#hashcat — Public Fediverse posts

Long-running hashcat attacks need fault tolerance. Use --session to name your run and --restore to resume exactly where it stopped, even after Ctrl+C or a power failure. Hashcat writes a restore file (e.g., session.restore) periodically, so you never lose progress. #hashcat #snippet #ValtersIT

https://www.valtersit.com/vault/using-restore-and-session-for-faulttolerant-longrunning-atta-b6ad0a/

Unlock password mutations beyond static rules: this snippet pairs hashcat’s engine with a pseudo-random rule generator, yielding 10M on-the-fly rules for leetspeak, case shifts, and suffix adds. Ideal for Ubuntu/Debian/Kali. #hashcat #snippet #rules #ValtersIT

https://www.valtersit.com/vault/rulebased-attack-with-random-rule-generator-and-markov-optim-d70109/

Streamline your LLMNR poisoning workflow: Use Responder's -o and -F flags to output NTLMv1 hashes in Hashcat-compatible format for offline cracking with mode 5500. Works on Kali, Ubuntu, Parrot. #responder #snippet #hashcat #llmnr #ValtersIT

https://www.valtersit.com/vault/llmnr-poisoning-with-hashcatcompatible-output-63742d/

The latest release of Lockpicker allows you to pick multiple rule files when cracking your password. Set the order of the rules using simple drag and drop.

Get if from Flathub here: https://flathub.org/en/apps/se.sjoerd.lockpicker

#GNOME #Foss #OpenSource #Cybersecurity #Hashcat

Today I released Lockpicker 1.3. A tool to recover passwords from a hash without the hassle of #Hashcat syntax. At this stage, the UI is looking a lot more friendly with actual widgets instead of a console output. And controls placed more intuitively. I also added support for sessions.

You can pause sessions, or run multiple in parallel. Sessions persist over reboots, so you can pick up any time it's convenient.

Get it from Flathub https://flathub.org/en/apps/se.sjoerd.lockpicker

#GNOME #OpenSource #CyberSecurity

Lockpicker è un app open source per DE GNOME che consente di usare Hashcat in modo semplice e formativo su Linux. #Lockpicker #Hashcat #LinuxSecurity #GNOME #CyberTraining

https://www.linuxeasy.org/lockpicker-app-gnome-semplifica-recupero-password/?utm_source=mastodon&utm_medium=jetpack_social

Parsing modern ASP.NET Core Identity password hashes for password cracking with hashcat. https://www.pentagrid.ch/en/blog/parsing-modern-aspnet-core-identity-password-hashes-to-hashcat/ #itsecurity #infosec #hashcat #asp #dotnet

Reset — прохождение сложной машины от Tryhackme

Годная машина на тему Windows AD, Kerberos. В начале разведки получаем доступ к гостевой шаре. Оттуда достаем файл с паролем, но не знаем от какой учетной записи. Проводим разведку юзеров, получаем список и находим 1 пользователя к которому подходит этот пароль. Далее проводим разведку с помощью BloodHound и по цепочке получаем доступ к нескольким аккаунтам у последнего есть права Unconstrained Delegation Privilege на доменный компьютер. С помощью механизма S4U2self, запрашиваем билет на имя администратора и захватываем компьютер.

https://habr.com/ru/articles/1041620/

#windows #reset #kerberos #bloodhound #impacket #hashcat #asrep_roasting #delegation #activedirectory #active_directory

Hey, fellow hash crackers! What components do you use on your hash cracking rig(s)? Do tell!

https://forum.hashpwn.net/post/11837

#hashcracking #pc #linux #server #rig #infosec #hashcat #mdxfind #jtr #hashpwn

Congrats to HashMob for winning Crack the Con 2026!

1. #HashMob Lite
2. #PizzaPlannet
3. #hash_meltdown

https://forum.hashpwn.net/post/11819

#crackthecon #ctc #cyphercon #hashcat #hashpwn

Released pcfg-go — a full Go rewrite of pcfg_cracker with ~3× faster training, ~40× faster guessing, $HEX[] and multi-byte support, improved trainer parsing...

Full Details: https://forum.hashpwn.net/post/11277

#pcfg #hashcracking #trainer #guesser #wordlist #generator #hashcat #hashpwn

CsP’s @Waffle_Real just released a new tool called hashpipe, and it solves a problem many of us run into with large potfiles: messy, misidentified hash:password entries.

hashpipe automatically validates founds by recomputing them, identifying the correct algorithm, and outputting verified results in an mdxfind format.

If you maintain large cracking datasets or potfiles, this is a great way to verify and clean them up.

