hashcat Forum

This wasn't very hard:
No more 3-same characters in one line, notice it skipped "MYPASSAS" Why? 3 Ss xD

I used "-s MYPASSAK" to generate something explainable.
The same technique I explained about "\1" applies here but for ".*\1".

M@lik you are a star !!!

I don't know where you found that but I have been reading up on regular expressions and I couldn't find it.

Well done and thanks ! I am going to experiment with it now and will report back.

I will also tell Tape the problem is solved.

Thanks.

EDIT..

Your code works M@lik !

I am trying to mix the two so I get 1 instance of consecutive characters and only up to 2 within a line (just for experimental purposes) so I understand it right.

I tried this amongst many others. I know I am retarded and it will be something like a format issue. :p

mp32.exe ?u?u?u?u | sed.exe "/\([A-Z]\)\1\|\(.\).*\1.*\1/d" >> wordlist1.txt

As far as I know...

mp32.exe ?u?u?u?u = Use mask processor to generate 4 upper.

sed.exe = Use Sed to filter

/\([A-Z]\)\1\ = No more than 1 instance of upper alpha consecutively.

|\(.\).*\1.*\1/d" = No more than 2 of any character within a single line.

Hmm, interesting.

I'd rather give you the command than giving a lecture about sed xD:

Hash-IT Wrote: [ -> ]No more than 1 instance of upper alpha consecutively.
No more than 2 of any character within a single line.

The whole dictionary was generated within seconds : D

Wow thank you so much M@lik

I must admit to not understanding why the code has changed from..

/\([A-Z]\)\1

to

/\(.\)\1/d

Other than it perhaps means any character and not just upper alpha. Interesting that a ";" was used to join them, I assumed it would have been |.

I have a lot to learn it seems.

I wonder how long it is going to take me to do an 8 character filter ??? :p

I will set it running tonight and let you know.

Thanks for your help throughout this thread M@lik.

OK, thanks to M@lik and Pixel for their help.

Here is the code if you want to create your own modified brute force (8 Upper Alpha).

The first batch limits characters to 1 consecutively and no more than 2 within the whole line.

The second batch limits characters to 1 consecutively and no more than 1 within the whole line.

No idea how long these will take to generate so I am sorry for not being able to predict that.

M@lik + Pixel do you guys want to work on these with me ?

Enjoy !

(05-27-2012, 10:03 PM)Hash-IT Wrote: [ -> ]OK, thanks to M@lik and Pixel for their help.

Here is the code if you want to create your own modified brute force (8 Upper Alpha).

The first batch limits characters to 1 consecutively and no more than 2 within the whole line.

The second batch limits characters to 1 consecutively and no more than 1 within the whole line.

No idea how long these will take to generate so I am sorry for not being able to predict that.

M@lik + Pixel do you guys want to work on these with me ?

Enjoy !

Code:

