Hashcat is a program designed to brute force hashes, and is commonly used to crack passwords.
Questions tagged [hashcat]
136 questions
0
votes
2 answers
How do I make a word list for cracking password?
I already know the password format: 1 Upper Case Letters + 5 digits + bf (bf is the known letters, they must included in the password and at the end)
For example: A12345bf, C12301bf, D10282bf.
I want to hack a website by using Hatch. (brute…
user242064
0
votes
1 answer
John the Ripper / Hashcat rule, reject candidate if char at position X is the same as character at position Y
I'm using John to generate some word lists and I'm trying to figure out the most optimized way to do the next step. What I want to do is add ever possible 3 digit number to a set where the first digit of the number is not the same as the first digit…
![](../../users/profiles/28208.webp)
Danielle
- 214
- 1
- 5
0
votes
3 answers
If my password is not on rockyou.txt does it mean that is a good password?
I have been wondering if all my online and wifi passwords are complex enough.
So to test this I was checking if the password was already present on the rockyou.txt wordlist.
If the password is not present in the wordlist then can I conclude that…
![](../../users/profiles/136919.webp)
ng.newbie
- 265
- 2
- 6
0
votes
1 answer
Using DD to get the hash of a non-system partition encrypted by VeraCrypt
I am trying to use DD for Windows to obtain the hash of a non-system partition that was encrypted via Veracrypt, but have run into a bit of a problem.
The command I used to get the hash of the encrypted partition looks like this
dd…
![](../../users/profiles/230856.webp)
Stumpped
- 1
- 1
0
votes
0 answers
Bruteforce different encodings
I have a hash
$office$*2013*100000*256*16*664f9e0787392c2b1632d3947aaadee4*27dc7d029f76244a407acf9b5afa3740*ebbc055ae08124f6a6be81ef812da4fece16b2ad86eede3916d9cda15f71833f
password: лl
My wordlist:
6ceb
eb6c
6c6c
лл
лl
ll
Start hashcat
hashcat…
![](../../users/profiles/229540.webp)
test
- 1
- 1
0
votes
2 answers
MD5 PPPoE chap crack
My apartment complex uses PPPoE CHAP authentication for internet (Mikrotik router), I want to switch their provided router with my own, however they aren't willing to give me my password.
I have fooled the router by connecting it's WAN port to my…
![](../../users/profiles/228405.webp)
tW4r
- 3
- 1
0
votes
1 answer
Can't solve format for Salted SHA1 hashes with Hashcat?
I am attempting to understand the format for this Salted SHA1 hash for an assignment. The line of text I was given…
![](../../users/profiles/228248.webp)
WillForSchool
- 1
- 2
0
votes
1 answer
Hashcat syntax correction
I've been cracking a box and I came across a password list and another file with the pass configuration. $hash= md5($salt . pass . salt) I have both salts and the password hash.
I tried with this syntax : hashcat -m 3800 -a 0 '/path/to/pass/list'…
![](../../users/profiles/227205.webp)
xgajjk
- 3
- 1
0
votes
0 answers
Unable to start hashcat in mode 13600 WinZip : Separator Unmatched
I have a zip file containing a JPEG image of size 3.5 MB, encrypted with AES-256. I used WinZip for the creation of the zip file. In order to create the hash of the zip file, I used John The Ripper's zip2john which created 2 hashes, where the hashes…
![](../../users/profiles/176612.webp)
sam
- 101
- 1
- 4
0
votes
2 answers
Improving security by altering size of hash strings
So I was thinking, if people get access somehow to your list of hashes, it's easy for them to figure out what alghoritm you used if they have 32, 40, 60 characters etc
But what if you slice those strings a bit, like you use SHA-1 which is 40 and…
![](../../users/profiles/187422.webp)
Alex
- 527
- 4
- 7
0
votes
1 answer
Hashcat custom mask - brute force 12 length passwords with 1 capital letter, 1 number and 10 lowercase letters
I need to use brute force to crack the password. I know about the password that it has exactly 1 capital letter (A-Z), exacly 1 number (1-9) and exacly 10 lowercase letters (from a to z). I have Python script that generates this type of passwords,…
![](../../users/profiles/214838.webp)
aster
- 1
0
votes
1 answer
XVWA PBKDF2 with sha256 and 1000 iteration
In XVWA (Xtreme Vulnerable Web Application) I presented with an PBKDF2 with sha256 and 1000 iteration as such:
![](../../users/profiles/98652.webp)
Lucian Nitescu
- 1,802
- 1
- 13
- 27
0
votes
1 answer
Can't figure out input format for Hashcat salts with odd characters in salt
I have passwords that are stored by:
Generating a random, 36-character "string" in the range of CHAR(1) to CHAR(256)
Appending this to the entered password
Retrieving the SHA512 hash of the result
So, 'password' could have the string…
![](../../users/profiles/89545.webp)
TZHX
- 111
- 6
0
votes
1 answer
Can we implement custom algorithms to encode and decode wifi password hashes between Windows 10 and our Router?
Windows 10 has its own way of encrypting hashes, but these can be brute-forced by hashcat. One of our students created 2 of his own password encryption algorithms in python (One for encode, one for decode). Is there a way we can implement his…
![](../../users/profiles/209029.webp)
Nikhil Bansal
- 1
- 1
0
votes
1 answer
Limiting the number of duplicate character types in crunch
I'm trying to generate a password list of 10 character passwords containing only a combination of 3 - 6 numbers and 3 - 6 uppercase letters.
I see option -d which allows a set limit of duplicates of individual characters but I'm looking for an…
![](../../users/profiles/207370.webp)
Edward
- 3
- 2