oclhashcat
advanced password recovery


Digg Del.icio.us Reddit Facebook Stumble Upon Twitter

Download latest version

Name Version md5sum Date
oclHashcat for AMD v1.31 81f00b1f345a27e0edffae693707943c 2014.10.02
oclHashcat for NVidia v1.31 b07045784ec7f4913293ea2cc6eac5ca 2014.10.02

GPU Driver requirements:

  • NV users require ForceWare 331.67 or later
  • AMD users require Catalyst 14.9 or later

Features

  • Worlds fastest password cracker
  • Worlds first and only GPGPU based rule engine
  • Free
  • Multi-GPU (up to 128 gpus)
  • Multi-Hash (up to 100 million hashes)
  • Multi-OS (Linux & Windows native binaries)
  • Multi-Platform (OpenCL & CUDA support)
  • Multi-Algo (see below)
  • Low resource utilization, you can still watch movies or play games while cracking
  • Focuses highly iterated modern hashes
  • Focuses dictionary based attacks
  • Supports distributed cracking
  • Supports pause / resume while cracking
  • Supports sessions
  • Supports restore
  • Supports reading words from file
  • Supports reading words from stdin
  • Supports hex-salt
  • Supports hex-charset
  • Built-in benchmarking system
  • Integrated thermal watchdog
  • 100+ Algorithms implemented with performance in mind
  • ... and much more

oclHashcat Screenshot

oclHashcat screenshot

Attack-Modes

  • Straight *
  • Combination
  • Brute-force
  • Hybrid dict + mask
  • Hybrid mask + dict

* accept Rules

Algorithms

  • MD4
  • MD5
  • SHA1
  • SHA-256
  • SHA-512
  • SHA-3 (Keccak)
  • RipeMD160
  • Whirlpool
  • GOST R 34.11-94
  • HMAC-MD5 (key = $pass)
  • HMAC-MD5 (key = $salt)
  • HMAC-SHA1 (key = $pass)
  • HMAC-SHA1 (key = $salt)
  • HMAC-SHA256 (key = $pass)
  • HMAC-SHA256 (key = $salt)
  • HMAC-SHA512 (key = $pass)
  • HMAC-SHA512 (key = $salt)
  • LM
  • NTLM
  • DCC
  • DCC2
  • NetNTLMv1
  • NetNTLMv1 + ESS
  • NetNTLMv2
  • Kerberos 5 AS-REQ Pre-Auth etype 23
  • AIX {smd5}
  • AIX {ssha1}
  • AIX {ssha256}
  • AIX {ssha512}
  • FreeBSD MD5
  • OpenBSD Blowfish
  • descrypt
  • md5crypt
  • bcrypt
  • scrypt
  • sha256crypt
  • sha512crypt
  • DES(Unix)
  • MD5(Unix)
  • SHA256(Unix)
  • SHA512(Unix)
  • OSX v10.4
  • OSX v10.5
  • OSX v10.6
  • OSX v10.7
  • OSX v10.8
  • OSX v10.9
  • Cisco-ASA
  • Cisco-IOS
  • Cisco $8$
  • Cisco $9$
  • Cisco-PIX
  • GRUB 2
  • Juniper Netscreen/SSG (ScreenOS)
  • Juniper IVE
  • RACF
  • Android PIN
  • Android FDE <= 4.3
  • MSSQL
  • MySQL
  • Oracle
  • PostgreSQL
  • Sybase
  • DNSSEC (NSEC3)
  • IKE-PSK
  • IPMI2 RAKP
  • iSCSI CHAP
  • WPA
  • WPA2
  • 1Password, cloudkeychain
  • 1Password, agilekeychain
  • Lastpass
  • Password Safe v2
  • Password Safe v3
  • TrueCrypt 5.0+ PBKDF2 HMAC-RipeMD160 + AES
  • TrueCrypt 5.0+ PBKDF2 HMAC-SHA512 + AES
  • TrueCrypt 5.0+ PBKDF2 HMAC-Whirlpool + AES
  • TrueCrypt 5.0+ PBKDF2 HMAC-RipeMD160 + AES + boot-mode
  • TrueCrypt 5.0+ PBKDF2 HMAC-RipeMD160 + AES + hidden-volume
  • TrueCrypt 5.0+ PBKDF2 HMAC-SHA512 + AES + hidden-volume
  • TrueCrypt 5.0+ PBKDF2 HMAC-Whirlpool + AES + hidden-volume
  • TrueCrypt 5.0+ PBKDF2 HMAC-RipeMD160 + AES + hidden-volume + boot-mode
  • MS Office <= 2003 MD5 + RC4, oldoffice$0, oldoffice$1 + collider mode
  • MS Office <= 2003 SHA1 + RC4, oldoffice$3, oldoffice$4 + collider mode
  • MS Office 2007
  • MS Office 2010
  • MS Office 2013
  • SAP CODVN B (BCODE)
  • SAP CODVN F/G (PASSCODE)
  • Lotus Notes/Domino 5
  • Lotus Notes/Domino 6
  • Lotus Notes/Domino 8
  • PeopleSoft
  • Citrix Netscaler
  • Radmin2
  • Netscape LDAP SHA/SSHA
  • Apache MD5-APR
  • Skype
  • hMailServer
  • EPiServer
  • Drupal
  • IPB
  • Joomla
  • MyBB
  • osCommerce
  • Redmine
  • SMF
  • vBulletin
  • PHPS
  • Mediawiki B type
  • Woltlab Burning Board
  • xt:Commerce
  • Wordpress
  • phpBB3
  • SipHash
  • Django (SHA-1)
  • Django (PBKDF2-SHA256)
  • Half MD5 (left, mid, right)
  • Double MD5
  • Double SHA1
  • md5($pass.$salt)
  • md5($salt.$pass)
  • md5(unicode($pass).$salt)
  • md5($salt.unicode($pass))
  • md5(sha1($pass))
  • md5($salt.md5($pass))
  • md5($salt.$pass.$salt)
  • md5(strtoupper(md5($pass)))
  • sha1($pass.$salt)
  • sha1($salt.$pass)
  • sha1(unicode($pass).$salt)
  • sha1($salt.unicode($pass))
  • sha1(md5($pass))
  • sha256($pass.$salt)
  • sha256($salt.$pass)
  • sha256(unicode($pass).$salt)
  • sha256($salt.unicode($pass))
  • sha512($pass.$salt)
  • sha512($salt.$pass)
  • sha512(unicode($pass).$salt)
  • sha512($salt.unicode($pass))

