mask attack but with wordsets instead of charsets?

[dealloc]

Is there any way to perform a mask attack that uses words to replace mask tokens instead of characters? 

An example:

I know that a password is some combination of 4 words (plus some separators between each word). I'd love to just be able to have two wordlists:

cat words
first
second
third
fourth

cat separators
_
,
&

…and then be able to perform a mask attack with them—some equivalent to ?1?2?1?2?1?2?1

I have also researched combinator attacks and/or using/chaining various hashcat-utils to make these permutations but they all don't quite seem to add up to this use case.

Thanks in advance (or apologies if this is obvious and I'm just being dense ).

[royce]

Not dense at all - understandable use case, but not a lot of clear tools or guidance out there for it.

There are some complex ways to do this, but the closest tool available is 'combinatorX', which is matrix's enhancement of combinator from hashcat-utils.

https://github.com/hashcat/hashcat-utils/pull/58

[dealloc]

Thanks for the quick reply! I'll pull the branch and give it a shot.