naive-hashcat

KO | EN

gitlite — search

#hacktoberfest #react #ai #rust #deep-learning #linux #docker #windows #cli #kubernetes #mcp #ios #openai #open-source

(★ 1,415)

Crack password hashes without the fuss :cat2:

File Explorer

Download Latest Version (.zip)

- .gitkeep
- - DES_full.charset
- - changes.txt
  - contact.txt
  - credits.txt
  - license.txt
  - performance.txt
  - readme.txt
  - rules.txt
  - status_codes.txt
  - team.txt
  - user_manuals.txt
- - amp_a0.096b3bb3.kernel
  - amp_a0.58cb965c.kernel
  - amp_a0.5e6c8ae9.kernel
  - amp_a0.7607c47d.kernel
  - m00000_a0.f41eebf7.kernel
  - m00000_a1.2ac7f0f3.kernel
  - m00000_a1.f41eebf7.kernel
  - m00000_a3.f41eebf7.kernel
  - m00400.58cb965c.kernel
  - m00400.7607c47d.kernel
  - m00500.096b3bb3.kernel
  - m00500.5e6c8ae9.kernel
  - markov_le.2ac7f0f3.kernel
  - markov_le.f41eebf7.kernel
- - 8char-1l-1u-1d-1s-compliant.hcmask
  - 8char-1l-1u-1d-1s-noncompliant.hcmask
  - rockyou-1-60.hcmask
  - rockyou-2-1800.hcmask
  - rockyou-3-3600.hcmask
  - rockyou-4-43200.hcmask
  - rockyou-5-86400.hcmask
  - rockyou-6-864000.hcmask
  - rockyou-7-2592000.hcmask
- - amp_a0.cl
  - amp_a1.cl
  - amp_a3.cl
  - inc_cipher_aes.cl
  - inc_cipher_serpent.cl
  - inc_cipher_twofish.cl
  - inc_common.cl
  - inc_comp_multi.cl
  - inc_comp_multi_bs.cl
  - inc_comp_single.cl
  - inc_comp_single_bs.cl
  - inc_hash_constants.h
  - inc_hash_functions.cl
  - inc_luks_aes.cl
  - inc_luks_af.cl
  - inc_luks_essiv.cl
  - inc_luks_serpent.cl
  - inc_luks_twofish.cl
  - inc_luks_xts.cl
  - inc_rp.cl
  - inc_rp.h
  - inc_simd.cl
  - inc_truecrypt_crc32.cl
  - inc_truecrypt_xts.cl
  - inc_types.cl
  - inc_vendor.cl
  - m00000_a0.cl
  - m00000_a1.cl
  - m00000_a3.cl
  - m00010_a0.cl
  - m00010_a1.cl
  - m00010_a3.cl
  - m00020_a0.cl
  - m00020_a1.cl
  - m00020_a3.cl
  - m00030_a0.cl
  - m00030_a1.cl
  - m00030_a3.cl
  - m00040_a0.cl
  - m00040_a1.cl
  - m00040_a3.cl
  - m00050_a0.cl
  - m00050_a1.cl
  - m00050_a3.cl
  - m00060_a0.cl
  - m00060_a1.cl
  - m00060_a3.cl
  - m00100_a0.cl
  - m00100_a1.cl
  - m00100_a3.cl
  - m00110_a0.cl
  - m00110_a1.cl
  - m00110_a3.cl
  - m00120_a0.cl
  - m00120_a1.cl
  - m00120_a3.cl
  - m00130_a0.cl
  - m00130_a1.cl
  - m00130_a3.cl
  - m00140_a0.cl
  - m00140_a1.cl
  - m00140_a3.cl
  - m00150_a0.cl
  - m00150_a1.cl
  - m00150_a3.cl
  - m00160_a0.cl
  - m00160_a1.cl
  - m00160_a3.cl
  - m00200_a0.cl
  - m00200_a1.cl
  - m00200_a3.cl
  - m00300_a0.cl
  - m00300_a1.cl
  - m00300_a3.cl
  - m00400.cl
  - m00500.cl
  - m00600_a0.cl
  - m00600_a1.cl
  - m00600_a3.cl
  - m00900_a0.cl
  - m00900_a1.cl
  - m00900_a3.cl
  - m01000_a0.cl
  - m01000_a1.cl
  - m01000_a3.cl
  - m01100_a0.cl
  - m01100_a1.cl
  - m01100_a3.cl
  - m01300_a0.cl
  - m01300_a1.cl
  - m01300_a3.cl
  - m01400_a0.cl
  - m01400_a1.cl
  - m01400_a3.cl
  - m01410_a0.cl
  - m01410_a1.cl
  - m01410_a3.cl
  - m01420_a0.cl
  - m01420_a1.cl
  - m01420_a3.cl
  - m01430_a0.cl
  - m01430_a1.cl
  - m01430_a3.cl
  - m01440_a0.cl
  - m01440_a1.cl
  - m01440_a3.cl
  - m01450_a0.cl
  - m01450_a1.cl
  - m01450_a3.cl
  - m01460_a0.cl
