hashcat hybrid mode

You can combine a wordlist and mask together in hashcat’s hybrid modes (6 and 7).

In mode 6, candidate password uses a word from the wordlist followed by a string satisfying the mask.:

hashcat -a 6 -m 1000 ntlm.txt list.txt "?d?d?d?d" # Password5555

Mode 7 is the same as 6 except the mask string comes first:

hashcat -a 7 -m 1000 ntlm.txt "?d?d?d?d" list.txt # 5555Password