05-27-2013, 05:16 PM
Operating system is your choice, it's whatever you're most comfortable with. Use Windows if you are more comfortable with it, although you might look at also installing your favorite GNU utils as well, as they are rather indispensable. I personally prefer to use Linux, and while I cannot say that I agree with your choice of distribution, it is after all your choice.
Your CPU is likely faster than your GPU. Since you have no choice in which GPU you use, it would probably be to your benefit to just not use it.
The mask attack is very simple, it looks like you are making it much harder than it is. Mask attacks are nothing more than a brute force attack using a per-position character set.
The pre-programmed character sets are defined as follows:
?l == lower alpha, equivalent to [:lower:]
?u == upper alpha, equivalent to [:upper:]
?d == digits, equivalent to [:digit:]
?s == special chars, equivalent to [:punct:]
?a == all printable ascii characters, equivalent to [\x20-\x7E] or [:print:]
The length of the mask is the exact length or maximum length of the keyspace you want to search. If you want to brute force up to or exactly six characters, then your mask should be six characters long.
Each character of the mask is comprised of the character set you want to use for that position in the mask. So for example,
classic brute force, all chars length 6: ?a?a?a?a?a?a
brute force loweralpha length 7: ?l?l?l?l?l?l?l
brute force upperalpha length 8: ?u?u?u?u?u?u?u?u
For these three we used the same charset for each position, but the beauty is you don't have to.
digit followed by four loweralpha followed by digit (example, 6balls9): ?d?l?l?l?l?d
upperalpha followed by seven loweralpha followed by two digits (example, Password01): ?u?l?l?l?l?l?l?l?d?d
You can also define custom character sets with -1, -2, -3, and -4. You already attempted to do this, but I don't think you understood what this did since you have .e.g -2 ?d?d?d which makes no sense.
Let's say we want to append BOTH digits and special chars to the end of a mask. How do you define a mask where a position could be two or more possible charsets? That's where the custom charsets come in.
Define a custom charset that contains both digits and special chars: -1 ?d?s
Use it in the mask (example, Password1!): ?u?l?l?l?l?l?l?l?1?1
You can also use single characters in a mask as well, doesn't have to be a predefined charset. So let's say we want to brute force "Password" followed by any two characters; mask would be: Password?a?a
So now that this is hopefully more clear, go back and read the wiki article on mask attacks. Hopefully it will click now.
Lastly, I'm not sure what you think the -t parameter does, but judging by your command line, it does not do whatever it is you think it does
It is used to limit the keyspace of markov attacks to the top N characters in each position. So if you were doing a mask attack of loweralpha length 8 with a threshold of 10, it would limit the keyspace to 10^8 instead of 26^8.
Your CPU is likely faster than your GPU. Since you have no choice in which GPU you use, it would probably be to your benefit to just not use it.
The mask attack is very simple, it looks like you are making it much harder than it is. Mask attacks are nothing more than a brute force attack using a per-position character set.
The pre-programmed character sets are defined as follows:
?l == lower alpha, equivalent to [:lower:]
?u == upper alpha, equivalent to [:upper:]
?d == digits, equivalent to [:digit:]
?s == special chars, equivalent to [:punct:]
?a == all printable ascii characters, equivalent to [\x20-\x7E] or [:print:]
The length of the mask is the exact length or maximum length of the keyspace you want to search. If you want to brute force up to or exactly six characters, then your mask should be six characters long.
Each character of the mask is comprised of the character set you want to use for that position in the mask. So for example,
classic brute force, all chars length 6: ?a?a?a?a?a?a
brute force loweralpha length 7: ?l?l?l?l?l?l?l
brute force upperalpha length 8: ?u?u?u?u?u?u?u?u
For these three we used the same charset for each position, but the beauty is you don't have to.
digit followed by four loweralpha followed by digit (example, 6balls9): ?d?l?l?l?l?d
upperalpha followed by seven loweralpha followed by two digits (example, Password01): ?u?l?l?l?l?l?l?l?d?d
You can also define custom character sets with -1, -2, -3, and -4. You already attempted to do this, but I don't think you understood what this did since you have .e.g -2 ?d?d?d which makes no sense.
Let's say we want to append BOTH digits and special chars to the end of a mask. How do you define a mask where a position could be two or more possible charsets? That's where the custom charsets come in.
Define a custom charset that contains both digits and special chars: -1 ?d?s
Use it in the mask (example, Password1!): ?u?l?l?l?l?l?l?l?1?1
You can also use single characters in a mask as well, doesn't have to be a predefined charset. So let's say we want to brute force "Password" followed by any two characters; mask would be: Password?a?a
So now that this is hopefully more clear, go back and read the wiki article on mask attacks. Hopefully it will click now.
Lastly, I'm not sure what you think the -t parameter does, but judging by your command line, it does not do whatever it is you think it does
It is used to limit the keyspace of markov attacks to the top N characters in each position. So if you were doing a mask attack of loweralpha length 8 with a threshold of 10, it would limit the keyspace to 10^8 instead of 26^8.