Best long brute-force masks

[davejcb]

Hi all,

Searched, didn't quite find this-

I'm looking for advice from the more seasoned guys, with respect to the most effective masks to use when ?a and ?l?u?d are not feasible.

For instance, I'm looking at some md5crypt hashes, have exhausted 7 character ?a, and am running 8 characters ?l?u?d??'!@#$%^&*', which will take ~3 months (at my ~35 000K/sec capability). This is borderline feasible for me, but obviously 9 and 10 characters will have to be very specific masks; this is where I'd like feedback on what you've had success with.

Keep in mind I have no clues whatsoever to what the hash might contain, could be anything.

I'm thinking these to start-

?u?l?l?l?l?l?l?d?s
?u?l?l?l?l?d?d?d?d
?u?l?l?l?l?d?d?d?d?s

I would really appreciate your input.

Thanks!

***EDIT*** While we're at it, what symbols are worth including? I'm thinking you wouldn't see ( and ) or / very much, but !@#$%^&* you would?

[epixoip]

look at the hcmask files that ship with hashcat.

also the default charset & mask is pretty good at longer lengths.

and also remember -t

[Incisive]

Here's a sample of some brute force rules I use as "starters" - a few date and phone number format based ones, some statistically generated per-position sets, and a few basic keywalking rules, with DOS batch file remarks about each, and a rough estimate of the keyspace.

Note that some of these rules are strict subsets of others - often they're marked with SUPERCEDED so you know that a later rule covers their entire keyspace.

Code:

rem 8E8 8 char D-/.  - will catch many two digit year numeric date formats!
oclHashcat-lite64.exe -m x--pw-min=8 --pw-max=8  -1 ?d-/. Hash ?1?1?1?1?1?1?1?1


rem 2E7 8 char date based pattern 11211211 (-1 1234567890 -2 -/., ) - includes space, and all letters used in normal abbreviations (capitalized)
oclHashcat-lite64.exe -m x--pw-min=8 --pw-max=8 --hex-charset -1 31323334353637383930 -2 2D2F2E2C20  Hash ?1?1?2?1?1?2?1?1


rem  We'll try a little Digit Lower first character plus Lower only, and then Digit parens dash Lower first character plug Digit parens dash only
rem These REALLY MUST go through rules-based dictionary attacks - we have massive gaps!
rem 3E10 9 char, DL-() first, D-() after
oclHashcat-lite64.exe -m x--pw-min=9 --pw-max=9  -1 ?l?d-() -2 ?d-() Hash ?1?2?2?2?2?2?2?2?2
rem 1E11, 10 char D-()
oclHashcat-lite64.exe -m x--pw-min=10 --pw-max=10  -1 ?d-() Hash ?1?1?1?1?1?1?1?1?1?1
rem 1E12, 11 char D-()
oclHashcat-lite64.exe -m x--pw-min=11 --pw-max=11  -1 ?d-() Hash ?1?1?1?1?1?1?1?1?1?1?1



rem 2E7 10 char date based pattern 4124123111 (-1 1234567890 -2 -/., -3 12, 04 01) - includes space, and all letters used in normal abbreviations (capitalized)
oclHashcat-lite64.exe -m x--pw-min=10 --pw-max=10 --hex-charset -1 31323334353637383930 -2 2D2F2E2C20 -3 3132 -4 3031 Hash ?4?1?2?4?1?2?3?1?1?1

rem 1E10 U.S. (xxx)xxx-xxxx phone number format - this runs very quickly indeed for a "13 character" password with digits and symbols, compared to a non-patterned pure brute force search.
oclHashcat-lite64.exe -m x--pw-min=13 --pw-max=13  -1 ?d Hash "(?1?1?1)?1?1?1-?1?1?1?1"

rem  U.S. (xxx) xxx-xxxx phone number format - this runs very quickly indeed for a "14 character" password with digits and symbols, compared to a non-patterned pure brute force search.
rem 1E10  ASCII values: ( 28     ) 29     space 20      - 2D
oclHashcat-lite64.exe -m x--pw-min=14 --pw-max=14  --hex-charset -1 31323334353637383930 -2 20 -3 28 -4 292D Hash "28?1?1?12920?1?1?12D?1?1?1?1"

rem  U.S. xxx xxx-xxxx phone number format - this runs very quickly indeed for a "14 character" password with digits and symbols, compared to a non-patterned pure brute force search.
rem 1E10  ASCII values:  space 20      - 2D
oclHashcat-lite64.exe -m x--pw-min=14 --pw-max=14  --hex-charset -1 31323334353637383930 -2 20 -3 28 -4 292D Hash "?1?1?120?1?1?12D?1?1?1?1"


rem  U.S. xxx-xxx-xxxx phone number format - this runs very quickly indeed for a "14 character" password with digits and symbols, compared to a non-patterned pure brute force search.
rem 1E10  ASCII values: 2D
oclHashcat-lite64.exe -m x--pw-min=14 --pw-max=14  --hex-charset -1 31323334353637383930 -2 20 -3 28 -4 292D Hash "?1?1?12D?1?1?12D?1?1?1?1"


rem Keywalking is the art of using adjacent keys to create patterns, much like (but older than) pattern locks on cellphones.
echo "Keywalking Brute Force:" >>SQL2005to2008R2_lite_Brute.out
rem 6E7 Basic Keywalking, 10 char STEPWISE 0 OVERLAP (i.e. split the keyspace both left/right and up/down), top 2 rows, 1q to 6t, Noshift+Shift
rem Pattern Up_Down.
oclHashcat-lite64.exe -m x--pw-min=10 --pw-max=10  -1 "!@#$1234" -2 "qweQWE" -3 "$%^456" -4 "rtRT" Hash "?1?2?1?2?1?2?3?4?3?4"
rem Down Up
oclHashcat-lite64.exe -m x--pw-min=10 --pw-max=10  -1 "!@#$1234" -2 "qweQWE" -3 "$%^456" -4 "rtRT" Hash "?2?1?2?1?2?1?4?3?4?3"


