Hash type categories

Hash types supported by hashcat are categorized. These categories are shown in hashcat's extended help output (-hh). They are somewhat self-explanatory, but contain terms of art that may be unfamiliar.

Application Database

A database file used “behind the scenes” by a general application (SecureCRT, etc.)

Archive

File archives (7-Zip, PKZIP, etc.)

Cryptocurrency Wallet

Crypto wallets (Bitcoin, Ethereum, etc.)

Database Server

MS SQL, MySQL, Oracle, etc.

Document

MS Word, Excel, PDF, etc.

Enterprise Application Software (EAS)

Solarwinds, PeopleSoft, Lotus Notes, etc.

FTP, HTTP, SMTP, LDAP Server

Also includes web servers (Apache, etc.)

File-Based Encryption (FBE)

Such as ENCsecurity Datavault.

Forums, CMS, E-Commerce

Drupal, Joomla, MediaWiki, PrestaShop, etc.

Framework

Django, passlib, Ruby on Rails, etc.

Full-Disk Encryption (FDE)

TrueCrypt, VeraCrypt, BitLocker, etc.

Some of these can have multiple underlying algorithms that can be configured by the user in a specific order, so quite a few sub-variants are supported.

Generic KDF

Other general Key Derivation Functions (KDFs) - phpass, scrypt, PBKDF2-HMAC, etc.

Instant Messaging Service

Telegram, Teamspeak 3, etc.

Network Protocol

NetNTLM, IPMI RAKP, Kerberos, SNMPv3, etc.

One-Time Password

TOTP (Time-based One-Time Passwords), etc.

Operating System

General and specialized OSes and their common user hash types, including network equipment, UNIX shadow hash types, etc.

Password Manager

LastPass, 1Password, etc. This includes password-specific DBs on the “back end” of applications and OSes (Apple keychain, Mozilla/Firefox, etc)

Plaintext

Special testing modes for which the hashes are not hashes at all, but the actual plaintext password. Used for debugging and research.

Private Key

PKCS, SSH, GPG, Java keystore, etc.

Raw Checksum

File checksum algorithms traditionally used to validate that content has not been altered or lost, or is not duplicated. (CRC32, MurmurHash, etc.)

Raw Cipher, Known-plaintext attack

Raw Hash

Multipurpose general unsalted cryptographic hashes - MD5, SHA1, Blake, etc.

Raw Hash authenticated

Raw (unsalted) hashes used for authentication / HMAC purposes (protecting a secret key). See https://en.wikipedia.org/wiki/HMAC

Raw Hash salted and/or iterated

General hash types that are salted, or iterated/nested (SHA1 of the MD5 of a password, etc.)

Except where otherwise noted, content on this wiki is licensed under the following license: Public Domain