mp32.exe A?u?u?u?u?u?u?u | sed.exe "/\(.\)\1/d;/\(.\).*\1.*\1/d" > Optimised_Brute_Force_List_A.txt
mp32.exe B?u?u?u?u?u?u?u | sed.exe "/\(.\)\1/d;/\(.\).*\1.*\1/d" > Optimised_Brute_Force_List_B.txt
mp32.exe C?u?u?u?u?u?u?u | sed.exe "/\(.\)\1/d;/\(.\).*\1.*\1/d" > Optimised_Brute_Force_List_C.txt
mp32.exe D?u?u?u?u?u?u?u | sed.exe "/\(.\)\1/d;/\(.\).*\1.*\1/d" > Optimised_Brute_Force_List_D.txt
mp32.exe E?u?u?u?u?u?u?u | sed.exe "/\(.\)\1/d;/\(.\).*\1.*\1/d" > Optimised_Brute_Force_List_E.txt
mp32.exe F?u?u?u?u?u?u?u | sed.exe "/\(.\)\1/d;/\(.\).*\1.*\1/d" > Optimised_Brute_Force_List_F.txt
mp32.exe G?u?u?u?u?u?u?u | sed.exe "/\(.\)\1/d;/\(.\).*\1.*\1/d" > Optimised_Brute_Force_List_G.txt
mp32.exe H?u?u?u?u?u?u?u | sed.exe "/\(.\)\1/d;/\(.\).*\1.*\1/d" > Optimised_Brute_Force_List_H.txt
mp32.exe I?u?u?u?u?u?u?u | sed.exe "/\(.\)\1/d;/\(.\).*\1.*\1/d" > Optimised_Brute_Force_List_I.txt
mp32.exe J?u?u?u?u?u?u?u | sed.exe "/\(.\)\1/d;/\(.\).*\1.*\1/d" > Optimised_Brute_Force_List_J.txt
mp32.exe K?u?u?u?u?u?u?u | sed.exe "/\(.\)\1/d;/\(.\).*\1.*\1/d" > Optimised_Brute_Force_List_K.txt
mp32.exe L?u?u?u?u?u?u?u | sed.exe "/\(.\)\1/d;/\(.\).*\1.*\1/d" > Optimised_Brute_Force_List_L.txt
mp32.exe M?u?u?u?u?u?u?u | sed.exe "/\(.\)\1/d;/\(.\).*\1.*\1/d" > Optimised_Brute_Force_List_M.txt
mp32.exe N?u?u?u?u?u?u?u | sed.exe "/\(.\)\1/d;/\(.\).*\1.*\1/d" > Optimised_Brute_Force_List_N.txt
mp32.exe O?u?u?u?u?u?u?u | sed.exe "/\(.\)\1/d;/\(.\).*\1.*\1/d" > Optimised_Brute_Force_List_O.txt
mp32.exe P?u?u?u?u?u?u?u | sed.exe "/\(.\)\1/d;/\(.\).*\1.*\1/d" > Optimised_Brute_Force_List_P.txt
mp32.exe Q?u?u?u?u?u?u?u | sed.exe "/\(.\)\1/d;/\(.\).*\1.*\1/d" > Optimised_Brute_Force_List_Q.txt
mp32.exe R?u?u?u?u?u?u?u | sed.exe "/\(.\)\1/d;/\(.\).*\1.*\1/d" > Optimised_Brute_Force_List_R.txt
mp32.exe S?u?u?u?u?u?u?u | sed.exe "/\(.\)\1/d;/\(.\).*\1.*\1/d" > Optimised_Brute_Force_List_S.txt
mp32.exe T?u?u?u?u?u?u?u | sed.exe "/\(.\)\1/d;/\(.\).*\1.*\1/d" > Optimised_Brute_Force_List_T.txt
mp32.exe U?u?u?u?u?u?u?u | sed.exe "/\(.\)\1/d;/\(.\).*\1.*\1/d" > Optimised_Brute_Force_List_U.txt
mp32.exe V?u?u?u?u?u?u?u | sed.exe "/\(.\)\1/d;/\(.\).*\1.*\1/d" > Optimised_Brute_Force_List_V.txt
mp32.exe W?u?u?u?u?u?u?u | sed.exe "/\(.\)\1/d;/\(.\).*\1.*\1/d" > Optimised_Brute_Force_List_W.txt
mp32.exe X?u?u?u?u?u?u?u | sed.exe "/\(.\)\1/d;/\(.\).*\1.*\1/d" > Optimised_Brute_Force_List_X.txt
mp32.exe Y?u?u?u?u?u?u?u | sed.exe "/\(.\)\1/d;/\(.\).*\1.*\1/d" > Optimised_Brute_Force_List_Y.txt
mp32.exe Z?u?u?u?u?u?u?u | sed.exe "/\(.\)\1/d;/\(.\).*\1.*\1/d" > Optimised_Brute_Force_List_Z.txt


