Any difference between the following two masks

Any difference between the following two masks - Printable Version

+- hashcat Forum (https://hashcat.net/forum)
+-- Forum: Deprecated; Previous versions (https://hashcat.net/forum/forum-29.html)
+--- Forum: Old oclHashcat Support (https://hashcat.net/forum/forum-38.html)
+--- Thread: Any difference between the following two masks (/thread-4972.html)

Any difference between the following two masks - ankh2054 - 01-08-2016

Hi all,

I've been running a test against a WPA hash using the following two commands, which I thought in my head should crack the password in the exact same duration, but the second command it taking longer.

PASS: WSPYXABY

The following took 9 hours.

Code:
./cudaHashcat64.bin -m 2500  -a 3  /cracking/wireless/sky.hccap -1 W ?1?u?u?u?u?u?u?u

The below has been running for 13 hours and is still going.

Code:
./cudaHashcat64.bin -m 2500  -a 3  /cracking/wireless/sky.hccap -1 WEHICULFBSPGQMRXZVTNKYADOJ ?1?u?u?u?u?u?u?u

I might have wrongly assumed, but I thought the custom charset -1 should replace the first placeholder with the letters WEHICULFBSPGQMRXZVTNKYADOJ in the order listed ? Or am I missing something.

thanks

RE: Any difference between the following two masks - epixoip - 01-08-2016

You're missing the fact that oclHashcat uses markov mode everywhere masks are used unless you disable it with --markov-disable. So no it won't use those characters in that order.

This is covered on the FAQ:
http://hashcat.net/wiki/doku.php?id=frequently_asked_questions#i_want_to_optimize_my_brute-force_attack_by_ordering_letters_by_frequency_in_a_custom_charset_how_to_do_it_does_it_make_sense

RE: Any difference between the following two masks - ankh2054 - 01-09-2016

thank you Smile