Password Attacks
Hashcat is the world's fastest and most advanced password recovery utility, supporting five unique modes of attack for over 300 highly optimized hashing algorithms. It leverages GPU power for incredible speed.
sudo apt install hashcat
hashcat -m <hash_type> -a <attack_mode> <hash_file> [wordlist]
Hashcat is the world's fastest and most advanced password recovery utility. It leverages GPU (Graphics Processing Unit) acceleration to achieve speeds impossible with CPU-only tools, making it the go-to choice for offline hash cracking.
Originally released in 2009, Hashcat supports over 300 hash types including MD5, SHA-1, SHA-256, NTLM, bcrypt, WPA/WPA2, and many more. Its five attack modes — dictionary, combinator, brute-force, hybrid, and rule-based — provide flexibility for any password auditing scenario.
Hashcat is an essential tool in penetration testing, security auditing, and red team engagements. Security professionals use it to verify password policies by cracking hashes extracted from SAM databases, Active Directory, and web applications.
hashcat -m 0 -a 0 hashes.txt rockyou.txtMD5 dictionary attack - Cracking MD5 hashes with wordlisthashcat -m 1000 -a 0 hashes.txt wordlist.txtNTLM hash cracking - Cracking Windows password hasheshashcat -m 0 -a 3 hashes.txt ?a?a?a?a?a?aBrute force attack - When wordlist fails, try all combinationshashcat -m 2500 -a 0 capture.hccapx wordlist.txtWPA/WPA2 cracking - Cracking WiFi handshake captureshashcat --show hashes.txtShow cracked passwords - View previously cracked hasheshashcat -m 0 -a 0 hashes.txt wordlist.txt -r rules/best64.ruleDictionary with rules - More effective wordlist attackhashcat -m 22000 -a 0 capture.hc22000 wordlist.txtModern WPA cracking - Crack PMKID/EAPOL in the 22000 formathashcat -m 1800 -a 0 shadow.txt rockyou.txtLinux shadow - Crack sha512crypt hashes from /etc/shadowhashcat -m 13100 -a 0 kerb.txt wordlist.txtKerberoast - Crack TGS-REP (Kerberos) service ticket hasheshashcat -m 1000 -a 6 hashes.txt wordlist.txt ?d?d?d?dHybrid attack - Append a 4-digit mask to each wordlist wordhashcat -m 0 -a 0 hashes.txt wordlist.txt -O -w 3Optimized/fast - Enable optimized kernels and high workloadhashcat -bBenchmark - Measure GPU cracking speed for every hash modehashcat -m 0 hashes.txt wordlist.txt --potfile-path=custom.potCustom potfile - Store cracked results in a specific potfilehashcat -m 0 -a 0 hashes.txt wordlist.txt --session=job1Named session - Enable resume with --restore for long jobshashcat --restore --session=job1Resume - Continue a previously interrupted named sessionVerify organizational password policies by cracking hashes from SAM databases and Active Directory.
Crack WiFi handshake captures to test wireless network security.
Solve cryptography and password cracking challenges in capture-the-flag competitions.
Recover compromised passwords during forensic investigations after data breaches.
Validate that password complexity requirements are actually effective against modern attacks.
Password Attacks
CPU-based password cracker with automatic hash detection and extensive format support.
Password Attacks
Online brute-force tool for testing login services with cracked credentials.
Password Attacks
Custom wordlist generator for creating targeted dictionaries from target websites.
Password Attacks
Pattern-based wordlist generator for creating custom password candidates.
Password Attacks
Online brute-force tool for testing cracked credentials against live services.
Output shows cracking speed, progress percentage, and cracked passwords in format hash:password. Status shows estimated time remaining.
This tool is designed for authorized security testing, educational purposes, and legitimate network administration only. Unauthorized access to computer systems is illegal.