Details:
https://forum.hashpwn.net/post/11119

GitHub repo:
https://github.com/Cynosureprime/hashpipe

#hashcracking #hashcat #jtr #hashpipe #CsP #cynosureprime #potfile #hashpwn

running malcom but the old malcolm - need to image and install latest - sort of dread going from debian to ubuntu but if i image i can revert easily. maybe they figured out updating, i don't want github only updates.

anyways it is a good one to offer vs say security onion - they use the same components mostly, suricata, zeek, elastic, maybe he has a live iso like last time.

i think the reason to go to ubuntu is better newer drivers, bigger dev base? as long as it works - that is my concern, avoid dependency hell and breakage.

it is good with managing all the containers and space for /datastore #sigs #hashes #dpi #netflow #ntop-ng #tcp-replay #binaries #hashcat

🔧 Malcolm Integration
bash

# Malcolm's zeekctl.cfg or local.zeek
redef SSL::root_certs += {
["PolarProxy Root CA"] = "/opt/polarproxy/certs/rootCA.pem"
};

# In Malcolm's docker-compose.yml, ensure port mapping:
# zeek:
# ports:
# - "57012:57012/tcp" # For PolarProxy PCAP feed

30 protocols but what about hashcat - how many protocols now?

Hashcat Protocol Support Count - As of hashcat v6.2.6 (latest stable), here are the current protocol/hash mode counts:
Total Protocols/Hash Modes: 423+

(This number grows with nearly every release) #hashcat,net #zeek

New version of hashgen released.

v1.2.2

- added mode: halfmd5 -m 5100
- added mode: morsedecode

https://forum.hashpwn.net/post/89

#hashgen #md5 #halfmd5 #hashcat #morsecode #morsedecode #hashcracking #hashpwn

Standalone #password candidate generator using the PRINCE algorithm

https://github.com/hashcat/princeprocessor

#security #hashcat

Comme dans mon bureau il fait 13°C le matin et 16°C l’après midi j’ai relancé un audit des mots de passe sur #hashcat (GPU) et #John (CPU).
Un chouilla bruyant mais la température monte doucement ♨️

Demain ça devrait être à nouveau vivable.

Looking for a language specific wordlist? We are too! Share yours with the hashpwn community.

https://forum.hashpwn.net/post/7639

#hashpwn #wordlist #hashcracking #language #hashcat #jtr #dict #dictionary

Crackmon, a crack rate monitor for hashcat, now supports mdxfind in PR11.

Example: stop current attack if <100 cracks / 5 minutes.

crackmon -t 5 -c 100 hashcat {hashcat args}
or
crackmon -t 5 -c 100 mdxfind {mdxfind args}

https://forum.hashpwn.net/post/6138

#hashcat #mdxfind #hashcracking #hashpwn

A quick run down on some of the attacks and wordlist augmentation options in Hashcatalyst https://in.security/2025/11/11/hashcatalyst-automating-password-cracking

#hashcat

🚀 New Release: hashgen v1.2.0

Big update packed with new features:

• Added 22 new modes: MySQL5, phpass, md5crypt, sha256crypt, sha512crypt, WordPress bcrypt-HMAC-SHA384 (wpbcrypt), base32 encode/decode, plus multiple hashcat modes including salted algos
• Updated yescrypt defaults to match Debian 12
• Read full changelog:
https://forum.hashpwn.net/post/5810

#hashgen #hashcat #infosec #golang #hashcracking #hashpwn #yescrypt #wordpressbcrypt

Debian unstable and Devuan unstable now have bumped their hashcat from 6.x to hashcat 7.1.2.

#hashcat

nixpkgs and Slitaz "cooking" now have hashcat 7.1.2.

#hashcat

TUR (the Termux User Repository) now has hashcat 7.1.2!

#hashcat

SlackBuilds and Homebrew now have hashcat 7.1.2!

#hashcat

Since Wordpress v6.8, the default hash func produces a custom bcrypt hash: $wp$2y$10$...

More info on this custom algo, how it uses hmac-sha384, and how to crack them with hashcat.

https://forum.hashpwn.net/post/4205

#wordpress #bcrypt #wpbcrypt #hashcracking #hashpwn #hashgen #hashcat

🐉 Top 10 Kali Linux Tools — Essential Picks

Quick list of 10 widely-used Kali tools for recon, web testing, exploitation, and forensics — use only in labs or with explicit permission. ⚡🛡️

#KaliLinux #PenTesting #InfoSec #EthicalHacking #Nmap #Wireshark #Metasploit #BurpSuite #Hashcat #Forensics

Kali Linux rolling has bumped from hashcat 6.x to 7.1.2!

#hashcat #kali