hashcat
advanced password recovery


Download

NameVersionDateDownloadSignature
hashcat binariesv6.0.02020.06.16DownloadPGP
hashcat sourcesv6.0.02020.06.16DownloadPGP
Signing key on PGP keyservers: RSA, 2048-bit. Key ID: 2048R/8A16544F. Fingerprint: A708 3322 9D04 0B41 99CC0052 3C17 DA8B 8A16 544F

Check out our GitHub Repository for the latest development version

GPU Driver requirements:

  • AMD GPUs on Linux require "RadeonOpenCompute (ROCm)" Software Platform (3.1 or later)
  • AMD GPUs on Windows require "AMD Radeon Adrenalin 2020 Edition" (20.2.2 or later)
  • Intel CPUs require "OpenCL Runtime for Intel Core and Intel Xeon Processors" (16.1.1 or later)
  • NVIDIA GPUs require "NVIDIA Driver" (440.64 or later) and "CUDA Toolkit" (9.0 or later)

Features

  • World's fastest password cracker
  • World's first and only in-kernel rule engine
  • Free
  • Open-Source (MIT License)
  • Multi-OS (Linux, Windows and macOS)
  • Multi-Platform (CPU, GPU, APU, etc., everything that comes with an OpenCL runtime)
  • Multi-Hash (Cracking multiple hashes at the same time)
  • Multi-Devices (Utilizing multiple devices in same system)
  • Multi-Device-Types (Utilizing mixed device types in same system)
  • Supports password candidate brain functionality
  • Supports distributed cracking networks (using overlay)
  • Supports interactive pause / resume
  • Supports sessions
  • Supports restore
  • Supports reading password candidates from file and stdin
  • Supports hex-salt and hex-charset
  • Supports automatic performance tuning
  • Supports automatic keyspace ordering markov-chains
  • Built-in benchmarking system
  • Integrated thermal watchdog
  • 300+ Hash-types implemented with performance in mind
  • ... and much more

