(updated) Hashcat 0.45b6 vs oclHashcat 0.15b9 - duplicated rules behavior

[proinside]

Using a single rule file, with many rules, not multiple rule files:

- when running hashcat, we get a screen message about the duplicated rules that are skipped by hashcat

- when running oclHashcat with the same rules file, we don't get any message.

The question is: what do oclHashcat when a rule file has duplicated rules ? Ignore them in "silent", or run them all, no matter the number of duplicated rules ?

[atom]

Yes, thats a behaivior that resulted from the old days when oclHashcat-plus only was able to do dictinoary attack using rules and then by using rules like perfect.rule to meassure the performance. That means currently its executing them. not skipping them as with hashcat. I should change that so that it works like hashcat. Please open a TRAC ticket for this.

[Hash-IT]

Well spotted proinside

I am pleased you decided to post this in the end, you should post more often

[proinside]

Thanks for the confirmation, atom. This save me from burning GPUs more than needed.

Hash-IT: comment appreciated. Can you open a TRAC ticket, if you please, or send
me a step by step to do it my self, if necessary ? Thank you.

[Hash-IT]

Hash-IT: comment appreciated. Can you open a TRAC ticket, if you please, or send
me a step by step to do it my self, if necessary ? Thank you.

I can do both

I'll make the ticket now and we can talk about how you can do them yourself later

[proinside]

Thank you Hash-IT.

Another detail.
Using a rule file with 7.999 rules, got the folowing results:

- Hashcat skip 1.491 duplicate rules, so it work with 6.508 rules.
- ULM sort and remove 1.648 duplicated rules (lines)
- EGB SortDictionary removes 1.640 duplicated rules (lines)

Didn't check deeply what's being removed to understand these
diferences. Anyone can take any rule file, join with a couple of
other rule files, and see if this can happen.

[proinside]

Using d3ad0ne_1.5K.rule:

- hashcat 0.45b6 display 1.540 rules, no rule is skipped
- oclHashcat 0.15b9 display 1.522 rules, some displayed as duplicated and ignored.

Checked the rule file and I found the problem, with just two examples:

1 - oclHashcat consider duplicated rule $1$2$3

The rule file have, among the other rules, two rules:

- $1$2$3
- $1$2$3$4

2 - oclHashcat consider duplicated rule $0$1

The rule file have, among the other rules, two rules:

- $0$1
- $0$0$1

This way, oclHashcat is skipping valid rules.