Noob question, bruteforce pmkid/wpa2 ISP default passwords

[undeath]

without further knowledge that's hardly feasible. You might be interested in this thread: https://hashcat.net/forum/thread-6170.html

Other than that, here's the documentation for mask attacks: https://hashcat.net/wiki/doku.php?id=mask_attack