rule bug in oclHashCat-plus?

[kefir]

Hi, I'm trying to understand the rules, and while reading some, I saw this in the file rules/best64.rule:

Code:

## high frequency overwrite at start
o0d
o0m o1a
o0t o0b

Surely the last entry here is wrong? There's no point replacing the first character first with a t, and then replacing that with a b again?

[Xanadrel]

It's not a bug, it's a feature.

[kefir]

I think the description is wrong in rules/specific.rule too:

Code:

## rule: switch last two chars of word with each other
## limits: words greater or equal 10 chars length
## example: johnnoble ---> johnnobel
## extras: experienced effective cases

>A k l
>A k u
>A k c

but I think it switches the first two chars, not the last two. To switch the last two chars, the k in the rules should have been capitalized.

Also, I didn't see any documentation of the '>' in docs/rules.txt, but I assume this is a test meaning we should continue only if the length of the input string is equal to or greater than A (10). Does it in fact mean greater or equal, or strictly greater? The first sounds confusing, in my opinion it ought to be the latter.

[atom]

You are absolutly right, but somebody already reported this on IRC, so i fixed it for the betas. In the next release it will be fixed.

[kefir]

Does that cover the issue from rules/specific.rule as well? And does the '>' mean >= or just >?

[atom]

Easiest way to find out is to use hashcat in --stdout mode:

root@sf:~/hashcat-0.40# cat dict
password
password1
password12
password123
password1234
root@sf:~/hashcat-0.40# cat rule
>A
root@sf:~/hashcat-0.40# ./hashcat-cli64.bin --stdout dict -r rule
password12
password123
password1234