[Autogenerated] it's time for the first demo.
Let's continue our hash cut,
password cracking journey and let me show you how you can launch a dictionary.
Attack within mask.
In the previous demos,
I launched a classical dictionary attack and a dictionary attack with a rule,
and as a result of these two attacks, I cracked seven passwords.
Now let me launch a dictionary attack with a mask,
also known as a hybrid attack.
And let me show you how you can crack even more passwords with this attack.
First,
I will briefly explain to you what a mask is and how it
can be used in password cracking.
Let's assume that we have a password dictionary and secure
password is one of the passwords in this dictionary.
It turns out that people often upend digits at the very end off their passwords.
And then the password is, for example, secure password.
1234 The idea behind a dictionary attack with a mask is to combine the
passwords from a dictionary together with a mask.
For example,
four digits appended at the very end off every
password from the password dictionary,
and that's the reason why this attack is also known as a hybrid attack.
And if our mask is composed off four digits appended at the very end
off every password from the password dictionary,
then for the password secure password hash cut will
check all password combinations.
Secure password 0000 Secure password.
0001 Secure password.
0002 and the last combination will be secure.
Password.
9999 Okay, Now you understand how a dictionary attack with a mask works.
So let me show you how you can launch this attack Using Hash Cat.
Here is the hash cut command that I used in the previous demo.
What I want to do in this demo is append a mask at the very
end off every password from my password,
the dictionary.
That's why I have to use the attack mode.
Dash a six instead off dash a zero.
What's more,
I will delete the rule that I used in the previous
demo and after dictionary dot txt, which is my password dictionary.
I will specify the mask question Mark de question,
Mark de question, Mark de question.
Mark D, The character D SSHD stands for a digit and this way,
Hash cat will take every single password from the password dictionary.
It will upend a four digit number at the very end.
And it will go through all four digit combinations off this number for
every single password from the password dictionary.
Okay, Now it's time to launch a dictionary attack with a mask.
But before I launched this attack,
I want to remind you that a classical dictionary attack and a
dictionary attack with a rule presented in the two previous
demos cracked seven out of 10 passwords.
Now I will hit.
Enter.
I will launch a dictionary attack with a mask,
and I will check if this attack results in cracking even more passwords.
As you can see, hash cut cracked nine out off 10 passwords.
And in the previous demo,
you learned that hash got remembers the state off password
cracking from the very beginning till this moment.
So if I cracked seven passwords in the previous two demos using a classical
dictionary attack and a dictionary attack with a rule.
And now, in the first demo,
I see nine cracked passwords after launching a dictionary attack with a mask.
Then it means that the dictionary attack with a mask.
Cracked additionally to passwords.
And you can see these passwords here.
Mark 1975 and New York 1234 So, as you can see,
a dictionary attack with a mask also known as a
hybrid attack is really powerful.
It can help you crack even more passwords.
And in this demo,
you learned how you can launch this attack in practice using hash cat.