05-03-2025, 07:04 PM
(This post was last modified: 05-03-2025, 07:06 PM by carmitchel.)
I know this is an old post but it seemed most relevant for what I am trying to do. I have a short password list (about 30 words). The user always combined two common words, and then appended one of several numbers (one of about 5) at the end (so essentially three words). I have been wasting time with mask attacks by manually combining the words, but this becomes very hard to keep track of. What is the best approach? Here is an example of his password pattern:
word1+word2+number Like "Bigtree2011" I'm fairly certain that he would have used at least two of the words or numbers in his new password, but he may have introduced one new word.
If it were feasible, I think combining two english dictionaries with each of his numbers would find the password, but of course the keyspace would be huge. BTW I have the hash and have extracted a hash from a sample I made using the customers own hardware/software, so there is no issue with the hash. The algo is 22500 multibit key (1). Any suggestions about the best way to go about this?
word1+word2+number Like "Bigtree2011" I'm fairly certain that he would have used at least two of the words or numbers in his new password, but he may have introduced one new word.
If it were feasible, I think combining two english dictionaries with each of his numbers would find the password, but of course the keyspace would be huge. BTW I have the hash and have extracted a hash from a sample I made using the customers own hardware/software, so there is no issue with the hash. The algo is 22500 multibit key (1). Any suggestions about the best way to go about this?