hashcat-kwprocessor-typo-rules.txt

hashcat-kwprocessor-typo-rules.txt

--------------------------------------------------------------------------------
# Crude generation of typo rules 
# (Using kwprocessor (https://github.com/hashcat/kwprocessor) and hashcat)
#
# Useful for passwords that don't require confirmation (like some cryptocurrency
# wallets, password-protected archive files, etc.)
#
# May also be useful for stacking with other rules.
#
# This approach assumes that you are making the same typo every time 
# (all "a" become "s" in the string; hashcat -> hsshcst), and that the typo is
# no more than one character away on the keyboard.

$ cat basechar.txt 
abcdefghijklmnopqrstuvwxyzABCDEFGHIJKLMNOPQRSTUVWXYZ0123456789 !"#$%&'()*+,-./:;<=>?@[\]^_`{|}~

# Keyboard distance = 1
$ cat route.txt 
1

$ ./kwp -0 -s 1 basechar.txt keymaps/en.keymap route.txt | sort -u | egrep -v '(.)\1+$' | sed 's/^/s/g' >typos1.rule

$ head typos1.rule 
s`~
s`!
s`\
s^&
s^%
s~`
s~!
s~\
s<>
s<,

# There's a lot of redundancy in the generated strings, so you may be better off 
# just using this method to generate a wordlist.

$ echo hashcat | hashcat -r typos1.rule --stdout | wc -l
1305

$ echo hashcat | hashcat -r typos1.rule --stdout | sort -u | wc -l
75

# Stacking this rule list multiple times with hashcat (-r typos1.rule -r typos1.rule)
# increases your coverage, but magnifies the effect:

$ echo hashcat | hashcat -r typos1.rule -r typos1.rule --stdout | wc -l
1703025

$ echo hashcat | hashcat -r typos1.rule -r typos1.rule --stdout | sort -u | wc -l
2378