  - m01460_a1.cl
  - m01460_a3.cl
  - m01500_a0.cl
  - m01500_a1.cl
  - m01500_a3.cl
  - m01600.cl
  - m01700_a0.cl
  - m01700_a1.cl
  - m01700_a3.cl
  - m01710_a0.cl
  - m01710_a1.cl
  - m01710_a3.cl
  - m01720_a0.cl
  - m01720_a1.cl
  - m01720_a3.cl
  - m01730_a0.cl
  - m01730_a1.cl
  - m01730_a3.cl
  - m01740_a0.cl
  - m01740_a1.cl
  - m01740_a3.cl
  - m01750_a0.cl
  - m01750_a1.cl
  - m01750_a3.cl
  - m01760_a0.cl
  - m01760_a1.cl
  - m01760_a3.cl
  - m01800.cl
  - m02000_a0.cl
  - m02000_a1.cl
  - m02000_a3.cl
  - m02100.cl
  - m02400_a0.cl
  - m02400_a1.cl
  - m02400_a3.cl
  - m02410_a0.cl
  - m02410_a1.cl
  - m02410_a3.cl
  - m02500.cl
  - m02610_a0.cl
  - m02610_a1.cl
  - m02610_a3.cl
  - m02710_a0.cl
  - m02710_a1.cl
  - m02710_a3.cl
  - m02810_a0.cl
  - m02810_a1.cl
  - m02810_a3.cl
  - m03000_a0.cl
  - m03000_a1.cl
  - m03000_a3.cl
  - m03100_a0.cl
  - m03100_a1.cl
  - m03100_a3.cl
  - m03200.cl
  - m03710_a0.cl
  - m03710_a1.cl
  - m03710_a3.cl
  - m03800_a0.cl
  - m03800_a1.cl
  - m03800_a3.cl
  - m03910_a0.cl
  - m03910_a1.cl
  - m03910_a3.cl
  - m04010_a0.cl
  - m04010_a1.cl
  - m04010_a3.cl
  - m04110_a0.cl
  - m04110_a1.cl
  - m04110_a3.cl
  - m04310_a0.cl
  - m04310_a1.cl
  - m04310_a3.cl
  - m04400_a0.cl
  - m04400_a1.cl
  - m04400_a3.cl
  - m04500_a0.cl
  - m04500_a1.cl
  - m04500_a3.cl
  - m04520_a0.cl
  - m04520_a1.cl
  - m04520_a3.cl
  - m04700_a0.cl
  - m04700_a1.cl
  - m04700_a3.cl
  - m04800_a0.cl
  - m04800_a1.cl
  - m04800_a3.cl
  - m04900_a0.cl
  - m04900_a1.cl
  - m04900_a3.cl
  - m05000_a0.cl
  - m05000_a1.cl
  - m05000_a3.cl
  - m05100_a0.cl
  - m05100_a1.cl
  - m05100_a3.cl
  - m05200.cl
  - m05300_a0.cl
  - m05300_a1.cl
  - m05300_a3.cl
  - m05400_a0.cl
  - m05400_a1.cl
  - m05400_a3.cl
  - m05500_a0.cl
  - m05500_a1.cl
  - m05500_a3.cl
  - m05600_a0.cl
  - m05600_a1.cl
  - m05600_a3.cl
  - m05800.cl
  - m06000_a0.cl
  - m06000_a1.cl
  - m06000_a3.cl
  - m06100_a0.cl
  - m06100_a1.cl
  - m06100_a3.cl
  - m06211.cl
  - m06212.cl
  - m06213.cl
  - m06221.cl
  - m06222.cl
  - m06223.cl
  - m06231.cl
  - m06232.cl
  - m06233.cl
  - m06300.cl
  - m06400.cl
  - m06500.cl
  - m06600.cl
  - m06700.cl
  - m06800.cl
  - m06900_a0.cl
  - m06900_a1.cl
  - m06900_a3.cl
  - m07000_a0.cl
  - m07000_a1.cl
  - m07000_a3.cl
  - m07100.cl
  - m07300_a0.cl
  - m07300_a1.cl
  - m07300_a3.cl
  - m07400.cl
  - m07500_a0.cl
  - m07500_a1.cl
  - m07500_a3.cl
  - m07700_a0.cl
  - m07700_a1.cl
  - m07700_a3.cl
  - m07800_a0.cl
  - m07800_a1.cl
  - m07800_a3.cl
  - m07900.cl
  - m08000_a0.cl
  - m08000_a1.cl
  - m08000_a3.cl
  - m08100_a0.cl
  - m08100_a1.cl
  - m08100_a3.cl
  - m08200.cl
  - m08300_a0.cl
  - m08300_a1.cl
  - m08300_a3.cl
  - m08400_a0.cl
  - m08400_a1.cl
  - m08400_a3.cl
  - m08500_a0.cl
  - m08500_a1.cl
  - m08500_a3.cl
  - m08600_a0.cl
  - m08600_a1.cl
  - m08600_a3.cl
  - m08700_a0.cl
  - m08700_a1.cl
  - m08700_a3.cl
  - m08800.cl
  - m08900.cl
  - m09000.cl
  - m09100.cl
  - m09400.cl
  - m09500.cl
  - m09600.cl
  - m09700_a0.cl
  - m09700_a1.cl
  - m09700_a3.cl
  - m09710_a0.cl
  - m09710_a1.cl
  - m09710_a3.cl
