Two questions about hash files and hybrid attack

[23732]

When doing an attack against a file with multiple hashes, does oclHashcat-plus do the whole wordlist (or mask) against one hash at the time or does it one word againt all hashes?

Also, is it possible to do a hybrid attack with masks prefixed and suffixed on a word? F. ex:

Code:

0000password0000 -
9999password9999

[atom]

When doing an attack against a file with multiple hashes, does oclHashcat-plus do the whole wordlist (or mask) against one hash at the time or does it one word againt all hashes?

If its an unsalted algorithm it checks against all hashes at once.

Also, is it possible to do a hybrid attack with masks prefixed and suffixed on a word? F. ex:

Code:

0000password0000 -
9999password9999

Yes, with multi-rules. Check the rules/hybrid folder for examples or even better, generate them with maskprocessor: https://hashcat.net/wiki/doku.php?id=rul...kprocessor

[23732]

Thanks for the answers, going to use all night on reading up on and creating rules ;-)

EDIT: So to do prepended and appended, I'll have to do "^$1", "^$2", "^$1" etc. ?

[mastercracker]

Thanks for the answers, going to use all night on reading up on and creating rules ;-)

EDIT: So to do prepended and appended, I'll have to do "^$1", "^$2", "^$1" etc. ?

Not exactly. To prepend and append 1 to every wordlist, the rule would be

Code:

^1$1
or for more clarity
^1 $1

However, since you will probably want to do all the combinations, you would be better doing 2 separate rule files: one file with rules that prepends all numbers and one file that append all numbers. You then put both in your command line. -r rulefile1 -r rulefile2.

Tip: If you include also the rule : (which means no change) to both files, you will cover the following situations:
- wordlist without any changes to the word
- wordlist with prepend only
- wordlist with append only
- wordlist with both prepend and append.

[23732]

Thanks for clearing that up to me :-)

I've made some rules, they're about 1,8GB each, but oclHashcat doesn't start cracking. Is it because the rulefiles are so big?

[atom]

Yeah maybe. Make sure the sum of all rules is not > 500k. Tip: split them