+- hashcat Forum (https://hashcat.net/forum)
+-- Forum: Support (https://hashcat.net/forum/forum-3.html)
+--- Forum: hashcat-utils, maskprocessor, statsprocessor, md5stress, wikistrip (https://hashcat.net/forum/forum-28.html)
+--- Thread: rule for NTLM hash type (/thread-10914.html)
rule for NTLM hash type - joe123 - 07-29-2022
Hello forum
since the password was not found with the following command(wordlist), I have to switch to bf
# hashcat -m 1000 -a 0 --force --show --username hash.txt wordlist.lst
Questions:
- What would be a good rule for a-zA-Zo-9 and (the following 3 chars) - _ &
- max password-length: 10 chars
Thank you very much in advance!
Joe
RE: rule for NTLM hash type - pdo - 07-29-2022
(07-29-2022, 04:19 PM)joe123 Wrote: Hello forum
since the password was not found with the following command(wordlist), I have to switch to bf
# hashcat -m 1000 -a 0 --force --show --username hash.txt wordlist.lst
Questions:
- What would be a good rule for a-zA-Zo-9 and (the following 3 chars) - _ &
- max password-length: 10 chars
Thank you very much in advance!
Joe
https://hashcat.net/wiki/doku.php?id=mask_attack
RE: rule for NTLM hash type - Snoopy - 07-30-2022
(07-29-2022, 04:19 PM)joe123 Wrote: Hello forum
since the password was not found with the following command(wordlist), I have to switch to bf
# hashcat -m 1000 -a 0 --force --show --username hash.txt wordlist.lst
this commandline is faulty, --show tries to show already cracked passwords (in your potfile), this command has never tried cracking your hash.txt with your wordlist.txt
also NEVER NEVER NEVER use --force
RE: rule for NTLM hash type - joe123 - 07-30-2022
Thank's a lot guys for your help/feedback! Is thre somebody who could help me to craft a mask for:
- a-zA-Zo-9 and (the following 3 chars) - _ &
- max password-length: 10 chars
Thank you very much in advance!
Joe
RE: rule for NTLM hash type - Snoopy - 07-30-2022
(07-30-2022, 02:18 PM)joe123 Wrote: Thank's a lot guys for your help/feedback! Is thre somebody who could help me to craft a mask for:
- a-zA-Zo-9 and (the following 3 chars) - _ &
- max password-length: 10 chars
Thank you very much in advance!
Joe
masks are very simple to define, use this line in a maskfile
mask.file
Code:
?l?u?d-_&,?1?1?1?1?1?1?1?1?1?1use this with --increment and you will be fine
hashcat -m1000 -a3 -O -w3 --increment hash.txt mask.file
RE: rule for NTLM hash type - joe123 - 08-03-2022
Thank you very much Snoopy for the continued help!
-> ?l?u?d
Does this really mean a-zA-Zo-9?
Thank's!
Joe
RE: rule for NTLM hash type - b8vr - 08-03-2022
(08-03-2022, 04:59 PM)joe123 Wrote: Thank you very much Snoopy for the continued help!
-> ?l?u?d
Does this really mean a-zA-Zo-9?
Thank's!
Joe
Yes. ?l for lowercase a-z, ?u for uppercase A-Z and ?d for digits 0-9.
RE: rule for NTLM hash type - joe123 - 08-04-2022
Thank you for your help!
Joe