Credential Access
Hashcat
GPU-accelerated password cracking.
credentialscracking
hashcat — terminal
$ hashcat -m 1000 hashes.txt rockyou.txtWhat it does
Hashcat cracks a huge range of hash types using GPUs, with dictionary, rule, mask, and hybrid attacks. It's the de facto tool for offline password recovery.
Common use cases
- •Crack NTLM hashes from a domain controller dump to recover plaintext user passwords.
- •Recover WPA/WPA2 handshake PSK from captured wireless traffic using brute-force.
- •Audit organizational password strength by cracking exported Linux shadow-file hashes.
Key features
- •Leverages GPU acceleration for massively parallel hash-cracking throughput.
- •Supports 300+ hash types including NTLM, SHA, bcrypt, scrypt, and Kerberos.
- •Offers dictionary, combinator, mask, and rule-based attack modes.
- •Supports session save and restore for resuming long cracking sessions.
Source
https://github.com/hashcat/hashcat ↗More Credential Access tools
Need hosted scanning instead of local tooling?
Run a scan in the browser →