rem 3E8 Basic Keywalking, 10 char, top 2 rows, 1q to 5t, Noshift Upper, Noshift+Shift lower
rem Pattern Up_Down.
oclHashcat-lite64.exe -m x--pw-min=10 --pw-max=10  -1 "12345" -2 "qwertQWERT" Hash "?1?2?1?2?1?2?1?2?1?2"
rem Down Up
oclHashcat-lite64.exe -m x--pw-min=10 --pw-max=10  -1 "12345" -2 "qwertQWERT" Hash "?2?1?2?1?2?1?2?1?2?1"


rem 3E8 Basic Keywalking, 10 char, top 2 rows, 1q to 5t, Shift Upper, Noshift+Shift lower
rem Pattern Up_Down.
oclHashcat-lite64.exe -m x--pw-min=10 --pw-max=10  -1 "!@#$%" -2 "qwertQWERT" Hash "?1?2?1?2?1?2?1?2?1?2"
rem Down Up
oclHashcat-lite64.exe -m x--pw-min=10 --pw-max=10  -1 "!@#$%" -2 "qwertQWERT" Hash "?2?1?2?1?2?1?2?1?2?1"


rem 3E8 Basic Keywalking, 10 char, top 2 rows, 1q to 5t, Noshift+Shift Upper, Noshift lower
rem Pattern Up_Down.
oclHashcat-lite64.exe -m x--pw-min=10 --pw-max=10  -1 "!@#$%12345" -2 "qwert" Hash "?1?2?1?2?1?2?1?2?1?2"
rem Down Up
oclHashcat-lite64.exe -m x--pw-min=10 --pw-max=10  -1 "!@#$%12345" -2 "qwert" Hash "?2?1?2?1?2?1?2?1?2?1"


rem 3E8 Basic Keywalking, 10 char, top 2 rows, 1q to 5t, Noshift+Shift Upper, Shift lower
rem Pattern Up_Down.
oclHashcat-lite64.exe -m x--pw-min=10 --pw-max=10  -1 "!@#$%12345" -2 "QWERT" Hash "?1?2?1?2?1?2?1?2?1?2"
rem Down Up
oclHashcat-lite64.exe -m x--pw-min=10 --pw-max=10  -1 "!@#$%12345" -2 "QWERT" Hash "?2?1?2?1?2?1?2?1?2?1"


rem 7E8 Basic Keywalking, 8 char, top 2 rows, left to 6y, Noshift+Shift
rem Pattern Up_Down.
oclHashcat-lite64.exe -m x--pw-min=8 --pw-max=8  -1 "~!@#$%^`123456" -2 "qwertyQWERTY" Hash "?1?2?1?2?1?2?1?2"
rem Down Up
oclHashcat-lite64.exe -m x--pw-min=8 --pw-max=8  -1 "~!@#$%^`123456" -2 "qwertyQWERTY" Hash "?2?1?2?1?2?1?2?1"


rem 7E8 Basic Keywalking, 8 char, top 2 rows, 6t to -[ side, Noshift+Shift
rem Pattern Up_Down.
oclHashcat-lite64.exe -m x--pw-min=8 --pw-max=8  -1 "^&*()_67890-" -2 "tyuiop[TYUIOP{" Hash "?1?2?1?2?1?2?1?2"
rem Down Up
oclHashcat-lite64.exe -m x--pw-min=8 --pw-max=8  -1 "^&*()_67890-" -2 "tyuiop[TYUIOP{" Hash "?2?1?2?1?2?1?2?1"



rem 1E10 Basic Keywalking, 12 char STEPWISE 0 OVERLAP (i.e. split the keyspace both left/right and up/down), top 2 rows, 1q to 7y, Noshift+Shift
rem Pattern Up_Down.
oclHashcat-lite64.exe -m x--pw-min=12 --pw-max=12  -1 "!@#1234" -2 "qweQWE" -3 "$%^&34567" -4 "rtyRTY" Hash "?1?2?1?2?1?2?3?4?3?4?3?4"
rem Down Up
oclHashcat-lite64.exe -m x--pw-min=12 --pw-max=12  -1 "!@#1234" -2 "qweQWE" -3 "$%^&34567" -4 "rtyRTY" Hash "?2?1?2?1?2?1?4?3?4?3?4?3"



rem 1E10 Basic Keywalking, 10 char, top 2 rows, 1q to 5t, Noshift+Shift
rem Pattern Up_Down.
oclHashcat-lite64.exe -m x--pw-min=10 --pw-max=10  -1 "!@#$%12345" -2 "qwertQWERT" Hash "?1?2?1?2?1?2?1?2?1?2"
rem Down Up
oclHashcat-lite64.exe -m x--pw-min=10 --pw-max=10  -1 "!@#$%12345" -2 "qwertQWERT" Hash "?2?1?2?1?2?1?2?1?2?1"