  - m09720_a0.cl
  - m09720_a1.cl
  - m09720_a3.cl
  - m09800_a0.cl
  - m09800_a1.cl
  - m09800_a3.cl
  - m09810_a0.cl
  - m09810_a1.cl
  - m09810_a3.cl
  - m09820_a0.cl
  - m09820_a1.cl
  - m09820_a3.cl
  - m09900_a0.cl
  - m09900_a1.cl
  - m09900_a3.cl
  - m10100_a0.cl
  - m10100_a1.cl
  - m10100_a3.cl
  - m10300.cl
  - m10400_a0.cl
  - m10400_a1.cl
  - m10400_a3.cl
  - m10410_a0.cl
  - m10410_a1.cl
  - m10410_a3.cl
  - m10420_a0.cl
  - m10420_a1.cl
  - m10420_a3.cl
  - m10500.cl
  - m10700.cl
  - m10800_a0.cl
  - m10800_a1.cl
  - m10800_a3.cl
  - m10900.cl
  - m11000_a0.cl
  - m11000_a1.cl
  - m11000_a3.cl
  - m11100_a0.cl
  - m11100_a1.cl
  - m11100_a3.cl
  - m11200_a0.cl
  - m11200_a1.cl
  - m11200_a3.cl
  - m11300.cl
  - m11400_a0.cl
  - m11400_a1.cl
  - m11400_a3.cl
  - m11500_a0.cl
  - m11500_a1.cl
  - m11500_a3.cl
  - m11600.cl
  - m11700_a0.cl
  - m11700_a1.cl
  - m11700_a3.cl
  - m11800_a0.cl
  - m11800_a1.cl
  - m11800_a3.cl
  - m11900.cl
  - m12000.cl
  - m12200.cl
  - m12300.cl
  - m12400.cl
  - m12500.cl
  - m12600_a0.cl
  - m12600_a1.cl
  - m12600_a3.cl
  - m12700.cl
  - m12800.cl
  - m12900.cl
  - m13000.cl
  - m13100_a0.cl
  - m13100_a1.cl
  - m13100_a3.cl
  - m13200.cl
  - m13300_a0.cl
  - m13300_a1.cl
  - m13300_a3.cl
  - m13400.cl
  - m13500_a0.cl
  - m13500_a1.cl
  - m13500_a3.cl
  - m13600.cl
  - m13751.cl
  - m13752.cl
  - m13753.cl
  - m13800_a0.cl
  - m13800_a1.cl
  - m13800_a3.cl
  - m13900_a0.cl
  - m13900_a1.cl
  - m13900_a3.cl
  - m14000_a0.cl
  - m14000_a1.cl
  - m14000_a3.cl
  - m14100_a0.cl
  - m14100_a1.cl
  - m14100_a3.cl
  - m14400_a0.cl
  - m14400_a1.cl
  - m14400_a3.cl
  - m14611.cl
  - m14612.cl
  - m14613.cl
  - m14621.cl
  - m14622.cl
  - m14623.cl
  - m14631.cl
  - m14632.cl
  - m14633.cl
  - m14641.cl
  - m14642.cl
  - m14643.cl
  - m14700.cl
  - m14800.cl
  - m14900_a0.cl
  - m14900_a1.cl
  - m14900_a3.cl
  - m15000_a0.cl
  - m15000_a1.cl
  - m15000_a3.cl
  - m15100.cl
  - m15300.cl
  - m15400_a0.cl
  - m15400_a1.cl
  - m15400_a3.cl
  - m15500_a0.cl
  - m15500_a1.cl
  - m15500_a3.cl
  - m15600.cl
  - m15700.cl
  - markov_be.cl
  - markov_le.cl
- - best64.rule
  - combinator.rule
  - d3ad0ne.rule
  - dive.rule
  - generated.rule
  - generated2.rule
  - Incisive-leetspeak.rule
  - InsidePro-HashManager.rule
  - InsidePro-PasswordsPro.rule
  - leetspeak.rule
  - oscommerce.rule
  - rockyou-30000.rule
  - specific.rule
  - T0XlC-insert_00-99_1950-2050_toprules_0_F.rule
  - T0XlC-insert_space_and_special_0_F.rule
  - T0XlC-insert_top_100_passwords_1_G.rule
  - T0XlC.rule
  - T0XlCv1.rule
  - toggles1.rule
  - toggles2.rule
  - toggles3.rule
  - toggles4.rule
  - toggles5.rule
  - unix-ninja-leetspeak.rule
- example.dict
- example0.cmd
- example0.hash
- example0.sh
- example400.cmd
- example400.hash
- example400.sh
- example500.cmd
- example500.hash
- example500.sh
- hashcat.dictstat
- hashcat.hcstat
- hashcat.hctune
- hashcat.log
- hashcat.potfile
- hashcat32.bin
- hashcat32.exe
- hashcat64.bin
- hashcat64.exe
.gitignore
build-hashcat-osx.sh
LICENSE
match-creds.py
naive-hashcat.sh
README.md

