Question regarding attack mode 6
#1
When running a hybrid attack with a static wordlist and a mask suffix I see a weird behavior in candidate generation.

My dictionary:
Password
Pass
Test

My masks:
?d?d?d
?d?d?d?d
?d?d?d?d?d

When I review the status of my run, I can see hashcat generating candidates such as 123, without the prefix dictionary words. Is this a bug? Is there a way to make sure only the combination of the dictionary + mask will run against the hash?

I was suspecting that I may have an empty line somewhere in my dictionary but couldn't find any.
Reply
#2
you could utilize option --stdout for testing

given these files
dict.txt
Code:
test
pass
masks.txt
Code:
?d
run hashcat
Code:
hashcat --stdout -a6 dict.txt masks.txt
resluting in an unordered output, but containing all possibilities
Code:
test0 to test9
pass0 to past 9

try this with your inputfiles and redirect the output via > to another file and you will see all generated passes inside the file
Reply