+- hashcat Forum (https://hashcat.net/forum)
+-- Forum: Misc (https://hashcat.net/forum/forum-15.html)
+--- Forum: General Talk (https://hashcat.net/forum/forum-33.html)
+--- Thread: Base password permutations (/thread-7814.html)
Base password permutations - Grackle - 09-17-2018
So, let's imagine we have a user with a known base password of "Password" and we know the user likes to use 1-4 other numbers or special chars to either append their password, or insert the same range of numbers or special characters randomly WITHIN the root password. Or, potentially, both within and appended, but only a total of 1-4 total 'extra' characters.
So I've been able to figure out how to append the root password pretty easily using a custom charset with /d /s and incrementing the total length from 9-12, effectively generating 'Password1' through 'Password~~~~', but I can't figure out an equally easy way to do that within the word in order to effectively generate 'P1assword'-'P~~~~assword' through 'Passwor~~~~d' and, ideally, even stuff including both appended and within the word additions, such as 'P1assword~~~' and so on, within those parameters.
Am I missing an easy way to include incremented custom charsets within a known root word?
Something like the iNX function (or maybe the ipX), but with the N incremented, and the X using a custom charset.
FWIW, computationally speaking, this would be to generate a dictionary to use against a slow hash with known salts, but high iterations.
Thanks!
RE: Base password permutations - undeath - 09-17-2018
generate rule files with rules for what you want to do
RE: Base password permutations - Grackle - 09-19-2018
Right. I guess a better question for me to ask is 'Can anybody help me with rules for this sort of thing, because I'm not coming up with an effective, nor efficient way to get it to do what I'm trying to do.' I'm trying to work through using maskprocessor to generate the rules, but it's a bit beyond my ken, at this point.