Password Attacks
Hashcat
GPU-accelerated password recovery tool supporting hundreds of hash types.
Authorized testing only. Practice on systems you own, isolated labs, or targets with written permission. Unauthorized access is illegal.
When
You have authorized password hashes to assess password policy strength.
How
Identify hash mode; choose attack (dict/mask/hybrid); use rules; report crack rates.
Why
Fastest practical cracking engine; policy findings need evidence.
Commands & usage
hashcat -m 1000 ntlm.txt rockyou.txt
hashcat -m 5600 netntlmv2.txt rockyou.txt
hashcat -m 13100 kerberoast.txt rockyou.txt -r rules/best64.rule
hashcat -m 0 md5.txt -a 3 ?d?d?d?d?d?d
Commands are educational examples. Adapt hosts, paths, and rates to your authorized scope.
Comparisons
ATT&CK
Tags
Related in Password Attacks
John the Ripper
CPU-focused password cracker with jumbo community builds.
Hydra
Online password brute-forcer for many network services.
Medusa
Parallel, modular online credential brute-forcing tool.
Crowbar
Brute force tool specializing in RDP, VPN, VNC key/password attacks.
CeWL
Custom wordlist generator from target website wording.
Crunch
Wordlist generator for charsets and patterns.