06-09-2022, 12:22 PM
(06-07-2022, 09:24 PM)secarica Wrote: Assuming a known passphrase twothree for a GnuPG private key and providing a password list containing these words
one
two
three
how can I make a rule for combining all these words in a maximum of, say, 2-pair combination ?
I mean, to instruct hashcat to try all of these combinations (and of course, stop if/when found a match)
one
two
three
onetwo
twoone
onethree
threeone
twothree
threetwo
but excluding
onetwothree
twoonethree
twothreeone
onethreetwo
etc.
i.e. combine only 2 of them (and that's it). Or perhaps change to a maximum of 3 of them at a later stage / in other scenario etc.
The above is just a training test in order to learn what to do in a real user case, where a forgotten GnuPG private key passphrase is most likely a combination of a few possible known expressions – not that many, but enough to be too complicated to try manually all of it.
you can combine 2 wordlists on the fly with hashcat, just provide the same list twice
or take a look at princeprocessor https://github.com/hashcat/princeprocessor