Rule-based Attack: Substitution of single chars with strings
#2
As far as I know, if you want to stick with rules, you would probably need at least 2 different types of rules.

One idea is to purge all "!" characters with the purge rule and insert the multi-byte string with a couple of insert rules, like this:
Code:
@! i0# i1& i23 i33 i4;
@! i1# i2& i33 i43 i5;
@! i2# i3& i43 i53 i6;
#...
@! iU# iV& iW3 iX3 iY;
@! iV# iW& iX3 iY3 iZ;

#...
# repeat with next symbol and/or combinations of multiple symbols

This rule files can be easily generated with a simple script (you only need to know that the offset for the insert rules are 0123456789ABCDEF...XYZ). The only problem with this approach is, that the rule file could get very large if you combine purges and inserts of multiple strings (and even allow combinations of the same inserted string in multiple places within the password).

You could for instance just generate all rules for each and every symbol within separate .rule files (like the the example above but of course with the complete set of rules, no "..." Wink, the examle was for the charater "!") and use rule stacking to do the combinations (even with the same rule files): https://hashcat.net/wiki/rule_based_attack#multi-rules


Messages In This Thread
RE: Rule-based Attack: Substitution of single chars with strings - by philsmd - 05-12-2017, 09:29 AM