hashcat Forum

I want to do a brute force attack and I know for sure that the password contains 5 numbers no more no less and 8 capital letter. I was wondering how I can make a mask that takes this parameter in action.

For exeample here are some passwords

MRG7PX4N56ET3
6XFVJ4R7EQG12
LA53AOF4G7T9F

There are probably too many combinations to reasonably exhaust, but to model how many masks would be needed, you can use the `policygen` tool from the PACK toolkit:

https://github.com/iphelix/pack/blob/mas...licygen.py

Note that because of how policygen works, it will take a while to run.


Each of these masks will take two weeks to run on a single GTX 1080:

https://www.wolframalpha.com/input/?i=%2...4%29%2F365

... so that's about 49 years.

(05-19-2020, 11:40 PM)Nilon Wrote: [ -> ]I want to do a brute force attack and I know for sure that the password contains 5 numbers no more no less and 8 capital letter. I was wondering how I can make a mask that takes this parameter in action.

For exeample here are some passwords

MRG7PX4N56ET3
6XFVJ4R7EQG12
LA53AOF4G7T9F

Yep. That's what will take 49 years.

Depends on the algorithm, bcrypt or NTLM ?