mp32.exe A?u?u?u?u?u?u?u | sed.exe "/\(.\)\1/d;/\(.\).*\1/d" > Full_Optimised_Brute_Force_List_A.txt
mp32.exe B?u?u?u?u?u?u?u | sed.exe "/\(.\)\1/d;/\(.\).*\1/d" > Full_Optimised_Brute_Force_List_B.txt
mp32.exe C?u?u?u?u?u?u?u | sed.exe "/\(.\)\1/d;/\(.\).*\1/d" > Full_Optimised_Brute_Force_List_C.txt
mp32.exe D?u?u?u?u?u?u?u | sed.exe "/\(.\)\1/d;/\(.\).*\1/d" > Full_Optimised_Brute_Force_List_D.txt
mp32.exe E?u?u?u?u?u?u?u | sed.exe "/\(.\)\1/d;/\(.\).*\1/d" > Full_Optimised_Brute_Force_List_E.txt
mp32.exe F?u?u?u?u?u?u?u | sed.exe "/\(.\)\1/d;/\(.\).*\1/d" > Full_Optimised_Brute_Force_List_F.txt
mp32.exe G?u?u?u?u?u?u?u | sed.exe "/\(.\)\1/d;/\(.\).*\1/d" > Full_Optimised_Brute_Force_List_G.txt
mp32.exe H?u?u?u?u?u?u?u | sed.exe "/\(.\)\1/d;/\(.\).*\1/d" > Full_Optimised_Brute_Force_List_H.txt
mp32.exe I?u?u?u?u?u?u?u | sed.exe "/\(.\)\1/d;/\(.\).*\1/d" > Full_Optimised_Brute_Force_List_I.txt
mp32.exe J?u?u?u?u?u?u?u | sed.exe "/\(.\)\1/d;/\(.\).*\1/d" > Full_Optimised_Brute_Force_List_J.txt
mp32.exe K?u?u?u?u?u?u?u | sed.exe "/\(.\)\1/d;/\(.\).*\1/d" > Full_Optimised_Brute_Force_List_K.txt
mp32.exe L?u?u?u?u?u?u?u | sed.exe "/\(.\)\1/d;/\(.\).*\1/d" > Full_Optimised_Brute_Force_List_L.txt
mp32.exe M?u?u?u?u?u?u?u | sed.exe "/\(.\)\1/d;/\(.\).*\1/d" > Full_Optimised_Brute_Force_List_M.txt
mp32.exe N?u?u?u?u?u?u?u | sed.exe "/\(.\)\1/d;/\(.\).*\1/d" > Full_Optimised_Brute_Force_List_N.txt
mp32.exe O?u?u?u?u?u?u?u | sed.exe "/\(.\)\1/d;/\(.\).*\1/d" > Full_Optimised_Brute_Force_List_O.txt
mp32.exe P?u?u?u?u?u?u?u | sed.exe "/\(.\)\1/d;/\(.\).*\1/d" > Full_Optimised_Brute_Force_List_P.txt
mp32.exe Q?u?u?u?u?u?u?u | sed.exe "/\(.\)\1/d;/\(.\).*\1/d" > Full_Optimised_Brute_Force_List_Q.txt
mp32.exe R?u?u?u?u?u?u?u | sed.exe "/\(.\)\1/d;/\(.\).*\1/d" > Full_Optimised_Brute_Force_List_R.txt
mp32.exe S?u?u?u?u?u?u?u | sed.exe "/\(.\)\1/d;/\(.\).*\1/d" > Full_Optimised_Brute_Force_List_S.txt
mp32.exe T?u?u?u?u?u?u?u | sed.exe "/\(.\)\1/d;/\(.\).*\1/d" > Full_Optimised_Brute_Force_List_T.txt
mp32.exe U?u?u?u?u?u?u?u | sed.exe "/\(.\)\1/d;/\(.\).*\1/d" > Full_Optimised_Brute_Force_List_U.txt
mp32.exe V?u?u?u?u?u?u?u | sed.exe "/\(.\)\1/d;/\(.\).*\1/d" > Full_Optimised_Brute_Force_List_V.txt
mp32.exe W?u?u?u?u?u?u?u | sed.exe "/\(.\)\1/d;/\(.\).*\1/d" > Full_Optimised_Brute_Force_List_W.txt
mp32.exe X?u?u?u?u?u?u?u | sed.exe "/\(.\)\1/d;/\(.\).*\1/d" > Full_Optimised_Brute_Force_List_X.txt
mp32.exe Y?u?u?u?u?u?u?u | sed.exe "/\(.\)\1/d;/\(.\).*\1/d" > Full_Optimised_Brute_Force_List_Y.txt
mp32.exe Z?u?u?u?u?u?u?u | sed.exe "/\(.\)\1/d;/\(.\).*\1/d" > Full_Optimised_Brute_Force_List_Z.txt

Yes, I'll help generate. Which do you want me to do?


