How to bruteforce?

[Hash-IT]

First of all Thanks for the OHC Plus program, Atom. It is a great job.


Yes,I have read that document. In my first post I indicated that I have used bf , TOXLC, specific, best64 and I was surprised that with any rule it took longer to catch the simple password.

In your example you used

./maskprocessor.exe -1 abcdwxyz ?1?1?1?1?1?1?1?1

Your password was = abcdwxyz

If you used a rule file that for example appended 123 or 123! then you will never get your password.

If however your rule file started with :

Example

:
$1$2$3
$1$2$3$!

Then you would have found your password in the same 3 seconds you stated you did.

The reason is the ":" in the rule file will try the password "as is" meaning no rule. It would then go on to appending 123 / 123! in this case.

Personally I always perform a full run on my lists without any modification and then each rule file doesn't need the ":" within it because if you do that in each rule file you will be running through your lists multiple times unnecessarily duplicating runs. This of course would totally waste all atoms efforts to make hashcatplus as fast as it is for you !

That is why I try to understand more about rule, to be able to chop out most of the rules which makes the run takes too much time to run.

I suggest it is better to build your own rules from the start and not try to do it the other way round as there is always a chance you will miss something. Its a bit like tidying a drawer, tip it all out and only put back in what you want to keep !

If I understand rule, and have a guess for example, it could be a double-password, or maybe the same simple password added date of birth, or a mirror I would modify rule file to have the two or three scenario in it only.

To do what you are asking here type the following in your rule file..

d
$1$9$6$0
$1$9$6$1 (etc)
f

By the way, I have the feeling I found a bug in OHC plus. Where is it appropriated to report. Thanks again for your prompt reply.

http://hashcat.net/forum/forum-23.html or http://hashcat.net/forum/forum-8.html