I'm currently trying to crack a password-hash in hashcat.

But I'm facing a problem and can't figure out how to solve it.

I have to substitute the same char with a different rule sometimes (something like sa> OR sa0).

Is there an easy way to do that?

1 Answer 1


There's no logical OR in hashcat rules, because the complexity of expressing when you want to do one or the other is either so simple that it's easier to just do both, or else complicated enough to need to be scripted outside of hashcat.

Most attacks simple do both - either in a single rules file, or by stacking multiple rules files with -r. For most GPU-based attacks, there's no reason to not simply do both, in order to supply enough work to the GPU(s) to fully utilize them.

For example, if you want to always capitalize the word, and then perform one or the other substitution, a single rules file would contain:

c sa>
c sa0

Or you could stack two rules files:





... and then invoked with -r file1.rules -r file2.rules.

These are just two different methods to produce the identical final ruleset as executed by hashcat.

You must log in to answer this question.

Not the answer you're looking for? Browse other questions tagged .