Questions tagged [hashcat]
Hashcat is a program designed to brute force hashes, and is commonly used to crack passwords.
151
questions
0
votes
0
answers
15
views
Dump Windows 11 PIN hash [duplicate]
Can anyone tell me how to dump the Windows 11 PIN? I tried dumping SAM and SYSTEM but the PIN hash is not there. What mode we can use in hashcat to crack it?
1
vote
1
answer
193
views
john the ripper tool - how to combine wordlist with incremental modes?
In hashcat, when we need to crack password based on wordlist, but additionally want to try partly bruteforce random ASCII characters in the end of any entry from the wordlist, we can use the following ...
- 13
0
votes
1
answer
274
views
How secure is HTTP auth digest in 2023
I'm trying to figure out the time needed to crack an HTTP digest auth. According to the RFC2069, the digest in calculated according to this scheme :
HA1 = MD5(username:realm:password)
HA2 = MD5(method:...
- 569
0
votes
0
answers
533
views
hashcat token length exception
Using pdf2john I get a hash like this:
$pdf$2*3*128*2147483644*1*16*1111111111111111111111111111111111111111111111111111111111111111111111111111111111111111111111111111*32*...
- 153
2
votes
1
answer
569
views
Crack with Hashcat using hash and salt
I am new to Hashcat and I am trying to crack a password/salt hash. Everything I have tried comes back as "no hash-mode matches..." Any assistance on the correct hashcat command line would ...
3
votes
2
answers
783
views
How can I identify the salt value used in a password hash?
I'm currently learning about password cracking, and I have a set of passwords with their respective hash values. I used Hashcat to crack the hash values, just to see how it works, but I got different ...
0
votes
1
answer
4k
views
I know hash and salt; how do I use hashcat to decrypt?
hash: 341A451DCF7E552A237D49A63BFBBDF1
salt: 1234
I have a word bank I generated using CeWL that I think I am supposed to use. But when I run
hashcat --force -a 0 -m 0 ...
- 1
0
votes
0
answers
65
views
How to find the correspond hash algorithm? [duplicate]
I'm currently working on a project. but i still facing some issue due to some crypted data. i know the plaintext and got the correspond hash.
plaintext: C018AE45B37DAE665486F4151E0C1E6F
Hash: rROkd+...
- 11
0
votes
1
answer
136
views
Is it possible to use hashcat or john the ripper on a .drmz file?
I have n .drmz files which I can read with Javelin PDF Reader. Obviously to access the content I need a password, which I have, the same for each file.
In case I don't have the password is there a way ...
- 3
1
vote
0
answers
105
views
hashcat with md5 and Mask
I'm trying to connect to my meter by using some open-source software, all the meter supports the dlms-cosem standard. But the problem is the meter disconnected due to a failed security check.
After ...
- 11
0
votes
0
answers
356
views
Cracking an MD5 password with little info to go off of
I am taking a security class and part of an assignment this week is to crack a given MD5 hash.
All the professor has given us for this task is the hash, the knowledge that the password is 6 or 7 ...
- 1
0
votes
1
answer
253
views
How to use a logical OR in Hashcat rules
I'm currently trying to crack a password-hash in hashcat.
But I'm facing a problem and can't figure out how to solve it.
I have to substitute the same char with a different rule sometimes (something ...
- 1
1
vote
0
answers
39
views
Open Veracrypt container (password+keyfile) without password? [duplicate]
I lost my password for encrypted disk.
Is there a way to do something without dumb cracking?
Maybe recovery mode? Because I just lost 50% of my auth data...?
- 11
1
vote
0
answers
164
views
"john --format=axcrypt" is not returning results
I would like to open a mysterious old file that I found on my Hard Disk, the contents of which I do not know nor can I guess from its name (PB-mp4-rar.axx).
The file was password-protected with the ...
user285664
1
vote
0
answers
285
views
Cracking passwords following rules with John or hashcat
I would like to crack the forgotten password of a very old archive file (rar) with JTR or hashcat.
I remember it was starting with a certain number from a set of numbers e.g.
prefix number from the ...
- 11
2
votes
1
answer
3k
views
kali linux encrypting passwords with yescrypt - how to change?
I'm using John The Ripper for password cracking and adding new users/passwords to test it out. When I create a new user and password, the hash starts with $y$ which is from yescrypt. When testing a ...
1
vote
1
answer
2k
views
John the Ripper method takes so much time to crack the hashcat file
Does John the Ripper method take so much time to crack the password? It's been 3 hours since the process started. No output yet and my PC specs are lower than you think.
Hashcat:
Airtel-My WIFI-BMF422-...
