We will not perform an offline password attack using an application called hash cat hash cut is currently
the world's fastest passwords cracking software which supports different types of hashes as we will
see in the demo.
Suppose that we were able to compromise my machine.
I want to get the hash of the password stored here which is usually under EDC shadow shadow file.
Open this file you will be able to see the list of users on this machine and the password.
After the call and here and it hashed format so we will take this file.
I'll copy this file
and we'll name it crack or hack hash Dot.
ALICE Do I really open this file again.
Using leaf bad and I will clean it so remove the user from here and remove the colon and go through
the hash until the next colon removed in the next colon and the rest of the file.
So now you have a clean file that only has hashes close it here.
Now we open hash cat.
It's under password offline attacks the hash cat.
Once you open it the help menu will pop up.
You'll be able to see different options that you will use.
Mainly we will use the end option which specifies the hash type the option which specifies the attack
mode and the AU option which specifies the output.
So going down.
These are the hash modes it supports.
As I said earlier lots of hashes empty four and five.
As such is to make it easier you can go to this site here hash CA dot net and you'll be able to see
them in a table in a tabular format
the output formats are hash plain text cetera and the attack modes can be straight.
Which means the China attack order wordless attack combination attack brute force or a hybrid wordless
plus mask and the device type support it can be C.P. Yuji view or FPGA.
So because this is the fastest application for password attacks it will not only run on city use it
will be optimized thrown on use and PGA which are application specific kind of processes.
So let's go to the bread and butter here and type the command hash at minus N and we'll specify the
hash type that we want to crack.
So actually if you go here again to the left.
But this is the hash I'm trying to crack.
OK.
If I need to know the type of encryption for this hash I need to go to.
Let's leave.
But again see plug in open this file here and go down down down until you see this here.
Encryption method so the encryption method is as such a 512.
If you go again to the site here is such a size 12 for Unix the type the number is eighteen hundred.
So type and space 1 8 0 0.
Then a which specifies that talk type of go just a dictionary attack type then you will specify the
output of the output is the correct will be put in the crack that the XY file and then you refer to
the location of the hash file which is hash which is again.
Hush hush.
And this D.
And then I'll be using a simple word list here word list the DST and then use force cracked the X2 signature
unmatched.
So here I'm missing a parameter which is the output and then here you go.
It will start the cracking process.
So here you can press on s to see the status.
It will tell you that it is running.
And this is the target hash that we want to crack.
The time started the estimated time so it will take around three hours to finish.
We are using this word list.
So let's wait for that to finish.
I'll just pause the video now and come back after three hours.
If you press again on status you will see that the progress is increasing.
So let's just wait.
Just make sure here that if you use the wrong hash type the application will give you an Adder and will
not be able to start cracking the hash.
So make sure you do well based research on the type of the hash that you are tracking.
One of the applications Rand that might be beneficial is a hash identifier.
You open it here and you just paste the hash and it will tell you what kind of harsh.
Is that.
So I come again to check the application status and not it is correct.
Meaning that the password has been figured out the duration taken is 1 hour 40 minutes.
I just stopped the previous attack changed the password to the more strong one for that my has changed.
But for you just it's the same thing to be able to see the password.
Just go to leashed by the crack XY you will able to see that this is the hash that has been cracked
to this password.
So this is my password.