hashcat

First look at the dynamic hash-mode support in upcoming hashcat, powered by the new Rust Bridge. No coding needed: write your pattern on the command line. Don't want to wait for Release? Try it now via GitHub master or hashcat.net/beta. Feedback welcome on our Discord

@stratosberry @chriselgee It is supported. It's just a bit hidden: github.com/hashcat/hashca…

@chriselgee @hashcat When is yescrypt getting added? It's 2025 already

Students recently asked about cracking yescrypt ($y$ in /etc/shadow) with Hashcat. I might blog about the reasons why, but it's not a good fit for a GPU-focused tool like that. John the Ripper to the rescue! Slow but (eventually) effective. john /tmp/yes.crypt --format=crypt

hashcat v7.1.0 released! This update includes important bug fixes, new features, and support for new hash-modes, including KeePass with Argon2. Read the full write-up here: hashcat.net/forum/thread-1…

@cantcomputer you totally need to

I need to get back in on this contest :-/

We just finished the Jabbercracky password contest at DEFCON 33! Check out our writeup on using the new Python Bridge in hashcat 7 for rapid prototyping a solution to an unsupported hash mode: hashcat.net/forum/thread-1…

Team Hashcat took first place in the Jabbercracky contest at #DEFCON33! Thanks to HashMob for putting up a great fight and congrats on 2nd place! We're looking forward to your write-up! Huge thanks to Jabbercracky, @Stealthsploit, and @PasswordVillage for organizing!

@rav3n_pl Yes, if it has an API we would just write a quantum computer assimilation bridge plugin ;) This process would be similar to ideas listed in section 1.1.4 in the full write-up.

@hashcat Can it crack using quantum computers? ;] And crack post-quantum algorithms? :P

hashcat v7.0.0 released! After nearly 3 years of development and over 900,000 lines of code changed, this is easily the largest release we have ever had. Detailed writeup is available here: hashcat.net/forum/thread-1…

Team hashcat has placed 2nd in the @CrackMeIfYouCan contest at #DEFCON32! Congrats to HashMob on 1st, and @CynoPrime on 3rd place. Looking forward to your writeups! Big thanks to KoreLogic and @PasswordVillage for organizing the contest!

New @hashcat benchmarks on the @Apple M3 Pro! This time we have 2 full runs using Apple's Metal Runtime AND OpenCL runtime for comparison of performance and support. Thanks to disanxian! Full Metal benchmark: gist.github.com/Chick3nman/fdf… Full OpenCL Benchmark: gist.github.com/Chick3nman/fa5…

@CrackMeIfYouCan here is team @hashcat s writeup github.com/hashcat/team-h…

Team hashcat has placed first in the @CrackMeIfYouCan contest at #DEFCON31! This marks our 10th CMIYC win! As always @CynoPrime put up a great fight, congrats on 2nd place, looking forward to the writeup! Big thanks to KoreLogic and @PasswordVillage for organizing the contest!

Contest registration is now live! contest-2023.korelogic.com #defcon31

Added new hashcat plugin "ENCsecurity Datavault" based on pretalx.c3voc.de/media/rc3-2021… from @Pelissier_S and Boi Sletterink. Up to 20MH/s, depending on configuration, on a single RTX2080Ti.

@jacobegner @Chick3nman512 @nvidia Side note: power consumption/speed should be benchmarked setting nvidia-smi -pl to the lowest possible setting. On my 2080Ti on 300W I get around 98GH/s NTLM. If I use only 150W I still get around 75GH/s. This way it's more accurate for comparison with hardware other than GPU.

@Chick3nman512 @hashcat @nvidia Thanks so much, I updated my password-strength-in-dollars article and google sheet. Article: jacobegner.blogspot.com/2020/11/passwo… Spreadsheet: docs.google.com/spreadsheets/d… Seems like passwords are ~2x cheaper to crack in 2022-Oct compared to 2020-Nov.

First @hashcat benchmarks on the new @nvidia RTX 4090! Coming in at an insane >2x uplift over the 3090 for nearly every algorithm. Easily capable of setting records: 300GH/s NTLM and 200kh/s bcrypt w/ OC! Thanks to blazer for the run. Full benchmarks here: gist.github.com/Chick3nman/32e…

Official Team Hashcat write-up of this year's @CrackMeIfYouCan contest at @defcon 2022: github.com/hashcat/team-h… @CynoPrime @john_users

Pro results are official: hashcat 1st, Cynosure Prime close 2nd, HashMob.net Users - Pro close 3rd. There's a slight undercount for some Street hashes, where 1-4 place are all very close, so might make a difference, stay tuned.

Team hashcat has won the @CrackMeIfYouCan contest at #DEFCON30! It was extremely close at the end, everyone put up a great fight. Congrats to @CynoPrime for 2nd place and to HashMob for 3rd place. Thanks to KoreLogic and @PasswordVillage for organizing this year's contest.

From Team @hashcat, Good luck to all the Pro/Street teams competing in @CrackMeIfYouCan for @defcon! May your drinks stay cool and your GPUs too! cc: @CynoPrime @john_users @tr0ntastic