- 11
0
votes
0
answers
397
views
Cracking UTF encoded hash using hashcat
I'm conducting tests using hashcat and find it very difficult if the hash is encoded.
See the below function which takes the plain text, converts that to the bytes, creates the SHA512 hash and then ...
4
votes
3
answers
14k
views
Crack JWT HS256 with hashcat
Is it possible to crack a JSON Web Token (JWT) using HS-256 algorithm with hashcat on a normal PC?
hashcat password.txt -m 16500 -a3
How can I calculate how much time it will take?
JWT first section ...
- 143
2
votes
1
answer
435
views
Cracking password with static prefix and suffix
I found a pattern password generation that works like that:
sha1("very long static prefix text blablabla "+password+" very long static suffix text");
I tried hashcat combined ...
- 21
1
vote
1
answer
790
views
Using hashcat -s with --increment
I have multiple computers which I am planning to use. They all run a custom-made client that starts hashcat with different args.
I am able to submit the current progress, candidates etc (everything in ...
user277837
7
votes
2
answers
3k
views
Can you use an FPGA with hashcat?
Hashcat lists FPGAs as OpenCL device type in its help.
- [ OpenCL Device Types ] -
# | Device Type
===+=============
1 | CPU
2 | GPU
3 | FPGA, DSP, Co-Processor
Can you really connect and use an ...
- 947
1
vote
0
answers
206
views
Need help cracking a MacOS Catalina password
I have found the hashes for the stored passwords on my mac, I do not have the administrator passwords, I do have the hashes coming from the /var folder. I have tried decrypting it using hashcat but it ...
- 11
0
votes
1
answer
921
views
Hashcat brute force - markov chains
Hashcat uses Markov chains by default when using brute force mode. Do they really speed up the cracking since a randomly generated password normally has the same probability for every combination?
- 947
0
votes
0
answers
4k
views
Hashcat:: Token length exception. No hashes loaded
I'm trying to crack a wallet.dat hash from an old file from 2013. I created a hash with bitcoin2john and it is 112 characters. I can't get it to work.
I'm wondering if there is something wrong with my ...
0
votes
0
answers
14
views
How to pipe a character set on hydra [duplicate]
How to pipe a characterset to Hydra.
Something like this which can be done on hashcat
(crunch 8 8 123456789| hashcat -m 0 ce5cff0195a6b059a32411b6202ab49)
8
votes
1
answer
9k
views
With password cracking, what is the fastest known password cracking rig in hashes per second? [closed]
To properly assess password strength, I have been trying to research what the fastest known password cracking rig is in hashes per second.
HashCat claims that their software is the world's fastest, ...
- 285
0
votes
1
answer
276
views
Using John or hashcat when password stub is leaked by weak crypto
I'm pentesting a system (call it X) which uses an internal secret key. Due to weaknesses in the crypto, I can determine:
The SHA1 hash of the key (stored as a checksum)
With high probability, the ...
- 267
3
votes
1
answer
9k
views
hashcat skipping gpu even if it's recognizing the device and the driver is installed
I'm trying to run hashcat on a MacBook Pro.
Running hashcat -I to check the devices' informations yields:
hashcat (v6.2.5-38-g8b61f60e8) starting in backend information mode
OpenCL Info:
============
...
1
vote
1
answer
887
views
In hashcat, is there a simple way to set the amount of symbols in the password?
For example, I know a password has to have at least 3 symbols, but I don't know where those symbols are. What is the simplest way to specify this when cracking the password with hashcat? The only ...
- 885
1
vote
0
answers
500
views
XMPP authentication bruteforce with hashcat
This question is about how efficient it is to bruteforce SASL authentication in the XMPP protocol.
I read the XMPP SASL authentication steps (stackoverflow link in case the first one breaks), and ...
- 111
2
votes
1
answer
2k
views
Speed up cracking a wpa2.hccapx file in hashcat
I'm trying to do a brute force with Hashcat on windows with a GPU cracking a wpa2.hccapx handshake. Based on my research I know the password is 10 characters, a mix of random lowercase + numbers only
...
- 21
0
votes
0
answers
229
views
What is the difference between 7100, 16700 and 18300 hashcat modes?
Studying how expensive and how long it takes to brute force macOS Catalina and Big Sur passwords (if possible on T2/M1 Macs).
My (likely naive) understanding is that macOS uses PBKDF2-SHA512 to hash ...
- 219
0
votes
0
answers
1k
views
How to benchmark mode with given iterations in hashcat?
I installed hashcat using following:
sudo apt update
sudo apt -y install p7zip-full
curl -O https://hashcat.net/files/hashcat-6.2.3.7z
7z x hashcat-6.2.3.7z
hashcat-6.2.3/hashcat.bin -b
When I run ...
