hashcat Forum

Hi guys,

I'm trying to brute a password, known to be between 12-25 characters, here is the list of possible chars:

Can be uppercase or lowercase and in any order, but no other char or number (only the above).

I have the 5000-iteration sha256 hash of the password.

Is this something that can be brute forced? or I'm wasting my time?

I am going to rent GPUs to do it (RTX 3090).

It will be really helpful if some one can give a mere estimate on how much it will take with this GPU.

That keyspace is far too large for you to be able to bruteforce, even with the limited character set and at the lowest length of 12.

Edit: Some math for proofing

20 characters, 12 length, so 20^12 as total number of candidates, divided by a speed of roughly 2MH/s on a 3090 will give you approx 23703 days on 1x 3090. Or, 1 day on approx 23703x 3090. Each length longer than 12 increases this keyspace exponentially.

(05-16-2021, 08:13 PM)Chick3nman Wrote: [ -> ]That keyspace is far too large for you to be able to bruteforce, even with the limited character set and at the lowest length of 12.

Edit: Some math for proofing

20 characters, 12 length, so 20^12 as total number of candidates, divided by a speed of roughly 2MH/s on a 3090 will give you approx 23703 days on 1x 3090. Or, 1 day on approx 23703x 3090. Each length longer than 12 increases this keyspace exponentially.

Understood, Thank you very much for the estimate too, very helpful.