Questions tagged [hashcat]

Hashcat is a program designed to brute force hashes, and is commonly used to crack passwords.

-1
votes
1answer
47 views

How to use hashcat on windows 7 ? (GPU problem help please) [on hold]

I am trying to do this video (https://www.youtube.com/watch?v=LIgevN3x8WM) But I have problem on my Dell INSPIRON 3520, I cant use hashcat with MD5 encrypted text. I updated my Intel HD graphics 4000 ...
0
votes
1answer
87 views

Estimating Password Cracking Speed Based on GPU?

I was wondering if there was a calculator or formula I could use to find a rough estimation of the time it takes to crack hashes based on GPU. I am trying to assess how much performance I would lose/...
61
votes
1answer
12k views

I found a password with hashcat, but it doesn't work

My assignment required me to find the password for a PowerPoint file (97 - 2003, v. 8.0 - v. 11.0). I used office2john.py to retrieve the hash, and I removed the file name. The hash is: $...
0
votes
1answer
59 views

Can we implement custom algorithms to encode and decode wifi password hashes between Windows 10 and our Router?

Windows 10 has its own way of encrypting hashes, but these can be brute-forced by hashcat. One of our students created 2 of his own password encryption algorithms in python (One for encode, one for ...
0
votes
1answer
74 views

Limiting the number of duplicate character types in crunch

I'm trying to generate a password list of 10 character passwords containing only a combination of 3 - 6 numbers and 3 - 6 uppercase letters. I see option -d which allows a set limit of duplicates of ...
0
votes
1answer
137 views

Iterated salted sha256 hashes hashcat

I have a hash which was generated by concatenating a password to a salt, then repeating hashing 10000 times. The description for salted sha256 in the output of hashcat -h is 1410 | sha256($pass.$...
0
votes
1answer
503 views

Hashcat - separator unmatched running pmkid 16800 crack

I'm working on cracking a pmkid file. I have collected pcap file using bettercap. Then convert using this: hcxpcaptool -z bettercap-wifi-handshakes.pcap.pmkid bettercap-wifi-handshakes.pcap They ...
0
votes
1answer
362 views

Advice to help crack MD5crypt hash

I've been given a homework task to crack a particularly difficult password on a Unix system. I have found users and hashes in the etc/shadow file and cracked all but this one: $1$TyPfW4pp$...
0
votes
1answer
138 views

Benchmark Password Cracking Tools

I want to perform a benchmark for the most popular offline password cracking tools (john the ripper and hashcat)? What metrics or approach should i take about benchmarking in order to determine what ...
-1
votes
1answer
530 views

hashcat - cracking a salted sha256

Given a SHA512 hash, a salt, and username I am trying to crack the hash using hashcat. Every example I've found used a hashfile as input, is there way to provide salt and hash via commandline without ...
1
vote
1answer
73 views

Multicore hacker tools?

Have a school project coming up in multicore programming. I'm interested in/have used hacking tools alot before, and was wondering if there were any good tools out there that could benefit from being ...
1
vote
1answer
110 views

Hashcat Mask Help

I'm wondering on how to run hashcat against wpa2 passwords that are in the following format: common dictionary word . three digits . common dictionary word Password Example: falcon.824.watchman Is ...
0
votes
1answer
452 views

hashcat specify number of characters

I am trying to figure out a macOS hash 10.8+ and I happen to know that it uses A-Z, a-z, 0-9, is 6-8 characters, and almost certainly random. Currently, it spits out an error regarding hash length ...
1
vote
1answer
66 views

Recover SHA1-encoded email addresses

Say you have a list of SHA1 hashes which are all encoded with the same salt. All of these are email addresses and you know at least one combination of hash and email address. Is it possible to use a ...
1
vote
1answer
2k views

Using hashcat in order to crack the JWT signature in WebGoat

I've recently started to practice my penetration testing skills and I got started with WebGoat. I got to the "Authentication Bypass" chapter, to the JWT Token cracking. WebGoat presents this JWT ...
0
votes
1answer
196 views

Using hashcat for collision attack [closed]

Whenever i tried generate √N randomly(possible combinations of password length), i always find few collisons of the hash password no matter the length, if the password was made of entirely random ...
0
votes
1answer
409 views

Brute force MD5 with a prefix and suffix up to n characters/words

I have a couple of things I would like to explore with hashcat. I have a MD5 hashed password, which I know for a fact has a prefix and a suffix. The actual password is located in the middle of the ...
1
vote
1answer
290 views

Hashcat bruteforce define digit range form and to

I know this password is between 90,000,000 and 500,000,000 how can I tell hashcat to bruteforce exactly in that range? I mean starting from 90,000,000 and ending at 500,000,000 I go the password ...
0
votes
0answers
277 views

How to mask attack a sha256 hash with following information using hashcat?

