oclhashcat
advanced password recovery


Digg Del.icio.us Reddit Facebook Stumble Upon Twitter

Download latest version

Name Version md5sum Date
oclHashcat for AMD v1.37 2e9ecb021a4e0f7eb444242b78170c9c 2015.08.18
oclHashcat for NVidia v1.37 08f5b5858daa15b4e593b40c70fb04d5 2015.08.18

GPU Driver requirements:

  • NV users require ForceWare 346.59 or later
  • AMD users require Catalyst 14.9 or later

Features

  • Worlds fastest password cracker
  • Worlds first and only GPGPU based rule engine
  • Free
  • Multi-GPU (up to 128 gpus)
  • Multi-Hash (up to 100 million hashes)
  • Multi-OS (Linux & Windows native binaries)
  • Multi-Platform (OpenCL & CUDA support)
  • Multi-Algo (see below)
  • Low resource utilization, you can still watch movies or play games while cracking
  • Focuses highly iterated modern hashes
  • Focuses dictionary based attacks
  • Supports distributed cracking
  • Supports pause / resume while cracking
  • Supports sessions
  • Supports restore
  • Supports reading words from file
  • Supports reading words from stdin
  • Supports hex-salt
  • Supports hex-charset
  • Built-in benchmarking system
  • Integrated thermal watchdog
  • 150+ Algorithms implemented with performance in mind
  • ... and much more

oclHashcat Screenshot

oclHashcat screenshot

Attack-Modes

  • Straight *
  • Combination
  • Brute-force
  • Hybrid dict + mask
  • Hybrid mask + dict

