Kali Linux Web Penetration Testing Cookbook - Second Edition

How it works...

The parameters we used to run Hashcat in this recipe were the ones for defining the hashing algorithm to be used: -m 0 tells the program to use MD5 to hash the words it generates and the type of attack. -a 3 means that we want to use a pure Brute Force attack and try every possible character combination until we arrive at the password. Finally, we added the hash we wanted to crack in the first case and the file containing a collection of hashes in the second case.

Hashcat can also use a dictionary file and create a hybrid attack (Brute Force plus dictionary) to define which character sets to test for and save the results to a specified file (it saves them to /usr/share/oclhashcat/Hashcat.pot). It can also apply rules to words ...