Skip to main content
Share Your Experience: Take the 2024 Developer Survey

Questions tagged [hashcat]

Hashcat is a program designed to brute force hashes, and is commonly used to crack passwords.

Filter by
Sorted by
Tagged with
-1 votes
1 answer
85 views

Is there anyway to crack this salted Hash? [closed]

The Task is kind of a CTF task that I was given and I have no idea how to do this. I had to crack a password on a zipfile and then crack the 3 hashes in the txt file within the zip file. I cracked the ...
Wrex's user avatar
  • 9
1 vote
0 answers
63 views

Hashcat when account name is "Not a real account" [closed]

Couldn't hashcat be applied to godbolt.org given this file data? /etc/passwd ce:x:10240:10240:Not a real account:/app:/bin/bash /etc/shadow ce:$1$rockyou$hty8SH9lK4mcCQXKENxaa1:18723:0:99999:7::: ...
vengy's user avatar
  • 111
1 vote
1 answer
392 views

Converting zip2john output to hashcat

I have video files stacked in zip and I forgot the password. I want to use hashcat, because john will take much longer, but the hash from hash zip2john isn't compatible and I don't know how to convert ...
GMike's user avatar
  • 11
1 vote
0 answers
87 views

What's the most simple approach to this wordlist generation and ruleset problem?

This is a password recovery project, which is more complex than just generated a wordlist, since using my tries (see below) it seems to be not enough to just generate a wordlist. I'm trying to recover ...
Sir Muffington's user avatar
0 votes
0 answers
31 views

Dump Windows 11 PIN hash [duplicate]

Can anyone tell me how to dump the Windows 11 PIN? I tried dumping SAM and SYSTEM but the PIN hash is not there. What mode we can use in hashcat to crack it?
Ayush Mishra's user avatar
1 vote
1 answer
561 views

john the ripper tool - how to combine wordlist with incremental modes?

In hashcat, when we need to crack password based on wordlist, but additionally want to try partly bruteforce random ASCII characters in the end of any entry from the wordlist, we can use the following ...
Hans R's user avatar
  • 13
1 vote
1 answer
450 views

How secure is HTTP auth digest in 2023

I'm trying to figure out the time needed to crack an HTTP digest auth. According to the RFC2069, the digest in calculated according to this scheme : HA1 = MD5(username:realm:password) HA2 = MD5(method:...
hotips's user avatar
  • 589
0 votes
0 answers
1k views

hashcat token length exception

Using pdf2john I get a hash like this: $pdf$2*3*128*2147483644*1*16*1111111111111111111111111111111111111111111111111111111111111111111111111111111111111111111111111111*32*...
kotozna's user avatar
  • 153
2 votes
1 answer
2k views

Crack with Hashcat using hash and salt

I am new to Hashcat and I am trying to crack a password/salt hash. Everything I have tried comes back as "no hash-mode matches..." Any assistance on the correct hashcat command line would ...
Sara Witherow's user avatar
3 votes
2 answers
2k views

How can I identify the salt value used in a password hash?

I'm currently learning about password cracking, and I have a set of passwords with their respective hash values. I used Hashcat to crack the hash values, just to see how it works, but I got different ...
Anantashayana's user avatar
0 votes
1 answer
8k views

I know hash and salt; how do I use hashcat to decrypt?

hash: 341A451DCF7E552A237D49A63BFBBDF1 salt: 1234 I have a word bank I generated using CeWL that I think I am supposed to use. But when I run hashcat --force -a 0 -m 0 ...
John's user avatar
  • 1
0 votes
0 answers
65 views

How to find the correspond hash algorithm? [duplicate]

I'm currently working on a project. but i still facing some issue due to some crypted data. i know the plaintext and got the correspond hash. plaintext: C018AE45B37DAE665486F4151E0C1E6F Hash: rROkd+...
Zeus8497st's user avatar
0 votes
1 answer
219 views

Is it possible to use hashcat or john the ripper on a .drmz file?

I have n .drmz files which I can read with Javelin PDF Reader. Obviously to access the content I need a password, which I have, the same for each file. In case I don't have the password is there a way ...
Biggab's user avatar
  • 3
1 vote
0 answers
173 views

Hashcat with md5 and Mask

I'm trying to connect to my meter by using some open-source software, all the meter supports the dlms-cosem standard. But the problem is the meter disconnected due to a failed security check. After ...
Zeus8497st's user avatar
0 votes
0 answers
700 views

Cracking an MD5 password with little info to go off of

I am taking a security class and part of an assignment this week is to crack a given MD5 hash. All the professor has given us for this task is the hash, the knowledge that the password is 6 or 7 ...
Nick5741's user avatar
0 votes
1 answer
426 views

How to use a logical OR in Hashcat rules

I'm currently trying to crack a password-hash in hashcat. But I'm facing a problem and can't figure out how to solve it. I have to substitute the same char with a different rule sometimes (something ...
Justin's user avatar
  • 1
1 vote
0 answers
41 views

Open Veracrypt container (password+keyfile) without password? [duplicate]

I lost my password for encrypted disk. Is there a way to do something without dumb cracking? Maybe recovery mode? Because I just lost 50% of my auth data...?
crjtical's user avatar
1 vote
0 answers
228 views

"john --format=axcrypt" is not returning results

I would like to open a mysterious old file that I found on my Hard Disk, the contents of which I do not know nor can I guess from its name (PB-mp4-rar.axx). The file was password-protected with the ...
user avatar
1 vote
0 answers
403 views

Cracking passwords following rules with John or hashcat

I would like to crack the forgotten password of a very old archive file (rar) with JTR or hashcat. I remember it was starting with a certain number from a set of numbers e.g. prefix number from the ...
user1806967's user avatar
2 votes
1 answer
4k views

kali linux encrypting passwords with yescrypt - how to change?

