"brute force" and custom charset questions
#6
Well, from what I've seen, rules will not work with masks-- only dictionaries.

example rule file (list_salt.rule)
Code:
$t$e$s$t
$u$s$e$r
$n$a$m$e

The following will not successfully crack a known hash:
Code:
./oclHashcat-plus64.bin --remove -a 3 -r rules/custom/list_salt.rule -m 2400 hashes/list.hash ?l?l?l?l?l?l?l?l

The following successfully cracks a known hash:
Code:
./oclHashcat-plus64.bin --remove -a 3 -m 2400 hashes/list.hash ?l?l?l?l?l?l?l?ltest

LXZj69bQ2.4Z8S7h:abcdefghtest

'test' is used in the mask because it is the username associated with the hash. When trying to crack numerous hashes, there will be just as many usernames used as salt. This limits an attack to one at a time. If restricted to a single hash, lite is a better option.

Will later versions of hashcat-plus support rules for a mask attack or a salt list? Maybe this is already supported, and I'm just missing it?

-cheers-

edit- I've tried doing a hybrid mask/dict attack (a 7), but my dictionary does not load successfully. Sad

edit2- derp. Nevermind.... success!
Code:
./oclHashcat-plus64.bin --remove -a 7 -m 2400 hashes/list.hash ?l?l?l?l?l?l?l?l dict/salt/list_app.salt


Messages In This Thread
RE: "brute force" and custom charset questions - by jnet - 12-04-2012, 10:26 PM