Random Hashcat Scrips
realistically I would go with the following approach:
- run rockyou with -g 100000 or all the rulesets combined
- run expander (modified to max at 8 or 10), and then run -a1
- run cutb with -a1
- run rockyou through princeprocessor and then pipe into hashcat with -g 100000
- extract the plains from the potfile, pipe them through expander and cutb again, run the -a1 attack, then run the founds through princeprocessor with -g 100000
- repeat step 5
- run expanded dict through prince processor with -g 100000
- run cutb through pp, same deal
- repeat step 5
- use PACK and generate masks
- try other random rules
- run rockyou through expander, run -a1 and then basically repeat
- also pipe in the usernames into the above process
- when using rules turn on debug mode and capture the rules
- use cewl and crunch to generate a wordlist, repeat the above
for i in $(seq 1 30); do ./hashcat.bin ../ntlm.hash -m 1000 --show | cut -d: -f2- | /opt/utils/hashcat-utils/src/expander.bin | sort -u > cand.exp; ./hashcat.bin ../ntlm.hash -m 1000 -a 1 cand.exp cand.exp -O; done
cut -d: -f2- < ~/.hashcat/hashcat.potfile | sort -u | ~/hashcat-utils/src/expander.bin | sort -u | ~/princeprocessor/pp64.bin | ~/princeprocessor/pp64.bin | hashcat -m1000 ntds.ntds
for i in $(seq 1 50); do ./hashcat.bin ../ntlm.hash -m 1000 --show | cut -d: -f2- | sort -u > cand.lst; shuf cand.lst | /opt/utils/princeprocessor/src/pp64.bin | ./hashcat.bin ../ntlm.hash -m 1000 -a 0 -O -g 100000; done
expander.bin < rockyou.txt | sort -u > rockyou.exp; for i in $(seq 1 200); do shuf rockyou.exp | ./hashcat.bin -m 1000 -O -w3 ntds.dit -g 100000; done