I'm using John The Ripper for password cracking and adding new users/passwords to test it out. When I create a new user and password, the hash starts with $y$ which is from yescrypt. When testing a ...
confusedPorcupine's user avatar
1 vote
1 answer
2k views

John the Ripper method takes so much time to crack the hashcat file

Does John the Ripper method take so much time to crack the password? It's been 3 hours since the process started. No output yet and my PC specs are lower than you think. Hashcat: Airtel-My WIFI-BMF422-...
Abel jorlin's user avatar
0 votes
0 answers
541 views

Cracking UTF encoded hash using hashcat

I'm conducting tests using hashcat and find it very difficult if the hash is encoded. See the below function which takes the plain text, converts that to the bytes, creates the SHA512 hash and then ...
Brian Smith's user avatar
5 votes
3 answers
20k views

Crack JWT HS256 with hashcat

Is it possible to crack a JSON Web Token (JWT) using HS-256 algorithm with hashcat on a normal PC? hashcat password.txt -m 16500 -a3 How can I calculate how much time it will take? JWT first section ...
Kokomelom's user avatar
  • 153
2 votes
1 answer
577 views

Cracking password with static prefix and suffix

I found a pattern password generation that works like that: sha1("very long static prefix text blablabla "+password+" very long static suffix text"); I tried hashcat combined ...
Samuel Pires's user avatar
1 vote
1 answer
1k views

Using hashcat -s with --increment

I have multiple computers which I am planning to use. They all run a custom-made client that starts hashcat with different args. I am able to submit the current progress, candidates etc (everything in ...
user avatar
7 votes
2 answers
4k views

Can you use an FPGA with hashcat?

Hashcat lists FPGAs as OpenCL device type in its help. - [ OpenCL Device Types ] - # | Device Type ===+============= 1 | CPU 2 | GPU 3 | FPGA, DSP, Co-Processor Can you really connect and use an ...
UndercoverDog's user avatar
1 vote
0 answers
269 views

Need help cracking a MacOS Catalina password

I have found the hashes for the stored passwords on my mac, I do not have the administrator passwords, I do have the hashes coming from the /var folder. I have tried decrypting it using hashcat but it ...
ADeveloper's user avatar
0 votes
1 answer
1k views

Hashcat brute force - markov chains

Hashcat uses Markov chains by default when using brute force mode. Do they really speed up the cracking since a randomly generated password normally has the same probability for every combination?
UndercoverDog's user avatar
0 votes
0 answers
4k views

Hashcat:: Token length exception. No hashes loaded

I'm trying to crack a wallet.dat hash from an old file from 2013. I created a hash with bitcoin2john and it is 112 characters. I can't get it to work. I'm wondering if there is something wrong with my ...
J. Morrison's user avatar
0 votes
0 answers
14 views

How to pipe a character set on hydra [duplicate]

How to pipe a characterset to Hydra. Something like this which can be done on hashcat (crunch 8 8 123456789| hashcat -m 0 ce5cff0195a6b059a32411b6202ab49)
officialstar's user avatar
8 votes
1 answer
11k views

With password cracking, what is the fastest known password cracking rig in hashes per second? [closed]

To properly assess password strength, I have been trying to research what the fastest known password cracking rig is in hashes per second. HashCat claims that their software is the world's fastest, ...
Chris Rogers's user avatar
0 votes
1 answer
330 views

Using John or hashcat when password stub is leaked by weak crypto

I'm pentesting a system (call it X) which uses an internal secret key. Due to weaknesses in the crypto, I can determine: The SHA1 hash of the key (stored as a checksum) With high probability, the ...
SRobertJames's user avatar
4 votes
1 answer
11k views

hashcat skipping gpu even if it's recognizing the device and the driver is installed

I'm trying to run hashcat on a MacBook Pro. Running hashcat -I to check the devices' informations yields: hashcat (v6.2.5-38-g8b61f60e8) starting in backend information mode OpenCL Info: ============ ...
Francesco Ghizzo's user avatar
1 vote
1 answer
1k views

In hashcat, is there a simple way to set the amount of symbols in the password?

