understanding dictionary/mask attack

[johnjohnsp1]

I think that you have misunderstood your problem. Your problem is that for NTLM (and DCC but not other algos), the maximum word length on the left and right is 7 characters each. Any word greater than 7 characters is skipped. So if your setup was pippo on the left dictionary and pippo02\ on the right dictionary, the latter will be skipped because it's 8 chars long (become 7 characters if you remove the \). The proper way to test it would be to have pippop on the left and ippo02\ on the right.

Thanks for the reply master, yes i think the problem was related to the NTLM hash since i tried with your example pip pop on the left & ippo02\ on the right and worked perfectly!!.