hashcat Forum

Hello!

I searched a lot but I did not find a solution to my problem, maybe I did not use the right term, I ask my question here hoping that it is not a duplicate

What is the best approach to crack a password between 10 and 15 characters, I know 1 word of 7 letters (jupiter) and 1 symbol (#) but I don't know their position (can be prefix, suffix or in the middle, word before the symbol or inverse), I have to bruteforce the missing characters with possible letter/number/symbol.

ex (* = bruteforced char):

jupiter*****#
#*****jupiter
***jupiter#**
**jupiter**#*
**#**jupiter*
#***jupiter**
... and so on

is there a way to try all possible position of known elements while bruteforcing the missing chars without specificly generating a wordlist?

and if i need to create a wordlist, this can be done with maskprocessor in a oneshot or i need to create every mask manually and append result to the wordlist?

thank you in advance for your answer

You could build a mask file.
If you expect digits or lowercase on the unknown locations, you could do something like:
?l?d, jupiter?1?1?1?1?1#
?l?d, jupiter?1?1?1?1#?1
?l?d, jupiter?1?1?1#?1?1
......
?l?d, #?1?1?1jupiter?1?1
......
?l?d, ?1?1?1?1?1#jupiter

(12-11-2022, 11:14 AM)b8vr Wrote: [ -> ]You could build a mask file.
If you expect digits or lowercase on the unknown locations, you could do something like:
?l?d, jupiter?1?1?1?1?1#
?l?d, jupiter?1?1?1?1#?1
?l?d, jupiter?1?1?1#?1?1
......
?l?d, #?1?1?1jupiter?1?1
......
?l?d, ?1?1?1?1?1#jupiter

yes indeed I think that a mask file remains the simplest approach, I continued to browse the wiki and forum and this is the idea that comes out on similar cases.
I will make a small script to generate all masks covering all cases.

thank you for confirmation