* accept Rules

Algorithms

  • MD4
  • MD5
  • Half MD5 (left, mid, right)
  • SHA1
  • SHA-256
  • SHA-384
  • SHA-512
  • SHA-3 (Keccak)
  • SipHash
  • RipeMD160
  • Whirlpool
  • GOST R 34.11-94
  • GOST R 34.11-2012 (Streebog) 256-bit
  • GOST R 34.11-2012 (Streebog) 512-bit
  • Double MD5
  • Double SHA1
  • md5($pass.$salt)
  • md5($salt.$pass)
  • md5(unicode($pass).$salt)
  • md5($salt.unicode($pass))
  • md5(sha1($pass))
  • md5($salt.md5($pass))
  • md5($salt.$pass.$salt)
  • md5(strtoupper(md5($pass)))
  • sha1($pass.$salt)
  • sha1($salt.$pass)
  • sha1(unicode($pass).$salt)
  • sha1($salt.unicode($pass))
  • sha1(md5($pass))
  • sha1($salt.$pass.$salt)
  • sha256($pass.$salt)
  • sha256($salt.$pass)
  • sha256(unicode($pass).$salt)
  • sha256($salt.unicode($pass))
  • sha512($pass.$salt)
  • sha512($salt.$pass)
  • sha512(unicode($pass).$salt)
  • sha512($salt.unicode($pass))
  • HMAC-MD5 (key = $pass)
  • HMAC-MD5 (key = $salt)
  • HMAC-SHA1 (key = $pass)
  • HMAC-SHA1 (key = $salt)
  • HMAC-SHA256 (key = $pass)
  • HMAC-SHA256 (key = $salt)
  • HMAC-SHA512 (key = $pass)
  • HMAC-SHA512 (key = $salt)
  • PBKDF2-HMAC-MD5
  • PBKDF2-HMAC-SHA1
  • PBKDF2-HMAC-SHA256
  • PBKDF2-HMAC-SHA512
  • MyBB
  • phpBB3
  • SMF
  • vBulletin
  • IPB
  • Woltlab Burning Board
  • osCommerce
  • xt:Commerce
  • PrestaShop
  • Mediawiki B type
  • Wordpress
  • Drupal
  • Joomla
  • PHPS
  • Django (SHA-1)
  • Django (PBKDF2-SHA256)
  • EPiServer
  • ColdFusion 10+
  • Apache MD5-APR
  • MySQL
  • PostgreSQL
  • MSSQL
  • Oracle H: Type (Oracle 7+)
  • Oracle S: Type (Oracle 11+)
  • Oracle T: Type (Oracle 12+)
  • Sybase
  • hMailServer
  • DNSSEC (NSEC3)
  • IKE-PSK
  • IPMI2 RAKP
  • iSCSI CHAP
  • Cram MD5
  • MySQL Challenge-Response Authentication (SHA1)
  • PostgreSQL Challenge-Response Authentication (MD5)
  • SIP Digest Authentication (MD5)
  • WPA
  • WPA2
  • NetNTLMv1
  • NetNTLMv1 + ESS
  • NetNTLMv2
  • Kerberos 5 AS-REQ Pre-Auth etype 23
  • Netscape LDAP SHA/SSHA
  • LM
  • NTLM
  • Domain Cached Credentials (DCC), MS Cache
  • Domain Cached Credentials 2 (DCC2), MS Cache 2
  • descrypt
  • bsdicrypt
  • md5crypt
  • sha256crypt
  • sha512crypt
  • bcrypt
  • scrypt
  • OSX v10.4
  • OSX v10.5
  • OSX v10.6
  • OSX v10.7
  • OSX v10.8
  • OSX v10.9
  • OSX v10.10
  • AIX {smd5}
  • AIX {ssha1}
  • AIX {ssha256}
  • AIX {ssha512}
  • Cisco-ASA
  • Cisco-PIX
  • Cisco-IOS
  • Cisco $8$
  • Cisco $9$
  • Juniper IVE
  • Juniper Netscreen/SSG (ScreenOS)
  • Android PIN
  • GRUB 2
  • CRC32
  • RACF
  • Radmin2
  • Redmine
  • Citrix Netscaler
  • SAP CODVN B (BCODE)
  • SAP CODVN F/G (PASSCODE)
  • SAP CODVN H (PWDSALTEDHASH) iSSHA-1
  • PeopleSoft
  • Skype
  • 7-Zip
  • RAR3-hp
  • PDF 1.1 - 1.3 (Acrobat 2 - 4)
  • PDF 1.4 - 1.6 (Acrobat 5 - 8)
  • PDF 1.7 Level 3 (Acrobat 9)
  • PDF 1.7 Level 8 (Acrobat 10 - 11)
  • MS Office <= 2003 MD5
  • MS Office <= 2003 SHA1
  • MS Office 2007
  • MS Office 2010
  • MS Office 2013
  • Lotus Notes/Domino 5
  • Lotus Notes/Domino 6
  • Lotus Notes/Domino 8
  • Bitcoin/Litecoin wallet.dat
  • 1Password, agilekeychain
  • 1Password, cloudkeychain
  • Lastpass
  • Password Safe v2
  • Password Safe v3
  • eCryptfs
  • Android FDE <= 4.3
  • TrueCrypt 5.0+ PBKDF2 HMAC-RipeMD160 + AES
  • TrueCrypt 5.0+ PBKDF2 HMAC-SHA512 + AES
  • TrueCrypt 5.0+ PBKDF2 HMAC-Whirlpool + AES
  • TrueCrypt 5.0+ PBKDF2 HMAC-RipeMD160 + AES + boot-mode
  • TrueCrypt 5.0+ PBKDF2 HMAC-RipeMD160 + AES + hidden-volume
  • TrueCrypt 5.0+ PBKDF2 HMAC-SHA512 + AES + hidden-volume
  • TrueCrypt 5.0+ PBKDF2 HMAC-Whirlpool + AES + hidden-volume
  • TrueCrypt 5.0+ PBKDF2 HMAC-RipeMD160 + AES + hidden-volume + boot-mode

Tested OS

  • All Windows and Linux versions should work on both 32 and 64 bit

Tested GPU

  • All CUDA and Stream enabled cards should work

Performance

  • PC1: Windows 7, 32 bit
  • Catalyst 14.9
  • 1x AMD hd7970
  • 1000mhz core clock
  • oclHashcat v1.35
  • PC2: Windows 7, 64 bit
  • ForceWare 347.52
  • 1x NVidia gtx580
  • stock core clock
  • oclHashcat v1.35
  • PC3: Ubuntu 14.04, 64 bit
  • ForceWare 346.29
  • 8x NVidia Titan X
  • stock core clock
  • oclHashcat v1.36
  • PC4: Ubuntu 14.04, 64 bit
  • Catalyst 14.9
  • 8x AMD R9 290X
  • stock core clock
  • oclHashcat v1.35

