Hashcat Maskprocessor Intruder Payloads

This extension integrates Burp Intruder with Hashcat Maskprocessor.

Maskprocessor is a word generator with a per-position configurable charset

You can find out more at https://github.com/hashcat/maskprocessor

Usage:

It can be used with:

• Built-in charset
• ?l = abcdefghijklmnopqrstuvwxyz
• ?u = ABCDEFGHIJKLMNOPQRSTUVWXYZ
• ?d = 0123456789
• ?s = !"#$%&'()*+,-./:;<=>?@[\]^_`{|}~
• ?a = ?l?u?d?s
• ?b = 0x00 - 0xff

Example: Password?d will generate Password0, Password1, Password3 etc.

Custom charsets:

• -1, --custom-charset1=CS
• -2, --custom-charset2=CS
• -3, --custom-charset3=CS
• -4, --custom-charset4=CS

Example: Password?1 -1 0A@ will generate Password0, PasswordA, Password@