09-08-2022, 11:28 PM
Can you post your test hashes so we can reproduce your results?
(09-08-2022, 11:09 PM)SuperColin Wrote: I'm totally new to hashcat, but in my experimenting with hybrid wordlist + mask attacks I'm not cracking some of the hashes I would expect to. I've determined that this is because the mask part isn't using all of the charset that I'm expecting.
To simplify and confirm this behavior I created a list of hashes from "a", "A", "1", "!" and ran a mask attack with a single "?a" as the input. This results in only cracking the hashes for "a" and "1".
command
hashcat.exe -m 0 -o test.txt -a 3 test.hash ?a
I also notice that it says it's only making 32 guesses, which should be more if it's going through letters, numbers and symbols.
I think that a work around could be to just create a custom charset, but I'd rather learn what to expect from the built in's better.
In short: is there a reason why the "?a" built in charset wouldn't go through all of the other (non-hexish) built in charsets?