cheatsheets

hashcat

Basic Usage

# Run hashcat in quiet mode (suppress output)
hashcat --quiet

# Display status every 10 seconds
hashcat --quiet --status --status-timer=10

# Basic usage
hashcat -m <hash_type> -a <attack_mode> <hash_file> <wordlist>

# Example: Crack MD5 hashes using a wordlist
hashcat -m 0 -a 0 hashes.txt wordlist.txt

# Example: Brute-force attack on a single hash
hashcat -m 0 -a 3 <hash>

List all supported hash types (-m)

hashcat --example-hashes

Examples of Hash Type (list is not exhaustive)

0 | MD5
100 | SHA1
1400 | SHA256
1700 | SHA512
22000 | WPA/WPA2

List all attack modes (-a)

0 | Straight
1 | Combination
3 | Brute-force
6 | Hybrid Wordlist + Mask
7 | Hybrid Mask + Wordlist

Where is cache stored?

# Cache is stored in the user's home directory under .hashcat
## on macOS
cat $(brew --prefix hashcat)/share/hashcat/hashcat.potfile

How to create a hash from a string

set h1 (md5 -s king)
hashcat --show --quiet -m 0 -a 3 $h1

set h2 (sha1 -s king)
hashcat --show --quiet -m 100 -a 3 $h2

set h3 (sha256 -s king)
hashcat --show --quiet -m 1400 -a 3 $h3

set h4 (sha512 -s king)
hashcat --show --quiet -m 1700 -a 3 $h4

Resources