-wordlist.txt) i'll get a wordlist like that:

Test
tEst
teSt
tesT
test
test
test
test
test
test
test
test
test
test
test

"e" should also be replaced with "3" and why do i get 10 entries "test"?

When i try to do it in 2 steps with separate rulesets my wordlist get's broken... no more ASCII characters in it ?!?


RE: Syntax question - epixoip - 04-01-2015

hashcat-cli does not support rule chaining


RE: Syntax question - kartan - 04-01-2015

Take a look at toggles1.rule, all it does is just toggle every char from pos 1 to 16. What you posted is the expected output.

Rule chaining isn't supported by cpu hashcat as far as i know.