hashcat Forum - hashcat-utils, maskprocessor, statsprocessor, md5stress, wikistrip

Mask rules

Sat, 10 Jan 2026 04:01:14 +0000

How to create mask rules for something like this XXXX-XXXX-XXXX-XXXX-XXXX
Which only contain Letter UP and number

I forgot my my phone password (i am fucked)

Tue, 11 Nov 2025 21:23:58 +0000

Found my old phone and forgot password I know its 4 letters long because that's what the phone clue gives me. With this information Is there anyway to brute force it i don't care how long it takes but I just want all the stuff on it because it is literally my memories.

Hashcat problem on ubuntu

Wed, 15 Oct 2025 10:22:49 +0000

I've installed my GPU ASUS TUF GAMING Radeon RX 6800 OC Edition on Ubuntu 24.04, but it is not recognized by hashcat

Code:
sudo hashcat -I

Quote:hashcat (v7.1.2-282-g66546e659) starting in backend information mode

hipInit(): no ROCm-capable device is detected

OpenCL Info:
============

OpenCL Platform ID #1
Vendor..: Intel(R) Corporation
Name....: Intel(R) OpenCL Graphics
Version.: OpenCL 3.0

Backend Device ID #01
Type...........: GPU
Vendor.ID......: 8
Vendor.........: Intel(R) Corporation
Name...........: Intel(R) UHD Graphics 770
Version........: OpenCL 3.0 NEO
Processor(s)...: 16
Preferred.Thrd.: 7
Clock..........: 1550
Memory.Total...: 44617 MB (limited to 2047 MB allocatable in one block)
Memory.Free....: 22308 MB
Memory.Unified.: 1
Local.Memory...: 64 KB
OpenCL.Version.: OpenCL C 1.2
Driver.Version.: 23.43.027642

OpenCL Platform ID #2
Vendor..: The pocl project
Name....: Portable Computing Language
Version.: OpenCL 3.0 PoCL 5.0+debian Linux, None+Asserts, RELOC, SPIR, LLVM 16.0.6, SLEEF, DISTRO, POCL_DEBUG

Backend Device ID #02
Type...........: CPU
Vendor.ID......: 128
Vendor.........: GenuineIntel
Name...........: cpu-haswell-13th Gen Intel(R) Core(TM) i5-13500
Version........: OpenCL 3.0 PoCL HSTR: cpu-x86_64-pc-linux-gnu-haswell
Processor(s)...: 20
Preferred.Thrd.: 1
Clock..........: 4800
Memory.Total...: 45895 MB (limited to 8192 MB allocatable in one block)
Memory.Free....: 22947 MB
Memory.Unified.: 1
Local.Memory...: 1280 KB
OpenCL.Version.: OpenCL C 1.2 PoCL
Driver.Version.: 5.0+debian

OpenCL Platform ID #3
Vendor..: Mesa/X.org
Name....: rusticl
Version.: OpenCL 3.0

OpenCL Platform ID #4
Vendor..: Advanced Micro Devices, Inc.
Name....: AMD Accelerated Parallel Processing
Version.: OpenCL 2.1 AMD-APP (3662.0)

Code:
clinfo -l

Quote:Platform #0: Intel(R) OpenCL Graphics
`-- Device #0: Intel(R) UHD Graphics 770
Platform #1: Portable Computing Language
`-- Device #0: cpu-haswell-13th Gen Intel(R) Core(TM) i5-13500
Platform #2: rusticl
Platform #3: AMD Accelerated Parallel Processing

Code:
sudo lshw -C display

Quote:*-display
description: VGA compatible controller
product: Navi 21 [Radeon RX 6800/6800 XT / 6900 XT]
vendor: Advanced Micro Devices, Inc. [AMD/ATI]
physical id: 0
bus info: pci@0000:03:00.0
logical name: /dev/fb0
version: c3
width: 64 bits
clock: 33MHz
capabilities: pm pciexpress msi vga_controller bus_master cap_list fb
configuration: depth=32 latency=0 mode=2560x1440 resolution=2560,1440 visual=truecolor xres=2560 yres=1440
resources: iomemory:600-5ff iomemory:640-63f memory:6000000000-63ffffffff memory:6400000000-640fffffff ioport:4000(size=256) memory:81200000-812fffff memory:81300000-8131ffff
*-display
description: Display controller
product: AlderLake-S GT1
vendor: Intel Corporation
physical id: 2
bus info: pci@0000:00:02.0
version: 0c
width: 64 bits
clock: 33MHz
capabilities: pciexpress msi pm bus_master cap_list
configuration: driver=i915 latency=0
resources: iomemory:640-63f iomemory:400-3ff irq:225 memory:6410000000-6410ffffff memory:4000000000-400fffffff ioport:5000(size=64) memory:4010000000-4016ffffff memory:4020000000-40ffffffff