- 219
0
votes
1
answer
582
views
What exactly is this hash that Jack the Ripper and Hashcat use (and also have tools for extracting?) [duplicate]
These tools work based on "hashes", but they seem to not mean that in traditional sense, since they can also extract hashes from a variety of formats like kdbx and zip.
I doubt all these ...
- 171
0
votes
0
answers
16
views
Significant differences in hash cracking speeds? [duplicate]
I'm doing an educational hash research. I generated MD5 hash using online tools and cracked it within a second using Hashcat and certain wordlist (yes, one second). Then I produced a WPA handshake ...
- 684
2
votes
0
answers
19k
views
Can anyone identify the $y$ hash prefix or identify what hash this could be? [closed]
I'm using Kali Linux and trying to crack my own /etc/passwd file with the username "matt". I've unshadowed it however trying to use Hashcat or JohnTheRipper to identify and crack it has ...
- 21
0
votes
0
answers
316
views
How can I add some probable Keywords to hashcat, so I can Brute-Force attack a WPA2 Network faster
I´m trying to brute force attack a WPA2 Network with Hashcat and a wpa2.hccpax file, but when I do it says that it can take 45years to brute force it. So I had the idea that probably the network I´m ...
1
vote
0
answers
2k
views
Hashcat first wordlist then brute force if nothing found
I'm trying to run my hashcat as automated and efficient as possible.
I have a file with NTLM hashes:
607C4CDCDA0EFBF023C4DEA52DF90641
D25ECD13FDDBB542D2E16DA4F9E0333D
AAD063F78DA1183CBD8BD7812FADF9C6
...
- 129
0
votes
1
answer
2k
views
hashcat not allowing increment option
Basically I am trying to bruteforce a MD5 hash in two systems using hashcat. The hash is between 3-8 characters in length. But when I attempt to split the password tries in hashcat, it throws below ...
- 11
1
vote
0
answers
2k
views
How does the WPA2 crack work with Hashcat 22000 format hash lines?
I'm trying to understand the format and functionality of WPA2 hash lines that start with WPA*02* used with -m 22000 on hashcat.
The way I understand it, this format was created as an improvement and ...
- 203
0
votes
1
answer
396
views
How to get Hashcat keyspace for combined princeProcessor plus rule-based attack
I am trying to do something like
pp64 --pw-min=10 words.txt | hashcat -a 0 **--keyspace** -r myRule.txt
but this syntax is incorrect. Is there a way to get the keyspace for this combined attack?
- 3
1
vote
0
answers
1k
views
Dynamic format used in John the Ripper jumbo way slower than MDXFind
I'm currently doing some research on a pretty huge list of hashes (approx. 2 millions) and thus I'd like to improve my cracking speed. The hash format is 12 rounds of SHA512(password + salt), which ...
- 111
1
vote
1
answer
1k
views
In Hashcat, How to generate combinatior attacks consisting of more than two words (in lenght)?
I am trying to make a combinator attack using just one dictionary:
word1
word2
word3
word4
word5
...
And would like to try all 4-words-length permutations separated by commas:
word1,word2,word3,word4
...
- 113
2
votes
1
answer
517
views
Password generation
I'm trying to generate all possible variation of a password.
The base word is like "PleaseSub!" and I need all possible version of it with uppercase, lowercase, etc.. I know there is ...
- 23
-1
votes
1
answer
3k
views
Hashcat with only CPU and not GPU
Can I use hashcat with the only CPU and not a GPU? I found hashcat-legacy but it isn't stable as much as hashcat current.
6
votes
1
answer
7k
views
For bcrypt why is JTR so much faster than hashcat?
To keep it short I've recently been learning about hashing and password hash cracking on TryHackMe.
I was tasked to crack the following hash: $2y$10$0veO/JSFh4389Lluc4Xya.dfy2MF.bZhz0jVMw.V....
- 61
1
vote
1
answer
641
views
How do I use hashcat to recover password from ata drive lock
How would I get the password for encrypted SSD's I bought (legally bought from a business who forgot the password, I plan on wiping them after I unlock them) I am new to using software like hashcat, I ...
1
vote
3
answers
4k
views
how to use hashcat in python? [closed]
Basically, I want to crack hashes programatically using hashcat python without having to install hashcat binaries.
Python seem to have a module called hashcat (https://pypi.org/project/hashcat/) but I ...
- 11
0
votes
2
answers
608
views
How do I make a word list for cracking password? [duplicate]
I already know the password format: 1 Upper Case Letters + 5 digits + bf (bf is the known letters, they must included in the password and at the end)
For example: A12345bf, C12301bf, D10282bf.
I want ...
user242064