Word Mangling/Wordlist generator

Word Mangling/Wordlist generator - Printable Version

+- hashcat Forum (https://hashcat.net/forum)
+-- Forum: Support (https://hashcat.net/forum/forum-3.html)
+--- Forum: hashcat (https://hashcat.net/forum/forum-45.html)
+--- Thread: Word Mangling/Wordlist generator (/thread-7195.html)

Word Mangling/Wordlist generator - Hash_noob - 01-13-2018

Hi There,

I'm trying to crack a lost password. I think I know what it is, but must have originally entered it incorrectly as it is not working. Is there a way in Hashcat to enter the password and have Hashcat mangle each letter, misspelling it.

I have tried to generate a wordlist of misspelled words but Crunch doesn't seem to work for windows 10. If this is not possible in hashcat can you recommend a wordlist generator that can do this in windows

I'd appreciate your help.

RE: Word Mangling/Wordlist generator - undeath - 01-13-2018

That's what rules do.

RE: Word Mangling/Wordlist generator - royce - 01-13-2018

Yeah, what undeath said - if we're talking about typos, or misspellings that are just a single character substitution, some rules are pretty good at transposing letters. Specifically, a ruleset like this:

Code:
$ cat typo-swap.rule

*01

*12

*23

*34

*45

*56

*67

*78

... would do this:

Code:
$ echo hashcats | hashcat -r typo-swap.rule --stdout

ahshcats

hsahcats

hahscats

haschats

hashacts

hashctas

hashcast

hashcats

And rules like this for character substitutions:

Code:
$ cat typo-wrong.rule 

saq

saw

sas

sax

saz

$ echo hashcat | hashcat -r typo-wrong.rule --stdout

hqshcqt

hwshcwt

hsshcst

hxshcxt

hzshczt

If it's a fast hash and you're feeling lazy, you can just throw all of the possible characters into a custom character set (-1, -2, -3, -4 syntax).

Code:
$ hashcat -m 0 -a 3 -1 'hasct' --stdout ?1?1?1?1?1?1?1 | head

sattasa

chatasa

ashaasa

tattasa

hattasa

shatasa

cattasa

aattasa

thatasa

hhatasa

$ hashcat -m 0 -a 3 -1 'hasct' --stdout ?1?1?1?1?1?1?1 | wc -l

78125

$ hashcat -m 0 -a 3 -1 'cat' --stdout hash?1?1?1

hashata

hashtat

hashcat

hashaca

hashtta

hashcca

hashaat

hashtca

hashcta

hashatt

hashtac

hashcac

hashact

hashttt

hashcct

hashaac

hashtct

hashctt

hashatc

hashtaa

hashcaa

hashacc

hashttc

hashccc

hashaaa

hashtcc

hashctc

Adjust the hard-coded characters in the mask with the wildcard ones (?1) to taste.

If the rules syntax is tricky for you, and if it's a slow hash, you might be be better off scripting something that does the mangling for you, or using a different external tool. Googling for "typo generator" has some interesting hits.

RE: Word Mangling/Wordlist generator - Hash_noob - 01-13-2018

Thanks for your responses. Yes I thought this might be based around rules. Just wasn't sure how to construct them to do what I wanted so thank you for your help.

Unfortunately its a slow hash (old litecoin wallet, you're probably sick of these) and a phrase. So it might be more efficient to construct a wordlist of typos instead of having hashcat try to mangle in real time. I'll look into Typo generators.

Thanks again.

RE: Word Mangling/Wordlist generator - royce - 01-13-2018

Good luck!

And for what it's worth, here are some nuggets for how to use kwprocessor (keyboard walk processor) and hashcat rules + stdout to generate a wordlist of typos. It's not an ideal approach, but might work for some use cases.

https://gist.github.com/roycewilliams/9d8e98587cff105b2e05a9f0e8de8371

RE: Word Mangling/Wordlist generator - Hash_noob - 01-13-2018

Thanks Royce. Much appreciated!