Table of Contents

Frequently asked questions

NOTE: You cannot use hashcat to recover online accounts (like Gmail, Instagram, Facebook, Twitter, etc.), because hashcat has no way to work on online accounts.

Source code

Hashcat suite

Beyond hashcat itself, there are other useful utilities from the same team, maintained in separate repositories.

Documentation for the older programs, hashcat-legacy, oclHashcat, oclHashcat-plus and oclHashcat-lite, is in the Archive, along with everything else on this wiki that is no longer current.

Core attack modes

A few of these are in hashcat's master branch and not yet in the 7.1.2 release. They are marked, and a precompiled master build is at hashcat.net/beta.

  • Dictionary attack - trying all words in a list; also called “straight” mode (attack mode 0, -a 0)
  • Combinator attack - concatenating words from multiple wordlists (-a 1)
  • Brute-force attack and Mask attack - trying all characters from given charsets, per position (-a 3)
  • PCFG attack - a trained grammar makes the candidates, most likely ones first (-a 4) (master, see beta)
  • Table attack - a table says what each character may become, chosen per position (-a 5) (master, see beta)
  • Hybrid attack - the mask follows the word (-a 6) or precedes it (-a 7), or says where the word goes (-a 12, master, see beta)
  • Generic attack - candidates come from a feed, which is a small plugin you can write yourself (-a 8) (master, see beta)
  • Association attack - use an username, a filename, a hint, or any other pieces of information which could have had an influence in the password generation to attack one specific hash (-a 9)

Other attacks

Most important wiki pages

Patches, tips and tricks

Archive

Pages describing programs that no longer exist, features that were removed, and techniques that still work but have a better replacement now, are collected in the Archive. They are kept because links to them exist all over the internet, and each one says at the top what to read instead.

Howtos, Videos, Papers, Articles, etc. in the wild

If your hashcat article is not listed, tell us. We would love to link it here.

General guides

Hardware

Common issues

Specific attacks

Specific targets

Input sources

Cloud and scale

Contests

Team Hashcat's writeups, the tools and rule files built during a contest, and the record of results all live in one repository now:

The FAQ says what the team is; it no longer copies the results table, because the repository is the one that stays current.

Older writeups that were published elsewhere before the repository existed:

Other commmon tools

  • hashcat-utils - many small utilities useful in advanced password cracking
  • hashcat's test_module_runner.py - generate test hashes for a given hash mode. This is the one being moved to. The test_module_runner.pl next to it still covers the hash modes whose test module has not been ported to Python yet, which is most of them today.
  • hashgen - quickly generate some common hash types from wordlists
  • hcxdumptool and hcxtools - the modern way to capture and process Wi-Fi hashes
  • John the Ripper - supports some hash types hashcat does not
  • MDXfind - supports multiple iterations of many hash types (CPU only)
  • PACK - tools to analyze founds, generate masks that match policy, etc.
  • pack2 - split strings on character boundaries, filter by mask, generate stats, unhex HEX
  • rling - fast dedupe and sorting of large lists
  • RuleProcessorY - apply rules to wordlists - supports multibyte; slower than direct GPU rules
  • rurasort - wordlist processing
  • slider - get sliding window of substrings from a wordlist

Other

Except where otherwise noted, content on this wiki is licensed under the following license: Public Domain