What can be done if I already know the charset or password scheme in use in my organisation ?
You can use the –charset option and feed your organisation charset to MDCrack, additionnally you can use the ‘–mix’ option to mix it up randomly before use. If you know even partially the password scheme in use (eg: usernameXXXX2006) salts will be of great help, use –prepend=username and –append=2006 in this example. Question: I have no clue about the charset being used by my organisation but i suspect MDCrack default charset ([a-z0-9A-Z]) to be too large or incomplete for my needs. Answer: Either use ‘–charset’ followed by a charset of your choice, or use ‘–random’