10-03-2010, 07:15 PM
hashcat and oclhashcat both uses rules very similar to JTR - http://www.openwall.com/john/doc/RULES.shtml
For hashcat to capitalize the first letter use the rule "c" without the quotes in a single line of a rule file. You are correct about the "$2$0$1$0" to append 2010 to the end of the dictionary word.
I prefer using oclhashcat to do a single simple rule such as:
- oclhashcat64.bin -m0 -n80 -j c -k \$2\$0\$1\$0 hash.list dict.dic dict.dic
The above example will use merge words from the same dict.dic capitalizing the first letter and appending 2010 to the end. Remember to use a \ to negate the $ on the command line(linux).
However if you want to just use a simple dictionary it would be:
- oclhashcat64.bin -m0 -n80 -j c -hash.list dict.dic 2010
I think a better example would be just to brute the last 4 characters with every digit to cover a wider range:
- oclhashcat64.bin -m0 -n80 -j c -hash.list dict.dic ?d?d?d?d
I compiled a list of frequent rules in order of occurrence and can be used as a rule file in hashcat, or they can be used to give use some ideas to use in oclhashcat - http://hashcat.net/misc/D3ad0ne_long.rule
For hashcat to capitalize the first letter use the rule "c" without the quotes in a single line of a rule file. You are correct about the "$2$0$1$0" to append 2010 to the end of the dictionary word.
I prefer using oclhashcat to do a single simple rule such as:
- oclhashcat64.bin -m0 -n80 -j c -k \$2\$0\$1\$0 hash.list dict.dic dict.dic
The above example will use merge words from the same dict.dic capitalizing the first letter and appending 2010 to the end. Remember to use a \ to negate the $ on the command line(linux).
However if you want to just use a simple dictionary it would be:
- oclhashcat64.bin -m0 -n80 -j c -hash.list dict.dic 2010
I think a better example would be just to brute the last 4 characters with every digit to cover a wider range:
- oclhashcat64.bin -m0 -n80 -j c -hash.list dict.dic ?d?d?d?d
I compiled a list of frequent rules in order of occurrence and can be used as a rule file in hashcat, or they can be used to give use some ideas to use in oclhashcat - http://hashcat.net/misc/D3ad0ne_long.rule