Hashcat Rules

[A1131]

Create email rules from potfile based on occurency:

grep -Eao "\b[A-Za-z0-9._%+-]+@[A-Za-z0-9.-]+.[A-Za-z]{2,6}\b" ./hashcat.potfile | cut -d@ -f2 | uniq -c | sort -nr | cut -c 9- | awk '!seen[$0]++' | sed 's/^/@/' | sed 's/./$&/1g' > ./rules/domains.pot.rule

head -n10 ./rules/domains.pot.rule
$@$r$a$y$m$o$n$d$j$a$m$e$s$.$c$o$m
$@$m$a$i$l$t$o$.$p$l$u$s
$@$e$d$w$a$r$d$j$o$n$e$s$.$c$o$m
$@$a$x$a$-$a$d$v$i$s$o$r$s$.$c$o$m
$@$w$f$a$d$v$i$s$o$r$s$.$c$o$m
$@$j$p$m$o$r$g$a$n$.$c$o$m
$@$m$o$r$g$a$n$s$t$a$n$l$e$y$.$c$o$m
$@$w$e$l$l$s$f$a$r$g$o$a$d$v$i$s$o$r$s$.$c$o$m
$@$t$r$a$n$s$a$m$e$r$i$c$a$.$c$o$m
$@$u$b$s$.$c$o$m

[A1131]

Title: emojis.rule
Author: A1131
URL: none
Description: tmesis emojis rules file

Emojis.rule.zip

[A1131]

Title: unicode.rule
Author: A1131
URL: none
Description: tmesis updated unicode characters rules file

Unicode.rule
Characters used

[A1131]

Title: misty50k.rule
Author: A1131
URL: none
Description: For testing purpose. Feedback welcomed.

misty50k.rule

[Rampage45]

@A1131 misty50k rule Compared to oneruletorulethemall?

[A1131]

@Rampage45 - rules comparision

[Rampage45]

How about the hashpwn5000? What is its ranked compared to this rules?

[A1131]

I haven't any comparision of hashpwn's rules with those you found in this thread or the above link, but are certainly not inferior. I encourage to try various ones, because on various hashlists using various wordlists, they can give varied results, better or worse.

[A1131]

How to create prepend rules from wordlist

$ cat ./wordlist.txt
word1
word2
word3

Create a file rev.sed with the following contents and make it executable

/../! b
s/^.*$/\
&\
/
tx
:x
s/\(\n.\)\(.*\)\(.\n\)/\3\2\1/
tx
s/\n//g

$ chmod +x rev.sed
$ cat ./wordlist.txt | sed -f rev.sed | sed 's/./^&/1g' > ./prepend.rule
$ cat ./prepend.rule
^1^d^r^o^w
^2^d^r^o^w
^3^d^r^o^w

[A1131]

How to create dates append rule with toggle first character

# for i in `seq 1949 2025`; do echo $i; done > tmp.txt && cat tmp.txt | sed 's/./$&/1g' | sed 's/^/T0/' > ./rules/append-dates.rule && rm tmp.txt
# head ./rules/append-dates.rule
T0$1$9$4$9
T0$1$9$5$0
T0$1$9$5$1
T0$1$9$5$2
T0$1$9$5$3
T0$1$9$5$4
T0$1$9$5$5
T0$1$9$5$6
T0$1$9$5$7
T0$1$9$5$8

[A1131]

Slightly updated/cleaned archive with rules (hashcat-rules.zip) and some benchmark made on the hashlist from this post and the hashmob.medium.found dictionary.

[A1131]

Sorted by occurrence of rules file from online hashcat rules collection

# ls
a1131	blandyuk  ciphers   dive       hybrid	     kaonashi	MISC	   pantagrule	       robot	  t0xic     top_n
aon	buka	  clem9669  fordy      insidepro     korelogic	nsa-rules  probable-wordlists  shooter3k  techtrip  unicorn
append	cake	  dipepe    hob0rules  jabbercracky  masks	nyxgeek    README.md	       skalman	  tmesis
# find . -name "*.rule"  | du -sh
860M	.
# du -sh ../collection.rule 
372M	../collection.rule
# wc -l ../collection.rule 
26913875 ../collection.rule