rem 3E10 Basic Keywalking, 14 char STEPWISE 0 OVERLAP (i.e. split the keyspace both left/right and up/down), top 2 rows, 1q to 8u, Noshift+Shift Upper, NoShift Lower
rem Pattern Up_Down.
oclHashcat-lite64.exe -m x--pw-min=14 --pw-max=14  -1 "!@#$%12345" -2 "qwer" -3 "%^&*5678" -4 "tyu" Hash "?1?2?1?2?1?2?1?2?3?4?3?4?3?4"
rem Down Up
oclHashcat-lite64.exe -m x--pw-min=14 --pw-max=14  -1 "!@#$%12345" -2 "qwer" -3 "%^&*5678" -4 "tyu" Hash "?2?1?2?1?2?1?2?1?4?3?4?3?4?3"


rem 3E10 Basic Keywalking, 14 char STEPWISE 0 OVERLAP (i.e. split the keyspace both left/right and up/down), top 2 rows, 1q to 8u, Noshift+Shift Upper, Shift Lower
rem Pattern Up_Down.
oclHashcat-lite64.exe -m x--pw-min=14 --pw-max=14  -1 "!@#$%12345" -2 "QWER" -3 "%^&*5678" -4 "TYU" Hash "?1?2?1?2?1?2?1?2?3?4?3?4?3?4"
rem Down Up
oclHashcat-lite64.exe -m x--pw-min=14 --pw-max=14  -1 "!@#$%12345" -2 "QWER" -3 "%^&*5678" -4 "TYU" Hash "?2?1?2?1?2?1?2?1?4?3?4?3?4?3"



rem 3E10 Basic Keywalking, 14 char STEPWISE 0 OVERLAP (i.e. split the keyspace both left/right and up/down), top 2 rows, 1q to 8u, Noshift Upper, NoShift+Shift Lower
rem Pattern Up_Down.
oclHashcat-lite64.exe -m x--pw-min=14 --pw-max=14  -1 "12345" -2 "qwerQWER" -3 "5678" -4 "tyuTYU" Hash "?1?2?1?2?1?2?1?2?3?4?3?4?3?4"
rem Down Up
oclHashcat-lite64.exe -m x--pw-min=14 --pw-max=14  -1 "12345" -2 "qwerQWER" -3 "5678" -4 "tyuTYU" Hash "?2?1?2?1?2?1?2?1?4?3?4?3?4?3"


rem 3E10 Basic Keywalking, 14 char STEPWISE 0 OVERLAP (i.e. split the keyspace both left/right and up/down), top 2 rows, 1q to 8u, Shift Upper, NoShift+Shift Lower
rem Pattern Up_Down.
oclHashcat-lite64.exe -m x--pw-min=14 --pw-max=14  -1 "!@#$%" -2 "qwerQWER" -3 "%^&*" -4 "tyuTYU" Hash "?1?2?1?2?1?2?1?2?3?4?3?4?3?4"
rem Down Up
oclHashcat-lite64.exe -m x--pw-min=14 --pw-max=14  -1 "!@#$%" -2 "qwerQWER" -3 "%^&*" -4 "tyuTYU" Hash "?2?1?2?1?2?1?2?1?4?3?4?3?4?3"


rem 5E10 Basic Keywalking, 8 char, top 2 rows, left to 5t, Noshift+Shift
rem Pattern any
oclHashcat-lite64.exe -m x--pw-min=8 --pw-max=8  -1 "~!@#$%`12345qwertQWERT" Hash "?1?1?1?1?1?1?1?1"


rem 6E10 Basic Keywalking, 10 char, top 2 rows, 1q to 6y, Noshift+Shift, Pattern Up_Down.
oclHashcat-lite64.exe -m x--pw-min=10 --pw-max=10  -1 "!@#$%^123456" -2 "qwertyQWERTY" Hash "?1?2?1?2?1?2?1?2?1?2"
rem Down Up
oclHashcat-lite64.exe -m x--pw-min=10 --pw-max=10  -1 "!@#$%^123456" -2 "qwertyQWERTY" Hash "?2?1?2?1?2?1?2?1?2?1"


rem 4E12 Basic Keywalking, 14 char STEPWISE 0 OVERLAP (i.e. split the keyspace both left/right and up/down), top 2 rows, 1q to 8u, Noshift+Shift
rem Pattern Up_Down.
oclHashcat-lite64.exe -m x--pw-min=14 --pw-max=14  -1 "!@#$%12345" -2 "qwerQWER" -3 "%^&*5678" -4 "tyuTYU" Hash "?1?2?1?2?1?2?1?2?3?4?3?4?3?4"
rem Down Up
oclHashcat-lite64.exe -m x--pw-min=14 --pw-max=14  -1 "!@#$%12345" -2 "qwerQWER" -3 "%^&*5678" -4 "tyuTYU" Hash "?2?1?2?1?2?1?2?1?4?3?4?3?4?3"




rem 2E6 8 char SUPERCEDED LATER 80% VOWEL first, 50% 2nd, 33% middle, 80% last (first pass)
oclHashcat-lite64.exe -m x--pw-min=8 --pw-max=8  -1 aeAoi -2 lnmrs -3 eiatlr -4 1234057896eas Hash ?1?2?3?3?3?3?3?4


rem 1E9 8 char SUPERCEDED LATER VOWEL first, 80% 2nd, 50% middle, 95% last (first pass)
oclHashcat-lite64.exe -m x--pw-min=8 --pw-max=8  -1 aeAoiEIuOU -2 lnmrsudbcatpv -3 12adegilnorst -4 1234057896eastnrhdglym!ckub Hash ?1?2?3?3?3?3?3?4


rem 4E10 8 char SUPERCEDED LATER VOWEL first, 95% 2nd, 80% middle, 95% last (first pass)
oclHashcat-lite64.exe -m x--pw-min=8 --pw-max=8  -1 aeAoiEIuOU -2 lnmrsudbcatpvigjk1zfxwhLeNoSy -3 12abcdeghilmnoprstuvxy -4 1234057896eastnrhdglym!ckub Hash ?1?2?3?3?3?3?3?4