Edit:

I tried the first command "/\(.\)\1/d;/\(.\).*\1.*\1/d" as it seems the most relaxed of the two against a known WPA key which is HSSBFXLI and it striped it out, so I guess one would have to relax the command more or use rules to get this.

This is an interesting thread, I have been trying to learn bits and bobs about the
correct use of sed in wordlist manipulations as it is a very powerful (yet complicated)
tool in this respect.

Will be following it closely

Laters - TAPE

(05-27-2012, 10:47 PM)Pixel Wrote: [ -> ]Yes, I'll help generate. Which do you want me to do?

Edit:

I tried the first command "/\(.\)\1/d;/\(.\).*\1.*\1/d" as it seems the most relaxed of the two against a known WPA key which is HSSBFXLI and it striped it out, so I guess one would have to relax the command more or use rules to get this.

Yikes ! Thats a shame our first known password fails with the new method.

Ok first thing is how come you have already managed to find that out ? I set my computer going just after posting the code above and I have yet to see anything in the output file !!!! Is my computer "pants" or are you running a mega beast ?

To catch the "SS" part of your password you need to modify the code a little to the quoted below.


You can change all the code provided before by using find and replace.

It might be an idea to hold fire on us all generating these lists until we decide how far to optimise them. We should talk more about it first.

I would also very much like to know what is wrong with my computer and why is it so slow compared to yours !!!!

---

(05-27-2012, 11:36 PM)TAPE Wrote: [ -> ]This is an interesting thread, I have been trying to learn bits and bobs about the
correct use of sed in wordlist manipulations as it is a very powerful (yet complicated)
tool in this respect.

Will be following it closely

Laters - TAPE

Thank you very much for taking the time to read this Tape, I appreciate it.

I think once this is worked out it would be great if you can do one of your detailed write ups, I do enjoy reading your blogs, especially when it involves hashcat !

Do you have any statistics or ideas that may help reduce a brute force attack ? My main idea (until Pixel proved it to be weak) was to have 1 consecutive occurrence and up to 2 instances in a given line. This may have to be widened now after Pixels observation to 2 consecutive occurrences and up to 2 instances per line.

I look forward to reading your ideas.

(05-28-2012, 12:02 AM)Hash-IT Wrote: [ -> ]

(05-27-2012, 10:47 PM)Pixel Wrote: [ -> ]Yes, I'll help generate. Which do you want me to do?

Edit:

I tried the first command "/\(.\)\1/d;/\(.\).*\1.*\1/d" as it seems the most relaxed of the two against a known WPA key which is HSSBFXLI and it striped it out, so I guess one would have to relax the command more or use rules to get this.

Yikes ! Thats a shame our first known password fails with the new method.

you know, that happens when you try to trick probability theory.

(05-28-2012, 12:02 AM)Hash-IT Wrote: [ -> ]To catch the "SS" part of your password you need to modify the code a little to the quoted below.

Code:

"/\(.\)\1\1/d;/\(.\).*\1.*\1/d"

You can change all the code provided before by using find and replace.

It might be an idea to hold fire on us all generating these lists until we decide how far to optimise them. We should talk more about it first.

I would also very much like to know what is wrong with my computer and why is it so slow compared to yours !!!!

That's better it don't strip it out now

This is the command I used

I start at HSJSKLMK and end at HSSSTMET because that's 1GB of password so I can get an idea of how long this will take and that password "HSSBFXLI" is in it. It seems if I do one letter at a time it will take about 20hr but I'll run 4 instances so that's four letters in 20hr.

My 2600k has 4 cores and 8 threads and I would do eight instances/letters but just don't have the space for eight 70-75GB files i've only 435GB left on my hard drive. most I could do at one time is six