09-08-2022, 11:09 PM
(This post was last modified: 09-08-2022, 11:57 PM by SuperColin.)
I'm totally new to hashcat, but in my experimenting with hybrid wordlist + mask attacks I'm not cracking some of the hashes I would expect to. I've determined that this is because the mask part isn't using all of the charset that I'm expecting.
To simplify and confirm this behavior I created a list of hashes from "a", "A", "1", "!" and ran a mask attack with a single "?a" as the input. This results in only cracking the hashes for "a" and "1".
command
hashcat.exe -m 0 -o test.txt -a 3 test.hash ?a
I also notice that it says it's only making 32 guesses, which should be more if it's going through letters, numbers and symbols.
I think that a work around could be to just create a custom charset, but I'd rather learn what to expect from the built in's better.
In short: is there a reason why the "?a" built in charset wouldn't go through all of the other (non-hexish) built in charsets?
hashcat.PNG (Size: 32.41 KB / Downloads: 7)
To simplify and confirm this behavior I created a list of hashes from "a", "A", "1", "!" and ran a mask attack with a single "?a" as the input. This results in only cracking the hashes for "a" and "1".
command
hashcat.exe -m 0 -o test.txt -a 3 test.hash ?a
I also notice that it says it's only making 32 guesses, which should be more if it's going through letters, numbers and symbols.
I think that a work around could be to just create a custom charset, but I'd rather learn what to expect from the built in's better.
In short: is there a reason why the "?a" built in charset wouldn't go through all of the other (non-hexish) built in charsets?
hashcat.PNG (Size: 32.41 KB / Downloads: 7)