06-02-2013, 08:56 PM
In the changes for hashcat v0.42, some "JtR compatible" memory rules were added:
type: feature
file: hashcat-cli
desc: added new rule function (JtR compatible): Q - query the memory and reject the word unless it has changed
In JtR, rules are considered to have an implied "M" at the start of each rule, so there'd be no need to start a rule with an "M".
But a bit of testing (in hashcat v0.45) finds that I do need to start the rule with "M" if I want to use "Q".
Can this be clarified?
And also these rules added to rules.txt?
type: feature
file: hashcat-cli
desc: added new rule function (JtR compatible): Q - query the memory and reject the word unless it has changed
In JtR, rules are considered to have an implied "M" at the start of each rule, so there'd be no need to start a rule with an "M".
But a bit of testing (in hashcat v0.45) finds that I do need to start the rule with "M" if I want to use "Q".
Can this be clarified?
And also these rules added to rules.txt?