// repository documentation

Was this content helpful?

★ 0 (0 ratings)

# Naive Hashcat

Crack password hashes without the fuss. Naive hashcat is a plug-and-play script that is pre-configured with naive, emperically-tested, "good enough" parameters/attack types. Run hashcat attacks using `./naive-hashcat.sh` without having to know what is going on "under the hood".

__DISCLAIMER: This software is for educational purposes only. This software should not be used for illegal activity. The author is not responsible for its use. Don't be a dick.__

## Getting started

```bash
git clone https://github.com/brannondorsey/naive-hashcat
cd naive-hashcat

# if you are on MacOS/OSX, run this. If on linux or windows, skip...
./build-hashcat-osx.sh

# download the 134MB rockyou dictionary file
curl -L -o dicts/rockyou.txt https://github.com/brannondorsey/naive-hashcat/releases/download/data/rockyou.txt

# cracks md5 hashes in hashcat-3.6.0/example0.hash by default
./naive-hashcat.sh
```

## What it do?

`./naive-hashcat.sh` assumes that you have hashed passwords that you would like to know the plaintext equivalent of. Likely, you've come across a text file that contains leaked accounts/emails/usernames matched with a cryptographic hash of a corresponding password. Esentially something that looks like:

```
neli_dayanti@yahoo.co.id:01e870ebb01160f881ffaa6764acd01f
hastomoanggi@gmail.com:f15a413c1835014679a286ee84a212d4
yogipandu86@gmail.com:e4fdf3291654751def4e6816fddce608
fadlilamegy1@gmail.com:8ebd79c9b13240ab3767a64b4faae7be
ridho6kr@gmail.com:33816712db4f3913ee967469fe7ee982
yogaardamanta17@gmail.com:3e46fb7125915cdf34df21342004f82f
yogahadikusuma@gmail.com:bf0e20a03a01ae215deb9b36e173cd9a
```

(⬆⬆⬆ not real hashes btw, don't get any ideas...)

If you don't have such a file, [pastebin.com](http://pastebin.com) is a popular text paste site that black-hat hackers 💙 love 💙 posting leaked account credentials to. And lucky 4 u, they have a [trending feature](https://pastebin.com/trends) that makes "interesting content" bubble to the top. If you can't find leaked creds atm, I've written a [tool that archives trending pastes](https://github.com/brannondorsey/pastebin-mirror) each hour.

Once you've got some hashes, save them to a file with one hash per line. For example, `hashes.txt`:

```
01e870ebb01160f881ffaa6764acd01f
f15a413c1835014679a286ee84a212d4
e4fdf3291654751def4e6816fddce608
8ebd79c9b13240ab3767a64b4faae7be
33816712db4f3913ee967469fe7ee982
3e46fb7125915cdf34df21342004f82f
bf0e20a03a01ae215deb9b36e173cd9a
```

To crack your hashes, pass this file as `HASH_FILE=hashes.txt` to the command below.

## Usage

`naive-hashcat.sh` takes, at most, three parameters. All parameters are expressed using unix environment variables. The command below shows the default values set for each of the configurable environment variables that `naive-hashcat.sh` uses:

```bash
HASH_FILE=hashcat-3.6.0/examples0.hash POT_FILE=hashcat.pot HASH_TYPE=0 ./naive-hashcat.sh
```

- `HASH_FILE` is a text file with one hash per line. These are the password hashes to be cracked.
- `POT_FILE` is the name of the output file that `hashcat` will write cracked password hashes to.
- `HASH_TYPE` is the hash-type code. It describes the type of hash to be cracked. `0` is [md5](https://en.wikipedia.org/wiki/MD5). See the [Hash types](#hash-types) section below for a full list of hash type codes.

## What naive-hashcat does

[`naive-hashcat.sh`](naive-hashcat.sh) includes a small variety of [dictionary](https://hashcat.net/wiki/doku.php?id=dictionary_attack), [combination](https://hashcat.net/wiki/doku.php?id=combinator_attack), [rule-based](https://hashcat.net/wiki/doku.php?id=rule_based_attack), and [mask](https://hashcat.net/wiki/doku.php?id=mask_attack) (brute-force) attacks. If that sounds overwhelming, don't worry about it! The point of naive hashcat is that you don't have to know how it works. In this case, ignorance is bliss! In fact, I barely know what I'm doing here. The attacks I chose for `naive-hashcat.sh` are very naive, one-size-kinda-fits-all solutions. If you are having trouble cracking your hashes, I suggest checking out the __awesome__ [hashcat wiki](https://hashcat.net/wiki/), and using the `hashcat` tool directly.

At the time of this writing, `naive-hashcat` cracks ~60% of the hashes in `examples0.hash`.

## Ok, I think its working... what do I do now?

So you've run `./naive-hashcat.sh` on your `HASH_FILE`, and you see some passwords printing to the screen. These `hash:password` pairs are saved to the `POT_FILE` (`hashcat.pot` by default). Now you need to match the hashes from the original file you... um... found (the with lines like `neli_dayanti@yahoo.co.id:01e870ebb01160f881ffaa6764acd01f`) to the `hash:password` pairs in your pot file.

Run `python match-creds.py --accounts original_file.txt --potfile hashcat.pot > creds.txt` to do just that! This tool matches usernames/emails in `original_file.txt` with their corresponding cracked passwords in `hashcat.pot` and prints `username:password`:

```
neli_dayanti@yahoo.co.id:Password1
hastomoanggi@gmail.com:Qwerty1234
yogipandu86@gmail.com:PleaseForHeavenSakeUseAPasswordManager
```

Congratulations, you just hacked the private passwords/account information of many poor souls. And because everyone still uses the same password for everything you likely have the "master" password to tons of accounts.