Tested OS

  • All Windows and Linux versions should work on both 32 and 64 bit

Tested GPU

  • All CUDA and Stream enabled cards should work

Performance

  • PC1: Windows 7, 64 bit
  • Catalyst 14.4
  • 1x AMD hd7970
  • stock core clock
  • oclHashcat v1.21
  • PC2: Windows 7, 32 bit
  • ForceWare 331.67
  • 1x NVidia gtx580
  • stock core clock
  • oclHashcat v1.21
  • PC3: Ubuntu 14.04, 64 bit
  • Catalyst 14.4-rev2
  • 1x AMD hd6990
  • stock core clock
  • oclHashcat v1.21
  • PC4: Ubuntu 14.04, 64 bit
  • ForceWare 331.67
  • 1x NVidia gtx750Ti
  • stock core clock
  • oclHashcat v1.21
  • PC5: Ubuntu 14.04, 64 bit
  • Catalyst 14.4-rev2
  • 8x AMD R9 290X
  • stock core clock
  • oclHashcat v1.21

Hash Type PC1 PC2 PC3 PC4 PC5
MD4 15445M c/s 4245M c/s 19868M c/s 5718M c/s 183232M c/s
MD5 7893M c/s 2802M c/s 10436M c/s 3178M c/s 93800M c/s
SHA1 2495M c/s 879M c/s 3833M c/s 1103M c/s 29528M c/s
SHA256 1036M c/s 337M c/s 1413M c/s 406M c/s 12328M c/s
SHA512 179M c/s 103M c/s 383M c/s 90M c/s 1952M c/s
SHA-3(Keccak) 157M c/s 91M c/s 277M c/s 111M c/s 2005M c/s
RipeMD160 1690M c/s 615M c/s 2255M c/s 677M c/s 20008M c/s
Whirlpool 41281k c/s 94752k c/s 91128k c/s 54138k c/s 507744k c/s
LM 1271M c/s 412M c/s 967M c/s 398M c/s 15176M c/s
NTLM 14789M c/s 4059M c/s 19011M c/s 5708M c/s 174152M c/s
NetNTLMv1 7912M c/s 1844M c/s 8605M c/s 1355M c/s 91984M c/s
NetNTLMv2 545M c/s 205M c/s 491M c/s 135M c/s 6456M c/s
WPA/WPA2 130k c/s 47k c/s 181k c/s 54k c/s 1454k c/s

For example, PC5 can do 174152M c/s against NTLM, that is 174152000000 tries per second.

Help

A detailed description of all commandline parameters is available by using --help. Next to that, the rar-package contains extensive documentation. Look for examples.txt. If you encounter a Bug, report it in the Forums where Fixes and Beta versions are announced as well.

Download older version(s)

This is a list of older oclHashcat versions, it's not always bad to grab the latest version.

Name Version md5sum Date
oclHashcat for AMD v1.30 4e6e77bbdb15df534348f7745dbc5d0a 2014.08.21
oclHashcat for NVidia v1.30 1e17da4d927c6745c560af2c608337aa 2014.08.21