• https://hashcat.net/hashcat/
• https://www.freecodecamp.org/news/hacking-with-hashcat-a-practical-guide/
• example_hashes
• hashcat - flags
• hashcat - attack modes

hashcat -m 0 -a 0 hash.txt rockyou.txt

Salt

hashcat -a 0 -m 120 test.hash /usr/share/rockyou.txt

bcrypt

hashcat -m 3200 -a 0 hash.txt /usr/share/wordlists/rockyou.txt --status --show

status and show might not be needed

Kerberoasting

hashcat -m 13100 --force -a 0 hash.txt /root/ADtools/rockyou.txt

• -m 13100: This specifies the hash type. 13100 corresponds to Kerberos 5 AS-REQ Pre-Auth etype 23 (RC4-HMAC), a specific format for Kerberos hashes.
• --force: This option forces Hashcat to ignore warnings and run even if there are compatibility issues. Use this with caution, as it might cause instability or incorrect results.
• -a 0: This specifies the attack mode. 0 stands for a straight attack, which is a simple dictionary attack where Hashcat tries each password in the dictionary as it is.
• hash.txt: is the input file containing the hashes to crack
• /root/ADtools/rockyou.txt: is the wordlist file used for the attack

AS-REP Roasting

hashcat -m 18200 hash.txt rockyou.txt

sha512crypt

• hash.txt

root:$6$zdk0.jUm$Vya24cGzM1duJkwM5b17Q205xDJ47LOAg/OpZvJ1gKbLF8PJBdKJA4a6M.JYPUTAaWu4infDjI88U9yUXEVgL.:18490:0:99999:7:::

Then,

hashcat -m 1800 -a 0 hash.txt /usr/share/wordlists/seclists/Passwords/Common-Credentials/best1050.txt

Hash Types