And remember
  1. use a [password manager](https://www.lastpass.com/)
  2. don't pwn people
  3. don't go to jail

🏴‍ Happy hacking ☠

P.S. `./naive-hashcat.sh` can take anywhere from a few minutes to a few hours to terminate depending on your hardware. It will constantly stream results to the `POT_FILE`, and you are free to use the contents of that file for further processing with `match-creds.py` before cracking is finished.

## GPU Cracking

Hashcat ships with OpenCL and runs on available GPU hardware automatically when available.

## Hash types

Below is a list of hash-type codes supported by hashcat. If you don't know the type of hash you have, you can use [`hashid`](https://github.com/psypanda/hashID) to try and identify it. Include the appropriate hash-type using the `HASH_TYPE` environment variable.

```
    #   | Name                                             | Category
  ======+==================================================+======================================
    900 | MD4                                              | Raw Hash
      0 | MD5                                              | Raw Hash
   5100 | Half MD5                                         | Raw Hash
    100 | SHA1                                             | Raw Hash
   1300 | SHA-224                                          | Raw Hash
   1400 | SHA-256                                          | Raw Hash
  10800 | SHA-384                                          | Raw Hash
   1700 | SHA-512                                          | Raw Hash
   5000 | SHA-3 (Keccak)                                   | Raw Hash
    600 | BLAKE2b-512                                      | Raw Hash
  10100 | SipHash                                          | Raw Hash
   6000 | RIPEMD-160                                       | Raw Hash
   6100 | Whirlpool                                        | Raw Hash
   6900 | GOST R 34.11-94                                  | Raw Hash
  11700 | GOST R 34.11-2012 (Streebog) 256-bit             | Raw Hash
  11800 | GOST R 34.11-2012 (Streebog) 512-bit             | Raw Hash
     10 | md5($pass.$salt)                                 | Raw Hash, Salted and/or Iterated
     20 | md5($salt.$pass)                                 | Raw Hash, Salted and/or Iterated
     30 | md5(utf16le($pass).$salt)                        | Raw Hash, Salted and/or Iterated
     40 | md5($salt.utf16le($pass))                        | Raw Hash, Salted and/or Iterated
   3800 | md5($salt.$pass.$salt)                           | Raw Hash, Salted and/or Iterated
   3710 | md5($salt.md5($pass))                            | Raw Hash, Salted and/or Iterated
   4010 | md5($salt.md5($salt.$pass))                      | Raw Hash, Salted and/or Iterated
   4110 | md5($salt.md5($pass.$salt))                      | Raw Hash, Salted and/or Iterated
   2600 | md5(md5($pass))                                  | Raw Hash, Salted and/or Iterated
   3910 | md5(md5($pass).md5($salt))                       | Raw Hash, Salted and/or Iterated
   4300 | md5(strtoupper(md5($pass)))                      | Raw Hash, Salted and/or Iterated
   4400 | md5(sha1($pass))                                 | Raw Hash, Salted and/or Iterated
    110 | sha1($pass.$salt)                                | Raw Hash, Salted and/or Iterated
    120 | sha1($salt.$pass)                                | Raw Hash, Salted and/or Iterated
    130 | sha1(utf16le($pass).$salt)                       | Raw Hash, Salted and/or Iterated
    140 | sha1($salt.utf16le($pass))                       | Raw Hash, Salted and/or Iterated
   4500 | sha1(sha1($pass))                                | Raw Hash, Salted and/or Iterated
   4520 | sha1($salt.sha1($pass))                          | Raw Hash, Salted and/or Iterated
   4700 | sha1(md5($pass))                                 | Raw Hash, Salted and/or Iterated
   4900 | sha1($salt.$pass.$salt)                          | Raw Hash, Salted and/or Iterated
  14400 | sha1(CX)                                         | Raw Hash, Salted and/or Iterated
   1410 | sha256($pass.$salt)                              | Raw Hash, Salted and/or Iterated
   1420 | sha256($salt.$pass)                              | Raw Hash, Salted and/or Iterated
   1430 | sha256(utf16le($pass).$salt)                     | Raw Hash, Salted and/or Iterated
   1440 | sha256($salt.utf16le($pass))                     | Raw Hash, Salted and/or Iterated
   1710 | sha512($pass.$salt)                              | Raw Hash, Salted and/or Iterated
   1720 | sha512($salt.$pass)                              | Raw Hash, Salted and/or Iterated
   1730 | sha512(utf16le($pass).$salt)                     | Raw Hash, Salted and/or Iterated
   1740 | sha512($salt.utf16le($pass))                     | Raw Hash, Salted and/or Iterated
     50 | HMAC-MD5 (key = $pass)                           | Raw Hash, Authenticated
     60 | HMAC-MD5 (key = $salt)                           | Raw Hash, Authenticated
    150 | HMAC-SHA1 (key = $pass)                          | Raw Hash, Authenticated
    160 | HMAC-SHA1 (key = $salt)                          | Raw Hash, Authenticated
   1450 | HMAC-SHA256 (key = $pass)                        | Raw Hash, Authenticated
