About

Imported from megawesley2015-lang/Sos-Pet (.agents/skills/performing-hash-cracking-with-hashcat/SKILL.md). Install upstream with npx skills add megawesley2015-lang/Sos-Pet --skill performing-hash-cracking-with-hashcat. Copyright stays with the author (Apache-2.0).

Performing Hash Cracking with Hashcat

Name: performing-hash-cracking-with-hashcat
Author: megawesley2015-lang

Overview

Hash cracking is an essential skill for penetration testers and security auditors to evaluate password strength. Hashcat is the world's fastest password recovery tool, supporting over 300 hash types with GPU acceleration. This skill covers using hashcat for authorized password auditing, understanding attack modes, creating effective rule sets, and generating hash analysis reports. This is strictly for authorized penetration testing and password policy assessment.

When to Use

When conducting security assessments that involve performing hash cracking with hashcat
When following incident response procedures for related security events
When performing scheduled security testing or auditing activities
When validating security controls through hands-on testing

Prerequisites

Familiarity with cryptography concepts and tools
Access to a test or lab environment for safe execution
Python 3.8+ with required dependencies installed
Appropriate authorization for any testing activities

Objectives

Identify hash types from captured hashes
Execute dictionary, brute-force, and rule-based attacks
Create custom hashcat rules for targeted cracking
Analyze password strength from cracking results
Generate compliance reports on password policy effectiveness
Benchmark GPU performance for hash cracking

Key Concepts

Hashcat Attack Modes

Mode	Flag	Description	Use Case
Dictionary	-a 0	Wordlist attack	Known password patterns
Combination	-a 1	Combine two wordlists	Compound passwords
Brute-force	-a 3	Mask-based enumeration	Short passwords
Rule-based	-a 0 -r	Dictionary + transformation rules	Complex variations
Hybrid	-a 6/7	Wordlist + mask	Passwords with appended numbers

Common Hash Types

Hash Mode	Type	Example Use
0	MD5	Legacy web apps
100	SHA-1	Legacy systems
1000	NTLM	Windows credentials
1800	sha512crypt	Linux /etc/shadow
3200	bcrypt	Modern web apps
13100	Kerberos TGS-REP	Active Directory

Security Considerations

Only perform hash cracking with explicit written authorization
Secure all captured hash data in transit and at rest
Report all cracked passwords immediately to asset owners
Use results to improve password policies, not exploit users
Destroy cracked password data after engagement concludes
Follow rules of engagement for penetration test scope

Validation Criteria

Hash type identification is correct
Dictionary attack cracks weak passwords
Rule-based attack cracks policy-compliant passwords
Mask attack cracks short passwords
Results report shows password strength distribution
All operations performed within authorized scope

Use it

Copy one of these into your project. Installing also returns the manifest and these snippets.

yaml

targets:
  - https://api.opensmartroute.ai/api/v1/registry/megawesley2015-lang-sos-pet-performing-hash-cracking-wit-59b531/manifest   # or paste the manifest below

Manifest

An Open Capability Manifest: the router reads it to know what this does, what it costs and when to pick it.

megawesley2015-lang-sos-pet-performing-hash-cracking-wit-59b531.ocm.jsonjson

{
  "ocm": "1",
  "id": "megawesley2015-lang-sos-pet-performing-hash-cracking-wit-59b531",
  "kind": "skill",
  "name": "performing-hash-cracking-with-hashcat",
  "description": "Hash cracking is an essential skill for penetration testers and security auditors to evaluate password strength. Hashcat is the world's fastest password recovery tool, supporting over 300 hash types w",
  "publisher": "megawesley2015-lang",
  "version": "1.0.0",
  "capabilities": {
    "domains": [
      "general"
    ],
    "tags": [
      "skill-md",
      "cryptography",
      "hash-cracking",
      "password-security",
      "hashcat",
      "penetration-testing",
      "github"
    ],
    "languages": [
      "en"
    ]
  },
  "quality_prior": 0.6,
  "examples": [
    "Hash cracking is an essential skill for penetration testers and security auditors to evaluate password strength. Hashcat is the world's fastest password recovery tool, supporting over 300 hash types w"
  ],
  "primary": false,
  "metadata": {
    "source": {
      "provider": "github",
      "repository": "https://github.com/megawesley2015-lang/Sos-Pet",
      "path": ".agents/skills/performing-hash-cracking-with-hashcat/SKILL.md",
      "ref": "418c0ec4c2e8596d4b72369a140ec2a694c275ff",
      "url": "https://github.com/megawesley2015-lang/Sos-Pet/blob/418c0ec4c2e8596d4b72369a140ec2a694c275ff/.agents/skills/performing-hash-cracking-with-hashcat/SKILL.md",
      "key": "megawesley2015-lang/Sos-Pet/.agents/skills/performing-hash-cracking-with-hashcat/SKILL.md"
    },
    "license": "Apache-2.0"
  },
  "instructions": "# Performing Hash Cracking with Hashcat\n\n## Overview\n\nHash cracking is an essential skill for penetration testers and security auditors to evaluate password strength. Hashcat is the world's fastest password recovery tool, supporting over 300 hash types with GPU acceleration. This skill covers using hashcat for authorized password auditing, understanding attack modes, creating effective rule sets, and generating hash analysis reports. This is strictly for authorized penetration testing and password policy assessment.\n\n\n## When to Use\n\n- When conducting security assessments that involve performi",
  "cost": {
    "context_tokens": 726
  }
}

Fetch it by URL: GET /api/v1/registry/megawesley2015-lang-sos-pet-performing-hash-cracking-wit-59b531/manifest?version=1.0.0

Reviews

Star ratings from people who tried it. One review per account; edit yours any time.

No reviews yet. Install it, try it, and be the first to rate it.