Hash type categories

Hash types supported by hashcat are categorized. These categories are shown in hashcat's extended help output (-hh). They are somewhat self-explanatory, but contain terms of art that may be unfamiliar.

Application Database

A database file used “behind the scenes” by a general application (SecureCRT, etc.)

Archive

File archives (7-Zip, PKZIP, etc.)

Cryptocurrency Wallet

Crypto wallets (Bitcoin, Ethereum, etc.)

Database Server

MS SQL, MySQL, Oracle, etc.

Document

MS Word, Excel, PDF, etc.

Enterprise Application Software (EAS)

Solarwinds, PeopleSoft, Lotus Notes, etc.

Network Server

A service reached over the network, rather than the protocol it speaks. FTP, HTTP, SMTP and LDAP servers, web servers such as Apache among them.

File-Based Encryption (FBE)

Such as ENCsecurity Datavault.

Forums, CMS, E-Commerce

Drupal, Joomla, MediaWiki, PrestaShop, etc.

Framework

Django, passlib, Ruby on Rails, etc.

Full-Disk Encryption (FDE)

TrueCrypt, VeraCrypt, BitLocker, etc.

Some of these can have multiple underlying algorithms that can be configured by the user in a specific order, so quite a few sub-variants are supported.

Generic KDF

Other general Key Derivation Functions (KDFs) - phpass, scrypt, PBKDF2-HMAC, etc.

Messaging and Chat Service

Telegram, Teamspeak 3, etc.

Network Protocol

NetNTLM, IPMI RAKP, Kerberos, SNMPv3, etc.

One-Time Password

TOTP (Time-based One-Time Passwords), etc.

Operating System

General and specialized OSes and their common user hash types, including network equipment, UNIX shadow hash types, etc.

Password Manager

LastPass, 1Password, etc. This includes password-specific DBs on the “back end” of applications and OSes (Apple keychain, Mozilla/Firefox, etc)

Plaintext

Special testing modes that use the plaintext password in place of a hash. Used for debugging and research.

Private Key

PKCS, SSH, GPG, Java keystore, etc.

Raw Checksum and Non-Cryptographic Hash

Algorithms built to detect accidental change or to spread keys across buckets, rather than to resist an attacker. Checksums such as CRC32 answer whether content has been altered, lost or duplicated, and hashes such as MurmurHash and xxHash exist to be fast.

RFID

The authentication secrets of contactless tags and cards. hashcat covers iCLASS and MIFARE Ultralight C.

Raw Cipher, Known-plaintext attack

Raw Hash

Multipurpose general unsalted cryptographic hashes - MD5, SHA1, Blake, etc.

Raw Hash authenticated

Raw (unsalted) hashes used for authentication / HMAC purposes (protecting a secret key). See https://en.wikipedia.org/wiki/HMAC

Raw Hash salted and/or iterated

General hash types that are salted, or iterated/nested (SHA1 of the MD5 of a password, etc.)

User-Defined Hash

The bridged generic hash modes, 73000 and 74000, and the hash recipe mode 4000, where the hash is whatever you described or wrote yourself. No fixed category fits them, because the category depends on what you asked for.

Except where otherwise noted, content on this wiki is licensed under the following license: Public Domain