Hashcat Rules

A1131

I haven't any comparision of hashpwn's rules with those you found in this thread or the above link, but are certainly not inferior. I encourage to try various ones, because on various hashlists using various wordlists, they can give varied results, better or worse.

A1131

How to create prepend rules from wordlist

$ cat ./wordlist.txt
word1
word2
word3

Create a file rev.sed with the following contents and make it executable

/../! b
s/^.*$/\
&\
/
tx
:x
s/\(\n.\)\(.*\)\(.\n\)/\3\2\1/
tx
s/\n//g

$ chmod +x rev.sed
$ cat ./wordlist.txt | sed -f rev.sed | sed 's/./^&/1g' > ./prepend.rule
$ cat ./prepend.rule
^1^d^r^o^w
^2^d^r^o^w
^3^d^r^o^w

A1131

How to create dates append rule with toggle first character

# for i in `seq 1949 2025`; do echo $i; done > tmp.txt && cat tmp.txt | sed 's/./$&/1g' | sed 's/^/T0/' > ./rules/append-dates.rule && rm tmp.txt
# head ./rules/append-dates.rule
T0$1$9$4$9
T0$1$9$5$0
T0$1$9$5$1
T0$1$9$5$2
T0$1$9$5$3
T0$1$9$5$4
T0$1$9$5$5
T0$1$9$5$6
T0$1$9$5$7
T0$1$9$5$8

A1131

Slightly updated/cleaned archive with rules (hashcat-rules.zip) and some benchmark made on the hashlist from this post and the hashmob.medium.found dictionary.

A1131

Sorted by occurrence of rules file from online hashcat rules collection

# ls
a1131	blandyuk  ciphers   dive       hybrid	     kaonashi	MISC	   pantagrule	       robot	  t0xic     top_n
aon	buka	  clem9669  fordy      insidepro     korelogic	nsa-rules  probable-wordlists  shooter3k  techtrip  unicorn
append	cake	  dipepe    hob0rules  jabbercracky  masks	nyxgeek    README.md	       skalman	  tmesis
# find . -name "*.rule"  | du -sh
860M	.
# du -sh ../collection.rule 
372M	../collection.rule
# wc -l ../collection.rule 
26913875 ../collection.rule

A1131

New concentrator_MT* rules, more benchmarks and download link --> https://a113l.github.io/Hashcracking/

