Some questions on charsets

[23732]

I don't quite get how the charsets work, so I have a few questions.

If I write "?l?l?l?l?l?l?l?l" as charset in oclHashCat, then I have defined a charset of 8 characters, ranging from aaaaaaaa-zzzzzzzz, right?

But, if I write "?l?l?l?l?l?l?l?d" as charset, then I have defined it as 8 characters, ranging from aaaaaaa1-zzzzzzz9, right? And so on..

If what I've written above is correct, how can I define a charset on 8 characters, a-z, 0-9? 9 characters and a-z, 0-9 and so on..

Thanks in advance for answers.

[forumhero]

you want to set a variable. it's called custom charset

follow link to examples. https://hashcat.net/wiki/doku.php?id=mask_attack

[23732]

(Without bruteforce attack selected, it just goes to wordlist stdin mode, and does 0 c/s and 0% idle, also does not crack any hashes)
I set custom charset 1 to ?l?d, but when using attack mode 3:

Code:

C:\HashCat\oclHashcat-plus-0.08>oclhashcat-plus64.exe -a 3 -m 100 F:\RealWordlis
ts\SHA1\CleanedSHA1.txt -1 -o F:\RealWordlists\SHA1\Cracked.txt --remove
oclHashcat-plus v0.08 by atom starting...

Hashes: 2604344
Unique digests: 2604344
Bitmaps: 21 bits, 1048576 entries, 0x000fffff mask, 4194304 bytes
GPU-Loops: 64
GPU-Accel: 40
Password lengths range: 1 - 15
Platform: AMD compatible platform found
Watchdog: Temperature limit set to 90c
Device #1: Cayman, 2048MB, 0Mhz, 22MCU
Device #1: Allocating 132MB host-memory
Device #1: Kernel ./kernels/4098/m0100_a3.Cayman.64.kernel (443896 bytes)

ERROR: Mask is too big

When removing brute force option and setting a new charset, which follows hex rules, it's finished here:

Code:

C:\HashCat\oclHashcat-plus-0.08>oclhashcat-plus64.exe -m 100 F:\RealWordlists\SH
A1\CleanedSHA1.txt -2 -o F:\RealWordlists\SHA1\Cracked.txt --remove
oclHashcat-plus v0.08 by atom starting...

Hashes: 2604344
Unique digests: 2604344
Bitmaps: 21 bits, 1048576 entries, 0x000fffff mask, 4194304 bytes
Rules: 1
GPU-Loops: 64
GPU-Accel: 40
Password lengths range: 1 - 15
Platform: AMD compatible platform found
Watchdog: Temperature limit set to 90c
Device #1: Cayman, 2048MB, 0Mhz, 22MCU
Device #1: Allocating 132MB host-memory
Device #1: Kernel ./kernels/4098/m0100_a0.Cayman.64.kernel (1064060 bytes)

Scanning dictionary F:\RealWordlists\SHA1\Cracked.txt: 1047580 bytes (45.09%), 1
Scanned dictionary F:\RealWordlists\SHA1\Cracked.txt: 2323157 bytes, 43725 words
, 43725 keyspace, starting attack...


Status.......: Exhausted
Input.Mode...: File (F:\RealWordlists\SHA1\Cracked.txt)
Hash.Target..: File (F:\RealWordlists\SHA1\CleanedSHA1.txt)
Hash.Type....: SHA1
Time.Running.: 0 secs
Time.Left....: 0 secs
Time.Util....: 996.8ms/0.0ms Real/CPU, 0.0% idle
Speed........:        0 c/s Real,        0 c/s GPU
Recovered....: 0/2604344 Digests, 0/1 Salts
Progress.....: 43725/43725 (100.00%)
Rejected.....: 43725/43725 (100.00%)
HW.Monitor.#1:  0% GPU, 38c Temp

Started: Mon Sep 03 22:29:20 2012
Stopped: Mon Sep 03 22:29:24 2012

When setting the charset as in the Wiki link you sent:

Code:

C:\HashCat\oclHashcat-plus-0.08>oclhashcat-plus64.exe -m 100 F:\RealWordlists\SH
A1\CleanedSHA1.txt --custom-charset1=?l?d ?1?1?1?1?1?1?1?1?1?1 -o F:\RealWordlis
ts\SHA1\Cracked.txt --remove
oclHashcat-plus v0.08 by atom starting...

