04-08-2020, 12:09 PM
1. only beta supports -m 22000 (https://hashcat.net/beta)
2. the keyspace is only traversed once, if while going to the password candidates one matches, it will be cracked... but you need to keep in mind that salted hashes have the disadvantage that every password must be combined with every "salt", that's the main idea of a salt, to slow it down (think of old rainbow table attacks, which of course are deprecated in most cases, but the idea remains)
3. NEVER. EVER. USE. FORCE. --force always makes problems. --force is used to skip problems/warnings which is very dangerous (only for developers it makes sense sometimes)
2. the keyspace is only traversed once, if while going to the password candidates one matches, it will be cracked... but you need to keep in mind that salted hashes have the disadvantage that every password must be combined with every "salt", that's the main idea of a salt, to slow it down (think of old rainbow table attacks, which of course are deprecated in most cases, but the idea remains)
3. NEVER. EVER. USE. FORCE. --force always makes problems. --force is used to skip problems/warnings which is very dangerous (only for developers it makes sense sometimes)