Custom charset help

[gpunerd]

Hi guys,

I'm trying to bruteforce a pdf hash, I know which characters are used in password, but do not know password. I have tried multiple commands but none of them is working. Here are the cmds:

Code:

hashcat -m 10500 -a 3 hash -1 WNRCEOIDLHwnrceoidlh0123456789

error: If you specify a custom charset, you must also specify a mask.

Code:

hashcat -m 10500 -a 3 hash --increment --increment-min=6 --increment-max=14 --custom-charset1 WNRCEOIDLHwnrceoidlh ?d

error: Invalid mask

Code:

hashcat -m 10500 -a 3 hash --custom-charset1 WNRCEOIDLHwnrceoidlh ?d

error: The wordlist or mask that you are using is too small.

[slyexe]

you need to specify the mask length as suggested.

Code:

hashcat -m 10500 -a 3 hash -1 WNRCEOIDLHwnrceoidlh0123456789 --increment --increment-min=6 --increment-max=14 ?1?1?1?1?1?1?1?1?1?1?1?1?1?1

[gpunerd]

you need to specify the mask length as suggested.

Code:

hashcat -m 10500 -a 3 hash -1 WNRCEOIDLHwnrceoidlh0123456789 --increment --increment-min=6 --increment-max=14 ?1?1?1?1?1?1?1?1?1?1?1?1?1?1

Hi, thanks for your quick help. Its solved my issue. 

I have another question:

Code:

Case 1.

 I know the words used in password but it contains additional special characters or numbers which I don't know, for ex: "HelLo_woRlD@123" and "_123woRLd@hELLo" are passwords, and I know "hello", "world" and "123" was used in password, but don't know in what orders or way(small or capitals letter) and special characters, there could be more than two words like "hElloJohN_dOe123". Can we perform dictionary attack in Case 1? and If yes, then how can I create a dictionary for word lists? Can we add mask attack as well with dictionary?


Regards

[gpunerd]

you need to specify the mask length as suggested.

Code:

hashcat -m 10500 -a 3 hash -1 WNRCEOIDLHwnrceoidlh0123456789 --increment --increment-min=6 --increment-max=14 ?1?1?1?1?1?1?1?1?1?1?1?1?1?1

Hi, thanks for your quick help. Its solved my issue. 

I have another question:

Code:

Case 1.

 I know the words used in password but it contains additional special characters or numbers which I don't know, for ex: "HelLo_woRlD@123" and "_123woRLd@hELLo" are passwords, and I know "hello", "world" and "123" was used in password, but don't know in what orders or way(small or capitals letter) and special characters, there could be more than two words like "hElloJohN_dOe123". Can we perform dictionary attack in Case 1? and If yes, then how can I create a dictionary for word lists? Can we add mask attack as well with dictionary?


Regards

please help

[S_g]

I think a custom dictionary combined with the prince pre-processor and some rules would do what you want.