hashcat

Crack over 300 hash types with GPU-accelerated wordlist and mask attacks.

15|1|Updated Feb 12, 2026
One-click install
npx skills add https://github.com/AeonDave/malskill --skill hashcat
Or copy as Structured Prompt for Agent
Please help me install this Agent Skill.
Skill: hashcat
Source: https://github.com/AeonDave/malskill/tree/main/offensive-tools/cracking/hashcat
Command: npx skills add https://github.com/AeonDave/malskill --skill hashcat

SYSTEM DOCUMENTATION & REQUIREMENTS

💡 This Skill includes references (resource) components.

What problem does it solve?

This Skill addresses the need to recover lost or forgotten passwords by efficiently cracking various types of password hashes using powerful, GPU-accelerated algorithms.

Core Features & Use Cases

  • Offline Password Cracking: Supports over 300 hash types for offline recovery.
  • Diverse Attack Methods: Employs wordlist, rule-based, and mask brute-force attacks.
  • Use Case: Recovering user passwords from captured NTLM or Net-NTLMv2 hashes from a network penetration test.

Quick Start

Use the hashcat skill to crack NTLM hashes from the file 'hashes.txt' using the 'rockyou.txt' wordlist.

Frequently Asked Questions about hashcat

High-intent search queries and answers about installing and using this skill.

FAQPage Schema
How do I crack NTLM password hashes using a wordlist?

To crack NTLM password hashes, you apply a wordlist attack against the captured hashes using GPU acceleration. This offline password recovery method compares entries from files like rockyou.txt against your target hash file to find the plaintext password.

Do I need a GPU to perform offline password cracking?

You need a GPU for optimal offline password cracking performance. GPU acceleration using NVIDIA CUDA or AMD OpenCL drastically reduces the time required for brute-force and wordlist attacks against password hashes.

What is the best way to recover passwords from captured Net-NTLMv2 hashes?

Recovering passwords from captured Net-NTLMv2 hashes is best achieved through offline password cracking. You utilize rule-based and mask brute-force attacks to efficiently process the hash and identify the original plaintext password.

Can I use mask brute-force attacks for password recovery across different hash formats?

Mask brute-force attacks support password recovery across over 300 hash formats. You can target hashes like MD5, SHA256, and bcrypt by defining specific character sets and password length patterns to accelerate the cracking process.

Does GPU acceleration work with bcrypt and SHA256 hash types?

GPU acceleration works with bcrypt and SHA256 hash types, along with over 300 other formats. Utilizing NVIDIA CUDA or AMD OpenCL hardware ensures maximum processing speed for both wordlist and brute-force attacks against these hashes.