Questions tagged [hashcat]

Hashcat is a program designed to brute force hashes, and is commonly used to crack passwords.

Filter by
Sorted by
Tagged with
0 votes
1 answer
63 views

Crack JWT HA256 with hashcat

Is it possible to crack JWT with HA-256 algorithm with hashcat on a normal PC? hashcat password.txt -m 16500 -a3 How can I calculate how much time it will take? JWT first section for example ...
user avatar
0 votes
0 answers
25 views

Cracking password with static prefix and suffix

I found a pattern password generation that works like that: sha1("very long static prefix text blablabla "+password+" very long static suffix text"); I tried hashcat combined ...
user avatar
0 votes
1 answer
35 views

Using -s with --increment

I have multiple computers which I am planning to use. They all run a custom-made client that starts hashcat with different args. I am able to submit the current progress, candidates etc (everything in ...
user avatar
  • 1
6 votes
2 answers
2k views

Can you use an FPGA with hashcat?

Hashcat list FPGAs as opencl device type in its help. - [ OpenCL Device Types ] - # | Device Type ===+============= 1 | CPU 2 | GPU 3 | FPGA, DSP, Co-Processor So can you really somehow connect and ...
user avatar
1 vote
0 answers
77 views

Need help cracking a MacOS Catalina password

I have found the hashes for the stored passwords on my mac, I do not have the administrator passwords, I do have the hashes coming from the /var folder. I have tried decrypting it using hashcat but it ...
user avatar
0 votes
0 answers
48 views

Cracking HS-256 signed JWTs with large payloads

I'm testing a site that authenticates using an HS-256 signed JWT. However the json payload inside the JWT is about 2500 characters. This has become an impediment to trying to crack the signing key. My ...
user avatar
  • 131
0 votes
1 answer
82 views

Hashcat brute force - markov chains

Hashcat uses Markov chains by default when using brute force mode. Do they really speed up the cracking since a randomly generated password normally has the same probability for every combination?
user avatar
0 votes
0 answers
540 views

Hashcat:: Token length exception. No hashes loaded

I'm trying to crack a wallet.dat hash from an old file from 2013. I created a hash with bitcoin2john and it is 112 characters. I can't get it to work. I'm wondering if there is something wrong with my ...
user avatar
0 votes
0 answers
14 views

How to pipe a character set on hydra [duplicate]

How to pipe a characterset to Hydra. Something like this which can be done on hashcat (crunch 8 8 123456789| hashcat -m 0 ce5cff0195a6b059a32411b6202ab49)
user avatar
7 votes
1 answer
2k views

With password cracking, what is the fastest known password cracking rig in hashes per second? [closed]

To properly assess password strength, I have been trying to research what the fastest known password cracking rig is in hashes per second. HashCat claims that their software is the world's fastest, ...
user avatar
0 votes
1 answer
112 views

Using John or hashcat when password stub is leaked by weak crypto

I'm pentesting a system (call it X) which uses an internal secret key. Due to weaknesses in the crypto, I can determine: The SHA1 hash of the key (stored as a checksum) With high probability, the ...
user avatar
1 vote
1 answer
2k views

hashcat skipping gpu even if it's recognizing the device and the driver is installed

I'm trying to run hashcat on a MacBook Pro. Running hashcat -I to check the devices' informations yields: hashcat (v6.2.5-38-g8b61f60e8) starting in backend information mode OpenCL Info: ============ ...
user avatar
1 vote
1 answer
82 views

In hashcat, is there a simple way to set the amount of symbols in the password?

For example, I know a password has to have at least 3 symbols, but I don't know where those symbols are. What is the simplest way to specify this when cracking the password with hashcat? The only ...
user avatar
  • 865
0 votes
0 answers
148 views

XMPP authentication bruteforce with hashcat

This question is about how efficient it is to bruteforce SASL authentication in the XMPP protocol. I read the XMPP SASL authentication steps (stackoverflow link in case the first one breaks), and ...
user avatar
0 votes
0 answers
438 views

Speed up cracking a wpa2.hccapx file in hashcat

I'm trying to do a brute force with Hashcat on windows with a GPU cracking a wpa2.hccapx handshake. Based on my research I know the password is 10 characters, a mix of random lowercase + numbers only ...
user avatar
  • 1
0 votes
0 answers
98 views

What is the difference between 7100, 16700 and 18300 hashcat modes?

Studying how expensive and how long it takes to brute force macOS Catalina and Big Sur passwords (if possible on T2/M1 Macs). My (likely naive) understanding is that macOS uses PBKDF2-SHA512 to hash ...
user avatar
0 votes
0 answers
332 views

How to benchmark mode with given iterations in hashcat?