Hashes: 2604344
Unique digests: 2604344
Bitmaps: 21 bits, 1048576 entries, 0x000fffff mask, 4194304 bytes
Rules: 1
GPU-Loops: 64
GPU-Accel: 40
Password lengths range: 1 - 15
Platform: AMD compatible platform found
Watchdog: Temperature limit set to 90c
Device #1: Cayman, 2048MB, 0Mhz, 22MCU
Device #1: Allocating 132MB host-memory
Device #1: Kernel ./kernels/4098/m0100_a0.Cayman.64.kernel (1064060 bytes)

ERROR: ?1?1?1?1?1?1?1?1?1?1: No such file or directory

So could you, maybe, explain it a little bit more?

(Also if I set attack mode as bruteforce, how does the characterset mode work there?)

[forumhero]

the first example you had it on bruteforce attack mode but didn't specify a mask

the second example, when -a isn't specified it defaults to -a 0 attack mode. failed because you didn't specify a wordlist

the third example you provided a mask but forgot to put it in bruteforce mode, -a 3

some attack mode examples:
* Attack modes:
0 = Straight
1 = Combination
3 = Brute-force
4 = Permutation
6 = Hybrid dict + mask
7 = Hybrid mask + dict

hashcatexecutable -a 0 hashfile.txt wordlist.txt
hashcatexecutable -a 1 hashfile.txt wordlist1.txt wordlist2.txt
hashcatexecutable -a 3 hashfile.txt ?u?u?u?u?u?u?u?u?u?u
hashcatexecutable -a 4 (never used it so don't know)
hashcatexecutable -a 6 hashfile.txt wordlist.txt ?u?u?u?u
hashcatexecutable -a 7 hashfile.txt ?u?u?u?u wordlist.txt

[23732]

Every mask I set, HashCat reports that the mask is to big. Is there any way to resolve that? Like increasing host-memory?

[atom]

If hashcat reports the mask is to big it is usually saving you from starting an attack that would take longer than you life

[23732]

That's cool and all, but when setting the charset as characters "a", "b", isn't there something wrong then?

[atom]

as i said, as usual

[mastercracker]

That's cool and all, but when setting the charset as characters "a", "b", isn't there something wrong then?

Lots of discussion in the air. Give all the command lines that you have used that gives a mask too big error.

[23732]

Code:

C:\HashCat\oclHashcat-plus-0.08>oclHashcat-plus64.exe -a 3 -m 100 F:\RealWordlis
ts\SHA1\CleanedSHA1.txt -1 --custom-charset1=ab F:\RealWordlists\SHA1\Cracked.tx
t --remove
oclHashcat-plus v0.08 by atom starting...

Hashes: 2603924
Unique digests: 2603924
Bitmaps: 21 bits, 1048576 entries, 0x000fffff mask, 4194304 bytes
GPU-Loops: 64
GPU-Accel: 40
Password lengths range: 1 - 15
Platform: AMD compatible platform found
Watchdog: Temperature limit set to 90c
Device #1: Cayman, 2048MB, 0Mhz, 22MCU
Device #1: Allocating 132MB host-memory
Device #1: Kernel ./kernels/4098/m0100_a3.Cayman.64.kernel (443896 bytes)

ERROR: Mask is too big

Code:

C:\HashCat\oclHashcat-plus-0.08>oclHashcat-plus64.exe -a 3 -m 100 F:\RealWordlis
ts\SHA1\CleanedSHA1.txt -2 --custom-charset1=?d F:\RealWordlists\SHA1\Cracked.tx
t --remove
oclHashcat-plus v0.08 by atom starting...

Hashes: 2603924
Unique digests: 2603924
Bitmaps: 21 bits, 1048576 entries, 0x000fffff mask, 4194304 bytes
GPU-Loops: 64
GPU-Accel: 40
Password lengths range: 1 - 15
Platform: AMD compatible platform found
Watchdog: Temperature limit set to 90c
Device #1: Cayman, 2048MB, 0Mhz, 22MCU
Device #1: Allocating 132MB host-memory
Device #1: Kernel ./kernels/4098/m0100_a3.Cayman.64.kernel (443896 bytes)

ERROR: Mask is too big