hashcat
GPU-accelerated password hash recovery utility supporting more than 590 hash modes across CUDA, HIP, Metal, and OpenCL backends.
Technical Architecture & Overview
Hashcat is an advanced password recovery utility. It supports more than 590 hash modes and runs on CPUs, GPUs, and other accelerators through CUDA, HIP, Metal, and OpenCL backends across Linux, Windows, and macOS. It provides ten attack modes, including wordlist, combination, brute-force, PCFG, two hybrid modes, and association. It includes an in-kernel rule engine.
Targeted Technical Use Cases
Audit password hash strength in offline datasets and identify weak or predictable credentials in captured test material.
Evaluation & Trade-offs
Core Strengths
- +Very high performance on GPU and accelerator hardware.
- +Broad support for hash and cipher types with optimized kernels.
- +Cross-platform with CUDA, HIP, Metal, and OpenCL backends.
Trade-Offs & Limitations
- -Requires a capable GPU and a CUDA, HIP, Metal, or OpenCL runtime for best results.
- -Command-line driven with a steep learning curve.
Defensive Security Application
Audit credential strength against controlled hash dumps to measure cracking resistance and prioritize stronger hashing or user education.
Frequently Asked Questions
What is hashcat?→
Hashcat is an advanced password recovery utility. It supports more than 590 hash modes and runs on CPUs, GPUs, and other accelerators through CUDA, HIP, Metal, and OpenCL backends across Linux, Windows, and macOS. It provides ten attack modes, including wordlist, combination, brute-force, PCFG, two hybrid modes, and association. It includes an in-kernel rule engine.
What is hashcat used for?→
Audit password hash strength in offline datasets and identify weak or predictable credentials in captured test material.
What are the strengths of hashcat?→
- +Very high performance on GPU and accelerator hardware.
- +Broad support for hash and cipher types with optimized kernels.
- +Cross-platform with CUDA, HIP, Metal, and OpenCL backends.
What are the limitations of hashcat?→
- +Requires a capable GPU and a CUDA, HIP, Metal, or OpenCL runtime for best results.
- +Command-line driven with a steep learning curve.
How is hashcat used defensively?→
Audit credential strength against controlled hash dumps to measure cracking resistance and prioritize stronger hashing or user education.