+- hashcat Forum (https://hashcat.net/forum)
+-- Forum: Support (https://hashcat.net/forum/forum-3.html)
+--- Forum: hashcat (https://hashcat.net/forum/forum-45.html)
+--- Thread: Combinator attack being weird (/thread-12214.html)
Combinator attack being weird - Giddy7377 - 11-08-2024
So, I have a password I already know of a .rar file, I'm just fooling around and testing, the password is digitalzone
I'm trying a combinator attack by doing:
.\hashcat -m 13000 -a 1 -w 3 D:\hashcat-6.2.6\hashes2.txt D:\passlist\englishwordTEST.txt D:\passlist\englishwordTEST.txt
The dictionnaries, are just a bunch of english words (including digital and zone) they are the same dictionnaries
But hashcat seems to only use the first word of the left dictionnary with other words
(For exemple, the first word is Digit, it only does combinaisons with digit)
and for the right it does only the last
Exemple at the start:
Session..........: hashcat
Status...........: Running
Hash.Mode........: 13000 (RAR5)
Hash.Target......: removed
Time.Started.....: Fri Nov 08 18:22:27 2024 (1 sec)
Time.Estimated...: Fri Nov 08 18:22:31 2024 (3 secs)
Kernel.Feature...: Pure Kernel
Guess.Base.......: File (D:\passlist\englishwordTEST.txt), Left Side
Guess.Mod........: File (D:\passlist\englishwordTEST.txt), Right Side
Speed.#1.........: 335 H/s (1.44ms) @ Accel:16 Loops:512 Thr:512 Vec:1
Recovered........: 0/1 (0.00%) Digests (total), 0/1 (0.00%) Digests (new)
Progress.........: 288/1296 (22.22%)
Rejected.........: 0/288 (0.00%)
Restore.Point....: 0/36 (0.00%)
Restore.Sub.#1...: Salt:0 Amplifier:8-9 Iteration:30208-30720
Candidate.Engine.: Device Generator
Candidates.#1....: DIGITZOMBIFIED -> ZONETIMESZOMBIFIED
Hardware.Mon.#1..: Temp: 57c Fan: 0% Util: 87% Core:1927MHz Mem:7300MHz Bus:16
exemple at the end:
Session..........: hashcat
Status...........: Running
Hash.Mode........: 13000 (RAR5)
Hash.Target......: removed
Time.Started.....: Fri Nov 08 18:22:27 2024 (4 secs)
Time.Estimated...: Fri Nov 08 18:22:31 2024 (0 secs)
Kernel.Feature...: Pure Kernel
Guess.Base.......: File (D:\passlist\englishwordTEST.txt), Left Side
Guess.Mod........: File (D:\passlist\englishwordTEST.txt), Right Side
Speed.#1.........: 333 H/s (1.45ms) @ Accel:16 Loops:512 Thr:512 Vec:1
Recovered........: 0/1 (0.00%) Digests (total), 0/1 (0.00%) Digests (new)
Progress.........: 1296/1296 (100.00%)
Rejected.........: 0/1296 (0.00%)
Restore.Point....: 36/36 (100.00%)
Restore.Sub.#1...: Salt:0 Amplifier:35-36 Iteration:32768-32799
Candidate.Engine.: Device Generator
Candidates.#1....: DIGITZONETIMES -> ZONETIMESZONETIMES
Hardware.Mon.#1..: Temp: 56c Fan: 0% Util: 89% Core:1927MHz Mem:7300MHz Bus:16
Sorry for the messy post
RE: Combinator attack being weird - lapsikmees - 11-08-2024
You list is so small, "Candidates.#1....: DIGITZONETIMES -> ZONETIMESZONETIMES" also contains all candidates between. You can see candidates change if you try larger wordlists.
RE: Combinator attack being weird - Snoopy - 11-11-2024
Given this output, your wordlist contains of 36 english words, hence the 36 restorepoints and the 1296 = 36^2 candidates to check
So hashcat does check all of your possibilities and also as lapsikmees pointed out, the linde candidates show ranges of candidates