rem 8E11 8 char SUPERCEDED LATER VOWEL first, 95% 2nd, 95% middle, 98% last (first pass)
oclHashcat-lite64.exe -m x--pw-min=8 --pw-max=8  -1 aeAoiEIuOU -2 lnmrsudbcatpvigjk1zfxwhLeNoSy -3 Aabcdefghijklmnoprstuvwxyz?d -4 1234057896eastnrhdglym!ckubioxEwpz*fAj$N#JMGv@ Hash ?1?2?3?3?3?3?3?4


rem 1E13 8 char VOWEL first, 99% 2nd, 99% middle, 99% last (first pass)
oclHashcat-lite64.exe -m x--pw-min=8 --pw-max=8  -1 aeAoiEIuOU -2 lnmrsudbcatpvigjkzfxwhLeNoSyRUBMDCqWH?d -3 ABCDEGHIKLMNORSTUWYabcdefghijklmnopqrstuvwxyz?d -4 1234057896eastnrhdglym!ckubioxEwpz*fAj$N#JMGv@ Hash ?1?2?3?3?3?3?3?4




rem 4E7 9 char 50% SUPERCEDED LATER CONSONANT first,  33% 2nd, 33% middle, 50% last (first pass)
oclHashcat-lite64.exe -m x--pw-min=9 --pw-max=9  -1 smbcjatdpr -2 aoe -3 aeilnrst -4 123405 Hash ?1?2?3?3?3?3?3?3?4


rem 4E8 9 char 80% SUPERCEDED LATER CONSONANT first,  50% 2nd, 33% middle, 80% last (first pass)
oclHashcat-lite64.exe -m x--pw-min=9 --pw-max=9  -1 smbcjtdprl1khgfnwSMB0CJ2 -2 aoeiu -3 aeilnrst -4 1234059786esna Hash ?1?2?3?3?3?3?3?3?4


rem 3E10 9 char 95% SUPERCEDED LATER CONSONANT first,  80% 2nd, 50% middle, 95% last (first pass)
oclHashcat-lite64.exe -m x--pw-min=9 --pw-max=9  -1 smbcjtdprl1khgfnwSMB0CJ2TPDR4Lv3GKHzF69N -2 aoeiurhlmnsty1c2 -3 acdeilnorst -4 1234059786esnardtlyghomk!cpb Hash ?1?2?3?3?3?3?3?3?4


rem 2E12 9 char 95% SUPERCEDED LATER CONSONANT first,  80% 2nd, 80% middle, 95% last (first pass)
oclHashcat-lite64.exe -m x--pw-min=9 --pw-max=9  -1 smbcjtdprl1khgfnwSMB0CJ2TPDR4Lv3GKHzF69N -2 aoeiurhlmnsty1c2 -3 012abcdeghiklmnoprstuy -4 1234059786esnardtlyghomk!cpb Hash ?1?2?3?3?3?3?3?3?4


rem 5E12 9 char SUPERCEDED LATER LconsonantUconsonantD first,  95% 2nd, 80% middle, 95% last (first pass)
oclHashcat-lite64.exe -m x--pw-min=9 --pw-max=9  -1 bcdfghjklmnpqrstvwxyzBCDFGHJKLMNPQRSTVWXYZ0123456789 -2 aoeiurhlmnsty1c20pdb9k3w4j8567Ag -3 012abcdeghiklmnoprstuy -4 1234059786esnardtlyghomk!cpb Hash ?1?2?3?3?3?3?3?3?4


rem 1E14 9 char SUPERCEDED LATER LconsonantUconsonantD first,  95% 2nd, 95% middle, 98% last (first pass)
oclHashcat-lite64.exe -m x--pw-min=9 --pw-max=9  -1 bcdfghjklmnpqrstvwxyzBCDFGHJKLMNPQRSTVWXYZ0123456789 -2 aoeiurhlmnsty1c20pdb9k3w4j8567Ag -3 abcdefghijklmnoprstuvwxyz0123456789 -4 1234059786esnardtlyghomk!cpbixuwzjf*E Hash ?1?2?3?3?3?3?3?3?4


rem 1E15 9 char LconsonantUconsonantD first, 99% 2nd, 99% middle, 99% last (first pass)
oclHashcat-lite64.exe -m x--pw-min=9 --pw-max=9  -1 bcdfghjklmnpqrstvwxyzBCDFGHJKLMNPQRSTVWXYZ0123456789 -2 aoeiurhlmnsty1c20pdb9k3w4j8567AgvfOERIqzUHxLMB@SC -3 ABCDEIKLMNORSTabcdefghijklmnopqrstuvwxyz0123456789 -4 esnardtlyghomk!cpbixuwzjf*ESv$N#DART@?d Hash ?1?2?3?3?3?3?3?3?4




rem 1E7 9 char SUPERCEDED LATER 80% VOWEL first, 50% 2nd, 33% middle, 80% last (first pass)
oclHashcat-lite64.exe -m x--pw-min=9 --pw-max=9  -1 aeAoi -2 lnmrs -3 eiatlr -4 1234057896eas Hash ?1?2?3?3?3?3?3?3?4


rem 1E10 9 char SUPERCEDED LATER VOWEL first, 80% 2nd, 50% middle, 95% last (first pass)
oclHashcat-lite64.exe -m x--pw-min=9 --pw-max=9 -1 aeAoiEIuOU -2 lnmrsudbcatpv -3 12adegilnorst -4 1234057896eastnrhdglym!ckub Hash ?1?2?3?3?3?3?3?3?4