rules
├── a1131
│   ├── A1131-insane-v1.rule
│   ├── A1131-insane-v2.rule
│   ├── A1131-insane-v3.rule
│   ├── A1131-insane-v4.rule
│   ├── A1131-IWA.rule
│   ├── A1131.rule
│   ├── append.rule
│   ├── blazing.rule
│   ├── concentrator_MT
│   ├── concentrator_MT_5000.rule
│   ├── concentrator_MT_64.rule
│   ├── DietCrackers.rule
│   ├── Emojis.rule
│   ├── insane-fast.rule
│   ├── insane-medium.rule
│   ├── insane-slow.rule
│   ├── _long.rule
│   ├── misty50k.rule
│   ├── misty.rule
│   ├── _short.rule
│   ├── tmesis-specials-num.rule
│   ├── top1k.rule
│   ├── top5k.rule
│   ├── Unicode.rule
│   ├── whisper.rule
│   ├── wild-fast.rule
│   ├── wild-medium.rule
│   └── wild-slow.rule
├── aon
│   ├── 10-complex-10k.rule
│   ├── 10-complex-1k.rule
│   ├── 10-complex-50k.rule
│   ├── 10-complex-64.rule
│   ├── 10-simple-10k.rule
│   ├── 10-simple-1k.rule
│   ├── 10-simple-50k.rule
│   ├── 10-simple-64.rule
│   ├── 12-complex-10k.rule
│   ├── 12-complex-1k.rule
│   ├── 12-complex-50k.rule
│   ├── 12-complex-64.rule
│   ├── 12-simple-10k.rule
│   ├── 12-simple-1k.rule
│   ├── 12-simple-50k.rule
│   ├── 12-simple-64.rule
│   ├── 14-complex-10k.rule
│   ├── 14-complex-1k.rule
│   ├── 14-complex-21k.rule
│   ├── 14-complex-64.rule
│   ├── 14-simple-10k.rule
│   ├── 14-simple-1k.rule
│   ├── 14-simple-50k.rule
│   ├── 14-simple-64.rule
│   ├── 8-complex-10k.rule
│   ├── 8-complex-1k.rule
│   ├── 8-complex-50k.rule
│   ├── 8-complex-64.rule
│   ├── 8-simple-10k.rule
│   ├── 8-simple-1k.rule
│   ├── 8-simple-50k.rule
│   └── 8-simple-64.rule
├── append
│   ├── [email protected]
│   ├── append_email_domains(giveen).rule
│   ├── append.!!.rule
│   ├── append_sym.rule
│   └── appendYear.rule
├── blandyuk
│   ├── blandyuk_accent_rep.rule
│   ├── blandyuk_append_sym_year.rule
│   ├── blandyuk_basicNoOriginal.rule
│   ├── blandyuk_basic.rule
│   ├── blandyuk_combined.rule
│   ├── blandyuk_digit_ins_2.rule
│   ├── blandyuk_digit_ins_3.rule
│   ├── blandyuk_digit_ins_4.rule
│   ├── blandyuk_facebook.rule
│   ├── blandyuk_la_ins12.rule
│   ├── blandyuk_la_ins16.rule
│   ├── blandyuk_la_rep12.rule
│   ├── blandyuk_la_rep16.rule
│   ├── blandyuk_leet_tog_num.rule
│   ├── blandyuk_names_ins.rule
│   ├── blandyuk_prepend_sym.rule
│   ├── blandyuk.rule
│   ├── blandyuk_sym1_ins.rule
│   ├── blandyuk_sym2_ins.rule
│   ├── blandyuk_sym_ins.rule
│   ├── blandyuk_sym_pre_app.rule
│   ├── blandyuk_sym_rep.rule
│   ├── blandyuk_ua_ins12.rule
│   ├── blandyuk_ua_ins16.rule
│   ├── blandyuk_ua_rep12.rule
│   ├── blandyuk_ua_rep16.rule
│   ├── blandyuk_word3_ins.rule
│   ├── blandyuk_word4_ins.rule
│   ├── blandyuk_word5_ins.rule
│   └── blandyuk_years_ins.rule
├── buka
│   └── buka_400k.rule
├── cake
│   ├── append-firstnames.rule
│   ├── CakeV1.rule
│   ├── CakeV2.rule
│   ├── email.rule
│   └── rot13.rule
├── ciphers
│   └── caesar.rule
├── clem9669
│   ├── clem9669_case.rule
│   ├── clem9669_large.rule
│   ├── clem9669_medium.rule