How can i start using this GPU for cracking with hashcat?

i want help hashcat run crack with Multi-GPU

Thu, 04 Sep 2025 16:16:06 +0000

Hello bros!
I have a problem that needs expert advice.
I am searching for the password of a blockchain wallet, and I rented GPU 5090 on vast.ai
For example, I rented 8 GPU 5090 and run with a file containing passwords in the form: mask_password.txt
containing password combinations of full name plus variables: ?d?d ?d?d?d ?d?d?d?d ?d?d?d?d?d ?d?d?d?d?d?d
At the beginning, I only see 1 GPU working, because the mask is short and small like: ?d?d up to ?d?d?d?d
and the waiting time can be 1 day to 2 days, then it can reach longer masks than 6d or 8d
then the other GPUs will work together and I have speed X
I want to shorten the time more, by activating all 8 GPUs to run, and can split the file: mask_password.txt into 8 parts so that each GPU receives 1 part of the work, so all 8 GPUs run immediately with short masks to shorten the time and get speed X from the beginning.
I have researched many sources but have not been able to implement it successfully, please help me bros.
Thank you

Batch ESSID Processing using wlangenpmkocl ?

Fri, 30 May 2025 10:57:31 +0000

Hi All,

I'm using ZerBea's wlangenpmkocl tool to generate a pmk file.

And this works great for a single ESSID using:
wlangenpmkocl -e ESSID_NAME -i MY_WORDLIST.txt -a OUTPUT.pmk

And then running Hashcat with it:
hashcat -m 22000 ESSID.hash OUTPUT.pmk

But I'm looking to batch the process of pmk output for multiple ESSID's and wondering if it's possible with this tool?

If not what tool you would recommend for this? Or a better process for multiple ESSID's.....

I've tried airolib-ng but the generation time is too long with --batch as it doesn't appear to use GPU.

[Edit] Thinking about I may have just answered my own question: Script it in Bash...

Cheers,
Izzy

how to do this auto

Wed, 02 Apr 2025 23:44:02 +0000

hi,
new here, dont know coding
i want to do this with hashcat,

1. generate completely random hexadecimal string (64 characters long, just like sha256 hash)
2. then convert it to sha256 hash
3. then compare this to a list of hashes
4. it will reset, refresh and restart this process every few seconds based on user input (in seconds), unless a match is found. user input is required only once in beginning.

ex. user input 10 secs, it will then repeat this process every 10 secs unless match is found.
essence of this process is complete randomness every time.

is there a addon or plugin for this

If you specify a custom charset, you must also specify a mask

Fri, 07 Feb 2025 13:12:09 +0000

If you specify a custom charset, you must also specify a mask. WHY THIS ERROR

Handshake file contains not valid handshakes when converting to modern version

Sun, 08 Dec 2024 15:53:21 +0000

Hello everyone,

I'm trying to converting a .cap which should contain a valid handshake to a compatible hashcat format for cracking it.
First of all I want to clarify that I'm testing my own iphone hotspot.

Tshark seems to say that the file is valid and contains a valid handshake while cowpatty seems to say the contrary.

Code:
tshark -r handshake_iphone_XX-XX-XX-XX-XX-XX_2024-12-04T22-44-53.cap -n -Y eapol

12453  26.126857 XX:XX:XX:XX:XX:XX → XX:XX:XX:XX:XX:XX EAPOL 155 Key (Message 1 of 4)

12456  26.159267 XX:XX:XX:XX:XX:XX → XX:XX:XX:XX:XX:XX EAPOL 164 Key (Message 2 of 4)

12458  26.173381 XX:XX:XX:XX:XX:XX → XX:XX:XX:XX:XX:XX EAPOL 221 Key (Message 3 of 4)

17148  39.072576 XX:XX:XX:XX:XX:XX → XX:XX:XX:XX:XX:XX EAPOL 180 Key (Message 2 of 4)

17150  39.084851 XX:XX:XX:XX:XX:XX → XX:XX:XX:XX:XX:XX EAPOL 221 Key (Message 3 of 4)

17152  39.091372 XX:XX:XX:XX:XX:XX → XX:XX:XX:XX:XX:XX EAPOL 133 Key (Message 4 of 4)

tshark: The file "handshake_iphone_XX-XX-XX-XX-XX-XX_2024-12-04T22-44-53.cap" appears to have been cut short in the middle of a packet.

Code:
cowpatty -r handshake_iphone_XXXXX_....cap -s 'iphone di XXXXXX' -c

cowpatty 4.8 - WPA-PSK dictionary attack. 

