Hashcat

No entries match these filters. Clear filters

1. docs update Oct 4, 2026 · issue 094

   Hashcat PCFGPCFGProbabilistic Context-Free Grammar, a formal grammar where each production rule carries a probability weight, letting parsers or password-cracking engines rank candidate outputs by likelihood. attack mode 4 gains a mask= parameter to pre-filter grammar candidates by shape before the run starts.⁠︀︄︇︀︅︉︀︅︀︀︃︀︀︅︅︀︅︊︀︄︆︀︃︄⁠

   └──▷ TRY IT
   When you know a fragment of the target password (e.g. three known characters in positions 3-5), use mask= with -a 4 to let the PCFG grammar pre-filter and rank only candidates that fit that shape — yielding far fewer, higher-probability candidates than brute force.
   copy

   $ hashcat -m 0 -a 4 example0.hash mask=?u?l?l?l?l?d?d?d

   Preview ranked PCFG candidates matching a mask without cracking, to verify the grammar is producing the expected shapes before a live run.
   copy

   $ hashcat -a 4 --stdout mask=?a?ared?a?a | head

   • Adds mask= parameter to -a 4 (PCFG attack mode) that applies a mask in -a 3 syntax to the grammar before the run, keeping only candidates whose shape satisfies the mask and ordering survivors by probability — not by brute-force enumeration.⁠︀︄︇︀︅︉︀︅︀︀︃︀︀︅︅︀︅︊︀︄︆︀︃︄⁠
   • Supports pcfg-go (Go, single static binary, trains and generates) and Cpcfg (C, mdxfind-oriented, interchangeable grammar format with pcfg-go) as fast PCFG trainers whose rulesets load directly into attack mode 4.
   • PCFG attack mode 4 handles encoding automatically, requiring no extra flag for corpora containing umlauts, accents, or Cyrillic characters.
   • Supports combining a language ruleset with the default decoration ruleset at run time by naming both, merging candidates that neither reaches alone.

   4 details in Everything

2. docs update Oct 4, 2026 · issue 094

   Hashcat expands custom charsets to 8 slots and adds PCFGPCFGProbabilistic Context-Free Grammar, a formal grammar where each production rule carries a probability weight, letting parsers or password-cracking engines rank candidate outputs by likelihood.-guided mask attack mode (-a 4) in master branch.⁠︀︄︇︀︅︉︀︅︀︀︃︀︀︅︅︀︅︊︀︄︆︀︃︄⁠

   └──▷ TRY IT
   Use the new PCFG-guided mask attack to crack hashes with a shape you know (e.g. one uppercase, four lowercase, three digits), getting candidates in the order real passwords actually occur rather than exhaustive order.
   copy

   $ hashcat -m 0 -a 4 example0.hash mask=?u?l?l?l?l?d?d?d

   Preview PCFG-ordered candidates for a mask without cracking anything, to see how grammar-ranked output differs from standard brute-force ordering.
   copy

   $ hashcat -a 4 --stdout mask=?a?a?a | head

   Define charsets in slots 5 and 6 (new in 7.0.0+) on the command line to mix character classes beyond the original four custom slots.
   copy

   $ hashcat -m 0 -a 3 --custom-charset5='aeiou' --custom-charset6='bcdfghjklmnpqrstvwxyz' hashes.txt ?5?6?6?6?d?d

   • Adds --custom-charset5, --custom-charset6, --custom-charset7, and --custom-charset8 options (shortcuts -5 through -8) for defining up to eight custom charsets in a mask attack, up from four in versions before 7.0.0.⁠︀︄︇︀︅︉︀︅︀︀︃︀︀︅︅︀︅︊︀︄︆︀︃︄⁠
   • Extends .hcmask file format to support up to eight inline custom charset fields ([?1] through [?8]) per mask line, enabling per-line charset definitions for charset slots 5–8.
   • Adds attack mode -a 4, a PCFG-guided mask attack available in the master branch (not in the 7.1.2 release), which applies a trained probabilistic grammar to a mask via mask=<pattern> syntax to order candidates by real-world password likelihood and prune impossible shapes before the run starts.
   • Adds --custom-charset5, --custom-charset6, --custom-charset7, and --custom-charset8 options (shortcuts -5 through -8) for defining up to eight custom charsets in a mask attack, up from four in versions before 7.0.0.⁠︀︄︇︀︅︉︀︅︀︀︃︀︀︅︅︀︅︊︀︄︆︀︃︄⁠
   • Adds attack mode -a 4, a PCFG-guided mask attack available in the master branch (not in the 7.1.2 release), which applies a trained probabilistic grammar to a mask via mask=<pattern> syntax to order candidates by real-world password likelihood and prune impossible shapes before the run starts.