│   ├── clem9669_small.rule
│   ├── emojis.rule
│   ├── password_ruled.txt
│   └── README.md
├── collection
│   ├── collection100k.rule
│   ├── collection1k.rule
│   ├── collection500k.rule
│   ├── collection50k.rule
│   ├── collection5k.rule
│   └── README.md
├── dipepe
│   ├── Dipepe_emails_top1k_v4.0.rule
│   ├── Dipepe_Extract_range_1.rule
│   ├── Dipepe_full_names_to_emails_top100.rule
│   └── Dipepe_Omit_range_1.rule
├── dive
│   ├── dive.rule
│   ├── dive.rule.aa
│   ├── dive.rule.ab
│   ├── dive.rule.ac
│   └── dive.rule.ad
├── fordy
│   ├── fordy10k.rule
│   ├── fordy50k.rule
│   ├── FordyBigBoy.rule
│   ├── FordyCombined.rule
│   ├── fordyv1.rule
│   ├── fordyv2a.rule
│   ├── fordyv2b.rule
│   ├── Fordyv2.rule
│   ├── Fordyv3-1Mil.rule
│   ├── Fordyv3-250k.rule
│   ├── Fordyv3-2Mil.rule
│   ├── Fordyv3-500k.rule
│   ├── Fordyv4a.rule
│   └── Fordyv4b.rule
├── hashpwn
│   ├── hashpwn_1500.rule
│   ├── hashpwn_250.rule
│   ├── hashpwn_3000.rule
│   ├── hashpwn_5000.rule
│   └── hashpwn_500.rule
├── hob0rules
│   ├── d3adhob0.rule
│   ├── hob064.rule
│   └── README.md
├── hybrid
│   ├── append_d_passthrough.rule
│   ├── append_d.rule
│   ├── append_ds_passthrough.rule
│   ├── append_ds.rule
│   ├── append_du_passthrough.rule
│   ├── append_du.rule
│   ├── append_dus_passthrough.rule
│   ├── append_dus.rule
│   ├── append_hl_passthrough.rule
│   ├── append_hl.rule
│   ├── append_hu_passthrough.rule
│   ├── append_hu.rule
│   ├── append_ld_passthrough.rule
│   ├── append_ld.rule
│   ├── append_lds_passthrough.rule
│   ├── append_lds.rule
│   ├── append_ldu_passthrough.rule
│   ├── append_ldu.rule
│   ├── append_ldus_passthrough.rule
│   ├── append_ldus.rule
│   ├── append_l_passthrough.rule
│   ├── append_l.rule
│   ├── append_ls_passthrough.rule
│   ├── append_ls.rule
│   ├── append_lu_passthrough.rule
│   ├── append_lu.rule
│   ├── append_lus_passthrough.rule
│   ├── append_lus.rule
│   ├── append_s_passthrough.rule
│   ├── append_s.rule
│   ├── append_u_passthrough.rule
│   ├── append_u.rule
│   ├── append_us_passthrough.rule
│   ├── append_us.rule
│   ├── prepend_d_passthrough.rule
│   ├── prepend_d.rule
│   ├── prepend_ds_passthrough.rule
│   ├── prepend_ds.rule
│   ├── prepend_du_passthrough.rule
│   ├── prepend_du.rule
│   ├── prepend_dus_passthrough.rule
│   ├── prepend_dus.rule
│   ├── prepend_hl_passthrough.rule
│   ├── prepend_hl.rule
│   ├── prepend_hu_passthrough.rule
│   ├── prepend_hu.rule
│   ├── prepend_ld_passthrough.rule
│   ├── prepend_ld.rule
│   ├── prepend_lds_passthrough.rule
│   ├── prepend_lds.rule
│   ├── prepend_ldu_passthrough.rule
│   ├── prepend_ldu.rule
│   ├── prepend_ldus_passthrough.rule
│   ├── prepend_ldus.rule
│   ├── prepend_l_passthrough.rule
│   ├── prepend_l.rule
│   ├── prepend_ls_passthrough.rule
│   ├── prepend_ls.rule
│   ├── prepend_lu_passthrough.rule
│   ├── prepend_lu.rule
│   ├── prepend_lus_passthrough.rule
│   ├── prepend_lus.rule
