killchain-compendium/hashes/hashcat_utils.md

# Hashcat Utilities

* [Modes](https://hashcat.net/wiki/doku.php?id=example_hashes)

## Wordlists

* Combine wordlists
```sh
combinator wordlist.txt otherwordlist.txt > newwordlist.txt
```

* Create wordlist
```sh
hashcat --force <input.txt> -r /opt/hashcat/rules/best64.rule --stdout > wordlist.txt
```

## Using Masks

* A mask can be set instead of a wordlist, this charset is then brute forced by iterating the charset
* [Masks](https://hashcat.net/wiki/doku.php?id=mask_attack)
* Bruteforcing seven lowerspace characters using `SHA2-384` as an example  
```sh
hashcat -m 10800 -a 3 hash.out ?l?l?l?l?l?l?l
```