03-01-2017, 06:44 PM
(03-01-2017, 05:41 PM)philsmd Wrote: 1. --custom-charset2 ?l?d means "define a custom charset with all lower letters and digits" (and which can be used within the mask with ?2 ). The default mask ist ?1?2.... The password "6Tommy" has an uppercase letter at position 2, so the custom charset 2 (?2) does not overlap with this (it doesn't include uppercase letters)
That's what I was missing.
I read through the wiki, but I haven't used the custom character sets as variables yet, so I was thrown off by the ?1, ?2, ?3. I know I've read multiple times that a brute force attack isn't actually recommended because of the amount of time required, but it wasn't as clear to me that there was still a default mask in use even with a -3. My assumption based on the name, my fault.
I really appreciate your clarification, it will help me explain it to anyone else who asks.