OSCP Certification
HomeAuthorPopLabSecDiscord
  • OSCP Guide - Offensive Security Certified Professional
  • OSCP Retake Policy
  • Company Info
    • Exam Rules
    • Tools NOT Allowed
    • Exam Topics
    • OSCP Exam Guide
  • TryHackMe Rooms
    • Overpass
      • Walkthrough
    • 🔗Vulnversity
      • Walkthrough
    • 💥Kenobi
      • ✅Kenobi
      • Walkthrough
  • VulnHub
    • Brainpan
    • Pinky's Palace v1
    • MrRobot
    • LazySysadmin
    • VulnOsv2
    • Pwnlab_init
    • Lordoftheroot
    • Kioptrix2014
  • HackTheBox Machines
    • Machines
    • Active
    • Bounty
    • Cronos
    • DevOops
    • Silo
    • Devel
    • Conceal
    • Blue
    • Bastard
  • Top Free Courses
    • Page 3
  • Reporting
    • Recommendations
    • Templates
  • Top Youtube Channels
    • John Hammond
  • Hacking Protocols
    • DNS - 53
    • Page
  • Tools Basics
    • Swaks
    • CyberChef
  • Information Gathering
    • pspy
    • Nmap
    • enum4linux
    • BloodHound
    • BloodHound Python
  • Vulnerability Analysis
    • Sparta
    • Nikto
  • Web Application Analysis
    • PayloadsAllTheThings
    • Leaky Paths
    • ysoserial
    • JSON Web Tokens
    • httpx
    • Gobuster
    • ffuf
    • Wfuzz
    • WPScan
  • Password Attacks
    • mimikatz
    • LaZagne
    • hashcat
    • John
    • Kerbrute
    • Patator
    • pypykatz
    • RsaCtfTool
    • CrackMapExec
    • SprayingToolkit
    • Hydra
    • Default Credentials
  • Reverse Engineering
    • dnSpy
    • ghidra
    • AvalonialLSpy
    • GEF
    • Radare2
    • cutter
    • pwndbg
    • peda
    • JD-GUI
  • Exploitation Tools
    • lsassy
    • printspoofer
    • Rubeus
    • pth-toolkit
    • Evil-WinRM
    • PowerSharpPack
    • SharpCollection
  • Post Exploitation
    • PEASS-ng
    • LinEnum
    • Windows Privilege Escalation
    • Priv2Admin
    • PowerView
    • powercat
    • Impacket
    • GTFOBins
    • WADComs
    • RunasCs
    • scavenger
    • Sherlock
    • WESNG
    • JAWS
    • Watson
    • LOLBAS
Powered by GitBook
On this page

Was this helpful?

  1. Password Attacks

hashcat

Hashcat is a widely used password recovery tool with both legitimate and malicious applications.

PreviousLaZagneNextJohn

Last updated 1 year ago

Was this helpful?

What is hashcat?

  • Open-source password recovery tool supporting many hashing algorithms.

  • Used for legitimate purposes like:

    • Password cracking during penetration testing to assess password strength.

    • Recovering lost passwords for authorized access.

    • Researching password hashing techniques and vulnerabilities.

  • Can also be misused for malicious purposes like:

    • Cracking stolen password hashes to gain unauthorized access.

    • Brute-forcing passwords for malicious activities.

Hashcat Overview

  • Hashcat is an open-source password recovery tool.

  • Supports a wide range of hashing algorithms.

Legitimate Uses

  • Penetration testing for password strength.

  • Recovering lost, authorized passwords.

  • Researching hashing weaknesses.

Potential Misuse

  • Unauthorized cracking of stolen password hashes.

  • Brute-forcing for malicious intent.

hashcat - advanced password recovery
Logo
Sign up to our mailing list to receive updates!