   1460 | HMAC-SHA256 (key = $salt)                        | Raw Hash, Authenticated
   1750 | HMAC-SHA512 (key = $pass)                        | Raw Hash, Authenticated
   1760 | HMAC-SHA512 (key = $salt)                        | Raw Hash, Authenticated
  14000 | DES (PT = $salt, key = $pass)                    | Raw Cipher, Known-Plaintext attack
  14100 | 3DES (PT = $salt, key = $pass)                   | Raw Cipher, Known-Plaintext attack
  14900 | Skip32 (PT = $salt, key = $pass)                 | Raw Cipher, Known-Plaintext attack
  15400 | ChaCha20                                         | Raw Cipher, Known-Plaintext attack
    400 | phpass                                           | Generic KDF
   8900 | scrypt                                           | Generic KDF
  11900 | PBKDF2-HMAC-MD5                                  | Generic KDF
  12000 | PBKDF2-HMAC-SHA1                                 | Generic KDF
  10900 | PBKDF2-HMAC-SHA256                               | Generic KDF
  12100 | PBKDF2-HMAC-SHA512                               | Generic KDF
     23 | Skype                                            | Network Protocols
   2500 | WPA/WPA2                                         | Network Protocols
   4800 | iSCSI CHAP authentication, MD5(CHAP)             | Network Protocols
   5300 | IKE-PSK MD5                                      | Network Protocols
   5400 | IKE-PSK SHA1                                     | Network Protocols
   5500 | NetNTLMv1                                        | Network Protocols
   5500 | NetNTLMv1+ESS                                    | Network Protocols
   5600 | NetNTLMv2                                        | Network Protocols
   7300 | IPMI2 RAKP HMAC-SHA1                             | Network Protocols
   7500 | Kerberos 5 AS-REQ Pre-Auth etype 23              | Network Protocols
   8300 | DNSSEC (NSEC3)                                   | Network Protocols
  10200 | CRAM-MD5                                         | Network Protocols
  11100 | PostgreSQL CRAM (MD5)                            | Network Protocols
  11200 | MySQL CRAM (SHA1)                                | Network Protocols
  11400 | SIP digest authentication (MD5)                  | Network Protocols
  13100 | Kerberos 5 TGS-REP etype 23                      | Network Protocols
    121 | SMF (Simple Machines Forum) > v1.1               | Forums, CMS, E-Commerce, Frameworks
    400 | phpBB3 (MD5)                                     | Forums, CMS, E-Commerce, Frameworks
   2611 | vBulletin < v3.8.5                               | Forums, CMS, E-Commerce, Frameworks
   2711 | vBulletin >= v3.8.5                              | Forums, CMS, E-Commerce, Frameworks
   2811 | MyBB 1.2+                                        | Forums, CMS, E-Commerce, Frameworks
   2811 | IPB2+ (Invision Power Board)                     | Forums, CMS, E-Commerce, Frameworks
   8400 | WBB3 (Woltlab Burning Board)                     | Forums, CMS, E-Commerce, Frameworks
     11 | Joomla < 2.5.18                                  | Forums, CMS, E-Commerce, Frameworks
    400 | Joomla >= 2.5.18 (MD5)                           | Forums, CMS, E-Commerce, Frameworks
    400 | WordPress (MD5)                                  | Forums, CMS, E-Commerce, Frameworks
   2612 | PHPS                                             | Forums, CMS, E-Commerce, Frameworks
   7900 | Drupal7                                          | Forums, CMS, E-Commerce, Frameworks
     21 | osCommerce                                       | Forums, CMS, E-Commerce, Frameworks
     21 | xt:Commerce                                      | Forums, CMS, E-Commerce, Frameworks
  11000 | PrestaShop                                       | Forums, CMS, E-Commerce, Frameworks
    124 | Django (SHA-1)                                   | Forums, CMS, E-Commerce, Frameworks
  10000 | Django (PBKDF2-SHA256)                           | Forums, CMS, E-Commerce, Frameworks
   3711 | MediaWiki B type                                 | Forums, CMS, E-Commerce, Frameworks
  13900 | OpenCart                                         | Forums, CMS, E-Commerce, Frameworks
   4521 | Redmine                                          | Forums, CMS, E-Commerce, Frameworks
   4522 | PunBB                                            | Forums, CMS, E-Commerce, Frameworks
  12001 | Atlassian (PBKDF2-HMAC-SHA1)                     | Forums, CMS, E-Commerce, Frameworks
     12 | PostgreSQL                                       | Database Server
    131 | MSSQL (2000)                                     | Database Server
    132 | MSSQL (2005)                                     | Database Server
   1731 | MSSQL (2012, 2014)                               | Database Server
    200 | MySQL323                                         | Database Server
    300 | MySQL4.1/MySQL5                                  | Database Server
   3100 | Oracle H: Type (Oracle 7+)                       | Database Server
    112 | Oracle S: Type (Oracle 11+)                      | Database Server
  12300 | Oracle T: Type (Oracle 12+)                      | Database Server
   8000 | Sybase ASE                                       | Database Server
