01-09-2018, 09:40 AM
Well, the best strategy depends on a couple of things like:
1. is it a slow or fast hashing algorithm (which hash type is used, -m ?) ?
2. how large is the number of constant strings. Is there only one candidate "Password" string or several? how many? dozens, hundreds, thousands, millions?
3. how many characters need to be tested on the left and how many characters need to be tested on the right ?
... etc. etc. etc
There are also a couple of strategies:
1. use -a 0 and a couple of append/prepend rules (see https://hashcat.net/wiki/doku.php?id=rule_based_attack)
2. use a .hcmask file if the number of constant strings is small and the mask is large enough such that full speed is possible (see https://hashcat.net/wiki/doku.php?id=mas...mask_files and https://hashcat.net/wiki/doku.php?id=fre..._mask_file)
3. prepare a (in best case: mid-sized, not too large, not too small) dictionary for the left side and use attack mode -a 6, preparation can be done with maskprocessor (mp64) or hashcat's --stdout mode
4. prepare a (in best case: mid-sized, not too large, not too small) dictionary for the right side and use attack mode -a 7, preparation can be done with maskprocessor (mp64) or hashcat's --stdout mode
5. prepare a (in best case: mid-sized, not too large, not too small) dictionary and run it with -a 0 (with or without rules... but dict shouldn't be too large... forget about generating a couple of GB dict)
1. is it a slow or fast hashing algorithm (which hash type is used, -m ?) ?
2. how large is the number of constant strings. Is there only one candidate "Password" string or several? how many? dozens, hundreds, thousands, millions?
3. how many characters need to be tested on the left and how many characters need to be tested on the right ?
... etc. etc. etc
There are also a couple of strategies:
1. use -a 0 and a couple of append/prepend rules (see https://hashcat.net/wiki/doku.php?id=rule_based_attack)
2. use a .hcmask file if the number of constant strings is small and the mask is large enough such that full speed is possible (see https://hashcat.net/wiki/doku.php?id=mas...mask_files and https://hashcat.net/wiki/doku.php?id=fre..._mask_file)
3. prepare a (in best case: mid-sized, not too large, not too small) dictionary for the left side and use attack mode -a 6, preparation can be done with maskprocessor (mp64) or hashcat's --stdout mode
4. prepare a (in best case: mid-sized, not too large, not too small) dictionary for the right side and use attack mode -a 7, preparation can be done with maskprocessor (mp64) or hashcat's --stdout mode
5. prepare a (in best case: mid-sized, not too large, not too small) dictionary and run it with -a 0 (with or without rules... but dict shouldn't be too large... forget about generating a couple of GB dict)