Post Reply 
 
Thread Rating:
  • 0 Vote(s) - 0 Average
  • 1
  • 2
  • 3
  • 4
  • 5
How to map a password policy onto your Mask?
05-29-2013, 10:31 AM
Post: #1
How to map a password policy onto your Mask?
Hi Friends,
lets assume you know details of your password policy e.g.:
  • Amount of characters
  • minimum/maximum amount of letters
  • minimum/maximum amount of numbers
  • restrictions like "no repeating characters" e.g. aa,bb, and so on
  • the pool of special characters

I really don't know how to build a mask like that. Is it even possible to build such a mask, which is usable by hashcat?
If you don't know the answer, maybe you know a good tutorial on building such masks!?

Thanks in advance,
rob
Find all posts by this user
Quote this message in a reply
05-29-2013, 10:44 AM (This post was last modified: 05-29-2013 10:47 AM by philsmd.)
Post: #2
RE: How to map a password policy onto your Mask?
Hey Rob,
the best thing you should do is to have a look into the hashcat wiki http://hashcat.net/wiki/ and for your particular problem, see here: http://hashcat.net/wiki/doku.php?id=mask_attack
Your points:
1. Use your defined mask together w/ pw-min, pw-max if you want to restrict the password length, if you want to reduce the keyspace instead i.e. the chars used see answer 2.
2. you can define custom charsets if the default charsets (Built-in charsets, ?l ?u ?d ?s ?h ... ?a) do not fit for you, use -1 (a number *not* ELL), -2 up to -3 parameter: e.g. -1 abcd and your mask could contain now this charsets as password?1 where ?1 is either a, b, c or d
3. same as in 2. applies here, but you put numbers in ?1
4. either you are able to put this resriction directly into the mask (*not* very likely) or please try maskprocessor (http://hashcat.net/wiki/doku.php?id=maskprocessor ) and also see this topic http://hashcat.net/forum/thread-2161.html
5. see ?s

Hopefully this helps you to get started ;-)
Best
Find all posts by this user
Quote this message in a reply
08-25-2013, 07:04 AM
Post: #3
RE: How to map a password policy onto your Mask?
what do you mean by w/ pw-min , pw-max
how you use that?
Find all posts by this user
Quote this message in a reply
08-26-2013, 03:57 AM
Post: #4
RE: How to map a password policy onto your Mask?
(08-25-2013 07:04 AM)eduonline Wrote:  what do you mean by w/ pw-min , pw-max
how you use that?
1) Follow the advice and read the wiki.
2) You might get your answer with one of the features of PACK:

http://thesprawl.org/projects/pack/
Find all posts by this user
Quote this message in a reply
12-09-2013, 08:44 AM (This post was last modified: 12-09-2013 08:44 AM by EdwardKayle.)
Post: #5
RE: How to map a password policy onto your Mask?
I also get this link http://www.googleappsecurity.com/password-policies I have found almost all the features concern with password policies...
Find all posts by this user
Quote this message in a reply
Post Reply