    141 | Episerver 6.x < .NET 4                           | HTTP, SMTP, LDAP Server
   1441 | Episerver 6.x >= .NET 4                          | HTTP, SMTP, LDAP Server
   1600 | Apache $apr1$ MD5, md5apr1, MD5 (APR)            | HTTP, SMTP, LDAP Server
  12600 | ColdFusion 10+                                   | HTTP, SMTP, LDAP Server
   1421 | hMailServer                                      | HTTP, SMTP, LDAP Server
    101 | nsldap, SHA-1(Base64), Netscape LDAP SHA         | HTTP, SMTP, LDAP Server
    111 | nsldaps, SSHA-1(Base64), Netscape LDAP SSHA      | HTTP, SMTP, LDAP Server
   1411 | SSHA-256(Base64), LDAP {SSHA256}                 | HTTP, SMTP, LDAP Server
   1711 | SSHA-512(Base64), LDAP {SSHA512}                 | HTTP, SMTP, LDAP Server
  15000 | FileZilla Server >= 0.9.55                       | FTP Server
  11500 | CRC32                                            | Checksums
   3000 | LM                                               | Operating Systems
   1000 | NTLM                                             | Operating Systems
   1100 | Domain Cached Credentials (DCC), MS Cache        | Operating Systems
   2100 | Domain Cached Credentials 2 (DCC2), MS Cache 2   | Operating Systems
  15300 | DPAPI masterkey file v1 and v2                   | Operating Systems
  12800 | MS-AzureSync  PBKDF2-HMAC-SHA256                 | Operating Systems
   1500 | descrypt, DES (Unix), Traditional DES            | Operating Systems
  12400 | BSDi Crypt, Extended DES                         | Operating Systems
    500 | md5crypt, MD5 (Unix), Cisco-IOS $1$ (MD5)        | Operating Systems
   3200 | bcrypt $2*$, Blowfish (Unix)                     | Operating Systems
   7400 | sha256crypt $5$, SHA256 (Unix)                   | Operating Systems
   1800 | sha512crypt $6$, SHA512 (Unix)                   | Operating Systems
    122 | OSX v10.4, OSX v10.5, OSX v10.6                  | Operating Systems
   1722 | OSX v10.7                                        | Operating Systems
   7100 | OSX v10.8+ (PBKDF2-SHA512)                       | Operating Systems
   6300 | AIX {smd5}                                       | Operating Systems
   6700 | AIX {ssha1}                                      | Operating Systems
   6400 | AIX {ssha256}                                    | Operating Systems
   6500 | AIX {ssha512}                                    | Operating Systems
   2400 | Cisco-PIX MD5                                    | Operating Systems
   2410 | Cisco-ASA MD5                                    | Operating Systems
    500 | Cisco-IOS $1$ (MD5)                              | Operating Systems
   5700 | Cisco-IOS type 4 (SHA256)                        | Operating Systems
   9200 | Cisco-IOS $8$ (PBKDF2-SHA256)                    | Operating Systems
   9300 | Cisco-IOS $9$ (scrypt)                           | Operating Systems
     22 | Juniper NetScreen/SSG (ScreenOS)                 | Operating Systems
    501 | Juniper IVE                                      | Operating Systems
  15100 | Juniper/NetBSD sha1crypt                         | Operating Systems
   7000 | FortiGate (FortiOS)                              | Operating Systems
   5800 | Samsung Android Password/PIN                     | Operating Systems
  13800 | Windows Phone 8+ PIN/password                    | Operating Systems
   8100 | Citrix NetScaler                                 | Operating Systems
   8500 | RACF                                             | Operating Systems
   7200 | GRUB 2                                           | Operating Systems
   9900 | Radmin2                                          | Operating Systems
    125 | ArubaOS                                          | Operating Systems
   7700 | SAP CODVN B (BCODE)                              | Enterprise Application Software (EAS)
   7800 | SAP CODVN F/G (PASSCODE)                         | Enterprise Application Software (EAS)
  10300 | SAP CODVN H (PWDSALTEDHASH) iSSHA-1              | Enterprise Application Software (EAS)
   8600 | Lotus Notes/Domino 5                             | Enterprise Application Software (EAS)
   8700 | Lotus Notes/Domino 6                             | Enterprise Application Software (EAS)
   9100 | Lotus Notes/Domino 8                             | Enterprise Application Software (EAS)
    133 | PeopleSoft                                       | Enterprise Application Software (EAS)
  13500 | PeopleSoft PS_TOKEN                              | Enterprise Application Software (EAS)
  11600 | 7-Zip                                            | Archives
  12500 | RAR3-hp                                          | Archives
  13000 | RAR5                                             | Archives
  13200 | AxCrypt                                          | Archives
  13300 | AxCrypt in-memory SHA1                           | Archives
  13600 | WinZip                                           | Archives
  14700 | iTunes backup < 10.0                             | Backup
  14800 | iTunes backup >= 10.0                            | Backup
   62XY | TrueCrypt                                        | Full-Disk Encryption (FDE)
     X  | 1 = PBKDF2-HMAC-RIPEMD160                        | Full-Disk Encryption (FDE)