For example, I know a password has to have at least 3 symbols, but I don't know where those symbols are. What is the simplest way to specify this when cracking the password with hashcat? The only ...
trallgorm's user avatar
  • 885
1 vote
0 answers
744 views

XMPP authentication bruteforce with hashcat

This question is about how efficient it is to bruteforce SASL authentication in the XMPP protocol. I read the XMPP SASL authentication steps (stackoverflow link in case the first one breaks), and ...
Redouane Red's user avatar
2 votes
1 answer
2k views

Speed up cracking a wpa2.hccapx file in hashcat

I'm trying to do a brute force with Hashcat on windows with a GPU cracking a wpa2.hccapx handshake. Based on my research I know the password is 10 characters, a mix of random lowercase + numbers only ...
sghost's user avatar
  • 21
0 votes
0 answers
290 views

What is the difference between 7100, 16700 and 18300 hashcat modes?

Studying how expensive and how long it takes to brute force macOS Catalina and Big Sur passwords (if possible on T2/M1 Macs). My (likely naive) understanding is that macOS uses PBKDF2-SHA512 to hash ...
sunknudsen's user avatar
0 votes
0 answers
2k views

How to benchmark mode with given iterations in hashcat?

I installed hashcat using following: sudo apt update sudo apt -y install p7zip-full curl -O https://hashcat.net/files/hashcat-6.2.3.7z 7z x hashcat-6.2.3.7z hashcat-6.2.3/hashcat.bin -b When I run ...
sunknudsen's user avatar
0 votes
1 answer
652 views

What exactly is this hash that Jack the Ripper and Hashcat use (and also have tools for extracting?) [duplicate]

These tools work based on "hashes", but they seem to not mean that in traditional sense, since they can also extract hashes from a variety of formats like kdbx and zip. I doubt all these ...
Hormoz's user avatar
  • 171
0 votes
0 answers
17 views

Significant differences in hash cracking speeds? [duplicate]

I'm doing an educational hash research. I generated MD5 hash using online tools and cracked it within a second using Hashcat and certain wordlist (yes, one second). Then I produced a WPA handshake ...
Mr. Engineer's user avatar
2 votes
0 answers
22k views

Can anyone identify the $y$ hash prefix or identify what hash this could be? [closed]

I'm using Kali Linux and trying to crack my own /etc/passwd file with the username "matt". I've unshadowed it however trying to use Hashcat or JohnTheRipper to identify and crack it has ...
Valkyr's user avatar
  • 21
0 votes
0 answers
386 views

How can I add some probable Keywords to hashcat, so I can Brute-Force attack a WPA2 Network faster

I´m trying to brute force attack a WPA2 Network with Hashcat and a wpa2.hccpax file, but when I do it says that it can take 45years to brute force it. So I had the idea that probably the network I´m ...
Super_X-dev's user avatar
1 vote
0 answers
2k views

Hashcat first wordlist then brute force if nothing found

I'm trying to run my hashcat as automated and efficient as possible. I have a file with NTLM hashes: 607C4CDCDA0EFBF023C4DEA52DF90641 D25ECD13FDDBB542D2E16DA4F9E0333D AAD063F78DA1183CBD8BD7812FADF9C6 ...
nameless's user avatar
  • 129
0 votes
1 answer
2k views

hashcat not allowing increment option

Basically I am trying to bruteforce a MD5 hash in two systems using hashcat. The hash is between 3-8 characters in length. But when I attempt to split the password tries in hashcat, it throws below ...
hashy's user avatar
  • 111
1 vote
0 answers
2k views

How does the WPA2 crack work with Hashcat 22000 format hash lines?

I'm trying to understand the format and functionality of WPA2 hash lines that start with WPA*02* used with -m 22000 on hashcat. The way I understand it, this format was created as an improvement and ...
ieatpizza's user avatar
  • 203
0 votes
1 answer
468 views

How to get Hashcat keyspace for combined princeProcessor plus rule-based attack

I am trying to do something like pp64 --pw-min=10 words.txt | hashcat -a 0 **--keyspace** -r myRule.txt but this syntax is incorrect. Is there a way to get the keyspace for this combined attack?
gregrae's user avatar
1 vote
0 answers
1k views

Dynamic format used in John the Ripper jumbo way slower than MDXFind

I'm currently doing some research on a pretty huge list of hashes (approx. 2 millions) and thus I'd like to improve my cracking speed. The hash format is 12 rounds of SHA512(password + salt), which ...
Lo Bellin's user avatar
  • 111
1 vote
1 answer
2k views

In Hashcat, How to generate combinatior attacks consisting of more than two words (in lenght)?

I am trying to make a combinator attack using just one dictionary: word1 word2 word3 word4 word5 ... And would like to try all 4-words-length permutations separated by commas: word1,word2,word3,word4 ...
XY6's user avatar
  • 113
2 votes
1 answer
745 views

Password generation

I'm trying to generate all possible variation of a password. The base word is like "PleaseSub!" and I need all possible version of it with uppercase, lowercase, etc.. I know there is ...
John's user avatar
  • 23
-1 votes
1 answer
4k views

Hashcat with only CPU and not GPU

Can I use hashcat with the only CPU and not a GPU? I found hashcat-legacy but it isn't stable as much as hashcat current.
Fatih Durmuş's user avatar