I installed hashcat using following: sudo apt update sudo apt -y install p7zip-full curl -O https://hashcat.net/files/hashcat-6.2.3.7z 7z x hashcat-6.2.3.7z hashcat-6.2.3/hashcat.bin -b When I run ...
user avatar
0 votes
0 answers
207 views

airodump gets handshake but aircrack does not find it

I am trying to do the Penetration Testing on VMWare Kali Linux in windows I put the command to capture the handshake trace, and airdroump show I get the handshake sudo airodump-ng -w fuck -c 2 --bssid ...
user avatar
0 votes
1 answer
351 views

What exactly is this hash that Jack the Ripper and Hashcat use (and also have tools for extracting?) [duplicate]

These tools work based on "hashes", but they seem to not mean that in traditional sense, since they can also extract hashes from a variety of formats like kdbx and zip. I doubt all these ...
user avatar
  • 153
0 votes
0 answers
15 views

Significant differences in hash cracking speeds? [duplicate]

I'm doing an educational hash research. I generated MD5 hash using online tools and cracked it within a second using Hashcat and certain wordlist (yes, one second). Then I produced a WPA handshake ...
user avatar
0 votes
0 answers
315 views

Hashcat problem Exhausted

I started testing some things on my own router. I managed to capture one valid handshake on Kali Linux with the appropriate commands (airmon-ng,airodumb etc.). I created a wordlist text file with my ...
user avatar
2 votes
0 answers
7k views

Can anyone identify the $y$ hash prefix or identify what hash this could be? [closed]

I'm using Kali Linux and trying to crack my own /etc/passwd file with the username "matt". I've unshadowed it however trying to use Hashcat or JohnTheRipper to identify and crack it has ...
user avatar
  • 21
0 votes
0 answers
169 views

How can I add some probable Keywords to hashcat, so I can Brute-Force attack a WPA2 Network faster

I´m trying to brute force attack a WPA2 Network with Hashcat and a wpa2.hccpax file, but when I do it says that it can take 45years to brute force it. So I had the idea that probably the network I´m ...
user avatar
2 votes
0 answers
746 views

Hashcat first wordlist then brute force if nothing found

I'm trying to run my hashcat as automated and efficient as possible. I have a file with NTLM hashes: 607C4CDCDA0EFBF023C4DEA52DF90641 D25ECD13FDDBB542D2E16DA4F9E0333D AAD063F78DA1183CBD8BD7812FADF9C6 ...
user avatar
  • 131
0 votes
1 answer
474 views

hashcat not allowing increment option

Basically I am trying to bruteforce a MD5 hash in two systems using hashcat. The hash is between 3-8 characters in length. But when I attempt to split the password tries in hashcat, it throws below ...
user avatar
  • 11
0 votes
0 answers
1k views

How does the WPA2 crack work with Hashcat 22000 format hash lines?

I'm trying to understand the format and functionality of WPA2 hash lines that start with WPA*02* used with -m 22000 on hashcat. The way I understand it, this format was created as an improvement and ...
user avatar
  • 183
0 votes
1 answer
176 views

How to get Hashcat keyspace for combined princeProcessor plus rule-based attack

I am trying to do something like pp64 --pw-min=10 words.txt | hashcat -a 0 **--keyspace** -r myRule.txt but this syntax is incorrect. Is there a way to get the keyspace for this combined attack?
user avatar
  • 3
1 vote
0 answers
560 views

Dynamic format used in John the Ripper jumbo way slower than MDXFind

I'm currently doing some research on a pretty huge list of hashes (approx. 2 millions) and thus I'd like to improve my cracking speed. The hash format is 12 rounds of SHA512(password + salt), which ...
user avatar
  • 111
1 vote
1 answer
346 views

In Hashcat, How to generate combinatior attacks consisting of more than two words (in lenght)?

I am trying to make a combinator attack using just one dictionary: word1 word2 word3 word4 word5 ... And would like to try all 4-words-length permutations separated by commas: word1,word2,word3,word4 ...
user avatar
  • 113
2 votes
1 answer
165 views

Password generation

I'm trying to generate all possible variation of a password. The base word is like "PleaseSub!" and I need all possible version of it with uppercase, lowercase, etc.. I know there is ...
user avatar
  • 23
-1 votes
1 answer
928 views

Hashcat with only CPU and not GPU

Can I use hashcat with the only CPU and not a GPU? I found hashcat-legacy but it isn't stable as much as hashcat current.
user avatar
6 votes
1 answer
2k views

For bcrypt why is JTR so much faster than hashcat?

To keep it short I've recently been learning about hashing and password hash cracking on TryHackMe. I was tasked to crack the following hash: $2y$10$0veO/JSFh4389Lluc4Xya.dfy2MF.bZhz0jVMw.V....
user avatar
1 vote
1 answer
314 views

How do I use hashcat to recover password from ata drive lock

How would I get the password for encrypted SSD's I bought (legally bought from a business who forgot the password, I plan on wiping them after I unlock them) I am new to using software like hashcat, I ...
user avatar
0 votes
2 answers
2k views

how to use hashcat in python?