rem 8E11 9 char SUPERCEDED LATER VOWEL first, 95% 2nd, 80% middle, 95% last (first pass)
oclHashcat-lite64.exe -m x--pw-min=9 --pw-max=9  -1 aeAoiEIuOU -2 lnmrsudbcatpvigjk1zfxwhLeNoSy -3 12abcdeghilmnoprstuvxy -4 1234057896eastnrhdglym!ckub Hash ?1?2?3?3?3?3?3?3?4


rem 2E13 9 char SUPERCEDED LATER VOWEL first, 95% 2nd, 95% middle, 98% last (first pass)
oclHashcat-lite64.exe -m x--pw-min=9 --pw-max=9  -1 aeAoiEIuOU -2 lnmrsudbcatpvigjk1zfxwhLeNoSy -3 Aabcdefghijklmnoprstuvwxyz?d -4 1234057896eastnrhdglym!ckubioxEwpz*fAj$N#JMGv@ Hash ?1?2?3?3?3?3?3?3?4


rem 5E14 9 char VOWEL first, 99% 2nd, 99% middle, 99% last (first pass)
oclHashcat-lite64.exe -m x--pw-min=9 --pw-max=9  -1 aeAoiEIuOU -2 lnmrsudbcatpvigjkzfxwhLeNoSyRUBMDCqWH?d -3 ABCDEGHIKLMNORSTUWYabcdefghijklmnopqrstuvwxyz?d -4 1234057896eastnrhdglym!ckubioxEwpz*fAj$N#JMGv@ Hash ?1?2?3?3?3?3?3?3?4





rem 3E8 10 char 50% SUPERCEDED LATER CONSONANT first,  33% 2nd, 33% middle, 50% last (first pass)
oclHashcat-lite64.exe -m x--pw-min=10 --pw-max=10  -1 smbcjatdpr -2 aoe -3 aeilnrst -4 123405 Hash ?1?2?3?3?3?3?3?3?3?4


rem 3E9 10 char 80% SUPERCEDED LATER CONSONANT first,  50% 2nd, 33% middle, 80% last (first pass)
oclHashcat-lite64.exe -m x--pw-min=10 --pw-max=10  -1 smbcjtdprl1khgfnwSMB0CJ2 -2 aoeiu -3 aeilnrst -4 1234059786esna Hash ?1?2?3?3?3?3?3?3?3?4


rem 3E11 10 char 95% SUPERCEDED LATER CONSONANT first,  80% 2nd, 50% middle, 95% last (first pass)
oclHashcat-lite64.exe -m x--pw-min=10 --pw-max=10  -1 smbcjtdprl1khgfnwSMB0CJ2TPDR4Lv3GKHzF69N -2 aoeiurhlmnsty1c2 -3 acdeilnorst -4 1234059786esnardtlyghomk!cpb Hash ?1?2?3?3?3?3?3?3?3?4


rem 4E13 10 char 95% SUPERCEDED LATER CONSONANT first,  80% 2nd, 80% middle, 95% last (first pass)
oclHashcat-lite64.exe -m x--pw-min=10 --pw-max=10  -1 smbcjtdprl1khgfnwSMB0CJ2TPDR4Lv3GKHzF69N -2 aoeiurhlmnsty1c2 -3 012abcdeghiklmnoprstuy -4 1234059786esnardtlyghomk!cpb Hash ?1?2?3?3?3?3?3?3?3?4


rem 1E14 10 char LconsonantUconsonantD first,  95% 2nd, 80% middle, 95% last (first pass)
oclHashcat-lite64.exe -m x--pw-min=10 --pw-max=10  -1 bcdfghjklmnpqrstvwxyzBCDFGHJKLMNPQRSTVWXYZ0123456789 -2 aoeiurhlmnsty1c20pdb9k3w4j8567Ag -3 012abcdeghiklmnoprstuy -4 1234059786esnardtlyghomk!cpb Hash ?1?2?3?3?3?3?3?3?3?4



rem 1E7 10 char SUPERCEDED LATER 50% VOWEL first, 33% 2nd, 33% middle, 50% last (first pass)
oclHashcat-lite64.exe -m x--pw-min=10 --pw-max=10  -1 ae -2 lnm -3 eiatlr -4 123405 Hash ?1?2?3?3?3?3?3?3?3?4


rem 9E7 10 char SUPERCEDED LATER 80% VOWEL first, 50% 2nd, 33% middle, 80% last (first pass)
oclHashcat-lite64.exe -m x--pw-min=10 --pw-max=10  -1 aeAoi -2 lnmrs -3 eiatlr -4 1234057896eas Hash ?1?2?3?3?3?3?3?3?3?4


rem 2E11 10 char SUPERCEDED LATER VOWEL first, 80% 2nd, 50% middle, 95% last (first pass)
oclHashcat-lite64.exe -m x--pw-min=10 --pw-max=10 -1 aeAoiEIuOU -2 lnmrsudbcatpv -3 12adegilnorst -4 1234057896eastnrhdglym!ckub Hash ?1?2?3?3?3?3?3?3?3?4


rem 1E13 10 char SUPERCEDED LATER VOWEL first, 95% 2nd, 80% middle, 95% last (first pass)
oclHashcat-lite64.exe -m x--pw-min=10 --pw-max=10  -1 aeAoiEIuOU -2 lnmrsudbcatpvigjk1zfxwhLeNoSy -3 12abcdeghilmnoprstuvxy -4 1234057896eastnrhdglym!ckub Hash ?1?2?3?3?3?3?3?3?3?4