Hash Type PC1 PC2 PC3 PC4
MD5 8581 Mh/s 2753 Mh/s 135232 Mh/s 92672 Mh/s
SHA1 3037 Mh/s 655 Mh/s 42408 Mh/s 31552 Mh/s
SHA256 1122 Mh/s 355 Mh/s 16904 Mh/s 12288 Mh/s
SHA512 414 Mh/s 104 Mh/s 5240 Mh/s 4552 Mh/s
SHA-3(Keccak) 179 Mh/s 92 Mh/s 3768 Mh/s 2032 Mh/s
RipeMD160 1810 Mh/s 623 Mh/s 28368 Mh/s 20016 Mh/s
Whirlpool 65845 kh/s 85383 kh/s 1122402 kh/s 1122304 kh/s
LM 1388 Mh/s 450 Mh/s 17160 Mh/s 16392 Mh/s
NTLM 16916 Mh/s 4185 Mh/s 279752 Mh/s 175808 Mh/s
NetNTLMv1 9108 Mh/s 2330 Mh/s 113664 Mh/s 97800 Mh/s
NetNTLMv2 589 Mh/s 200 Mh/s 8784 Mh/s 6496 Mh/s
WPA/WPA2 142 kh/s 48 kh/s 2233 kh/s 1536 kh/s

For example, PC3 can do 279752 Mh/s against NTLM, which actually means 279,752,000,000 tries per second.

Help

A detailed description of all commandline parameters is available by using --help. Next to that, the rar-package contains extensive documentation. Look for examples.txt. If you encounter a Bug, report it in the Forums where Fixes and Beta versions are announced as well.

Download older version(s)

This is a list of older oclHashcat versions, it's not always bad to grab the latest version.

Name Version md5sum Date
oclHashcat for AMD v1.36 4b541784b247a275a187d3bd64f791de 2015.04.25
oclHashcat for NVidia v1.36 1afb1a2bad14c706ce60dc3f8d5dd2bc 2015.04.25
oclHashcat for AMD v1.35 feec46f2a7ec9dc55fe3f15542b8af86 2015.03.22
oclHashcat for NVidia v1.35 a824ff8438a720cf4f95163b7d130fdb 2015.03.22
oclHashcat for AMD v1.34 c7f3d37accbab0a6a081272a29260277 2015.03.21
oclHashcat for NVidia *BROKEN* v1.34 3c6aa0101cd9e23f0d65cf0f7c00c417 2015.03.21
oclHashcat for AMD v1.33 d0ee01886b18f9e1d4b82d817044bf24 2015.02.16
oclHashcat for NVidia v1.33 f7e4b960bd986d9f0880fe12597f1977 2015.02.16
oclHashcat for AMD v1.32 4f13488acc8ed17ea518a9dec8ea8761 2015.01.15
oclHashcat for NVidia v1.32 86a211be26579370813048aaf3698ee6 2015.01.15
oclHashcat for AMD v1.31 81f00b1f345a27e0edffae693707943c 2014.10.02
oclHashcat for NVidia v1.31 b07045784ec7f4913293ea2cc6eac5ca 2014.10.02
oclHashcat for AMD v1.30 4e6e77bbdb15df534348f7745dbc5d0a 2014.08.21
oclHashcat for NVidia v1.30 1e17da4d927c6745c560af2c608337aa 2014.08.21
oclHashcat for AMD v1.21 bcff9f9e01eecb7687f9395d02a05725 2014.05.26
oclHashcat for NVidia v1.21 1aaaa43e0dac2f1e71dc5364d5c46b61 2014.05.26
oclHashcat for AMD v1.20 c68ab6ca795d71cf4de429af7bdc6234 2014.04.26
oclHashcat for NVidia v1.20 4da2b50410c1dbb8454dedfd632d4049 2014.04.26