+- hashcat Forum (https://hashcat.net/forum)
+-- Forum: Support (https://hashcat.net/forum/forum-3.html)
+--- Forum: hashcat (https://hashcat.net/forum/forum-45.html)
+--- Thread: Help with code (/thread-13565.html)
Help with code - LittleElla - 03-21-2026
Hello!
I'm new here and I was just trying to use Hashcat to get my password back.
It is a rar file and I know part of the password.
This line bellow is from the code I was trying to run with CMD (I already have the hash):
hashcat.exe -m 13000 -a3 hash 321654?s?s?s
The point is, I know it starts with "321654," and the last three characters are somewhere in this sequence: /?1!2@3#.
Can anybody help me please?
RE: Help with code - penguinkeeper - 03-21-2026
Try this. It uses a custom charset to set `?1` to your `/?1!2@3#.` list:
hashcat.exe -m 13000 -a3 hash -1 "/??1!2@3#." 321654?1?1?1
Good luck!
More info:
https://hashcat.net/wiki/doku.php?id=mask_attack#custom_charsets
RE: Help with code - LittleElla - 03-22-2026
(03-21-2026, 09:01 PM)penguinkeeper Wrote: Try this. It uses a custom charset to set `?1` to your `/?1!2@3#.` list:
hashcat.exe -m 13000 -a3 hash -1 "/??1!2@3#." 321654?1?1?1
Good luck!
More info:
https://hashcat.net/wiki/doku.php?id=mask_attack#custom_charsets
CODE: hashcat.exe -m 13000 -a3 $rar5$16$4f55b7c9c1a6b26b824430100b7179bc$15$187c102d02f1c32fee53062ee4da3961$8$22c49e6d1cf05cfd -1 "/?1!2@3#4$" 321654?1?1?1
RESULTS:
Session..........: hashcat
Status...........: Exhausted
Hash.Mode........: 13000 (RAR5)
Hash.Target......: $rar5$16$4f55b7c9c1a6b26b824430100b7179bc$15$187c10...f05cfd
Time.Started.....: Sun Mar 22 07:38:37 2026 (0 secs)
Time.Estimated...: Sun Mar 22 07:38:37 2026 (0 secs)
Kernel.Feature...: Pure Kernel (password length 0-256 bytes)
Guess.Mask.......: 321654?1?1?1 [9]
Guess.Charset....: -1 /?1!2@3#4$, -2 N/A, -3 N/A, -4 N/A, -5 N/A, -6 N/A, -7 N/A, -8 N/A
Guess.Queue......: 1/1 (100.00%)
Speed.#01........: 2798 H/s (2.64ms) @ Accel:4 Loops:512 Thr:256 Vec:1
Recovered........: 0/1 (0.00%) Digests (total), 0/1 (0.00%) Digests (new)
Progress.........: 512/512 (100.00%)
Rejected.........: 0/512 (0.00%)
Restore.Point....: 512/512 (100.00%)
Restore.Sub.#01..: Salt:0 Amplifier:0-1 Iteration:32768-32799
Candidate.Engine.: Device Generator
Candidates.#01...: 321654343 -> 321654#/@
Hardware.Mon.#01.: Temp: 46c Fan: 0% Util: 17% Core:1935MHz Mem:4001MHz Bus:16
Started: Sun Mar 22 07:38:34 2026
Stopped: Sun Mar 22 07:38:38 2026
Any idea what happened??
I tried to change some numbers and characters to see if it would work, but it didn't go right...
RE: Help with code - penguinkeeper - 03-26-2026
Sorry for the late reply. You need two question marks, like ?? in the charset, as in my example as ? is a special character that needs to be escaped. Rather strange and silly, I know. If that doesn't fix it and you know for sure that the password is in that search space (similar to the `Candidates`), something may have gone wrong, but from what I can see, the password just simply isn't what you may have believed it to be. You could try making a rar with a known password to see if that cracks, like "321654?#4" or something