Understanding the basics of cracking.
Posted Jan 24, 2025 09:17 AM
Extracting the Hash - Pull hashes from the target, identify hashing function, and properly format output for your tool of choice.
Now you need to format the hash once you have it -
Format your hashes based on your tool's preferred method. Hashcat focuses basically on each line and takes the
Understanding your hash strength -
If it's a slow hash, you will need to be more selective at what types of dictionaries and attacks you perform. If it's a fast hash, you can be more flexible with your attack strategy. Try using word ie rockyou.txt dictionary or if you have done some recon work, try certain phrases in a custom dictionary.
Check you cracking machine's capability -
With the inform you gathered from understanding your hash speeds and strength, baseline your cracking computer capabilities. Perform benchmark testing using John The Ripper and/or Hashcat's built-in benchmark ability on your rig. " john --test hashcat -b "
Based on these results you will be able to better assess your attack options by knowing your rigs capabilities against a specific hash. This will be a more accurate result of a hash's cracking speed based on your rig. It will be useful to save these results for future reference.
Plan your execution (proper planning prevents piss poor performance)
Based on known or unknown knowledge begin creating an attack plan. Define your objective, monitor and adjust as necessary to address any issues or changes in circumstances.
Analyses -
After successfully cracking a sufficient number of hashes, analyze the results for any clues or patterns. This analysis may help you succeed with any remaining hashes.
Attacking your way -
Based on your password analysis, create custom attacks that leverage the identified clues or patterns. For example, you could use custom mask attacks or rules tailored to fit the target users' behavior or preferences.
By following these steps, you can systematically approach hash cracking, optimize your strategies, and improve your chances of success.
