Brute-force missing characters from a known word?

[theholydemon]

Okay, I swear I'm trying but I can't get it. I didn't understand your method so I didn't try it, but I tried this:

Code:

hashcat-cli32.exe -a 3 -m 6900 ex.hash ex.hcmask

and it is taking 'ex.hcmask' as a mask of static letters. BTW, ex.hcmask contains this:

Code:

?l?d?u,http://example.com/asdf.php?key=asdf?1s7f8df?1?1?17

(the url is similar to the url that I'm trying to crack).

Then I tried to be direct:

Code:

hashcat-cli32.exe -a 3 -m 6900 --pw-min=54 --pw-max=54 ex.hash -1 ?l?d?u http://example.com/asdf.php?key=asdf?1s7f8df?1?1?17

but that returns a syntax error in the url/mask. I'm thinking due to '?k' ?

Anyways, can you explain how you'd do it? There's something I'm missing, and I just can't see what. I'm only a day old at this, so I don't know everything. Still, I feel like I've tried everything and I'm exhausted.

Thanks for replying.