07-01-2020, 08:46 AM
without specifying any mask, hashcat will use the default mask, see https://hashcat.net/wiki/doku.php?id=has...ult_values
The default mask is probably not what you would call brute-force.
it's actually not even clear what we should generally call "brute-force": is it --increment ?a?a?a?a?a?a?a?a or --increment ?b?b?b?b?b?b?b etc
several people have different interpretation of "brute-force" i.e. trying ALL possibilities... it's just better to be specific and tell hashcat what you want to run. The default mask is neither the all ?a, nor all ?b... it's just a very good mask that works quite well for the general use, but might not be what you want (if you don't know the detail about the default mask).
So the best advice is to always specify a mask with -a 3
The default mask is probably not what you would call brute-force.
it's actually not even clear what we should generally call "brute-force": is it --increment ?a?a?a?a?a?a?a?a or --increment ?b?b?b?b?b?b?b etc
several people have different interpretation of "brute-force" i.e. trying ALL possibilities... it's just better to be specific and tell hashcat what you want to run. The default mask is neither the all ?a, nor all ?b... it's just a very good mask that works quite well for the general use, but might not be what you want (if you don't know the detail about the default mask).
So the best advice is to always specify a mask with -a 3