> My GPU was able to try 20GB passwords in a couple of minutes. That was the largest password list I’ve found on the internets. Password matching is the low ha

> My GPU was able to try 20GB passwords in a couple of minutes. That was the largest password list I’ve found on the internets. Password matching is the low hanging fruit, I usually run them on a regular server. Where you need the large GPU workloads is in applying rules to these lists and in generating variations. There is also work in generating the rule files themselves. The good rule sets like dive[0] have 1.2M+ rules[1]. Run that again through your 20GB list and you'll see quickly why you need many GPU's :) [0] https://hashcat.net/wiki/doku.php?id=rule_based_attack https://hashcat.net/wiki/doku.php?id=rule_based_attack [1] you don't need that many rules, it is very rapidly diminishing returns after ~60% cracked and thousands of rules.