Hashcat Cheatsheet

Example hashes

Hashcat examples can be found here

How to make username:password output in Hashcat?

It cannot be done by default. Hashcat has 15! output formats but there is no any format that outputs username and cracked password. I don’t know why :(

Hashcat wiki fragment:


  # | Format
 ===+========
  1 | hash[:salt]
  2 | plain
  3 | hash[:salt]:plain
  4 | hex_plain
  5 | hash[:salt]:hex_plain
  6 | plain:hex_plain
  7 | hash[:salt]:plain:hex_plain
  8 | crackpos
  9 | hash[:salt]:crack_pos
 10 | plain:crack_pos
 11 | hash[:salt]:plain:crack_pos
 12 | hex_plain:crack_pos
 13 | hash[:salt]:hex_plain:crack_pos
 14 | plain:hex_plain:crack_pos
 15 | hash[:salt]:plain:hex_plain:crack_pos

But there is another option which allows to crack hashes and THEN to output them in a specific format (username:password)

Firstly we need to crack hashes, which are stored now_recovering.txt file. All output hashes will be saved in simple_output.txt file. rockyou.txt dictionary will be used.


hashcat64.exe -a 0 -m 1500 now_recovering.txt D:\dictionaries\rockyou.txt --outfile=simple_output.txt --outfile-format=3

Output file will look like this:

v.xyY7nYqKxvE:111111
R1zRLXeq6odS.:123qwe
02Vtybtr7NChc:1qaz2wsx
D2Xl8.ZXAImzU:zxc123

Now we should start Hashcat one more time. This time Hashcat will load .pot file, file with raw hashes: now_recovering.txt and will output cracked hashes in specific format in file formated_output.txt.

hashcat64.exe -m 1500 --show --username --outfile=formated_output.txt --outfile-format 2 now_recovering.txt --potfile-path oclHashcat.pot

And now output file will look like this:

vpetrov:111111
aivanov:123qwe
dkuznetsov:1qaz2wsx
gproshin:zxc123

That’s it!

More information can be found in official Hashcat F.A.Q. : link