TD Cyber Labs

TrainersTool Trainers / Hashcat Trainer 0 / 65 pts

hashcat

Hashcat

Red Team · Medium · 5 lessons

Hashcat is the fast, GPU-driven cracker. Its defining flag is -m, the hash mode: a number that tells Hashcat which algorithm it is attacking (0 = MD5, 1000 = NTLM, 1800 = sha512crypt, and hundreds more). Get the mode right and a wordlist attack is trivial. Practise on the hash files in your home directory.

1
Crack an MD5 with -m 0
Mode 0 is plain MD5. Give Hashcat the mode, the hash file, and a wordlist, and it recovers the password. This is the template every crack follows — only the mode number changes.
hashcat -m 0 hashes.txt rockyou-mini.txt
2
Set the attack mode with -a 0
-a chooses the attack type: 0 is a straight dictionary run (each word as-is), 3 is a brute-force mask. -a 0 is the default and by far the most common.
hashcat -m 0 -a 0 hashes.txt rockyou-mini.txt
3
Crack an NTLM hash with -m 1000
Windows stores passwords as NTLM — mode 1000. When you dump hashes from a domain or SAM, this is the mode you reach for. Only the -m value changes from the MD5 crack.
hashcat -m 1000 ntlm.txt rockyou-mini.txt
4
Crack a Linux hash with -m 1800
A $6$ hash from /etc/shadow is sha512crypt — mode 1800. It is deliberately slow to compute, so a small, targeted wordlist matters more here than raw speed.
hashcat -m 1800 shadow.txt rockyou-mini.txt
5
Review cracked hashes with --show
Like John, Hashcat writes cracks to a pot file. --show reprints the recovered plaintexts without re-running the attack.
hashcat -m 0 hashes.txt --show

Applications

practice 10.10.10.10--:--

learner@kali: ~ — Terminal