End of pcap capture file, incomplete four-way handshake exchange.  Try using a

different capture.

And in fact cowpatty seems to be right since hashcat conversion tool gives me an error when trying to convert:
https://hashcat.net/cap2hashcat/

Code:
Handshake extraction failed!

hcxpcapngtool 6.3.1 reading from 1368442_1733672727.cap...

failed to read packet 17227

summary capture file

--------------------

file name................................: 1368442_1733672727.cap

version (pcap/cap).......................: 2.4 (very basic format without any additional information)

timestamp minimum (GMT)..................: 04.12.2024 22:44:13

timestamp maximum (GMT)..................: 04.12.2024 22:44:53

used capture interfaces..................: 1

link layer header type...................: DLT_IEEE802_11 (105) very basic format without any additional information about the quality

endianness (capture system)..............: little endian

packets inside...........................: 17227

ESSID (total unique).....................: 1

BEACON (total)...........................: 1

BEACON on 2.4 GHz channel (from IE_TAG)..: 6 

ACTION (total)...........................: 16

PROBERESPONSE (total)....................: 52

DEAUTHENTICATION (total).................: 512

AUTHENTICATION (total)...................: 8

AUTHENTICATION (OPEN SYSTEM).............: 2

AUTHENTICATION (SAE).....................: 6

ASSOCIATIONREQUEST (total)...............: 2

ASSOCIATIONREQUEST (SAE SHA256)..........: 2

WPA encrypted............................: 45

EAPOL messages (total)...................: 6

EAPOL RSN messages.......................: 6

EAPOL ANONCE error corrections (NC)......: not detected

EAPOL M1 messages (total)................: 1

EAPOL M1 messages (KDV:0 AKM defined)....: 1 (PMK not recoverable)

EAPOL M2 messages (total)................: 2

EAPOL M2 messages (KDV:0 AKM defined)....: 2 (PMK not recoverable)

EAPOL M3 messages (total)................: 2

EAPOL M3 messages (KDV:0 AKM defined)....: 2 (PMK not recoverable)

EAPOL M4 messages (total)................: 1

EAPOL M4 messages (KDV:0 AKM defined)....: 1 (PMK not recoverable)

RSN PMKID (total)........................: 1

RSN PMKID (KDV:0 AKM defined)............: 1 (PMK not recoverable)

packet read error........................: 1

Information: limited dump file format detected!

This file format is a very basic format to save captured network data.

It is recommended to use PCAP Next Generation dump file format (or pcapng for short) instead.

The PCAP Next Generation dump file format is an attempt to overcome the limitations

of the currently widely used (but very limited) libpcap (cap, pcap) format.

https://www.wireshark.org/docs/wsug_html_chunked/AppFiles.html#ChAppFilesCaptureFilesSection

https://github.com/pcapng/pcapng

Information: radiotap header is missing!

Radiotap is a de facto standard for 802.11 frame injection and

reception. The radiotap header format is a mechanism to supply

additional information about frames, rom the driver to userspace

applications.

https://www.radiotap.org/

Warning: too many deauthentication/disassociation frames detected!

That can cause that an ACCESS POINT change channel, reset EAPOL TIMER,

renew ANONCE and set PMKID to zero.

This could prevent to calculate a valid EAPOL MESSAGE PAIR

or to get a valid PMKID.

Information: missing frames!

This dump file does not contain undirected proberequest frames.

An undirected proberequest may contain information about the PSK.

It always happens if the capture file was cleaned or

it could happen if filter options are used during capturing.

That makes it hard to recover the PSK.

Information: missing frames!

This dump file does not contain enough EAPOL M1 frames.

It always happens if the capture file was cleaned or

it could happen if filter options are used during capturing.

That makes it impossible to calculate nonce-error-correction values.

Information: no hashes written to hash files

session summary

---------------

processed cap files...................: 1

I tried multiple times to capture the handshake on the same network but not once worked.
I have performed the capture using Bettercap.
The strange thing is that with other networks the handshake seems to be captured well and the conversion using https://hashcat.net/cap2hashcat/ works fine.

At this point I'd like to understand by what this problem is caused and how can I avoid it.

[HELP]Noob who want to know

Wed, 30 Oct 2024 16:27:58 +0000

Hello hashcat community if this is the wrong section let me know so i can put it in the right one.

i have this notepad which is i put it in winrar wayback 2015 with password
but i forgot it, ive been searching in google then i got here, ill try the onlinehashcrack but i dont know what algorithm should i choose or maybe not supported idk.
so can someone help me step by step on how to use hashcat to crack/open this winrar.
all help will highly appreciated.

