For each word in a dictionary, all possible combinations of upper- and lower-case variants are generated.
In hashcat-legacy, this attack was implemented as a stand-alone attack mode. In hashcat, we emulate this attack with a much more efficient ruleset.
The information for this section has moved to the Using rules to emulate toggle attack article.
If our dictionary contains the word
pass1234
Hashcat creates the following password candidates
pass1234 Pass1234 pAss1234 PAss1234 paSs1234 PaSs1234 pASs1234 PASs1234 pasS1234 PasS1234 pAsS1234 PAsS1234 paSS1234 PaSS1234 pASS1234 PASS1234