The only tool you need for password cracking
June 07, 2022

The only tool you need for password cracking

Anonymous | TrustRadius Reviewer
Score 10 out of 10
Vetted Review
Verified User

Overall Satisfaction with Hashcat

Hashcat is one of those go-to tools for password cracking for pen testers and red teamers. GPU support makes it faster than other projects like John the Ripper. It supports every hash format I've run into, so no need to try and bring in other tools. It's an unofficial release, but I like some of the GUIs that people make for it when I don't feel like using the command line.
  • GPU accelerated password cracking
  • Rule based attacks
  • Supports all the hash formats
  • When drivers for your GPU aren't working it can be very frustrating to get started
  • Some 3rd party GUI exists for Hashcat, but having an official one could be nice
  • Speed
  • Rules that can be applied to dictionary attacks
  • Can handle many hash formats
  • Hashcat is a free tool
  • It can be used to test password policies
  • Great tool for penetration testers doing offline password attacks

Do you think Hashcat delivers good value for the price?

Yes

Are you happy with Hashcat's feature set?

Yes

Did Hashcat live up to sales and marketing promises?

Yes

Did implementation of Hashcat go as expected?

Yes

Would you buy Hashcat again?

Yes

Any time you want to perform offline password cracking exercises, Hashcat is going to be able to do that for you. I can't think of any scenario where you have a password hash you need to crack where another tool would be more suited to the task. Hashcat, of course, works best when you have a GPU available, but you can even use it on a VM if you use the --force flag.