hashcat --stdout base.txt -r year.rules > updated_passlist.txt cat base.txt updated_passlist.txt > fresh_passlist.txt Now you feed fresh_passlist.txt into Hydra:
sort -u passlist.txt -o passlist.txt Duplicates waste time. Hydra will try Password123 twice if you don't dedupe. Hydra expects UTF-8. Ensure your passlist.txt has no carriage returns (CRLF) from Windows. Convert using:
hashcat --stdout base_list.txt -r /usr/share/hashcat/rules/best64.rule > mutated_passlist.txt sort -u mutated_passlist.txt -o final_passlist.txt passlist txt hydra upd
$2 $0 $2 $4 (Appends 2024) $2 $0 $2 $5 (Appends 2025)
#!/bin/bash # Get latest RockYou variant from a raw GitHub source curl -s https://raw.githubusercontent.com/ins1gn1a/rockyou.txt/refs/heads/main/rockyou.txt -o /tmp/fresh_list.txt echo "Password2024" >> /tmp/fresh_list.txt echo "Password2025" >> /tmp/fresh_list.txt echo "Password2026" >> /tmp/fresh_list.txt Merge and clean cat /tmp/fresh_list.txt >> master_passlist.txt sort -u master_passlist.txt -o master_passlist.txt hashcat --stdout base
echo "[+] Updated passlist.txt with $(wc -l master_passlist.txt) entries"
password
hydra -l <username> -P passlist.txt <target> <protocol> Or for multiple usernames: