Hashcat duplicates

[philsmd]

you can still use --remove, but you really need to know what you are doing... i.e. you need to use --show with the original list not the "left" list (hence: just use the original copy of the hash list with --show)

The most important part here is that you understand that --show is a special flag and it is very important that you know that it is supposed to run only after the cracking process was completed.

This means, your command would look like this (2-fold).
1. command (cracking hashes with the list that you want to remove):

Code:

oclHashcat64.exe -m 0 -a 0 -r rules/best64.rule --remove -o cracked.txt hash/hash_this_is_the_list_that_doesnt_contain_all_hashes.txt wordlist/wordlist.txt

2. command (with the original hash list):

Code:

oclHashcat64.exe -m 0 --show -o output_of_show.txt hash/hash_this_is_the_original_hashlist.txt

Note: this is very well explained here: https://hashcat.net/wiki/frequently_aske...ilpassword ... like many other topics and frequently asked question (consider reading it!)