04-03-2019, 05:24 AM
Depending on the hashtype, it might be worth not sweating hitting some 'forbidden' combos and go for a series of masks that encompass the areas your sure about. Also, in my experience, running masks is always faster than wordlists; I'll take the wastage hit for the overall gain.
Knowing that it's only caps and numbers *drastically* reduces the keyspace, so doing some quick math on acceptable runtimes would be worth a look. Something somewhere is going to have to generate the candidate, is it worth it to try and curate a giant list, or just let hashcat do it's thing? Honest question, the answer is highly situational.
I've cobbled together scripts to output masks that encompass pw rules, or suspected themes, that can save a lot of inaccuracies vs fiddling by hand.
Good luck!
Knowing that it's only caps and numbers *drastically* reduces the keyspace, so doing some quick math on acceptable runtimes would be worth a look. Something somewhere is going to have to generate the candidate, is it worth it to try and curate a giant list, or just let hashcat do it's thing? Honest question, the answer is highly situational.
I've cobbled together scripts to output masks that encompass pw rules, or suspected themes, that can save a lot of inaccuracies vs fiddling by hand.
Good luck!