04-07-2015, 05:11 PM
(04-07-2015, 11:20 AM)atom Wrote: Sure it's the insert rule. Rules are described here in detail:
https://hashcat.net/wiki/doku.php?id=rule_based_attack
The first parameter is the offset, the 2nd the actual char to insert. In our case we need multiple inserts:
1, 0, -
1, 1, -
1, 2, -
Aah! I totally missed that. I was looking for a single character 'i' so totally missed the iNX. That leads to more confusion then....
I was looking at the output'ed rule file and the first few lines look like this:
iK1 iL0 iM- iN1 iO1 iP- iQ1 iR2 iS- ] ^[ $]
i01 i10 i2- iN1 iO1 iP- iQ1 iR2 iS- ] ^[ $]
i21 i30 i4- iN1 iO1 iP- iQ1 iR2 iS- ] ^[ $]
i41 i50 i6- iN1 iO1 iP- iQ1 iR2 iS- ] ^[ $]
i61 i70 i8- iN1 iO1 iP- iQ1 iR2 iS- ] ^[ $]
insert character 'K' at postition 1? Inser 'L' at position 0? Is that right? Or are the positions 0-9A-Z to handle 36 positions? The page says "For character positions other than 0-9 use A-Z (A=11)" - is that basically saying "For positions over 9, use A-Z, for a total of 36 possible positions"?
So then next question - the whole reason I'm doing this rule/mask based is that this application I'm working on WILL grow to larger numbers... 0-13, 14, 15, etc - and when that happens the password will be longer than 31 characters, the maximum. Is it not possible to reference a character in a position greater than 36 then?
Thanks a ton for all your help.