hashcat

[begood]

This is the first public release of hashcat, a new password recovery software.

Download it here md5sum: ebe8f712e79c5bad1f6da3e8a770a1e3

hashcat is tested on XP, Win7, Gentoo, Debian

The main features of hashcat are:

* It is free.

* Native binaries for Linux and Windows.

* Multi-threaded.

* Supports the following hashes:

MD5

md5($pass.$salt)

md5($salt.$pass)

md5(md5($pass))

md5(md5(md5($pass)))

md5(md5($pass).$salt)

md5(md5($salt).$pass)

md5($salt.md5($pass))

md5($salt.$pass.$salt)

md5(md5($salt).md5($pass))

md5(md5($pass).md5($salt))

md5($salt.md5($salt.$pass))

md5($salt.md5($pass.$salt))

md5($username.0.$pass)

md5(strtoupper(md5($pass)))

SHA1

sha1($pass.$salt)

sha1($salt.$pass)

sha1(sha1($pass))

sha1(sha1(sha1($pass)))

MySQL

MySQL4.1/MySQL5

MD5(Wordpress)

MD5(phpBB3)

MD5(Unix)

SHA-1(Base64)

SSHA-1(Base64)

* Supports the following attacks:

Straight-Words Attack

Combination-Words Attack

Toggle-Case Attack

Brute-Force Attack

* All Attack-Modes except Brute-Force can be extended by Hybrid-Attack rules.

* Hybrid-Attack engine is mostly compatible with JTR / PasswordsPro.

* Possible to resume or limit session.

It also has some special features:

* Automatically recognizes already recovered hashes from outfile at startup.

* Automatically generate random rules for Hybrid-Attack.

* Load hashlist that include more than 3 million hashes of any supported type at once.

* Load saltlist from external file and then use them in a Brute-Force Attack variant.

* Able to work in an distributed environment.

There are some more things you should know:

* You can specify multiple wordlists and also multiple directories of wordlists.

* Number of threads can be configured.

* Threads run on lowest priority.

I want to thank the following people for supporting me with testing and giving me ideas:

hakre, legion, d3ad0ne, ErrorNeo, K9, skmpz

If you want to get in contact join #hashcat on IRC: irc.rizon.net:6667 ssl (+9999)

http://hashkiller.com/index.php?topic=2511.0