Time 2021 04 28

hashcat

• 爆破NTLM-hash

  • hashcat -m 1000 hash.txt pass1.txt
    
    MODE: 1000
    TYPE: NTLM
    b4b9b02e6f09a9bd760f388b67351e2b
    

• 爆破shadow文件

  • hash.txt 只保留加密的密码字段 : $id$salt$encrypted

  • hashcat -m 500 hash.txt pass1.txt
    hashcat -m 1500 hash.txt pass1.txt
    hashcat -m 1800 hash.txt pass1.txt
    
    MODE: 500
    TYPE: md5crypt, MD5 (Unix), Cisco-IOS $1$ (MD5) 2
    $1$28772684$iEwNOgGugqO9.bIz5sk8k/
    
    MODE: 1500
    TYPE: descrypt, DES (Unix), Traditional DES
    48c/R8JAv757A
    
    MODE: 1800
    TYPE: sha512crypt $6$, SHA512 (Unix)
    $6$52450745$k5ka2p8bFuSmoVT1tzOyyuaREkkKBcCNqoDKzYiJL9RaE8yMnPgh2XzzF0NDrUhgrcLwg78xs1w5pJiypEdFX/
    

• 批量破解

  • hashcat -a 0 hash.txt password.txt -o result.txt