11-20-2011, 12:36 AM
I am not entirely sure I understand your post but I will do my best !
I think you are asking for help to write rules. I could write some very specific rules for your list but then that wouldn’t be the right thing to do as it would be too specific to those few passwords.
If you would like a general rule that would help catch most of those words and also others try the following
Prefix numbers
Suffix numbers
Toggle Case.
So example password.
Pass123
With a supplied password list of “pass†would be caught using this rule.
C$1$2$3
pass + ( c ) = Pass + ( $1 ) = Pass1 + ( $2) =Pass12 + ($3) = Pass123 > to hashcat.
The password rule list can get VERY long so I couldn’t post it here. Basically I would experiment with individual appended numbers as 0-100 or 0-1000 can get a bit to long to list, especially when combined with toggles. Experiment with the toggles.rule as well. All these rules can be joined together in a single rule line. Once you understand them it is very easy to work out, even I can do it and I am a bit thick !
As a final example try this rule for the password you supplied.
ADGadg66
So to test the rules make your password list adgadg
So your input password to test is “adgadgâ€
Then make a rule file containing the following.
T1T2T3$6$6
Run it and it should find your password.
I think you are asking for help to write rules. I could write some very specific rules for your list but then that wouldn’t be the right thing to do as it would be too specific to those few passwords.
If you would like a general rule that would help catch most of those words and also others try the following
Prefix numbers
Suffix numbers
Toggle Case.
So example password.
Pass123
With a supplied password list of “pass†would be caught using this rule.
C$1$2$3
pass + ( c ) = Pass + ( $1 ) = Pass1 + ( $2) =Pass12 + ($3) = Pass123 > to hashcat.
The password rule list can get VERY long so I couldn’t post it here. Basically I would experiment with individual appended numbers as 0-100 or 0-1000 can get a bit to long to list, especially when combined with toggles. Experiment with the toggles.rule as well. All these rules can be joined together in a single rule line. Once you understand them it is very easy to work out, even I can do it and I am a bit thick !
As a final example try this rule for the password you supplied.
ADGadg66
So to test the rules make your password list adgadg
So your input password to test is “adgadgâ€
Then make a rule file containing the following.
T1T2T3$6$6
Run it and it should find your password.