hashcat Forum

I'm trying to attack a Keepass hash where I suspect the password is in the form of an english sentence (english words separated by spaces). Most likely the sentence will have a semantic meaning, not just a random list of words.

Currently I'm using the google- top-10000-english wordlist in combinator attack to create strings in the form of:

"word1 word2 word3 etc."

Any suggestion on how I can make this attack more efficient?

Better wordlist?

Discard sentences without any semantic meaning? (how?)

Please share you experience...

(03-21-2017, 01:49 PM)jallis Wrote: [ -> ]I'm trying to attack a Keepass hash where I suspect the password is in the form of an english sentence (english words separated by spaces). Most likely the sentence will have a semantic meaning, not just a random list of words.

Currently I'm using the google- top-10000-english wordlist in combinator attack to create strings in the form of:

"word1 word2 word3 etc."

Any suggestion on how I can make this attack more efficient?

Better wordlist?

Discard sentences without any semantic meaning? (how?)

Please share you experience...

The answer to your question might be better source material, i.e. books.

I just posted a related topic on this.

https://hashcat.net/forum/thread-6415.html

(03-22-2017, 01:03 AM)devilsadvocate Wrote: [ -> ]The answer to your question might be better source material, i.e. books.

I just posted a related topic on this.

https://hashcat.net/forum/thread-6415.html

Thank you.

My current solution is using a combinator attack using n-grams (https://www.ngrams.info) on the left and google-top-10000 on the right. This seems to do a pretty good job of creating sentences with meaningfull content.

(03-23-2017, 03:19 PM)jallis Wrote: [ -> ]

(03-22-2017, 01:03 AM)devilsadvocate Wrote: [ -> ]The answer to your question might be better source material, i.e. books.

I just posted a related topic on this.

https://hashcat.net/forum/thread-6415.html

Thank you.

My current solution is using a combinator attack using n-grams (https://www.ngrams.info) on the left and google-top-10000 on the right. This seems to do a pretty good job of creating sentences with meaningfull content.

These could also be a starting point.

https://www.lyrics.com
https://www.abbreviations.com
https://www.biographies.net
https://www.convert.net
https://www.definitions.net
https://www.grammar.com
https://www.lyrics.com
https://www.phrases.net
https://www.poetry.net
https://www.quotes.net
https://www.references.net
https://www.rhymes.net
https://www.scripts.com
https://www.symbols.com
https://www.synonyms.net
https://www.uszip.com

When it comes to using wget, spider smartly and responsibly.  How you parse the data is entirely up to you.

Cheers.