hashcat
3 min read
hashcat is the world's fastest and most advanced password recovery utility, supporting five unique modes of attack for over 300 highly-optimized hashing algorithms. hashcat currently supports CPUs, GPUs, and other hardware accelerators on Linux, Windows, and macOS, and has facilities to help enable distributed password cracking.

Usage
Usage: hashcat [options]... hash|hashfile|hccapxfile [dictionary|mask|directory]...

Options

Options Short / Long | Type | Description | Example ==============================+====+====================================================+===================== -m, --hash-type | Num | Hash-type, references below (otherwise autodetect) | -m 1000 -a, --attack-mode | Num | Attack-mode, see references below | -a 3 -V, --version | | Print version | -h, --help | | Print help. Use -hh to show all supported hash-modes | -h or -hh --quiet | | Suppress output | --hex-charset | | Assume charset is given in hex | --hex-salt | | Assume salt is given in hex | --hex-wordlist | | Assume words in wordlist are given in hex | --force | | Ignore warnings | --deprecated-check-disable | | Enable deprecated plugins | --status | | Enable automatic update of the status screen | --status-json | | Enable JSON format for status output | --status-timer | Num | Sets seconds between status screen updates to X | --status-timer=1 --stdin-timeout-abort | Num | Abort i

Hash Modes
Use -hh to show all supported Hash Modes

Outfile Formats

| Format
=+====== 1 | hash:salt 2 | plain 3 | hex_plain 4 | crack_pos 5 | timestamp absolute 6 | timestamp relative

Attack Modes

| Mode
=+==== 0 | Straight 1 | Combination 3 | Brute-force 6 | Hybrid Wordlist + Mask 7 | Hybrid Mask + Wordlist 9 | Association

Built-in Charsets

? | Charset =+======= l | abcdefghijklmnopqrstuvwxyz a-z u | ABCDEFGHIJKLMNOPQRSTUVWXYZ A-Z d | 0123456789 0-9 h | 0123456789abcdef 0-9a-f H | 0123456789ABCDEF 0-9A-F s | !"#$%&'()*+,-./:;<=>?@[]^_`{|}~ a | ?l?u?d?s b | 0x00 - 0xff

OpenCL Device Types

| Device Type
=+=========== 1 | CPU 2 | GPU 3 | FPGA, DSP, Co-Processor

Workload Profiles

| Performance | Runtime | Power Consumption | Desktop Impact
=+===========+=======+=================+================= 1 | Low | 2 ms | Low | Minimal 2 | Default | 12 ms | Economic | Noticeable 3 | High | 96 ms | High | Unresponsive 4 | Nightmare | 480 ms | Insane | Headless

Basic Examples

Attack- | Hash- | Mode | Type | Example command ================+=====+================================================================== Wordlist | $P$ | hashcat -a 0 -m 400 example400.hash example.dict Wordlist + Rules | MD5 | hashcat -a 0 -m 0 example0.hash example.dict -r rules/best64.rule Brute-Force | MD5 | hashcat -a 3 -m 0 example0.hash ?a?a?a?a?a?a Combinator | MD5 | hashcat -a 1 -m 0 example0.hash example.dict example.dict Association | $1$ | hashcat -a 9 -m 500 example500.hash 1word.dict -r rules/best64.rule