Why does emulating hybrid attack with rules skip some rules/ignore numbers?

[maymay]

Hi,

I'm learning about hashcat rules and recently noticed an issue where some of my rules are apparently being skipped (not tested). I created a simple rules file to append a three-digit number to the end of a dictionary, super simple, beginning like this:

Code:

$0 $0 $0
$0 $0 $1
$0 $0 $2
$0 $0 $3
$0 $0 $4
$0 $0 $5
$0 $0 $6
$0 $0 $7
$0 $0 $8
$0 $0 $9
$0 $1 $0
$0 $1 $1
$0 $1 $2
$0 $1 $3
$0 $1 $4
$0 $1 $5
$0 $1 $6
$0 $1 $7
$0 $1 $8
$0 $1 $9

and going all the way to

Code:

$9 $9 $9

. The idea here is to mimic a mask like

Code:

?d?d?d

as part of a combinator attack. I expected the intended result to be a two-word combination from the dictionary followed by a three-digit number (000 to 999). However, when I test these rules, some numbers are skipped. Here's the command I used:

Code:

hashcat --stdout -a 1 -r custom.rule my-capture.hccap dictionary.txt

and notice that in this snippet of the output, there are several numbers missing, such as "971" (it goes from "widesky970" to "widesky972") and numerous others.

Code:


widesky970
widesky972
widesky973
widesky974
widesky976
widesky977
widesky978

Why is this happening?

Also, after adding a few more rules to the beginning of my rule file (like

Code:

:

"do nothing" and reverse case/upper-case, etc.), then *different* numbers are skipped. Am I doing something wrong? Is this a bug?

Thanks for your help.