tips on cracking SHA1 hash

[ninjahhash]

I'm doing this for the first time.

I have a SHA1 hash with salt and looking for a password between 4 and 12 characters, that's all I know.

I'm wondering how I can minimise the keyspace, as all I can guess is the length of the password.

Are there any tips on how to best go about this?  Is it generally a good idea to use wordlists?  where do i store the wordlist file or the charset file?

my hashrate is around 3000 MH/s

[Mem5]

SHA1 hash with salt

First, choose the right mode, speed is not the same for all:

Code:

110    sha1($pass.$salt)
120    sha1($salt.$pass)
130    sha1(utf16le($pass).$salt)
140    sha1($salt.utf16le($pass))

minimise the keyspace

To achieve that, you need to have hints about charset (a-z A-Z etc)/ keyboard used ? For example, a russian keyboard is not the same as an English or a Spanish one. Any weird letters?
If you don't have any clues, I would go for wordlists + rules. If it is really random, you'll need to go for a brutefroce.

[ninjahhash]

Thanks so it is english letters.

How do I use a wordlist + rules?  Can you give an example?

Im thinking the first letter could be capital or a number, so how would I do that as a mask?

?H?wordlist

SHA1 hash with salt

First, choose the right mode, speed is not the same for all:

Code:

110 sha1($pass.$salt)
120 sha1($salt.$pass)
130 sha1(utf16le($pass).$salt)
140 sha1($salt.utf16le($pass))

minimise the keyspace

To achieve that, you need to have hints about charset (a-z A-Z etc)/ keyboard used ? For example, a russian keyboard is not the same as an English or a Spanish one. Any weird letters?
If you don't have any clues, I would go for wordlists + rules. If it is really random, you'll need to go for a brutefroce.

[philsmd]

Code:

-a 7 -1 ?u?d hash.txt ?1 dict.txt

or rules:

Code:

-a 0 -r my.rules hash.txt dict.txt

where my.rules is

Code:

^0
^1
^2
^3
^4
^5
^6
^7
^8
^9
^A
^B
^C
^D
^E
^F
^G
^H
^I
^J
^K
^L
^M
^N
^O
^P
^Q
^R
^S
^T
^U
^V
^W
^X
^Y
^Z