is a 'catchall' mask possible?

[Snoopy]

Thank-you kindly. That was easy enough since I had just changed my command to:

Code:

./hashcat -a 3 -m 14800 -w 3 -o cracked.txt --outfile-format=2 --increment hash.txt ?u?l?l?l?l?l?d?d?s?s ?u?l?l?l?l?l?l?d?d?s?s ?u?l?l?l?l?l?l?l?d?d?s?s ?u?l?l?l?l?l?l?l?l?d?d?s?s ?u?l?l?l?l?l?l?l?l?l?d?d?s?
s ?u?l?l?l?l?l?d?d?s ?u?l?l?l?l?l?l?d?d?s ?u?l?l?l?l?l?l?l?d?d?s ?u?l?l?l?l?l?l?l?l?d?d?s ?u?l?l?l?l?l?l?l?l?l?d?d?s ?u?l?l?l?l?l?d?d ?u?l?l?l?l?l?l?d?d ?u?l?l?l?l?l?l?l?d?d ?u?l?l?l?l?l?l?l?l?d?d ?u?l?l?l?l?
l?l?l?l?l?d?d

It suggests -w but I'm not sure at this point if it's necessary. Now it's as you suggested, including the -S.

Since there are a few other passwd combos she might have used i'll create another mask file and throw that one over on the other server. Thank-you again for the guidance.

i dont really believe that this command works like you think. the masks after the first one (?u?l?l?l?l?l?d?d?s?s) are definitly skipped and therefore not attacked, on commandline there ist only one mask allowed

second thing, --increment tells hashcat to do the following (first mask) test:
?u
?u?l
?u?l?l
...
till you reach
...
?u?l?l?l?l?l?d?d?s?s

given your infos and this slow itunes hash, i would not using bruteforce, instead try building up a dictionary with words your wife is/was using (or use a dictionary for your language) and use rules to upper the first char and append the numbers/special chars this would significantly reduce the keyspace as "dumb not really words" or passes like

Aaaaaaaaa19!"

are not tested, rules to apppend numbers and chars are easily generated with the help of hashcat --stdout or maskprocessor