security enabled verified medium v1.0.0

hashcat

World's fastest password recovery tool supporting GPU acceleration, hundreds of hash types, and advanced attack modes.

📋 Live Preview 
hashcat -m {hash-type} -a {attack-mode} {hash-file} {wordlist}
🌍 hash-type → 0 🌍 attack-mode → 0 🌍 hash-file → 🌍 wordlist → 
hashcat -m {hash-type} -a {attack-mode} {hash-file} {wordlist}

Sandbox: execFile · Timeout: 86400s

Capabilities

security.crack.password
security.crack.hash
security.audit.credential
hardware.gpu.accelerate

Parameters

Name Type Required Default Description Aliases
flag-m string No - Hash type number (e.g. 0=MD5, 1000=NTLM, 3200=bcrypt) -m, --hash-type
flag-a integer No - Attack mode (0=Straight, 1=Combination, 3=Brute-force, 6=Hybrid, 7=PRINCE) -a, --attack-mode
flag-o string No - Output file for cracked passwords -o, --output
outfile-format string No - Output format (1=hash[:salt]:plain, 2=plain, 3=hex) --outfile-format
potfile-path string No - Custom potfile path --potfile-path
force boolean No - Ignore warnings and force startup --force
show boolean No - Show cracked passwords from potfile --show
benchmark boolean No - Run benchmark for all hash modes --benchmark
status boolean No - Enable automatic status screen updates --status
status-timer integer No - Status screen update interval in seconds --status-timer
session string No - Session name for save/restore --session
flag-r string No - Rule file for wordlist attack -r, --rule
flag-i boolean No - Enable incremental mask mode -i, --increment
increment-min integer No - Minimum password length in increment mode --increment-min
increment-max integer No - Maximum password length in increment mode --increment-max
flag-w integer No - Workload profile (1=Low, 2=Default, 3=High, 4=Nightmare) -w, --workload-profile
flag-O boolean No - Enable optimized kernel (limits password length) -O, --optimized-kernel
backend-devices string No - Backend device IDs to use (comma-separated) --backend-devices
flag-d string No - OpenCL device to use -d, --device
keyspace boolean No - Calculate keyspace for current attack --keyspace
example-hashes boolean No - Print example hashes for all hash modes --example-hashes
1 boolean No - charset ?1 -1, --custom-charset1, -defined
2 boolean No - charset ?2 -2, --custom-charset2, -defined
3 boolean No - charset ?3 -3, --custom-charset3, -defined
4 boolean No - charset ?4 -4, --custom-charset4, -defined
V boolean No - Print version -V, --version
b boolean No - Run benchmark -b, --benchmark
backend_devices boolean No - --backend-devices, -device
backend_vector_width boolean No - Backend vector width --backend-vector-width
benchmark_all boolean No - Run benchmark for all modes --benchmark-all
g boolean No - Generate N random rules -g, --generate-rules
h boolean No - Print help -h, --help
increment_max boolean No - Stop mask at length NUM --increment-max
increment_min boolean No - Start mask at length NUM --increment-min
j boolean No - Single rule applied to left word -j, --rule-left
k boolean No - Single rule applied to right word -k, --rule-right
n boolean No - Threads per GPU device -n, --threads
outfile_autohex_disable boolean No - Disable auto hex encode of plaintext --outfile-autohex-disable
p boolean No - Separator for hashlist -p, --separator
quiet boolean No - Suppress output --quiet
runtime boolean No - Runtime limit in seconds --runtime
stdout boolean No - Print candidates to stdout (not cracking) --stdout
username boolean No - Enable ignoring usernames in hashfile --username

Artifacts

TypeDescriptionMIMESchemaTrust
security.crack.potfileHashcat potfile with cracked passwordstext/plain-verified
security.crack.resultCracked password output filetext/plain-verified

Contract

Inputs

security.hash.file

File containing password hashes

security.wordlist

Dictionary file for wordlist attack

security.rule.file

Rule file for wordlist mutations

Outputs

security.cracked.passwords

Successfully cracked passwords

security.crack.status

Cracking status and statistics

Side effects: filesystem_writefilesystem_writefilesystem_write

Workflow Edges

Produces

security.cracked.passwordssecurity.crack.status

Consumes

security.hash.filesecurity.wordlistsecurity.rule.file

Resource Profile

ResourceValue
CPUmedium
Memory1024 MB
Networknone
Disk I/Olow

Examples

Dictionary attack on MD5 hashes

hashcat -m 0 -a 0 hashes.txt rockyou.txt

Brute-force attack on NTLM hashes

hashcat -m 1000 -a 3 hashes.txt ?a?a?a?a?a?a?a?a

Rule-based attack with custom rules

hashcat -m 0 -a 0 hashes.txt rockyou.txt -r best64.rule

Incremental mask attack on bcrypt

hashcat -m 3200 -a 3 hashes.txt ?l?l?l?l?l --increment --increment-min=4

Run benchmark for all hash modes

hashcat --benchmark

Show cracked passwords from potfile

hashcat --show hashes.txt

Hybrid attack (wordlist + mask)

hashcat -m 0 -a 6 hashes.txt rockyou.txt ?d?d?d

Use GPU device 1 with optimized kernel

hashcat -m 0 -a 0 hashes.txt rockyou.txt -d 1 -O

Documentation

Hashcat — GPU-Accelerated Password Recovery

Hashcat is the world's fastest password cracking tool, leveraging GPU acceleration to achieve billions of hashes per second. It supports over 300 hash types and six attack modes: straight (wordlist), combination, brute-force, hybrid wordlist+mask, hybrid mask+wordlist, and PRINCE.

Attack Modes

Mode Flag Description
Straight -a 0 Wordlist-based dictionary attack
Combination -a 1 Combines words from two wordlists
Brute-force -a 3 Mask-based exhaustive search
Hybrid wl+mask -a 6 Wordlist with mask appended
Hybrid mask+wl -a 7 Mask with wordlist appended
PRINCE -a 8 PRINCE algorithm attack

Key Optimization Flags

  • -O — optimized kernel (faster but caps password length)
  • -w 3 — high workload profile (use with caution)
  • -d 1 — select specific GPU device
  • --backend-devices — specify compute devices

Session and Status

  • --session=name — save/restore cracking sessions
  • --status — real-time status updates
  • --status-timer=N — update interval in seconds
  • --potfile-path — custom potfile location

Related Tools

johnhash-utils

References