I am hashcat newbie and I want to crack a hash :) The answer is 1-15 (unknown) characters and it may contain 'a-z' 'A-Z' '0-9' and '_' . (A Twitter username) How may I mask attack a hash with above ...
1
vote
1answer
411 views

Hashcat: How to discard words of length less than N after rules have been applied?

Hashcat: How to discard words of length less than N after rules have been applied? I know of the rules <N and >N that discards the word if its length is less than and greater than N, ...
1
vote
3answers
3k views

Hashcat doesn’t write to output file [closed]

I am using hashcat to crack a list of md5 hashes and have used the following command hashcat -m 0 -a 0 -o out.txt --force hashdump.txt ../rockyou.txt which gives the output Session..........: ...
1
vote
1answer
627 views

hashcat specific brute force

Is this scenario possible: I know the first three letters of the password (exact), i know the password is between 10-14 characters, i know the rest of the characters are "b,t,p,1,3,6,7" which can be ...
-1
votes
1answer
154 views

Where can i find a pre-computed 8 caracter uppercase password file/dictionary

To create an all permutations dictionary of an 8 character uppercase only password, I get I can use crunch to make this wordlist and file would roughly be 1.8 - 2Tb in size. Is there anywhere I can ...
9
votes
1answer
1k views

Mitigating the new attack on WPA2 involving PMKID

A new attack was discovered which allows cracking a WPA2 passphrase without needing to capture the 4-way handshake. While this doesn't weaken the password itself, it does mean that an attacker can ...
2
votes
3answers
5k views

Is it possible to crack any SHA1 hashed password

I'm trying to understand how easy it is to crack a SHA1 hashed password. I have a training database giving hundreds of password hashed. I have tried to use some online tools to crack them and I have ...
0
votes
1answer
539 views

How to configure hashcat to only hash fixed length passwords with N digits?

I know of mask and dictionary attacks. Using a mask attack, I specify the charset for each position in the password pattern, e.g., ?1?1?d?1?d?1?1?d, where ?1 := ?l?u?s. But how do I tell hashcat to ...
1
vote
1answer
1k views

How to crack forgotton KeePass password when knowing most of the password

A few days ago I changed my KeePass password and forgot it unfortunately. It isn't that much different from the previous one, but I kept trying and trying and it says it's incorrect I found https://...
0
votes
1answer
693 views

Which hashcat hash mode is closest to that used by BitLocker?

I'm trying to get a hypothetical benchmark for the BitLocker hash mode if Hashcat would support it. Which (-m) mode is closest to BitLocker's latest/default algorithm? From Google searches I learned ...
1
vote
1answer
295 views

Cracking Salted Peoplesoft Hashes

So I felt the saga of my last post was getting too long (linked here: Unknown round length makes hash uncrackable?) so I would create a new one addressing the current problem as it stands. My new ...
-1
votes
1answer
5k views

hashcat - is there a way to set minimum password length?

Let's say I have a couple of hashes that I need to bruteforce as dictionary attack didn't work. Is there a way I can tell hashcat to start from a specific password length so it won't waste resources ...
1
vote
1answer
380 views

Unknown round length makes hash uncrackable?

So I am on an engagement and grabbed some hashes but cracking them has come to no avail. I believe I know the hash type (PBKDF2-HMAC-SHA256) but I am not sure what round size they used. This got me ...
0
votes
2answers
3k views

Cracking passwords via hashcat or rainbow tables. Which is faster?

This is more of a theoretical rather than a practical question. To give a bit of background, the discussion at work has come up with what to set our password complexity to and what the logistics would ...
2
votes
1answer
1k views

How is it that tools like Hashcat, JTR able to bruteforce an NTLMv2 hashes?

