Hashcat is a program designed to brute force hashes, and is commonly used to crack passwords.
Questions tagged [hashcat]
136 questions
1
vote
2 answers
Cracking passwords via hashcat or rainbow tables. Which is faster?
This is more of a theoretical rather than a practical question. To give a bit of background, the discussion at work has come up with what to set our password complexity to and what the logistics would be if a DB was stolen (for this situation lets…
![](../../users/profiles/145432.webp)
user2762594
- 17
- 1
- 1
- 4
1
vote
1 answer
How to use character mask in hashcat?
I do not get hashcat working the way I want.
I got this handshake captured file. I can crack it with ?a?a?a?a?a?a?a?a --increment but since I know the password is between 14 and 16 charters that is unnecessary work. Therefore I am trying to use…
![](../../users/profiles/165839.webp)
J. Doe
- 113
- 1
- 4
1
vote
1 answer
Cant crack Responder hashes with John or Hashcat
I ran Responder in a test network and obtained hashes from a Windows machine. The logs for the machine show something like this (some bytes changed for security reasons) and are stored in a file called…
![](../../users/profiles/140993.webp)
Lucas Cioffi
- 177
- 1
- 6
1
vote
3 answers
Does the current hashcat include CUDA?
I've been using the old cudahashcat 2.x until I reinstalled my system. I realized I cann't find any newer release on cudahascat so I assume it is included in hashcat but when I look at their github it seems to be only the OpenCL is included. So my…
![](../../users/profiles/164373.webp)
Aero Wang
- 141
- 1
- 1
- 6
1
vote
1 answer
Utilizing OCLHashcat to crack WPA/WPA2 passwords obtained via airodump-ng
Wondering if its possible (edit - Found ways to do so, the question now is does it make more sense) to do so? Did a little bit of searching but it would seem that most people utilize Aircrack-NG. Hashcat would allow you to utilize your GPU, and…
![](../../users/profiles/149476.webp)
northdakota2170
- 13
- 2
1
vote
1 answer
HashCat on VeraCrypt non-system drive
With VeraCrypt, one can fully encrypt a non-system drive. I'm wondering if there's a way to run hashcat against such a drive. (Bonus points for a Windows solution.)
![](../../users/profiles/148275.webp)
Carl Patenaude Poulin
- 113
- 1
- 5
1
vote
1 answer
Multiple hash algorithms
Using Hashcat, is it possible to crack hashes using nested, or combinations, of algorithms?
As a simple example of what I am looking to do, consider sha1(md5('password')) or md5(sha1('salt') + md5('password')).
![](../../users/profiles/120560.webp)
JRLambert
- 113
- 4
1
vote
2 answers
If I only know part of a password and part of the hash is it possible to get the full password?
I'm trying to learn more about hashes and cryptography and doing my own pentesting, but I seem to be stuck on this problem.
The hash function being used is SHA1.
If I'm trying to determine a password and I know that the last X characters of the…
![](../../users/profiles/63918.webp)
ark
- 111
- 4
1
vote
2 answers
Is it possible to find the salt?
I have this PHP code with me :
$auth = md5($username.$password.$salt);
I have a dummy value :
$username = user
$password = password
And I also have the resulting MD5 Hash : b4fbb742bc2a24bc033dbfb4f4582e08
I need to find the salt which has been…
![](../../users/profiles/26619.webp)
Sankalp Singha
- 301
- 1
- 3
- 6
0
votes
1 answer
Hashcat passwordcracking separator unmatched
I have the task to crack a bunch of passwords like:
$1$V5l3qvml$Q.fDn30gGhjcEIZH8utah/
$1$DcuX.dRK$bR4utyGQ4ET4sobpMMtfo0
$1$WbXWIqFu$Qu1fT/MmTIvSUz4xw4mlI0
$1$8Y7TfkZ5$LnuF99mgFbV1wvQ61dMZB1
I was only told that these were Linux-like encrypted (I…
![](../../users/profiles/69593.webp)
Eszter
- 103
- 1
- 1
- 5
0
votes
1 answer
John the Ripper method takes so much time to crack the hashcat file
Does John the Ripper method take so much time to crack the password? It's been 3 hours since the process started. No output yet and my PC specs are lower than you think.
Hashcat:
Airtel-My WIFI-BMF422-58E4:$WPAPSK$Airtel-My…
0
votes
0 answers
Cracking UTF encoded hash using hashcat
I'm conducting tests using hashcat and find it very difficult if the hash is encoded.
See the below function which takes the plain text, converts that to the bytes, creates the SHA512 hash and then encode to string.
static string…
![](../../users/profiles/280230.webp)
Brian Smith
- 1
- 1
0
votes
3 answers
Crack JWT HS256 with hashcat
Is it possible to crack a JSON Web Token (JWT) using HS-256 algorithm with hashcat on a normal PC?
hashcat password.txt -m 16500 -a3
How can I calculate how much time it will take?
JWT first section for example eyJhbGciOiJIUzI1NiIsInR5cCI6IkpXVCJ9.
![](../../users/profiles/277437.webp)
Kokomelom
- 3
- 2
0
votes
0 answers
Cracking password with static prefix and suffix
I found a pattern password generation that works like that:
sha1("very long static prefix text blablabla "+password+" very long static suffix text");
I tried hashcat combined attack or rules, but the size rule limit and only two wordlist combined…
![](../../users/profiles/277986.webp)
Samuel Pires
- 1
- 1
0
votes
0 answers
Cracking HS-256 signed JWTs with large payloads
I'm testing a site that authenticates using an HS-256 signed JWT. However the json payload inside the JWT is about 2500 characters. This has become an impediment to trying to crack the signing key. My question is what efficient tooling exists for…
![](../../users/profiles/193350.webp)
Elliot
- 131
- 3