mask attack but with wordsets instead of charsets? - Printable Version +- hashcat Forum (https://hashcat.net/forum) +-- Forum: Support (https://hashcat.net/forum/forum-3.html) +--- Forum: hashcat (https://hashcat.net/forum/forum-45.html) +--- Thread: mask attack but with wordsets instead of charsets? (/thread-9855.html)

mask attack but with wordsets instead of charsets? - dealloc - 02-07-2021 Is there any way to perform a mask attack that uses words to replace mask tokens instead of characters?  An example: I know that a password is some combination of 4 words (plus some separators between each word). I'd love to just be able to have two wordlists: cat words first second third fourth cat separators _ , & …and then be able to perform a mask attack with them—some equivalent to ?1?2?1?2?1?2?1 I have also researched combinator attacks and/or using/chaining various hashcat-utils to make these permutations but they all don't quite seem to add up to this use case. Thanks in advance (or apologies if this is obvious and I'm just being dense ). RE: mask attack but with wordsets instead of charsets? - royce - 02-07-2021 Not dense at all - understandable use case, but not a lot of clear tools or guidance out there for it. There are some complex ways to do this, but the closest tool available is 'combinatorX', which is matrix's enhancement of combinator from hashcat-utils. https://github.com/hashcat/hashcat-utils/pull/58 RE: mask attack but with wordsets instead of charsets? - dealloc - 02-07-2021 Thanks for the quick reply! I'll pull the branch and give it a shot.