Reading the new advice on password which seems to spead easily (at least in my workplace), I was wondering how to use hashcat for cracking four-word password hashes?
Say I have this hash 1da9133ab9dbd11d2937ec8d312e1e2569857059e73cc72df92e670928983ab5
of a password a user claims to be unbreakable because it's a 16 character long "passphrase", how can I combine hashcat's dictionaries to crack it (say I suspect it's a four-word password only)? I see you can combine 2 dictionaries so you can crask 2 words passphrases, but what about 4?
The only way I see so far is creating another dictionary with all combinations of 2 words from the original English dictionary, and then do a combination attack using this "2words" dictionary twice (so it makes it a four-word dictionary):
./combinator.bin dict.txt dict.tdt > dict2words.txt
./hashcat64.bin -m 0 -a 1 hash.txt dict2words.txt dict2words.txt
But it feels heavy to generate such a dict2words.txt
file.