Skip to content
KitploitKITPLOIT
ToolsBlog
Submit
ToolsBlog
Submit

Hacking, PenTest, and Cybersecurity Tools for Your Security Arsenal!

Kitploit is a directory of hacking, cybersecurity, and pentesting tools. Discover the latest project updates to find vulnerabilities, analyze systems, automate testing, and strengthen your security.

··Feeds·Contact·Privacy·© 2026 Kitploit

Tool Directory

Categories

View all categories
Loading categories
hashcrack — Guesses hash types, picks some sensible dictionaries and rules for hashcat | Kitploit
Tools/GitHubGitHub/nccgroup/hashcrack
Password CrackingPassword AttacksHash Analysis
GitHubnccgroup/hashcrack

hashcrack

Guesses hash types, picks some sensible dictionaries and rules for hashcat

View Repository
101272 years agoReviewed by Kitploit

Most Popular

View all →

Discover the most used tools by our community.

Explore all tools

Browse our collection of tools

View all tools →
Share

hashcrack

unpacks some hash types, picks sensible options and invokes hashcat

NVIDIA drivers here: http://www.nvidia.co.uk/Download/index.aspx?lang=en-uk

alt email: [email protected] if you need support

I'm not sure if anyone at NCC will be looking after this, but I'll be doing active dev in this branch in future: https://github.com/jamieriden/hashcrack

python version

To install:

root@kitploit:~
pip3 install -r requirements.txt
python3 setup.py

If you don't have Python in your path:

root@kitploit:~
<path to python>/python.exe -m pip install -r requirements.txt
<path to python>/python.exe setup.py

This will fetch about 30Gb of dictionaries - YOU HAVE BEEN WARNED

for 7z files, you will need perl and Compress::Raw::LZMA, so maybe one of these two depending on your perl distribution:

ActiveState Perl:

root@kitploit:~
ppm install Compress::Raw::LZMA

Strawberry Perl:

root@kitploit:~
cpan install Compress::Raw::LZMA

To run - various cases:

Bog standard crack:

root@kitploit:~
python3 hashcrack.py -i <input file>

or:

root@kitploit:~
python3 hashcrack.py --hash <literal hash>

Try harder - use words and phrases and previously found passwords

root@kitploit:~
python3 hashcrack.py --input <input file> --words --phrases --found

Nuclear option - use bigger rules + dict

root@kitploit:~
python3 hashcrack.py --input <input file> --nuke

Try a bunch of dumb passwords:

root@kitploit:~
python3 hashcrack.py -i <input file> --crib dict/dumb.txt

Try a bunch of dumb passwords part 2:

root@kitploit:~
python3 hashcrack.py -i <input file> --mask default.hcmask

Try your own mask:

root@kitploit:~
python3 hashcrack.py -i <input file> --mask ?l?l?l?l?l?l

Run an IFM dump you've saved as a zip:

root@kitploit:~
python3 hashcrack.py -i <input file.zip> [-t ifm] 

See also test.bat

Input file may be a docx, pdf, JKS file, etc.

See also crackstation dictionaries - https://crackstation.net/

If you don't have Perl/Python/Java in your path, can set the correct paths in hashcrack.cfg - these are the paths to the executable files, rather than the directory the executable is in.

===

Thanks to https://github.com/berzerk0 for some wordlists - these are CC licensed. See: https://github.com/berzerk0/Probable-Wordlists/tree/master/Real-Passwords

Other wordlists used are openwall_all.txt from Solar Designer, a crack of 275mil of Troy Hunt's hashes (mine), and breachcompilation.txt - origin unknown. (Have merged the last two.)

Includes https://www.7-zip.org/ code - which is LGPL. Thanks all!

nsav2dive.rule is from here - thanks! https://github.com/NSAKEY/nsa-rules

License for nsav2dive.rule:

The Fair License

Copyright (c) 2015 _NSAKEY

Usage of the works is permitted provided that this instrument is retained with the works, so that any entity that uses the works is notified of this instrument.

DISCLAIMER: THE WORKS ARE WITHOUT WARRANTY.

Special thanks to CMIYK competition and hashes.org for test data.

Download Tool