08-25-2017, 12:03 PM
(This post was last modified: 08-25-2017, 12:35 PM by Larrax.
Edit Reason: Fixed typo in the masks.
)
Hello, I would like to ask you about functionality of the --skip and --limit parameters.
Let me show you my problem on an example.
First I checked hashcat-keyspace of 8x ?l mask:
OK, so about 12 milion indexes, I tried to search the first half of some testing Office document.
That took me about 1.5 minute. Let's now finish the second half, skip the first 6mil indexes and...
Time remaining: One hour+.
Could you please clarify what exactly is entered into skip and limit parameters, when not the hashcat-keyspace?
I noticed, for the first limit, 6mil, hashcat tried about 4 bilions passwords. And maximum --skip parameter value hashcat allowed here is much smaller then real keyspace (cosnidering 26^8 = 208 bilion and maximum --skip value here is something about 300 milions), so neither the real keyspace is used in limit nor skip arguments.
Looking forward to your answer!
Let me show you my problem on an example.
First I checked hashcat-keyspace of 8x ?l mask:
Code:
hashcat64.exe -a 3 --keyspace ?l?l?l?l?l?l?l?l
11881376
OK, so about 12 milion indexes, I tried to search the first half of some testing Office document.
Code:
hashcat64.exe -a 3 -m 9700 -s 0 -l 6000000 xlsTest.hash ?l?l?l?l?l?l?l?l
That took me about 1.5 minute. Let's now finish the second half, skip the first 6mil indexes and...
Code:
hashcat64.exe -a 3 -m 9700 -s 6000000 xlsTest.hash ?l?l?l?l?l?l?l?l
Time remaining: One hour+.
Could you please clarify what exactly is entered into skip and limit parameters, when not the hashcat-keyspace?
I noticed, for the first limit, 6mil, hashcat tried about 4 bilions passwords. And maximum --skip parameter value hashcat allowed here is much smaller then real keyspace (cosnidering 26^8 = 208 bilion and maximum --skip value here is something about 300 milions), so neither the real keyspace is used in limit nor skip arguments.
Looking forward to your answer!