Hybrid attack

[philsmd]

You could use a hcmask file (see https://hashcat.net/wiki/doku.php?id=mas...mask_files):

file my.hcmask:

Code:

?l?u?d,key?1
?l?u?d,?1key
?l?u?d,key?1?1
?l?u?d,?1?1key
?l?u?d,?1key?1
?l?u?d,key?1?1?1
?l?u?d,?1?1?1key
?l?u?d,?1key?1?1
?l?u?d,?1?1key?1
?l?u?d,key?1?1?1?1
?l?u?d,?1?1?1?1key
?l?u?d,?1key?1?1?1
?l?u?d,?1?1key?1?!
?l?u?d,?1?1?1key?1

and run it like this:

Code:

hashcat -m 0 -a 3 -w 3 hashes.txt my.hcmask

the only disadvantage of this solution is that the speed is not guaranteed to be the best for all mask (especially if we have masks with a constant prefix). On the other hand, it is for sure the most convenient way to run a set of masks that follow certain policies.