rem 1E15 10 char VOWEL first, 95% 2nd, 95% middle, 98% last (first pass)
oclHashcat-lite64.exe -m x--pw-min=10 --pw-max=10  -1 aeAoiEIuOU -2 lnmrsudbcatpvigjk1zfxwhLeNoSy -3 Aabcdefghijklmnoprstuvwxyz?d -4 1234057896eastnrhdglym!ckubioxEwpz*fAj$N#JMGv@ Hash ?1?2?3?3?3?3?3?3?3?4




rem 3E9 11 char 50% SUPERCEDED LATER CONSONANT first,  33% 2nd, 33% middle, 50% last (first pass)
oclHashcat-lite64.exe -m x--pw-min=11 --pw-max=11  -1 smbcjatdpr -2 aoe -3 aeilnrst -4 123405 Hash ?1?2?3?3?3?3?3?3?3?3?4


rem 2E10 11 char 80% SUPERCEDED LATER CONSONANT first,  50% 2nd, 33% middle, 80% last (first pass)
oclHashcat-lite64.exe -m x--pw-min=11 --pw-max=11  -1 smbcjtdprl1khgfnwSMB0CJ2 -2 aoeiu -3 aeilnrst -4 1234059786esna Hash ?1?2?3?3?3?3?3?3?3?3?4


rem 3E12 11 char 95% SUPERCEDED LATER CONSONANT first,  80% 2nd, 50% middle, 95% last (first pass)
oclHashcat-lite64.exe -m x--pw-min=11 --pw-max=11  -1 smbcjtdprl1khgfnwSMB0CJ2TPDR4Lv3GKHzF69N -2 aoeiurhlmnsty1c2 -3 acdeilnorst -4 1234059786esnardtlyghomk!cpb Hash ?1?2?3?3?3?3?3?3?3?3?4


rem 9E14 11 char 95% SUPERCEDED LATER CONSONANT first,  80% 2nd, 80% middle, 95% last (first pass)
oclHashcat-lite64.exe -m x--pw-min=11 --pw-max=11  -1 smbcjtdprl1khgfnwSMB0CJ2TPDR4Lv3GKHzF69N -2 aoeiurhlmnsty1c2 -3 012abcdeghiklmnoprstuy -4 1234059786esnardtlyghomk!cpb Hash ?1?2?3?3?3?3?3?3?3?3?4


rem 2E15 11 char LconsonantUconsonantD first,  95% 2nd, 80% middle, 95% last (first pass)
oclHashcat-lite64.exe -m x--pw-min=11 --pw-max=11  -1 bcdfghjklmnpqrstvwxyzBCDFGHJKLMNPQRSTVWXYZ0123456789 -2 aoeiurhlmnsty1c20pdb9k3w4j8567Ag -3 012abcdeghiklmnoprstuy -4 1234059786esnardtlyghomk!cpb Hash ?1?2?3?3?3?3?3?3?3?3?4




rem 6E7 11 char SUPERCEDED LATER 50% VOWEL first, 33% 2nd, 33% middle, 50% last (first pass)
oclHashcat-lite64.exe -m x--pw-min=11 --pw-max=11  -1 ae -2 lnm -3 eiatlr -4 123405 Hash ?1?2?3?3?3?3?3?3?3?3?4


rem 5E8 11 char SUPERCEDED LATER 80% VOWEL first, 50% 2nd, 33% middle, 80% last (first pass)
oclHashcat-lite64.exe -m x--pw-min=11 --pw-max=11  -1 aeAoi -2 lnmrs -3 eiatlr -4 1234057896eas Hash ?1?2?3?3?3?3?3?3?3?3?4


rem 2E12 11 char SUPERCEDED LATER VOWEL first, 80% 2nd, 50% middle, 95% last (first pass)
oclHashcat-lite64.exe -m x--pw-min=11 --pw-max=11 -1 aeAoiEIuOU -2 lnmrsudbcatpv -3 12adegilnorst -4 1234057896eastnrhdglym!ckub Hash ?1?2?3?3?3?3?3?3?3?3?4


rem 4E14 11 char VOWEL first, 95% 2nd, 80% middle, 95% last (first pass)
oclHashcat-lite64.exe -m x--pw-min=11 --pw-max=11  -1 aeAoiEIuOU -2 lnmrsudbcatpvigjk1zfxwhLeNoSy -3 12abcdeghilmnoprstuvxy -4 1234057896eastnrhdglym!ckub Hash ?1?2?3?3?3?3?3?3?3?3?4



rem 2E10 12 char 50% SUPERCEDED LATER CONSONANT first,  33% 2nd, 33% middle, 50% last (first pass)
oclHashcat-lite64.exe -m x--pw-min=12 --pw-max=12  -1 smbcjatdpr -2 aoe -3 aeilnrst -4 123405 Hash ?1?2?3?3?3?3?3?3?3?3?3?4


rem 2E11 12 char 80% SUPERCEDED LATER CONSONANT first,  50% 2nd, 33% middle, 80% last (first pass)
oclHashcat-lite64.exe -m x--pw-min=12 --pw-max=12  -1 smbcjtdprl1khgfnwSMB0CJ2 -2 aoeiu -3 aeilnrst -4 1234059786esna Hash ?1?2?3?3?3?3?3?3?3?3?3?4


rem 4E13 12 char 95% CONSONANT first,  80% 2nd, 50% middle, 95% last (first pass)
oclHashcat-lite64.exe -m x--pw-min=12 --pw-max=12  -1 smbcjtdprl1khgfnwSMB0CJ2TPDR4Lv3GKHzF69N -2 aoeiurhlmnsty1c2 -3 acdeilnorst -4 1234059786esnardtlyghomk!cpb Hash ?1?2?3?3?3?3?3?3?3?3?3?4