Screenshot

色吧5

Algorithms

  • MD4
  • MD5
  • SHA1
  • SHA2-224
  • SHA2-256
  • SHA2-384
  • SHA2-512
  • SHA3-224
  • SHA3-256
  • SHA3-384
  • SHA3-512
  • RIPEMD-160
  • BLAKE2b-512
  • GOST R 34.11-2012 (Streebog) 256-bit, big-endian
  • GOST R 34.11-2012 (Streebog) 512-bit, big-endian
  • GOST R 34.11-94
  • Half MD5
  • Java Object hashCode()
  • Keccak-224
  • Keccak-256
  • Keccak-384
  • Keccak-512
  • Whirlpool
  • SipHash
  • BitShares v0.x - sha512(sha512_bin(pass))
  • md5($pass.$salt)
  • md5($salt.$pass)
  • md5($salt.$pass.$salt)
  • md5($salt.md5($pass))
  • md5($salt.md5($pass.$salt))
  • md5($salt.md5($salt.$pass))
  • md5($salt.sha1($salt.$pass))
  • md5($salt.utf16le($pass))
  • md5(md5($pass))
  • md5(md5($pass).md5($salt))
  • md5(sha1($pass))
  • md5(sha1($pass).md5($pass).sha1($pass))
  • md5(sha1($salt).md5($pass))
  • md5(strtoupper(md5($pass)))
  • md5(utf16le($pass).$salt)
  • sha1($pass.$salt)
  • sha1($salt.$pass)
  • sha1($salt.$pass.$salt)
  • sha1($salt.sha1($pass))
  • sha1($salt.utf16le($pass))
  • sha1($salt1.$pass.$salt2)
  • sha1(CX)
  • sha1(md5($pass))
  • sha1(md5($pass).$salt)
  • sha1(md5($pass.$salt))
  • sha1(md5(md5($pass)))
  • sha1(sha1($pass))
  • sha1(utf16le($pass).$salt)
  • sha256($pass.$salt)
  • sha256($salt.$pass)
  • sha256($salt.$pass.$salt)
  • sha256($salt.utf16le($pass))
  • sha256(md5($pass))
  • sha256(sha256($pass).$salt)
  • sha256(sha256_bin($pass))
  • sha256(utf16le($pass).$salt)
  • sha512($pass.$salt)
  • sha512($salt.$pass)
  • sha512($salt.utf16le($pass))
  • sha512(utf16le($pass).$salt)
  • Ruby on Rails Restful-Authentication
  • HMAC-MD5 (key = $pass)
  • HMAC-MD5 (key = $salt)
  • HMAC-SHA1 (key = $pass)
  • HMAC-SHA1 (key = $salt)
  • HMAC-SHA256 (key = $pass)
  • HMAC-SHA256 (key = $salt)
  • HMAC-SHA512 (key = $pass)
  • HMAC-SHA512 (key = $salt)
  • HMAC-Streebog-256 (key = $pass), big-endian
  • HMAC-Streebog-256 (key = $salt), big-endian
  • HMAC-Streebog-512 (key = $pass), big-endian
  • HMAC-Streebog-512 (key = $salt), big-endian
  • CRC32
  • 3DES (PT = $salt, key = $pass)
  • DES (PT = $salt, key = $pass)
  • ChaCha20
  • Skip32 (PT = $salt, key = $pass)
  • PBKDF2-HMAC-MD5
  • PBKDF2-HMAC-SHA1
  • PBKDF2-HMAC-SHA256
  • PBKDF2-HMAC-SHA512
  • scrypt
  • phpass
  • Ansible Vault
  • Atlassian (PBKDF2-HMAC-SHA1)
  • Python passlib pbkdf2-sha512
  • Python passlib pbkdf2-sha256
  • Python passlib pbkdf2-sha1
  • TACACS+
  • SIP digest authentication (MD5)
  • IKE-PSK MD5
  • IKE-PSK SHA1
  • WPA-PBKDF2-PMKID+EAPOL
  • WPA-PMK-PMKID+EAPOL
  • IPMI2 RAKP HMAC-SHA1
  • CRAM-MD5
  • iSCSI CHAP authentication, MD5(CHAP)
  • JWT (JSON Web Token)
  • Kerberos 5, etype 23, AS-REQ Pre-Auth
  • Kerberos 5, etype 23, TGS-REP
  • Kerberos 5, etype 23, AS-REP
  • Kerberos 5, etype 17, TGS-REP
  • Kerberos 5, etype 18, TGS-REP
  • Kerberos 5, etype 17, Pre-Auth
  • Kerberos 5, etype 18, Pre-Auth
  • NetNTLMv1 / NetNTLMv1+ESS
  • NetNTLMv2
  • Skype
  • Telegram Desktop App Passcode (PBKDF2-HMAC-SHA1)
  • Telegram Mobile App Passcode (SHA256)
  • PostgreSQL CRAM (MD5)
  • MySQL CRAM (SHA1)
  • RACF
  • AIX {smd5}
  • AIX {ssha1}
  • AIX {ssha256}
  • AIX {ssha512}
  • LM
  • QNX /etc/shadow (MD5)
  • QNX /etc/shadow (SHA256)
  • QNX /etc/shadow (SHA512)
  • DPAPI masterkey file v1
  • DPAPI masterkey file v2
  • GRUB 2
  • MS-AzureSync PBKDF2-HMAC-SHA256
  • BSDi Crypt, Extended DES
  • NTLM
  • macOS v10.4, macOS v10.5, MacOS v10.6
  • macOS v10.7
  • macOS v10.8+ (PBKDF2-SHA512)
  • Radmin2
  • Samsung Android Password/PIN
  • bcrypt $2*$, Blowfish (Unix)
  • md5crypt, MD5 (Unix), Cisco-IOS $1$ (MD5)
  • descrypt, DES (Unix), Traditional DES
  • sha256crypt $5$, SHA256 (Unix)
  • sha512crypt $6$, SHA512 (Unix)
  • Windows Phone 8+ PIN/password
