I have a couple of things I would like to explore with hashcat. I have a MD5 hashed password, which I know for a fact has a prefix and a suffix. The actual password is located in the middle of the prefix and the suffix, and that password may contain the following characters:
- Uppercase characters
- Lowercase characters
- Underscore (
_
)
I have already figured out how to do this attack with the prefix and suffix:
hashcat [HASH] -a 3 PREFIX_?l?l?l?l?l_SUFFIX
That will try a 5 character password, which only includes lowercase characters because of ?l
. My first question is therefore: How do I generate a charset that includes [A-Za-z] and underscore, then start an attack on a hash starting from 1 character to 10 characters? It basically needs to run through each combination from 1 character to 10 characters.
Alternatively, is it possible to start a dictionary attack instead of using a charset, but separate each word with an underscore? Also up to maybe 10 words. Example:
words.txt
telephone
bottle
door
toilet
The password I need to crack would then go something like PREFIX_telephone_bottle_SUFFIX
, PREFIX_bottle_toilet_door_telephone_SUFFIX
, separating the words with an underscore.