+- hashcat Forum (https://hashcat.net/forum)
+-- Forum: Support (https://hashcat.net/forum/forum-3.html)
+--- Forum: hashcat (https://hashcat.net/forum/forum-45.html)
+--- Thread: keep-guessing + rules? (/thread-7590.html)
keep-guessing + rules? - royce - 06-18-2018
Is there a way to log *all* of the rules that would have cracked a given hash?
Would/should --keep-guessing and --debug-mode be combine-able? It could be quite chatty - being able to ignore ':' would probably be useful.
RE: keep-guessing + rules? - plaverty9 - 06-18-2018
I kinda feel like that if you don't know the answer to something that it is likely unknowable.
RE: keep-guessing + rules? - royce - 06-18-2018
Ha! I'm only about one chapter ahead of you in the book.
And guess what? I should have tried it first!
--keep-guessing works fine with --debug-mode (for at least some attacks):
Code:
$ cat test.hash
8743b52063cd84097a65d1633f5c74f5
$ cat test.dict
hashca
hashcas
hashcau
hashcate
hashcatz
tachsah
HASHCAT
$ hashcat --quiet -O -w 4 --keep-guessing -D1 --session=test --potfile-path=./test.potfile \
--debug-mode=4 --debug-file=./test.log --outfile=test.out --outfile-format=15 \
-r multi.rule \
test.hash test.dict
$
$ wc -l test.potfile
1635 test.potfile
$ cat test.potfile
8743b52063cd84097a65d1633f5c74f5:hashcat
[...]
8743b52063cd84097a65d1633f5c74f5:hashcat
$ wc -l test.out
1635 test.out
$ cat test.out
8743b52063cd84097a65d1633f5c74f5:hashcat:68617368636174:1805914
[...]
8743b52063cd84097a65d1633f5c74f5:hashcat:68617368636174:3007570
$ wc -l test.log
1635 test.log
$ cat test.log
hashcate:$$ O72:hashcat
hashcate:$$ O72:hashcat
hashcate:$) *0B O72:hashcat
hashcate:$) K '7:hashcat
hashcate:$* O72:hashcat
[...]
hashcatz:} } D1 {:hashcatThe applications should be obvious (and are well-known to password researchers) - that for a given target list of hashes, a given input dictionary, and a given set of rules, the rules that are most universally applicable, and the base words that were the most useful, can be analyzed. It's highly dependent on its inputs.