Adding characters in the word file

Fri, 20 Sep 2024 19:09:14 +0000

Hello

I have a list of words in a file txt, I want, for example, to change all words to lowercase letters, or I want all words to start with "!" or "@" or add digits to them from 1-100. A few years ago I created such files but now I don't remember what program it could be. I used maskprocessor a lot but I don't see that it was possible to insert the entire txt file with words there.

How to filter duplicate content in large dictionary files and multiple dictionaries?

Wed, 18 Sep 2024 08:26:59 +0000

The large dictionary I downloaded online is about 150GB. How can I filter out my existing dictionary files? My computer has 80GB of memory, and when using rli.exe files that exceed 20GB, it reports insufficient memory. Is there any other way to filter out duplicate content in other files!
The operating system is Windows

In addition, there is a single file of 150GB. Is there any way to filter out duplicate content in a single file?

Issue with Prince Processor Failing on Non-MD5 Hashes

Sun, 01 Sep 2024 05:03:48 +0000

I've been encountering an issue trying to pipe prince processor with hashcat. It seems to work fine when cracking an md5 hash. But when I try and .22000 I get the following error:

Code:
Program 'pp64.exe' failed to run: Array dimensions exceeded supported range. At line:1 char:1

I've been using the following command below:

Code:
C:\Users\Username\Desktop\hashcat-6.2.6\princeprocessor-0.22\pp64.exe "C:\Users\Username\Desktop\Hashes and Caps\hashes\yourhashfile.hc22000" | C:\Users\Username\Desktop\Wordlists\yourwordlist.txt | C:\Users\Username\Desktop\hashcat-6.2.6\hashcat.exe -O

Is there something I'm missing? Any help would be appreciated; it's been fun to play around with.

Hash 'hash.hc22000': Separator unmatched

Thu, 22 Aug 2024 19:15:14 +0000

hi, im trying to crack WPA on windows but i get the next error:

hashcat.exe -m 22000 hash.hc22000 -a 3 -1 ?l?d ?D?D?D?D?D?D?D?D?D?D
hashcat (v6.2.6) starting

nvmlDeviceGetFanSpeed(): Not Supported

CUDA API (CUDA 12.6)
====================
* Device #1: NVIDIA GeForce GTX 950M, 1674/2047 MB, 5MCU

OpenCL API (OpenCL 3.0 CUDA 12.6.32) - Platform #1 [NVIDIA Corporation]
=======================================================================
* Device #2: NVIDIA GeForce GTX 950M, skipped

OpenCL API (OpenCL 2.0 ) - Platform #2 [Intel(R) Corporation]
=============================================================
* Device #3: Intel(R) HD Graphics 530, 4832/9779 MB (1023 MB allocatable), 24MCU
* Device #4: Intel(R) Core(TM) i7-6700HQ CPU @ 2.60GHz, skipped

Minimum password length supported by kernel: 8
Maximum password length supported by kernel: 63

Hash 'hash.hc22000': Separator unmatched
No hashes loaded.

Started: Thu Aug 22 12:58:01 2024
Stopped: Thu Aug 22 12:58:06 2024

no hashes loaded

Sun, 11 Aug 2024 11:13:53 +0000

I'm trying to crack the WPA2 password, but I get some kind of error.
What am I doing:
I have.pcap dump, I'll convert it to .hccapx:

./cap2hccapx file.pcap output.hccapx

and he writes to me that 2 handshakes are recorded in the file.
next, I'm trying to decrypt the password in hashcat:

hashcat -m 22000 -a 0 output.hccapx rockyou.txt

but I'm getting errors.:
Minimum password length supported by kernel: 8
Maximum password length supported by kernel: 63

Hashfile '/Users/user/Desktop/output.hccapx' on line 1 (HCPX): Separator unmatched
Hashfile '/Users/user/Desktop/output.hccapx' on line 2 ( Hashfile '/Users/user/Desktop/output.hccapx' on line 3 (): Separator unmatched
Hashfile '/Users/user/Desktop/output.hccapx' on line 4 ( Hashfile '/Users/user/Desktop/output.hccapx' on line 5 ( Hashfile '/Users/user/Desktop/output.hccapx' on line 6 (): Separator unmatched
Hashfile '/Users/user/Desktop/output.hccapx' on line 7 ( No hashes loaded.

What could be the problem?

generate new list type error

Fri, 26 Jul 2024 10:07:03 +0000

Hello, currently I'm cracking my wallet, for a long time... it's taking too long and it starts to frustrate me. It's not just the lack of computing power..

I've focused on the combinator attack, but there is an option I made a type error(s). Back in the days, the screens of mobile phones were quite tiny and even doing it twice in a row is is very possiblle.

I have a list of aprrox. 1200 words/numbers I combine with another list of approx. 1200 words.

Is there a way I can generate a new list with all optional type errors, one type error + two type errors?