04-16-2021, 10:51 PM
well your attack is very, very specific and therefore quite to specific for what maskattack was made for
parsing such "complex" mask you are looking for, with more than 4 charsets and so on, would slowdown the generation of passwordcandidates more than actuall trying millions (of fast hashes) of "not perfect fitting candidates"
if you really want to achieve only real perfect password candidates you have to do some real "handmade preparations" before, also it seems more like a job for a combinator attack
you could first generate a basic style wordlist with maskprocessor (just with lower case letters), combine it with a second wordlist for your numbers and special chars or use at this point your wordlist + mask and leave any modifications to a handcrafted ruleset
for example with rules like
sa4 (replaces all lowercase a with 4)
T3 (toggles lower upper on index 3, starting with index 0)
of course you have to combinate most of thes rules, see hashcat utils for helping with these, i think some runs of combipow will do the job quite well
parsing such "complex" mask you are looking for, with more than 4 charsets and so on, would slowdown the generation of passwordcandidates more than actuall trying millions (of fast hashes) of "not perfect fitting candidates"
if you really want to achieve only real perfect password candidates you have to do some real "handmade preparations" before, also it seems more like a job for a combinator attack
you could first generate a basic style wordlist with maskprocessor (just with lower case letters), combine it with a second wordlist for your numbers and special chars or use at this point your wordlist + mask and leave any modifications to a handcrafted ruleset
for example with rules like
sa4 (replaces all lowercase a with 4)
T3 (toggles lower upper on index 3, starting with index 0)
of course you have to combinate most of thes rules, see hashcat utils for helping with these, i think some runs of combipow will do the job quite well