Finding salt with password and hash?

[eightynine]

I have the plaintext password and hash, but don't know the hashing algorithm. I can't recreate the hash using online tools* so I think the hashing algorithm is salted, but I don't know what the salt is. What are my options here?

*On that note, can hashcat generate hashes from plaintext passwords instead of just the inverse? It would help me figure out if it is salted or not.

[atom]

That's the wrong way. Usually you find out about an unknown algorithm by RE the binary which calculates it.