With regards to the following question about the feasibility of (brute|dictionary|rainbowtable)-forcing an NTLMv2 hash: How feasible is it for an attacker to brute-force an NTLMv2 response captured ...
4
votes
1answer
1k views

Why won't pdf2john extract the password hash of this encrypted pdf? Getting blank results

New to the community, and to JtR and Hashcat as a whole, but after searching for a few days I couldn't find a solution to this specific problem. I have a password protected PDF file that I'm trying ...
2
votes
1answer
986 views

Recover password that contains known phrase

I want to recover a long password with hashcat. The password contains a phrase and between the words are special character sequences. These sequences are limited (< 4) and unknown. But the set of ...
2
votes
1answer
7k views

Hardware compatibility with Hashcat in Windows 10 (64-bit)

This question is not a security question but about a security tool. Why am I unable to leverage my decent hardware (I think) with hashcat? This is what I see when I run hashcat in Win 10 (64-bit). ...
-1
votes
1answer
236 views

Hash variation - .vc and string format?

Why is a veracrypt hash contained in a '.vc' and not in what appears to be a standard mixed number and letter string format?
3
votes
2answers
296 views

John the ripper - creating specific rules

We have a situation where I am not finding any documentation on it. We are trying to scale across multiple machines/job by breaking up the keyspace by complexity. Its a 7 char completely random ...
2
votes
1answer
2k views

truecrypt volume - Recover 18char known password with hashcat (characters variations)

I have an old truecrypt file that I'd like to decrypt. I know the 18 characters password I was using at the time, I'm sure of it. However I made a "variation" of it : I mapped some characters to l33t ...
1
vote
1answer
2k views

How to use character mask in hashcat?

I do not get hashcat working the way I want. I got this handshake captured file. I can crack it with ?a?a?a?a?a?a?a?a --increment but since I know the password is between 14 and 16 charters that is ...
0
votes
1answer
4k views

Cant crack Responder hashes with John or Hashcat

I ran Responder in a test network and obtained hashes from a Windows machine. The logs for the machine show something like this (some bytes changed for security reasons) and are stored in a file ...
0
votes
2answers
2k views

Does the current hashcat include CUDA?

I've been using the old cudahashcat 2.x until I reinstalled my system. I realized I cann't find any newer release on cudahascat so I assume it is included in hashcat but when I look at their github it ...
4
votes
1answer
6k views

Hash list for practicing password cracking

I am looking for resources like a hash cracking competition, but offline. More like a practice list of specifically crafted "passwords" hashed for the purpose of testing various cracking techniques. ...
2
votes
2answers
627 views

hashcat: clCreateContext(): CL_INVALID_PLATFORM

I'm just trying out hashcat v3.6.0 on an up-to-date Arch Linux laptop. hashcat -I shows me this: OpenCL Info: Platform ID #1 Vendor : Intel(R) Corporation Name : Intel(R) OpenCL Version : ...
3
votes
2answers
3k views

Should I use rainbow tables or bruteforce (NTLM)?

As part of security testing, I will receive around 150 to 200 Active Directory password hashes from Windows Server 2012 R2 (using NTLM?). I have found NTLM rainbow tables (1,5 TB total), that covers ...
0
votes
1answer
304 views

Is it safe to use SHA-512 to identify credit card?

I am thinking if using one-way function like SHA-512 is considered to be safe for application on credit card numbers. The credit card number is 13-19 number with known BIN range (6-8 numbers) and the ...
1
vote
2answers
3k views

Using Hashcat to crack HMAC-SHA256

Hashcat boasts its ability to crack over 200+ hashing algorithms, but there isn't much documentation on much of them. Hashcat --help shows it has support for HMAC cracking, but its not very ...
3
votes
3answers
6k views

Does aircrack-ng use GPU/CUDA capabilities?

As stated, does aircrack-ng when brute forcing a WPA2 handshake capture use GPU/CUDA resources such as a program like Hashcat does?
1
vote
1answer
399 views

Utilizing OCLHashcat to crack WPA/WPA2 passwords obtained via airodump-ng

Wondering if its possible (edit - Found ways to do so, the question now is does it make more sense) to do so? Did a little bit of searching but it would seem that most people utilize Aircrack-NG. ...
1
vote
1answer
2k views

HashCat on VeraCrypt non-system drive

With VeraCrypt, one can fully encrypt a non-system drive. I'm wondering if there's a way to run hashcat against such a drive. (Bonus points for a Windows solution.)