     X  | 2 = PBKDF2-HMAC-SHA512                           | Full-Disk Encryption (FDE)
     X  | 3 = PBKDF2-HMAC-Whirlpool                        | Full-Disk Encryption (FDE)
     X  | 4 = PBKDF2-HMAC-RIPEMD160 + boot-mode            | Full-Disk Encryption (FDE)
      Y | 1 = XTS  512 bit pure AES                        | Full-Disk Encryption (FDE)
      Y | 1 = XTS  512 bit pure Serpent                    | Full-Disk Encryption (FDE)
      Y | 1 = XTS  512 bit pure Twofish                    | Full-Disk Encryption (FDE)
      Y | 2 = XTS 1024 bit pure AES                        | Full-Disk Encryption (FDE)
      Y | 2 = XTS 1024 bit pure Serpent                    | Full-Disk Encryption (FDE)
      Y | 2 = XTS 1024 bit pure Twofish                    | Full-Disk Encryption (FDE)
      Y | 2 = XTS 1024 bit cascaded AES-Twofish            | Full-Disk Encryption (FDE)
      Y | 2 = XTS 1024 bit cascaded Serpent-AES            | Full-Disk Encryption (FDE)
      Y | 2 = XTS 1024 bit cascaded Twofish-Serpent        | Full-Disk Encryption (FDE)
      Y | 3 = XTS 1536 bit all                             | Full-Disk Encryption (FDE)
   8800 | Android FDE <= 4.3                               | Full-Disk Encryption (FDE)
  12900 | Android FDE (Samsung DEK)                        | Full-Disk Encryption (FDE)
  12200 | eCryptfs                                         | Full-Disk Encryption (FDE)
  137XY | VeraCrypt                                        | Full-Disk Encryption (FDE)
     X  | 1 = PBKDF2-HMAC-RIPEMD160                        | Full-Disk Encryption (FDE)
     X  | 2 = PBKDF2-HMAC-SHA512                           | Full-Disk Encryption (FDE)
     X  | 3 = PBKDF2-HMAC-Whirlpool                        | Full-Disk Encryption (FDE)
     X  | 4 = PBKDF2-HMAC-RIPEMD160 + boot-mode            | Full-Disk Encryption (FDE)
     X  | 5 = PBKDF2-HMAC-SHA256                           | Full-Disk Encryption (FDE)
     X  | 6 = PBKDF2-HMAC-SHA256 + boot-mode               | Full-Disk Encryption (FDE)
      Y | 1 = XTS  512 bit pure AES                        | Full-Disk Encryption (FDE)
      Y | 1 = XTS  512 bit pure Serpent                    | Full-Disk Encryption (FDE)
      Y | 1 = XTS  512 bit pure Twofish                    | Full-Disk Encryption (FDE)
      Y | 2 = XTS 1024 bit pure AES                        | Full-Disk Encryption (FDE)
      Y | 2 = XTS 1024 bit pure Serpent                    | Full-Disk Encryption (FDE)
      Y | 2 = XTS 1024 bit pure Twofish                    | Full-Disk Encryption (FDE)
      Y | 2 = XTS 1024 bit cascaded AES-Twofish            | Full-Disk Encryption (FDE)
      Y | 2 = XTS 1024 bit cascaded Serpent-AES            | Full-Disk Encryption (FDE)
      Y | 2 = XTS 1024 bit cascaded Twofish-Serpent        | Full-Disk Encryption (FDE)
      Y | 3 = XTS 1536 bit all                             | Full-Disk Encryption (FDE)
  14600 | LUKS                                             | Full-Disk Encryption (FDE)
   9700 | MS Office <= 2003 $0/$1, MD5 + RC4               | Documents
   9710 | MS Office <= 2003 $0/$1, MD5 + RC4, collider #1  | Documents
   9720 | MS Office <= 2003 $0/$1, MD5 + RC4, collider #2  | Documents
   9800 | MS Office <= 2003 $3/$4, SHA1 + RC4              | Documents
   9810 | MS Office <= 2003 $3, SHA1 + RC4, collider #1    | Documents
   9820 | MS Office <= 2003 $3, SHA1 + RC4, collider #2    | Documents
   9400 | MS Office 2007                                   | Documents
   9500 | MS Office 2010                                   | Documents
   9600 | MS Office 2013                                   | Documents
  10400 | PDF 1.1 - 1.3 (Acrobat 2 - 4)                    | Documents
  10410 | PDF 1.1 - 1.3 (Acrobat 2 - 4), collider #1       | Documents
  10420 | PDF 1.1 - 1.3 (Acrobat 2 - 4), collider #2       | Documents
  10500 | PDF 1.4 - 1.6 (Acrobat 5 - 8)                    | Documents
  10600 | PDF 1.7 Level 3 (Acrobat 9)                      | Documents
  10700 | PDF 1.7 Level 8 (Acrobat 10 - 11)                | Documents
   9000 | Password Safe v2                                 | Password Managers
   5200 | Password Safe v3                                 | Password Managers
   6800 | LastPass + LastPass sniffed                      | Password Managers
   6600 | 1Password, agilekeychain                         | Password Managers
   8200 | 1Password, cloudkeychain                         | Password Managers
  11300 | Bitcoin/Litecoin wallet.dat                      | Password Managers
  12700 | Blockchain, My Wallet                            | Password Managers
  15200 | Blockchain, My Wallet, V2                        | Password Managers
  13400 | KeePass 1 (AES/Twofish) and KeePass 2 (AES)      | Password Managers
  15500 | JKS Java Key Store Private Keys (SHA1)           | Password Managers
  15600 | Ethereum Wallet, PBKDF2-HMAC-SHA256              | Password Managers
  15700 | Ethereum Wallet, SCRYPT                          | Password Managers
  99999 | Plaintext                                        | Plaintext
```

naive-hashcat

File Explorer

Today's picks

Was this content helpful?

Recent Feedback

naive-hashcat

File Explorer

Today's picks

Was this content helpful?

Recent Feedback

Download README