12-21-2020, 02:16 PM
All your findings are correct. There is no way to enforce such policy requirements in hashcat.
Pretty much the only solution is to use stdin and filter the input words in advance using an external program (eg grep).
Yes, you will lose the estimated time by doing that. Extrapolating the time needed to process 1% would work for a rough estimate, but even knowing when you hit the 1% will be a challenge and it assumes the amount of filtered candidates remains roughly the same within the other 99%.
Pretty much the only solution is to use stdin and filter the input words in advance using an external program (eg grep).
Yes, you will lose the estimated time by doing that. Extrapolating the time needed to process 1% would work for a rough estimate, but even knowing when you hit the 1% will be a challenge and it assumes the amount of filtered candidates remains roughly the same within the other 99%.