  • Cisco-ASA MD5
  • Cisco-IOS $8$ (PBKDF2-SHA256)
  • Cisco-IOS $9$ (scrypt)
  • Cisco-IOS type 4 (SHA256)
  • Cisco-PIX MD5
  • Citrix NetScaler (SHA1)
  • Citrix NetScaler (SHA512)
  • Domain Cached Credentials (DCC), MS Cache
  • Domain Cached Credentials 2 (DCC2), MS Cache 2
  • FortiGate (FortiOS)
  • ArubaOS
  • Juniper IVE
  • Juniper NetScreen/SSG (ScreenOS)
  • Juniper/NetBSD sha1crypt
  • MSSQL (2000)
  • MSSQL (2005)
  • MSSQL (2012, 2014)
  • PostgreSQL
  • Oracle H: Type (Oracle 7+)
  • Oracle S: Type (Oracle 11+)
  • Oracle T: Type (Oracle 12+)
  • MySQL323
  • MySQL4.1/MySQL5
  • MySQL $A$ (sha256crypt)
  • Sybase ASE
  • hMailServer
  • DNSSEC (NSEC3)
  • CRAM-MD5 Dovecot
  • SSHA-256(Base64), LDAP {SSHA256}
  • SSHA-512(Base64), LDAP {SSHA512}
  • RedHat 389-DS LDAP (PBKDF2-HMAC-SHA256)
  • FileZilla Server >= 0.9.55
  • ColdFusion 10+
  • Apache $apr1$ MD5, md5apr1, MD5 (APR)
  • Episerver 6.x < .NET 4
  • Episerver 6.x >= .NET 4
  • nsldap, SHA-1(Base64), Netscape LDAP SHA
  • nsldaps, SSHA-1(Base64), Netscape LDAP SSHA
  • SAP CODVN B (BCODE)
  • SAP CODVN B (BCODE) from RFC_READ_TABLE
  • SAP CODVN F/G (PASSCODE)
  • SAP CODVN F/G (PASSCODE) from RFC_READ_TABLE
  • SAP CODVN H (PWDSALTEDHASH) iSSHA-1
  • PeopleSoft
  • PeopleSoft PS_TOKEN
  • SolarWinds Orion
  • Lotus Notes/Domino 5
  • Lotus Notes/Domino 6
  • Lotus Notes/Domino 8
  • Oracle Transportation Management (SHA256)
  • Huawei sha1(md5($pass).$salt)
  • AuthMe sha256
  • AES Crypt (SHA256)
  • BitLocker
  • eCryptfs
  • LUKS
  • VeraCrypt
  • FileVault 2
  • DiskCryptor
  • Android FDE (Samsung DEK)
  • Android FDE <= 4.3
  • Apple File System (APFS)
  • TrueCrypt
  • PDF 1.1 - 1.3 (Acrobat 2 - 4)
  • PDF 1.1 - 1.3 (Acrobat 2 - 4), collider #1
  • PDF 1.1 - 1.3 (Acrobat 2 - 4), collider #2
  • PDF 1.4 - 1.6 (Acrobat 5 - 8)
  • PDF 1.7 Level 3 (Acrobat 9)
  • PDF 1.7 Level 8 (Acrobat 10 - 11)
  • MS Office 2007
  • MS Office 2010
  • MS Office 2013
  • MS Office <= 2003 $0/$1, MD5 + RC4
  • MS Office <= 2003 $0/$1, MD5 + RC4, collider #1
  • MS Office <= 2003 $0/$1, MD5 + RC4, collider #2
  • MS Office <= 2003 $3/$4, SHA1 + RC4
  • MS Office <= 2003 $3, SHA1 + RC4, collider #1
  • MS Office <= 2003 $3, SHA1 + RC4, collider #2
  • Open Document Format (ODF) 1.2 (SHA-256, AES)
  • Open Document Format (ODF) 1.1 (SHA-1, Blowfish)
  • Apple Secure Notes
  • JKS Java Key Store Private Keys (SHA1)
  • 1Password, agilekeychain
  • 1Password, cloudkeychain
  • Password Safe v2
  • Password Safe v3
  • LastPass + LastPass sniffed
  • KeePass 1 (AES/Twofish) and KeePass 2 (AES)
  • Bitcoin/Litecoin wallet.dat
  • Electrum Wallet (Salt-Type 1-5)
  • Blockchain, My Wallet
  • Blockchain, My Wallet, V2
  • Blockchain, My Wallet, Second Password (SHA256)
  • Ethereum Pre-Sale Wallet, PBKDF2-HMAC-SHA256
  • Ethereum Wallet, PBKDF2-HMAC-SHA256
  • Ethereum Wallet, SCRYPT
  • MultiBit Classic .key (MD5)
  • MultiBit HD (scrypt)
  • 7-Zip
  • RAR3-hp
  • RAR5
  • PKZIP (Compressed)
  • PKZIP (Compressed Multi-File)
  • PKZIP (Mixed Multi-File)
  • PKZIP (Mixed Multi-File Checksum-Only)
  • PKZIP (Uncompressed)
  • PKZIP Master Key
  • PKZIP Master Key (6 byte optimization)
  • SecureZIP AES-128
  • SecureZIP AES-192
  • SecureZIP AES-256
  • iTunes backup < 10.0
  • iTunes backup >= 10.0
  • WinZip
  • Android Backup
  • AxCrypt
  • AxCrypt in-memory SHA1
  • WBB3 (Woltlab Burning Board)
  • vBulletin < v3.8.5
  • vBulletin >= v3.8.5
  • PHPS
  • SMF (Simple Machines Forum) > v1.1
  • MediaWiki B type
  • Redmine
  • Joomla < 2.5.18
  • OpenCart
  • PrestaShop
  • Tripcode
  • Drupal7
  • osCommerce, xt:Commerce
  • PunBB
  • MyBB 1.2+, IPB2+ (Invision Power Board)
  • Django (PBKDF2-SHA256)
  • Django (SHA-1)
  • Web2py pbkdf2-sha512
  • TOTP (HMAC-SHA1)