│   ├── prepend_s_passthrough.rule
│   ├── prepend_s.rule
│   ├── prepend_u_passthrough.rule
│   ├── prepend_u.rule
│   ├── prepend_us_passthrough.rule
│   └── prepend_us.rule
├── insidepro
│   ├── InsidePro-HashManager.rule
│   └── InsidePro-PasswordsPro.rule
├── jabbercracky
│   ├── jabbercracky_100k.rule
│   ├── jabbercracky_100.rule
│   ├── jabbercracky_10k.rule
│   ├── jabbercracky_250k.rule
│   ├── jabbercracky_500.rule
│   ├── jabbercracky_50k.rule
│   ├── jabbercracky_50.rule
│   ├── jabbercracky_5k.rule
│   ├── jabbercracky_append_30k.rule
│   ├── jabbercracky_combined.rule
│   ├── jabbercracky_phrase_30k.rule
│   ├── jabbercracky_poggle_30k.rule
│   ├── jabbercracky_post_process.rule
│   ├── jabbercracky_prepend_30k.rule
│   ├── jabbercracky_short_15.rule
│   └── jabbercracky_taggle_30k.rule
├── kaonashi
│   ├── haku34K.rule
│   ├── kamaji34K.rule
│   ├── README.md
│   └── yubaba64.rule
├── korelogic
│   ├── KoreLogicCombined.rule
│   ├── KoreLogicRulesAdd1234_Everywhere.rule
│   ├── KoreLogicRulesAdd2006Everywhere.rule
│   ├── KoreLogicRulesAdd2010Everywhere.rule
│   ├── KoreLogicRulesAddDotCom.rule
│   ├── KoreLogicRulesAddJustNumbersLimit8.rule
│   ├── KoreLogicRulesAddOnes.rule
│   ├── KoreLogicRulesAddShortMonthsEverywhere.rule
│   ├── KoreLogicRulesAppend1_AddSpecialEverywhere.rule
│   ├── KoreLogicRulesAppend2Letters.rule
│   ├── KoreLogicRulesAppend4Num.rule
│   ├── KoreLogicRulesAppend6NumbersSpecial.rule.gz
│   ├── KoreLogicRulesAppend6Num.rule
│   ├── KoreLogicRulesAppend6Num.rule.gz
│   ├── KoreLogicRulesAppendCurrentYearSpecial.rule
│   ├── KoreLogicRulesAppendJustNumbers.rule
│   ├── KoreLogicRulesAppendMonthCurrentYear.rule
│   ├── KoreLogicRulesAppendMonthDay.rule
│   ├── KoreLogicRulesAppendNumberNumberSpecialTwice.rule
│   ├── KoreLogicRulesAppendNumbers_or_Specials_PrependLetter.rule
│   ├── KoreLogicRulesAppendSpecial4num.rule
│   ├── KoreLogicRulesAppendSpecialNumberNumberNumber.rule
│   ├── KoreLogicRulesAppendYears.rule
│   ├── KoreLogicRulesDevProdTestUAT.rule
│   ├── KoreLogicRulesL33t.rule
│   ├── KoreLogicRulesMonthsFullPreface.rule
│   ├── KoreLogicRulesPrepend2NumbersAppend2Numbers.rule
│   ├── KoreLogicRulesPrepend4LetterMonths.rule
│   ├── KoreLogicRulesPrependCAPCAPAppendSpecial.rule
│   ├── KoreLogicRulesPrependDaysWeek.rule
│   ├── KoreLogicRulesPrependHello.rule
│   ├── KoreLogicRulesPrependJustSpecials.rule
│   ├── KoreLogicRulesPrependMonthDayYear.rule
│   ├── KoreLogicRulesPrependNumNum3LetterMonths.rule
│   ├── KoreLogicRulesPrependNumNumNumNum.rule
│   ├── KoreLogicRulesPrependNumNumNum.rule
│   ├── KoreLogicRulesPrependNumNum.rule
│   ├── KoreLogicRulesPrependNumNumSpecial.rule
│   ├── KoreLogicRulesPrependRockYou50000.rule
│   ├── KoreLogicRulesPrependSeason.rule
│   ├── KoreLogicRulesPrependSpecialSpecial.rule
│   ├── KoreLogicRulesPrependYears.rule
│   ├── KoreLogicRulesReplaceLettersCaps.rule
│   ├── KoreLogicRulesReplaceLetters.rule
