Skip to main content

hashcat

Really good at cracking passwords.

Super basic crack job​

hashcat -m MODE file-with-hashes.txt big-list-of-passwords.txt

Benchmark your hashcat rig​

hashcat -b

Specify device for crack job​

If you've got multiple graphics cards you should specify which to use for the task with -d:

hashcat -m MODE file-with-hashes.txt big-list-of-passwords.txt -d 2

Adjust hashcat's "workload"​

That's the -w flag and basically:

  • -w 1 consumes the least amount of resources
  • -w 2 is default - balance between decent performance without nuking system responsivness
  • -w 3 set profile to high for max performance

Crack a hash against a word list and include a rules file​

hashcat -m MODE file-with-hashes.txt big-list-of-passwords.txt -r rules\somerule.rule

Crack an IPMI hash​

First see our Metasploit guidance for grabbing the hash, then:

hashcat -m 7300 hash.txt wordlist.txt