VulnScanners Logo

Credential Access

Hashcat

GPU-accelerated password cracking.

credentialscracking
hashcat — terminal
$ hashcat -m 1000 hashes.txt rockyou.txt

What it does

Hashcat cracks a huge range of hash types using GPUs, with dictionary, rule, mask, and hybrid attacks. It's the de facto tool for offline password recovery.

Common use cases

  • Crack NTLM hashes from a domain controller dump to recover plaintext user passwords.
  • Recover WPA/WPA2 handshake PSK from captured wireless traffic using brute-force.
  • Audit organizational password strength by cracking exported Linux shadow-file hashes.

Key features

  • Leverages GPU acceleration for massively parallel hash-cracking throughput.
  • Supports 300+ hash types including NTLM, SHA, bcrypt, scrypt, and Kerberos.
  • Offers dictionary, combinator, mask, and rule-based attack modes.
  • Supports session save and restore for resuming long cracking sessions.

Source

https://github.com/hashcat/hashcat

More Credential Access tools

Need hosted scanning instead of local tooling?

Run a scan in the browser →