hashcat-crack

Crack password hashes offline with hashcat across multiple hash types.

1.6k|234|Updated Dec 7, 2019
One-click install
npx skills add https://github.com/wgpsec/AboutSecurity --skill hashcat-crack
Or copy as Structured Prompt for Agent
Please help me install this Agent Skill.
Skill: hashcat-crack
Source: https://github.com/wgpsec/AboutSecurity/tree/main/skills/tool/hashcat-crack
Command: npx skills add https://github.com/wgpsec/AboutSecurity --skill hashcat-crack

SYSTEM DOCUMENTATION & REQUIREMENTS

What problem does it solve?

Offline cracking of password hashes using GPU-accelerated hashcat, enabling rapid recovery of plaintext passwords.

Core Features & Use Cases

  • Hash type coverage: supports NTLM, NTLMv2, Kerberos TGS/AS-REPs, MD5, SHA-256, SHA-512, bcrypt, and WPA-PBKDF2.
  • Attack modes: dictionary, rule-based, mask, and combinational attacks to maximize success.
  • Use case: security testing, incident response, and forensics investigations requiring password recovery from dumped hashes.

Quick Start

Run a hashcat session against the target hash file to recover plaintext passwords.

Frequently Asked Questions about hashcat-crack

High-intent search queries and answers about installing and using this skill.

FAQPage Schema
How do I crack password hashes offline using GPU acceleration?

Offline password hash cracking uses GPU acceleration to rapidly recover plaintext passwords from dumped hashes. It applies dictionary, rule-based, mask, and combinational attack pipelines across multiple hash types to maximize recovery success.

What hash types does hashcat support for security testing?

Hashcat cracking supports NTLM, NTLMv2, Kerberos TGS/AS-REP, MD5, SHA-256, SHA-512, bcrypt, and NetNTLMv2 hash types. These cover common formats encountered during security testing, red-team assessments, and forensics investigations.

Do I need a GPU-enabled environment to crack hashes offline?

A GPU-enabled environment is required for offline password hash cracking. GPU acceleration provides the computational power needed to execute dictionary, mask, and combinational attacks efficiently to produce plaintext passwords.

What is the best way to execute a dictionary attack against NTLM hashes?

The best way to crack NTLM hashes is applying a dictionary attack pipeline with the correct hash mode (-m). Rule-based and mask attacks can also be combined to maximize plaintext password recovery during red-team assessments or incident response.

Can I recover plaintext passwords from Kerberos TGS and AS-REP hashes?

Recovering plaintext passwords from Kerberos TGS and AS-REP hashes is possible using offline cracking. You must specify the correct hash mode (-m) and apply attack pipelines like dictionary or mask attacks to extract the original credentials.

When should I use offline password cracking in incident response?

Offline password cracking is used in incident response and forensics investigations to recover plaintext passwords from dumped hashes. It operates independently of target systems, allowing analysts to analyze compromised credentials safely while adhering to legal guidelines.