rem 3E8 12 char SUPERCEDED LATER 50% VOWEL first, 33% 2nd, 33% middle, 50% last (first pass)
oclHashcat-lite64.exe -m x--pw-min=12 --pw-max=12  -1 ae -2 lnm -3 eiatlr -4 123405 Hash ?1?2?3?3?3?3?3?3?3?3?3?4


rem 3E9 12 char SUPERCEDED LATER 80% VOWEL first, 50% 2nd, 33% middle, 80% last (first pass)
oclHashcat-lite64.exe -m x--pw-min=12 --pw-max=12  -1 aeAoi -2 lnmrs -3 eiatlr -4 1234057896eas Hash ?1?2?3?3?3?3?3?3?3?3?3?4


rem 3E13 12 char VOWEL first, 80% 2nd, 50% middle, 95% last (first pass)
oclHashcat-lite64.exe -m x--pw-min=12 --pw-max=12 -1 aeAoiEIuOU -2 lnmrsudbcatpv -3 12adegilnorst -4 1234057896eastnrhdglym!ckub Hash ?1?2?3?3?3?3?3?3?3?3?3?4




rem 1E11 13 char 50% SUPERCEDED LATER CONSONANT first,  33% 2nd, 33% middle, 50% last (first pass)
oclHashcat-lite64.exe -m x--pw-min=13 --pw-max=13  -1 smbcjatdpr -2 aoe -3 aeilnrst -4 123405 Hash ?1?2?3?3?3?3?3?3?3?3?3?3?4


rem 1E12 13 char 80% SUPERCEDED LATER CONSONANT first,  50% 2nd, 33% middle, 80% last (first pass)
oclHashcat-lite64.exe -m x--pw-min=13 --pw-max=13  -1 smbcjtdprl1khgfnwSMB0CJ2 -2 aoeiu -3 aeilnrst -4 1234059786esna Hash ?1?2?3?3?3?3?3?3?3?3?3?3?4


rem 4E14 13 char 95% CONSONANT first,  80% 2nd, 50% middle, 95% last (first pass)
oclHashcat-lite64.exe -m x--pw-min=13 --pw-max=13  -1 smbcjtdprl1khgfnwSMB0CJ2TPDR4Lv3GKHzF69N -2 aoeiurhlmnsty1c2 -3 acdeilnorst -4 1234059786esnardtlyghomk!cpb Hash ?1?2?3?3?3?3?3?3?3?3?3?3?4



rem 2E9 13 char SUPERCEDED LATER 50% VOWEL first, 33% 2nd, 33% middle, 50% last (first pass)
oclHashcat-lite64.exe -m x--pw-min=13 --pw-max=13  -1 ae -2 lnm -3 eiatlr -4 123405 Hash ?1?2?3?3?3?3?3?3?3?3?3?3?4


rem 1E10 13 char SUPERCEDED LATER 80% VOWEL first, 50% 2nd, 33% middle, 80% last (first pass)
oclHashcat-lite64.exe -m x--pw-min=13 --pw-max=13  -1 aeAoi -2 lnmrs -3 eiatlr -4 1234057896eas Hash ?1?2?3?3?3?3?3?3?3?3?3?3?4


rem 4E14 13 char VOWEL first, 80% 2nd, 50% middle, 95% last (first pass)
oclHashcat-lite64.exe -m x--pw-min=13 --pw-max=13 -1 aeAoiEIuOU -2 lnmrsudbcatpv -3 12adegilnorst -4 1234057896eastnrhdglym!ckub Hash ?1?2?3?3?3?3?3?3?3?3?3?3?4




rem 1E12 14 char 50% SUPERCEDED LATER CONSONANT first,  33% 2nd, 33% middle, 50% last (first pass)
oclHashcat-lite64.exe -m x--pw-min=14 --pw-max=14  -1 smbcjatdpr -2 aoe -3 aeilnrst -4 123405 Hash ?1?2?3?3?3?3?3?3?3?3?3?3?3?4


rem 1E13 14 char 80% CONSONANT first,  50% 2nd, 33% middle, 80% last (first pass)
oclHashcat-lite64.exe -m x--pw-min=14 --pw-max=14  -1 smbcjtdprl1khgfnwSMB0CJ2 -2 aoeiu -3 aeilnrst -4 1234059786esna Hash ?1?2?3?3?3?3?3?3?3?3?3?3?3?4



rem 1E10 14 char SUPERCEDED LATER 50% VOWEL first, 33% 2nd, 33% middle, 50% last (first pass)
oclHashcat-lite64.exe -m x--pw-min=14 --pw-max=14  -1 ae -2 lnm -3 eiatlr -4 123405 Hash ?1?2?3?3?3?3?3?3?3?3?3?3?3?4


rem 1E11 14 char SUPERCEDED LATER 80% VOWEL first, 50% 2nd, 33% middle, 80% last (first pass)
oclHashcat-lite64.exe -m x--pw-min=14 --pw-max=14  -1 aeAoi -2 lnmrs -3 eiatlr -4 1234057896eas Hash ?1?2?3?3?3?3?3?3?3?3?3?3?3?4


rem 6E15 14 char VOWEL first, 80% 2nd, 50% middle, 95% last (first pass)
oclHashcat-lite64.exe -m x--pw-min=14 --pw-max=14 -1 aeAoiEIuOU -2 lnmrsudbcatpv -3 12adegilnorst -4 1234057896eastnrhdglym!ckub Hash ?1?2?3?3?3?3?3?3?3?3?3?3?3?4