色吧5

  • Straight *
  • Combination
  • Brute-force
  • Hybrid dict + mask
  • Hybrid mask + dict

色吧5* accept Rules

色吧5

  • AMD
  • Apple
  • Intel
  • NVidia
  • POCL
  • ROCm

色吧5

  • GPU
  • CPU
  • APU

Help

色吧5A detailed description of all commandline parameters is available by using --help. Next to that, the 7zip-package contains extensive documentation. Look for examples.txt. If you encounter a Bug, report it in the Forums where Fixes and Beta versions are announced as well.

If you still think you need help by a real human come to #hashcat on freenode IRC.

Download older version(s)

This is a list of older hashcat versions, it's not always bad to grab the latest version.

NameVersionDateDownloadSignature
hashcat binariesv5.1.02018.12.02DownloadPGP
hashcat sourcesv5.1.02018.12.02DownloadPGP
hashcat binariesv5.0.02018.10.28DownloadPGP
hashcat sourcesv5.0.02018.10.28DownloadPGP
hashcat binariesv4.2.12018.08.07DownloadPGP
hashcat sourcesv4.2.12018.08.07DownloadPGP
hashcat binariesv4.2.02018.08.02DownloadPGP
hashcat sourcesv4.2.02018.08.02DownloadPGP
hashcat binariesv4.1.02018.02.21DownloadPGP
hashcat sourcesv4.1.02018.02.21DownloadPGP
hashcat binariesv4.0.12017.11.07DownloadPGP
hashcat sourcesv4.0.12017.11.07DownloadPGP
hashcat binariesv4.0.02017.10.27DownloadPGP
hashcat sourcesv4.0.02017.10.27DownloadPGP
hashcat binariesv3.6.02017.06.09DownloadPGP
hashcat sourcesv3.6.02017.06.09DownloadPGP
hashcat binariesv3.5.02017.04.05DownloadPGP
hashcat sourcesv3.5.02017.04.05DownloadPGP
hashcat binariesv3.402017.03.03DownloadPGP
hashcat sourcesv3.402017.03.03DownloadPGP
hashcat binariesv3.302017.01.06DownloadPGP
hashcat sourcesv3.302017.01.06DownloadPGP
hashcat binariesv3.202016.12.02DownloadPGP
hashcat sourcesv3.202016.12.02DownloadPGP
hashcat binariesv3.102016.08.19DownloadPGP
hashcat sourcesv3.102016.08.19DownloadPGP
hashcat binariesv3.002016.06.29DownloadPGP
hashcat sourcesv3.002016.06.29DownloadPGP