HashCat

Cracking passwords with hashcat

Identifying the hash

Use source code to identify what type of cryptography an application uses.

Take note of seperators and features in the hash

Compare the hash you want to crack with the example hashes on the hashcat wiki:

example_hashes [hashcat wiki]hashcat.net

Basic Usage

Running hashcat with a single hash.

-a - Cracking mode

-m - Hash mode number

hashcat -a $CRACKMODE -m $HASHMODE $HASH $WORDLIST

example using mode 3200 bcrypt $2*$, Blowfish (Unix)

hashcat -a 0 -m 3200 '$2a$08$zyiNvVoP/UuSMgO2rKDtLuox.vYj.3hZPVYq3i4oG3/CtgET7CjjS' /usr/share/wordlists/rockyou.txt

Hash list with usernames

Using Lists