rem 1E13 15 char 50% SUPERCEDED LATER CONSONANT first,  33% 2nd, 33% middle, 50% last (first pass)
oclHashcat-lite64.exe -m x--pw-min=15 --pw-max=15  -1 smbcjatdpr -2 aoe -3 aeilnrst -4 123405 Hash ?1?2?3?3?3?3?3?3?3?3?3?3?3?3?4


rem 1E14 15 char 80% CONSONANT first,  50% 2nd, 33% middle, 80% last (first pass)
oclHashcat-lite64.exe -m x--pw-min=15 --pw-max=15  -1 smbcjtdprl1khgfnwSMB0CJ2 -2 aoeiu -3 aeilnrst -4 1234059786esna Hash ?1?2?3?3?3?3?3?3?3?3?3?3?3?3?4


rem 7E10 15 char SUPERCEDED LATER 50% VOWEL first, 33% 2nd, 33% middle, 50% last (first pass)
oclHashcat-lite64.exe -m x--pw-min=15 --pw-max=15  -1 ae -2 lnm -3 eiatlr -4 123405 Hash ?1?2?3?3?3?3?3?3?3?3?3?3?3?3?4


rem 7E11 15 char 80% VOWEL first, 50% 2nd, 33% middle, 80% last (first pass)
oclHashcat-lite64.exe -m x--pw-min=15 --pw-max=15  -1 aeAoi -2 lnmrs -3 eiatlr -4 1234057896eas Hash ?1?2?3?3?3?3?3?3?3?3?3?3?3?3?4




rem 9E13 16 char 50% SUPERCEDED LATER CONSONANT first,  33% 2nd, 33% middle, 50% last (first pass)
oclHashcat-lite64.exe -m x--pw-min=16 --pw-max=16  -1 smbcjatdpr -2 aoe -3 aeilnrst -4 123405 Hash ?1?2?3?3?3?3?3?3?3?3?3?3?3?3?3?4


rem 9E14 16 char 80% CONSONANT first,  50% 2nd, 33% middle, 80% last (first pass)
oclHashcat-lite64.exe -m x--pw-min=16 --pw-max=16  -1 smbcjtdprl1khgfnwSMB0CJ2 -2 aoeiu -3 aeilnrst -4 1234059786esna Hash ?1?2?3?3?3?3?3?3?3?3?3?3?3?3?3?4


rem 4E11 16 char SUPERCEDED LATER 50% VOWEL first, 33% 2nd, 33% middle, 50% last (first pass)
oclHashcat-lite64.exe -m x--pw-min=16 --pw-max=16  -1 ae -2 lnm -3 eiatlr -4 123405 Hash ?1?2?3?3?3?3?3?3?3?3?3?3?3?3?3?4


rem 4E12 16 char 80% VOWEL first, 50% 2nd, 33% middle, 80% last (first pass)
oclHashcat-lite64.exe -m x--pw-min=16 --pw-max=16  -1 aeAoi -2 lnmrs -3 eiatlr -4 1234057896eas Hash ?1?2?3?3?3?3?3?3?3?3?3?3?3?3?3?4



rem 7E14 17 char 50% CONSONANT first,  33% 2nd, 33% middle, 50% last (first pass)
oclHashcat-lite64.exe -m x--pw-min=17 --pw-max=17  -1 smbcjatdpr -2 aoe -3 aeilnrst -4 123405 Hash ?1?2?3?3?3?3?3?3?3?3?3?3?3?3?3?3?4


rem 2E12 17 char SUPERCEDED LATER 50% VOWEL first, 33% 2nd, 33% middle, 50% last (first pass)
oclHashcat-lite64.exe -m x--pw-min=17 --pw-max=17  -1 ae -2 lnm -3 eiatlr -4 123405 Hash ?1?2?3?3?3?3?3?3?3?3?3?3?3?3?3?3?4


rem 2E13 17 char 80% VOWEL first, 50% 2nd, 33% middle, 80% last (first pass)
oclHashcat-lite64.exe -m x--pw-min=17 --pw-max=17  -1 aeAoi -2 lnmrs -3 eiatlr -4 1234057896eas Hash ?1?2?3?3?3?3?3?3?3?3?3?3?3?3?3?3?4



rem 1E13 18 char SUPERCEDED LATER 50% VOWEL first, 33% 2nd, 33% middle, 50% last (first pass)
oclHashcat-lite64.exe -m x--pw-min=18 --pw-max=18  -1 ae -2 lnm -3 eiatlr -4 123405 Hash ?1?2?3?3?3?3?3?3?3?3?3?3?3?3?3?3?3?4


rem 1E14 18 char 80% VOWEL first, 50% 2nd, 33% middle, 80% last (first pass)
oclHashcat-lite64.exe -m x--pw-min=18 --pw-max=18  -1 aeAoi -2 lnmrs -3 eiatlr -4 1234057896eas Hash ?1?2?3?3?3?3?3?3?3?3?3?3?3?3?3?3?3?4


rem 1E14 19 char 50% VOWEL first, 33% 2nd, 33% middle, 50% last (first pass)
oclHashcat-lite64.exe -m x--pw-min=19 --pw-max=19  -1 ae -2 lnm -3 eiatlr -4 123405 Hash ?1?2?3?3?3?3?3?3?3?3?3?3?3?3?3?3?3?3?4

[epixoip]

thank you for sharing your attack plan!

as a reminder, with the new hcmask feature, you can just put all of these masks into one hcmask file to run through them in one invocation. that way you don't have to keep calling hashcat over and over again.

[Incisive]

Thank you for the reminder; I need to look that up!