08-19-2016, 09:20 AM
If you use -a 6 hybrid attack that means you have a mask. The mask will add N length to the candidates, depending on your mask. Means if you subtract that length from your maximum password length, all you need to do is to filter the input wordlist for that size. You can use -j parameter with the < rule, see rule pages on wiki