+- hashcat Forum (https://hashcat.net/forum)
+-- Forum: Support (https://hashcat.net/forum/forum-3.html)
+--- Forum: hashcat (https://hashcat.net/forum/forum-45.html)
+--- Thread: Combination attack and rules how? (/thread-6406.html)
Pages:
1
2
Combination attack and rules how? - Dot - 03-19-2017
I want to use the combination attack and rules together
for instance my password is "Helloworld123"
left dictionary has "hello"
right dictionary has "world"
so using combination i will get "helloworld"
i can add any digit or symbol to the left or right rule but i want to test all 3 digits possibility from 000-999 and capital letter
how can i achieve it
thanx
RE: Combination attack and rules how? - darkseid4nk - 03-19-2017
https://hashcat.net/wiki/doku.php?id=combinator_attack
RE: Combination attack and rules how? - Dot - 03-19-2017
Thats exactly what i said in my question that i know how to do ,add one or two digits but not a rule file, i want to test 000-999 at the end of password
RE: Combination attack and rules how? - Dot - 03-19-2017
I guess this is somehow the answer?
$ ./combinator.bin wordlist1 wordlist2 | ./hashcat whatever.hash -w 3 -r whatever.rule
what i dont understand is how the pipe works this way , also im using windows and hashcat gui is there way to do it in windows?
RE: Combination attack and rules how? - miccee - 03-19-2017
Use combinator.exe for wordlists for "Hello" and "world", output to "combined-wordlist"
Use mp64.exe https://hashcat.net/wiki/doku.php?id=maskprocessor for $?d $?d $?d, output to "3d.rule"
Then use -a 0 combined-wordlist -r 3d.rule.
You can pipe or use .exe (to create an output file) for windows https://github.com/hashcat/hashcat-utils/releases/
RE: Combination attack and rules how? - jimby - 03-19-2017
The comboleetor.pl script (https://hashcat.net/forum/thread-6333.html) can do what you want. Create a text file with the text stems you want, and a text file with the numbers you want:
blocks.txt
------------
hello
world
goodbye
and
numbers.txt
----------------
123
321
5639
and run
echo 'BN' | perl comboleetor.pl
to generate all possible combinations of blocks and numbers with blocks before numbers.
To generate numbers before blocks use
echo 'NB' | perl comboleetor.pl
To combine punctuation as well:
echo 'BPN' | perl comboleetor.pl
It is a 5 level deep combination engine that takes a specification for generating output. The specification uses a simple set of characters: 'B' for blocks (word stems), 'N' for numbers, 'P' for punctuation, 'L' for "leet speak" elements, along with a second leet speak parameter 'b' which will generate different kinds of leet elements.
Using 'PBNP' you can generate combinations of punctuation, word blocks, numbers, and punctuation again all concatenated together. This will (eventually) output strings such as
!hello321+
*there123[
@goodbye5639#
etc...
Code itself is at http://www.jimby.name:81/comboleetor/
See the README.txt file for more examples. WARNING: this program can generate *a lot* of output. Start with small files and get a feel for how the output strings are generated before experimenting with large combinations (PPNBN, BNBPL, etc.).
All that said, use jot(1) to generate your number sequence from 000 - 999 as follows:
jot -w %03.3d - 0 999 > numbers.txt
and with blocks.txt as described above run:
echo 'BBN' | perl comboleetor.pl
If you want to add punctuation at the end:
echo 'BBNP' | perl comboleetor.pl
or at the beginning:
echo 'PBBN' | perl comboleetor.pl
Enjoy.
RE: Combination attack and rules how? - Dot - 03-21-2017
Hi
cant run this jot -w %03.3d - 0 999 > numbers.txt
how do you run this?
RE: Combination attack and rules how? - atom - 03-22-2017
hybrid attack
RE: Combination attack and rules how? - Dot - 03-22-2017
(03-22-2017, 01:25 PM)atom Wrote: hybrid attack
So you mean to get output txt file from comboleetor then use hybrid attack on that file to get a new txt file?
how can i use increment option like in mask attack?
cause i dont want to set ?d?d?d to the text file
i want it to test
"password1" up to "password10"
"password11" up to "password99"
"password100" up to "password999"
same with symbols
so for now i after i use comboleetor i have a text file with "helloworld"
so i want to pipe it to get
"helloworld1 - helloworld999"
"helloworld@ - helloeworld@#$
thanx
RE: Combination attack and rules how? - jimby - 03-23-2017
(03-21-2017, 11:47 AM)Dot Wrote: Hi
cant run this jot -w %03.3d - 0 999 > numbers.txt
how do you run this?
See the source code at
http://freecode.com/projects/bsd-jot
There may be a linux version, but I wouldn't know (BSD guy).
Try downloading and compiling the source and install it on your OS, or look for a package for your distro.
Jim B.