(03-21-2017, 01:49 PM)jallis Wrote: I'm trying to attack a Keepass hash where I suspect the password is in the form of an english sentence (english words separated by spaces). Most likely the sentence will have a semantic meaning, not just a random list of words.

Currently I'm using the google- top-10000-english wordlist in combinator attack to create strings in the form of:

"word1 word2 word3 etc."

Any suggestion on how I can make this attack more efficient?

Better wordlist?

Discard sentences without any semantic meaning? (how?)

Please share you experience...

(03-22-2017, 01:03 AM)devilsadvocate Wrote: The answer to your question might be better source material, i.e. books.

I just posted a related topic on this.

https://hashcat.net/forum/thread-6415.html

(03-23-2017, 03:19 PM)jallis Wrote:

(03-22-2017, 01:03 AM)devilsadvocate Wrote: The answer to your question might be better source material, i.e. books.

I just posted a related topic on this.

https://hashcat.net/forum/thread-6415.html

Thank you.

My current solution is using a combinator attack using n-grams (http://www.ngrams.info) on the left and google-top-10000 on the right. This seems to do a pretty good job of creating sentences with meaningfull content.