hashcat

K9 · Posted: Fri Dec 25, 2009 3:19 am Post subject: hashcat

* Free
* Multi-Threaded
* Multi-Hash
* Linux & Windows native binaries
* Fastest cpu-based multihash cracker
* SSE2 accelerated
* All Attack-Modes except Brute-Force and Permutation can be extended by Hybrid-Attack rules
* Very fast Hybrid-Attack engine
* Rules mostly compatible with JTR and PasswordsPro
* Possible to resume or limit session
* Automatically recognizes recovered hashes from outfile at startup
* Can automatically generate random rules for Hybrid-Attack
* Load hashlist with more than 3 million hashes of any type at once
* Load saltlist from external file and then use them in a Brute-Force Attack variant
* Able to work in an distributed environment
* Specify multiple wordlists and also multiple directories of wordlists
* Number of threads can be configured
* Threads run on lowest priority
* 33+ Algorithms implemented with performance in mind
* ... and much more

* MD5
* md5($pass.$salt)
* md5($salt.$pass)
* md5(md5($pass))
* md5(md5(md5($pass)))
* md5(md5($pass).$salt)
* md5(md5($salt).$pass)
* md5($salt.md5($pass))
* md5($salt.$pass.$salt)
* md5(md5($salt).md5($pass))
* md5(md5($pass).md5($salt))
* md5($salt.md5($salt.$pass))
* md5($salt.md5($pass.$salt))
* md5($username.0.$pass)
* md5(strtoupper(md5($pass)))
* SHA1
* sha1($pass.$salt)
* sha1($salt.$pass)
* sha1(sha1($pass))
* sha1(sha1(sha1($pass)))
* sha1(strtolower($username).$pass)
* MySQL
* MySQL4.1/MySQL5
* MD5(Wordpress)
* MD5(phpBB3)
* MD5(Unix)
* SHA-1(Base64)
* SSHA-1(Base64)
* SHA-1(Django)
* MD4
* NTLM
* Domain Cached Credentials
* MD5(Chap)
* MSSQL

Attack-Modes

* Straight *
* Combination *
* Toggle-Case *
* Brute-Force
* Permutation

* accept Hybrid-Attack extension

Tested OS

* Windows XP 32bit
* Windows XP 64bit
* Windows Vista 64bit
* Windows 7 64bit
* Debian Lenny 32bit
* Ubuntu 9.02 64bit
* Ubuntu 9.10 64bit

Check the speed at the website or take a look t this chart:
http://img153.imageshack.us/i/stat328266156.png

http://hashcat.net/hashcat/
irc://irc.rizon.net/hashcat

Rolf · Posted: Fri Dec 25, 2009 5:00 am Post subject:

Forgot command-line interface only.

K9 · Posted: Sat Dec 26, 2009 4:04 pm Post subject:

This is the first public release of hashcat-gui. As the name suggests, it is working together with hashcat.

Download hashcat-gui (md5sum: c6dbad5adcd01662384337eefa464087)

hashcat-gui is tested on XP, Win7 and Wine (Ubuntu).

The main features of the GUI are:

It is free.
Ships as setup.exe, easy to use graphical installer.
Contains hashcat binaries, so no need to make a manual install.
Supports all hashcat options (feature complete).
Easier to learn compared to the CLI.
Hash Browser
Wordlist Manager
Outfile Viewer (with visual and acoustical notifications)

http://hashkiller.com/index.php?topic=2525.0

niggaw · Joined: 26 Oct 2009 Posts: 95 Reputation: 19

Cool, this one might crack the hash i have.

because passwordspro doesnt have

md5(username,-,password) :/

i cant get it to use all my wordlists..(i have like 700 wordlists..)

I think i fixed it Smile

Rolf · Posted: Sat Dec 26, 2009 5:57 pm Post subject:

Nice

With the GUI, I was able to launch a hybrid-dictionary attack, with amazing 25M p/s speed(for 100k hashes)
It indeed uses all available processor's cores Very Happy

I wonder will there be difference in speed between x32 and x64 OS.
Cheers!

P.S.
Hashcat doesnt seem to remove cracked hashes from hashlists.That's a shame.
Also it writes russian passwords to out file in the gibberish way(åíñô2009 instead of енсф2009), but maybe that can be fixed by using wordlists in unicode encoding(as for now, MS Word saves the day).
Man it's fast!
What's the difference between "Straight-Words" and "Combination-Words" attacks?Dont see any difference in the GUI.

K9 · Posted: Sun Dec 27, 2009 1:07 am Post subject:

The "Straight" is a normal dictionary attack and the "Combination" is a combination attack. Smile

niggaw · Joined: 26 Oct 2009 Posts: 95 Reputation: 19

what kind of syntax is the hashes supposed to be in?`

Rolf · Posted: Sun Dec 27, 2009 3:02 am Post subject:

niggaw · Joined: 26 Oct 2009 Posts: 95 Reputation: 19

vince213333 · Posted: Sun Dec 27, 2009 4:32 am Post subject:

Just downloaded the gui, thanks. Considering it supports multiple threads, this could be a lot faster than Passwordspro for some things.

I already liked the command line application, considering it uses 100% of my cpu instead of the 12-13% which passwordspro uses Smile

Rolf · Posted: Mon Dec 28, 2009 12:29 am Post subject:

niggaw, length exception means the length of hashes is not as it should be.
Maybe you loaded SHA-1 hashes as MD5 ? Or something like that.

K9 · Posted: Sun May 02, 2010 2:18 am Post subject:

Update: The new version is even faster. More algorithms added and some bugs got fixed. Check out the new site: http://hashcat.net/hashcat/

gates jr · Joined: 30 Sep 2010 Posts: 12 Reputation: 2

Ok i Have A question why is it when i try to decrypt md5 unix hashes aka freebsd i get a line length exception error can anyone help with that please

Rolf · Posted: Tue Nov 09, 2010 1:55 pm Post subject:

HC doesnt support md5crypt.

mastercracker · Posted: Tue Nov 09, 2010 6:16 pm Post subject:

	InsidePro Software Forum Index -> Miscellaneous	All times are GMT + 5 Hours Goto page 1, 2 Next
Page 1 of 2