Using less than 8 Characters on 22000
#1
So, im trying to work out how i can increase my chances of success at cracking 22000. 

What i'd like to be able to do is use a dictionary, then apply a rule set to add years and dates to it.

The issue is that, the original dictionary words are less than 8 characters, so hashcat throws them out. 

Is there any way i can force hashcat to use all words in the dictionary?
Reply
#2
A possibility could be generate your candidates with another Hashcat instance (using --stdout), and pipe them into your command.
Reply
#3
Option -S will do the trick:
Code:
$ hashcat --help | grep slow
-S, --slow-candidates          |      | Enable slower (but advanced) candidate generators    |

Code:
$ cat wordlist.txt
abcd
aaaa
bbbb

$ cat 2022.rule
$2 $0 $2 $0
$2 $0 $2 $1
$2 $0 $2 $2

$ hashcat -m 22000 hash.hc22000 -r 2022.rule wordlist.txt
hashcat (v6.2.6-97-gb8dd80694) starting
...
Status...........: Exhausted
Hash.Mode........: 22000 (WPA-PBKDF2-PMKID+EAPOL)
Hash.Target......: hash.hc22000
Time.Started.....: Fri Nov  4 11:15:10 2022 (12 secs)
Time.Estimated...: Fri Nov  4 11:15:22 2022 (0 secs)
Kernel.Feature...: Pure Kernel
Guess.Base.......: File (wordlist.txt)
Guess.Mod........: Rules (2022.rule)
Guess.Queue......: 1/1 (100.00%)
Speed.#1.........:      327 H/s (1.40ms) @ Accel:8 Loops:256 Thr:512 Vec:1
Recovered........: 0/584 (0.00%) Digests (total), 0/584 (0.00%) Digests (new), 0/430 (0.00%) Salts
Progress.........: 3870/3870 (100.00%)
Rejected.........: 0/3870 (0.00%)
Restore.Point....: 9/9 (100.00%)
Restore.Sub.#1...: Salt:429 Amplifier:0-1 Iteration:0-1
Candidate.Engine.: Host Generator + PCIe
Candidates.#1....: abcd2020 -> bbbb2022
Hardware.Mon.#1..: Temp: 49c Fan: 33% Util: 54% Core:1898MHz Mem:5005MHz Bus:16

Started: Fri Nov  4 11:15:09 2022
Stopped: Fri Nov  4 11:15:24 2022
Reply
#4
(11-04-2022, 12:19 PM)ZerBea Wrote: Option -S will do the trick:
Code:
$ hashcat --help | grep slow
-S, --slow-candidates          |      | Enable slower (but advanced) candidate generators    |

Code:
$ cat wordlist.txt
abcd
aaaa
bbbb

$ cat 2022.rule
$2 $0 $2 $0
$2 $0 $2 $1
$2 $0 $2 $2

$ hashcat -m 22000 hash.hc22000 -r 2022.rule wordlist.txt
hashcat (v6.2.6-97-gb8dd80694) starting
...
Status...........: Exhausted
Hash.Mode........: 22000 (WPA-PBKDF2-PMKID+EAPOL)
Hash.Target......: hash.hc22000
Time.Started.....: Fri Nov  4 11:15:10 2022 (12 secs)
Time.Estimated...: Fri Nov  4 11:15:22 2022 (0 secs)
Kernel.Feature...: Pure Kernel
Guess.Base.......: File (wordlist.txt)
Guess.Mod........: Rules (2022.rule)
Guess.Queue......: 1/1 (100.00%)
Speed.#1.........:      327 H/s (1.40ms) @ Accel:8 Loops:256 Thr:512 Vec:1
Recovered........: 0/584 (0.00%) Digests (total), 0/584 (0.00%) Digests (new), 0/430 (0.00%) Salts
Progress.........: 3870/3870 (100.00%)
Rejected.........: 0/3870 (0.00%)
Restore.Point....: 9/9 (100.00%)
Restore.Sub.#1...: Salt:429 Amplifier:0-1 Iteration:0-1
Candidate.Engine.: Host Generator + PCIe
Candidates.#1....: abcd2020 -> bbbb2022
Hardware.Mon.#1..: Temp: 49c Fan: 33% Util: 54% Core:1898MHz Mem:5005MHz Bus:16

Started: Fri Nov  4 11:15:09 2022
Stopped: Fri Nov  4 11:15:24 2022

What exactly does -S do? as in, what is "Advanced" about the candidate generator? and where should it be used?
Reply
#5
(11-04-2022, 12:19 PM)ZerBea Wrote: Option -S will do the trick:
Code:
$ hashcat --help | grep slow
-S, --slow-candidates          |      | Enable slower (but advanced) candidate generators    |

Code:
$ cat wordlist.txt
abcd
aaaa
bbbb

$ cat 2022.rule
$2 $0 $2 $0
$2 $0 $2 $1
$2 $0 $2 $2

$ hashcat -m 22000 hash.hc22000 -r 2022.rule wordlist.txt
hashcat (v6.2.6-97-gb8dd80694) starting
...
Status...........: Exhausted
Hash.Mode........: 22000 (WPA-PBKDF2-PMKID+EAPOL)
Hash.Target......: hash.hc22000
Time.Started.....: Fri Nov  4 11:15:10 2022 (12 secs)
Time.Estimated...: Fri Nov  4 11:15:22 2022 (0 secs)
Kernel.Feature...: Pure Kernel
Guess.Base.......: File (wordlist.txt)
Guess.Mod........: Rules (2022.rule)
Guess.Queue......: 1/1 (100.00%)
Speed.#1.........:      327 H/s (1.40ms) @ Accel:8 Loops:256 Thr:512 Vec:1
Recovered........: 0/584 (0.00%) Digests (total), 0/584 (0.00%) Digests (new), 0/430 (0.00%) Salts
Progress.........: 3870/3870 (100.00%)
Rejected.........: 0/3870 (0.00%)
Restore.Point....: 9/9 (100.00%)
Restore.Sub.#1...: Salt:429 Amplifier:0-1 Iteration:0-1
Candidate.Engine.: Host Generator + PCIe
Candidates.#1....: abcd2020 -> bbbb2022
Hardware.Mon.#1..: Temp: 49c Fan: 33% Util: 54% Core:1898MHz Mem:5005MHz Bus:16

Started: Fri Nov  4 11:15:09 2022
Stopped: Fri Nov  4 11:15:24 2022
Thanks, that did the trick!
Reply
#6
@TickleMyPickle69 - no problem, you're welcoem.
@cybhashcat - explained in slow-candidates-mode.md (hashcat/docs) or here on hashcat git:
https://github.com/hashcat/hashcat/blob/...es-mode.md
Reply