│   ├── KoreLogicRulesReplaceNumbers2Special.rule
│   ├── KoreLogicRulesReplaceNumbers.rule
│   └── KoreLogicRulesReplaceSpecial2Special.rule
├── masks
│   ├── 8char-1l-1u-1d-1s-compliant.hcmask
│   ├── 8char-1l-1u-1d-1s-noncompliant.hcmask
│   ├── all-in-one-top10.hcmask
│   ├── hashcat-default.hcmask
│   ├── rockyou-1-60.hcmask
│   ├── rockyou-2-1800.hcmask
│   ├── rockyou-3-3600.hcmask
│   ├── rockyou-4-43200.hcmask
│   ├── rockyou-5-86400.hcmask
│   ├── rockyou-6-864000.hcmask
│   ├── rockyou-7-2592000.hcmask
│   └── weakpass.hcmask
├── MISC
│   ├── 1940-2017.rule
│   ├── 8track.rule
│   ├── amaterasu.rule
│   ├── auto.rule
│   ├── basic_4_mail.rule
│   ├── [email protected]
│   ├── best64.rule
│   ├── Chatbooks.rule
│   ├── combinator.rule
│   ├── Combined-leetspeak.rule
│   ├── cyclone_250.rule
│   ├── d3ad0ne.rule
│   ├── descrypt.rule
│   ├── efensive.rule
│   ├── email_by_simplify.rule
│   ├── emails_best.rule
│   ├── emails.rule
│   ├── evil.rule
│   ├── expanded-cutb-clean.rule.gz
│   ├── full_names_to_emails_top100.rule
│   ├── generated2-full.rule
│   ├── generated2.rule
│   ├── generated3.rule
│   ├── generated.rule
│   ├── giveen_combo.rule
│   ├── hashes-org-rules.rule
│   ├── huge.rule
│   ├── Incisive-leetspeak.rule
│   ├── leetspeak.rule
│   ├── lmNTLM.rule
│   ├── mail_Milzo.rule
│   ├── mail.rule
│   ├── new-auto.rule
│   ├── newttv1.rule
│   ├── n.rule
│   ├── omgwtfbbq.rule
│   ├── OneRuleToRuleThemAll.rule
│   ├── OneRuleToRuleThemStill.rule
│   ├── OptimizedUpToDate.rule
│   ├── Oscommerce.rule
│   ├── passphrase-rule1.rule
│   ├── passphrase-rule2.rule
│   ├── passwordspro.rule
│   ├── Pengo.rule
│   ├── pepper.rule
│   ├── PrependRockYou60000.rule
│   ├── prince_generated.rule
│   ├── prince_optimized.rule
│   ├── reject.rule
│   ├── rockyou-30000.rule
│   ├── SHA1Dash.rule
│   ├── specific.rule
│   ├── test.rule
│   ├── tiny.rule
│   ├── toggles1.rule
│   ├── toggles2.rule
│   ├── toggles3.rule
│   ├── toggles4.rule
│   ├── toggles5.rule
│   ├── toprules2020.rule
│   ├── unix-ninja_common-leetspeak.rule
│   ├── unix-ninja-leetspeak.rule
│   ├── uppercase.rule
│   ├── whisper.rule
│   └── williamsuper.rule
├── nsa-rules
│   ├── LICENSE.md
│   ├── nsa64NoOriginal.rule
│   ├── nsa64.rule
│   ├── nsa.hcmask
│   ├── _NSAKEY_Combined.rule
│   ├── _NSAKEY.v1.dive.rule
│   ├── _NSAKEY.v2.dive.rule
│   └── README.md
├── nyxgeek
│   ├── makeaddress_3digits.rule
│   ├── makeaddress_4digits.rule
│   ├── nyxgeek-append4.rule
│   ├── nyxgeek-emails.rule
│   ├── nyxgeek-i1o1.rule
│   ├── nyxgeek-i1.rule
│   ├── nyxgeek-i2.rule
│   ├── nyxgeek-leet.extra.rule
│   ├── nyxgeek-leet.multi.rule
│   ├── nyxgeek-o1i1.rule
│   ├── nyxgeek-o1.rule
│   ├── nyxgeek-o2.rule
│   ├── nyxgeek-repeater-i.rule
│   ├── nyxgeek-weird1.rule
│   └── README.md
├── pantagrule
│   ├── pantagrule.hashorg.v6.hybrid.rule
│   ├── pantagrule.hashorg.v6.one.rule
│   ├── pantagrule.hashorg.v6.popular.rule
