11-24-2010, 10:51 PM
I have an old laptop, (2004), with geforce FX go5200 video card, IE: no cuda
so i rely on finding patterns in found decrypts, writing word lists that loosely match those patterns, then writing rules to modify the lists. here's an example from some dec NTLM hashes:
I see this pattern
24:T'pese
32$Puc'er
63?Bo'lls
so I make this word list 2num1special, (using only :$? for the specials to keep the list small), 1upper and 3lower. This list is 7chr and the passes are 9 so I write a rule for the rest that goes like this:
append lower add ' [3-8]
So my ? Is this the same rule or does Hashcat gui treat them differently.
$[a-z]i[3-8][']
or
i[3-8][']$[a-z]
Thanks for any help.
so i rely on finding patterns in found decrypts, writing word lists that loosely match those patterns, then writing rules to modify the lists. here's an example from some dec NTLM hashes:I see this pattern
24:T'pese
32$Puc'er
63?Bo'lls
so I make this word list 2num1special, (using only :$? for the specials to keep the list small), 1upper and 3lower. This list is 7chr and the passes are 9 so I write a rule for the rest that goes like this:
append lower add ' [3-8]
So my ? Is this the same rule or does Hashcat gui treat them differently.
$[a-z]i[3-8][']
or
i[3-8][']$[a-z]
Thanks for any help.