Posts: 2
Threads: 2
Joined: Dec 2025
Hello everyone! I’m new to Hashcat and excited to learn more about using it effectively. I understand this forum is for support, discussion, and sharing knowledge about Hashcat, the world’s advanced open-source password recovery tool that supports many hash algorithms and GPU/CPU acceleration.
I’d like to share a few questions and tips for beginners:
- Best practices for getting started:
What is the best way to begin with common hash types like MD5 or NTLM? Should I start with dictionary attacks or masks?
Posts: 222
Threads: 3
Joined: Apr 2021
Welcome to hash cracking! Attack recommendations kinda depends on your hardware, but dictionaries (aka wordlists) and rules are almost always the best way to start on any fast hashlist, like MD5/NTLM
"Wordlist" - a file containing candidate passwords, like "123456" or "Password1"
"Rules" / "Rulefile" - a file containing rules, which distort the wordlist's candidate passwords, like lowercasing or appending 1, to make "password" into "password1" etc
There are hundreds of wordlists and rules but some that I recommend are:
Wordlist - Rockyou
https://weakpass.com/wordlists/rockyou.txt
Wordlist - Hashmob Combined
https://hashmob.net/resources/hashmob
Rules - Top_
https://forum.hashkiller.io/index.php?th...les.37302/
Rules - Oneruletorulethemstill -
https://github.com/stealthsploit/OneRuleToRuleThemStill
Posts: 1
Threads: 0
Joined: Dec 2025
Hey Im new in Hashcat. I need some guides for cracking rar passwords that i forgot. MAy you be able to help me this?
Posts: 54
Threads: 5
Joined: Dec 2016
Yes, we can help with recovering the password, but it would be very useful if you at least remember part of the password or how it was structured — how many characters it had, or what kinds of characters were used: uppercase letters, lowercase letters, numbers, or any special characters like - + / * ? etc.
For example: Test123- is made up of an initial uppercase letter, then 3 lowercase letters, 3 numbers, and a special character.
How was your password roughly structured? What kind of passwords were you using at that time?