│   ├── pantagrule.hashorg.v6.random.rule
│   ├── pantagrule.hashorg.v6.raw1m.rule
│   ├── pantagrule.hybrid.royce.rule
│   ├── pantagrule.hybrid.rule
│   ├── pantagrule.one.royce.rule
│   ├── pantagrule.one.rule
│   ├── pantagrule.popular.royce.rule
│   ├── pantagrule.popular.rule
│   ├── pantagrule.random.royce.rule
│   └── pantagrule.random.rule
├── probable-wordlists
│   ├── ProbWL-197-rule-probable-v2.rule
│   ├── ProbWL-26-rule-probable-v2.rule
│   ├── ProbWL-51-rule-probable-v2.rule
│   └── ProbWL-547-rule-probable-v2.rule
├── README.md
├── robot
│   ├── Robot-Best10.rule
│   ├── Robot_CurrentBestRules.rule
│   ├── Robot_MyFavorite.rule
│   ├── Robot_ReverseRules.rule
│   ├── Robot_Top1268Rules.rule
│   └── Robot_toporder.rule
├── shooter3k
│   ├── Shooter3k_8_20_2021.rule
│   ├── Shooter3k_8_21_2021Cleaned.rule
│   ├── Shooter-LeetSpeak.rule
│   └── Shooter-LeetSpeak-With-Passthrough.rule
├── skalman
│   ├── skalman_small2.rule
│   ├── skalman_small3.rule
│   ├── skalmansmall.rule
│   ├── skalman_takesuonadate.rule
│   └── skalman_test.rule
├── t0xic
│   ├── T0XIC_combined.rule
│   ├── T0XlC_3.rule
│   ├── T0XlC_both.rule
│   ├── T0XlC_ins2_basic.rule
│   ├── T0XlC_ins2.rule
│   ├── T0XlC-insert_00-99_1950-2050_toprules_0_F.rule
│   ├── T0XlC_insert_HTML_entities_0_Z.rule
│   ├── T0XlC-insert_space_and_special_0_F.rule
│   ├── T0XlC-insert_top_100_passwords_1_G.rule
│   ├── T0XlC_ins.rule
│   ├── T0XlC_rep2.rule
│   ├── T0XlC_rep.rule
│   ├── T0XlC.rule
│   ├── T0XlCv1.rule
│   ├── T0XlCv2.rule
│   └── TOXIC-10krules.rule
├── techtrip
│   ├── techtrip1000.rule
│   ├── techtrip_2.rule
│   └── techtrip.rule
├── tmesis
│   ├── 1-emoji-everywhere.rule
│   ├── days-everywhere.rule
│   ├── love-everywhere.rule
│   └── seasons-everywhere.rule
├── top_n
│   ├── top_1500.rule
│   ├── top_250.rule
│   ├── top_3000.rule
│   ├── top_5000.rule
│   ├── top_500.rule
│   └── top_750.rule
└── unicorn
    ├── DiveIcorn.rule
    ├── Pantacorn.rule
    ├── SuperUnicorn.rule
    ├── TheOneTrueUnicorn.rule
    ├── Unicorn10k.rule
    ├── Unicorn1k.rule
    ├── Unicorn20k.rule
    ├── Unicorn250.rule
    ├── Unicorn3k.rule
    ├── Unicorn5k.rule
    ├── Unicorn64.rule
    ├── UnicornCombined.rule
    ├── UnicornLorge.rule
    └── UnicornSmol.rule

33 directories, 459 files

oe3p32wedw

thanks for your work!

A1131

I recently decided to determine the efficiency ratio of Hashcat's rules, calculated from recovered passwords, relative to the number of rules in the ruleset included in my benchmark. Here's the result based on the top 20 in each category (tiny, small, medium, and large) - Rules Efficiency

Partly9642

nice site, btw!

A1131

a1131_50000.rule is now available --> https://github.com/A113L/rules/blob/main/a1131/a1131_50000.rule . Benchmark results indicate that the rules generated by ranker can be competitive. Information on rule overlaps can be found in a dedicated tab on the benchmarks page.