Basically, I want to crack hashes programatically using hashcat python without having to install hashcat binaries. Python seem to have a module called hashcat (https://pypi.org/project/hashcat/) but I ...
user avatar
0 votes
2 answers
307 views

How do I make a word list for cracking password? [duplicate]

I already know the password format: 1 Upper Case Letters + 5 digits + bf (bf is the known letters, they must included in the password and at the end) For example: A12345bf, C12301bf, D10282bf. I want ...
user avatar
2 votes
0 answers
2k views

Recovered a 7z password with hashcat, but it's not the right one

I am trying to recover a 7z file, but have forgotten the password. It's completely AES-256 encrypted (i.e. not even the filenames are available). Steps: Generated hash file with 7z2hashcat.pl Ran a ...
user avatar
1 vote
1 answer
604 views

How to apply custom filters for John The Ripper when cracking RAR3 archive password?

My problem is that I'm trying to crack RAR file with is encrypted with RAR3 encryption. Decided to try with John The Ripper. Here are clues I have from my friend. Max password length is 8 Only ...
user avatar
3 votes
2 answers
21k views

hashcat: No hashes loaded

I've been trying Kioptrix: Level 1.1 (#2) and managed to get root access. https://www.vulnhub.com/entry/kioptrix-level-11-2,23/ wolf@linux:~$ nc -vklp 8080 listening on [any] 8080 ... 10.10.10.10: ...
user avatar
  • 347
0 votes
1 answer
233 views

John the Ripper / Hashcat rule, reject candidate if char at position X is the same as character at position Y

I'm using John to generate some word lists and I'm trying to figure out the most optimized way to do the next step. What I want to do is add ever possible 3 digit number to a set where the first digit ...
user avatar
  • 214
0 votes
3 answers
4k views

If my password is not on rockyou.txt does it mean that is a good password?

I have been wondering if all my online and wifi passwords are complex enough. So to test this I was checking if the password was already present on the rockyou.txt wordlist. If the password is not ...
user avatar
  • 265
0 votes
1 answer
1k views

Using DD to get the hash of a non-system partition encrypted by VeraCrypt

I am trying to use DD for Windows to obtain the hash of a non-system partition that was encrypted via Veracrypt, but have run into a bit of a problem. The command I used to get the hash of the ...
user avatar
0 votes
0 answers
206 views

Bruteforce different encodings

I have a hash $office$*2013*100000*256*16*664f9e0787392c2b1632d3947aaadee4*27dc7d029f76244a407acf9b5afa3740*ebbc055ae08124f6a6be81ef812da4fece16b2ad86eede3916d9cda15f71833f password: лl My wordlist:...
user avatar
  • 1
0 votes
2 answers
583 views

MD5 PPPoE chap crack

My apartment complex uses PPPoE CHAP authentication for internet (Mikrotik router), I want to switch their provided router with my own, however they aren't willing to give me my password. I have ...
user avatar
  • 3
0 votes
1 answer
1k views

Can't solve format for Salted SHA1 hashes with Hashcat?

I am attempting to understand the format for this Salted SHA1 hash for an assignment. The line of text I was given was: nameExample@email.com,nameExample,nameExample@email.com,nameExample,,,...
user avatar
0 votes
1 answer
179 views

Hashcat syntax correction

I've been cracking a box and I came across a password list and another file with the pass configuration. $hash= md5($salt . pass . salt) I have both salts and the password hash. I tried with this ...
user avatar
  • 3
1 vote
1 answer
10k views

Hashcat mask attack getting error "seperator unmatched"

I'm trying to crack the password Ul1234 using hashcat. I created a user with that password in kali and copied the hash in the shadow folder: nils:$6$3q88Up7LX1RFIlRU$...
user avatar
0 votes
0 answers
3k views

Unable to start hashcat in mode 13600 WinZip : Separator Unmatched

I have a zip file containing a JPEG image of size 3.5 MB, encrypted with AES-256. I used WinZip for the creation of the zip file. In order to create the hash of the zip file, I used John The Ripper's ...
user avatar
  • 101
0 votes
2 answers
151 views

Improving security by altering size of hash strings [duplicate]

So I was thinking, if people get access somehow to your list of hashes, it's easy for them to figure out what alghoritm you used if they have 32, 40, 60 characters etc But what if you slice those ...
user avatar
  • 527
2 votes
0 answers
28 views

How can I crack WPA2 hash with some limitations? [duplicate]

I want to crack an 8 character password, but I know this password doesn't contain more than 4 symbols, 4 uppercase letters, 4 lowercase letters and 4 numbers, and it contains at least 2 symbols, 2 ...
user avatar
  • 21
5 votes
3 answers
5k views

How can I find a SHA-256 hash with a given suffix using hashcat?

Recently we competed in the X-MAS 2019 CTF and many of the challenges included a proof of work (PoW) check to avoid Denial of Service (DoS) attacks against their servers. The most common was we were ...
user avatar