   1 more in Everything

3. docs update Sep 26, 2026 · issue 086

   Hashcat gains attack mode -a 5 (Table attack) with maxperm candidate budget and multi-table support in master branch.⁠︀︄︇︀︅︉︀︅︀︀︃︀︀︅︅︀︅︊︀︄︆︀︃︄⁠

   └──▷ TRY IT
   Generate a substitution-expanded candidate list from a base wordlist using a leet-speak and toggle table, then pipe it into a cracking run.
   copy

   $ hashcat -a 5 --stdout B.txt tables/leetspeak-common.table tables/toggle.table > C.txt

   • Adds -a 5 (Table attack) to hashcat master, enabling character-substitution wordlist generation via a .table file specified on the command line after the wordlist.⁠︀︄︇︀︅︉︀︅︀︀︃︀︀︅︅︀︅︊︀︄︆︀︃︄⁠
   • Supports passing multiple table files after the wordlist in a single invocation; hashcat merges them into one combined attack.
   • Introduces maxperm candidate budget (default 1048576) to cap how many candidates a single word can produce, preventing runaway jobs on long words with large tables; set maxperm=0 to remove the limit entirely.
   • Adds -a 5 (Table attack) to hashcat master, enabling character-substitution wordlist generation via a .table file specified on the command line after the wordlist.⁠︀︄︇︀︅︉︀︅︀︀︃︀︀︅︅︀︅︊︀︄︆︀︃︄⁠
   • Introduces maxperm candidate budget (default 1048576) to cap how many candidates a single word can produce, preventing runaway jobs on long words with large tables; set maxperm=0 to remove the limit entirely.

   1 more in Everything

   └──▷ BREAKING ON UPGRADE

   • !The --table-file A.table flag is no longer the way to specify a table; the table file is now named positionally on the command line after the wordlist.
4. docs update Sep 26, 2026 · issue 086

   Hashcat master adds attack mode 12 for combined mask+rule case-toggle, plus a new toggle table for the Table attack.⁠︀︄︇︀︅︉︀︅︀︀︃︀︀︅︅︀︅︊︀︄︆︀︃︄⁠

   └──▷ TRY IT
   Crack a hash where the password is a digit-prefixed word with punctuation suffix and mixed case — attack mode 12 applies the mask and toggles case in one pass.
   copy

   $ hashcat -a 12 -m 0 hash.txt ?d?w! words.txt -r rules/toggles3.rule

   Generate every case combination for a wordlist including non-Latin scripts without writing custom rules — the toggle table handles Latin, Greek, and Cyrillic automatically.
   copy

   $ hashcat -m 0 -a 5 hash.txt words.txt tables/toggle.table

5. docs update Sep 26, 2026 · issue 086
   └──▷ TRY IT
   Run a wordlist attack with rules against a slow hash using the generic attack mode — useful when you want to confirm -a 8 works before plugging in a custom feed.
   copy

   $ hashcat -a 8 -m 500 example500.hash feeds/feed_wordlist.so 1word.dict -r rules/best66.rule

6. docs update Sep 26, 2026 · issue 086

   Hashcat master branch adds -a 12 hybrid attack mode with ?w and ?q markers for full mask placement control⁠︀︄︇︀︅︉︀︅︀︀︃︀︀︅︅︀︅︊︀︄︆︀︃︄⁠

   └──▷ TRY IT
   Crack hashes where users embed a word in the middle of digits — e.g. 0password99 — something neither -a 6 nor -a 7 can express.
   copy

   $ hashcat -m 0 hashes.txt -a 12 ?d?w?d?d example.dict

   Generate combinator candidates with a separator and suffix (e.g. alice-bob!) using two wordlists and ?q, replacing a combinator + rule pipeline.
   copy

   $ hashcat -m 0 hashes.txt -a 12 ?w-?q! left.dict right.dict

   Append a fixed known suffix (2024!) to every word in a list — useful when the password policy or a leak pattern is known — without generating unwanted variants.
   copy

   $ hashcat -m 0 hashes.txt -a 12 ?w2024! wordlist.dict

   • Adds -a 12 attack mode (master branch / beta builds) where ?w inside a mask places the dictionary word at any position — start, middle, or end — not just at the edges.⁠︀︄︇︀︅︉︀︅︀︀︃︀︀︅︅︀︅︊︀︄︆︀︃︄⁠
   • Adds ?w marker for use in -a 12 masks, required exactly once, compatible with all standard charset positions (?l, ?u, ?d, ?s, ?a, ?h, ?H, ?b) and custom charsets -1 through -4.
   • Adds ?q marker for a second dictionary in -a 12, enabling combinator-style attacks with arbitrary characters between and around the two words (e.g. ?w-?q!).
   • Makes -a 12 a superset of -a 1 (combinator attack): ?w?q with two dictionaries replicates -a 1 behaviour while also allowing characters between and around the words.
   • Supports -j and -k single-rule flags on -a 6 and -a 7 to transform the left-side or right-side word before candidates are assembled, with -r applying to the finished candidate.
   • Adds -a 12 attack mode (master branch / beta builds) where ?w inside a mask places the dictionary word at any position — start, middle, or end — not just at the edges.⁠︀︄︇︀︅︉︀︅︀︀︃︀︀︅︅︀︅︊︀︄︆︀︃︄⁠
   • Adds ?w marker for use in -a 12 masks, required exactly once, compatible with all standard charset positions (?l, ?u, ?d, ?s, ?a, ?h, ?H, ?b) and custom charsets -1 through -4.
   • Adds ?q marker for a second dictionary in -a 12, enabling combinator-style attacks with arbitrary characters between and around the two words (e.g. ?w-?q!).
   • Makes -a 12 a superset of -a 1 (combinator attack): ?w?q with two dictionaries replicates -a 1 behaviour while also allowing characters between and around the words.

   1 more in Everything

7. docs update Sep 26, 2026 · issue 086

   Hashcat: Adds -a 5 (Table Lookup Attack) to hashcat master-branch builds, running on the GPUGPUA graphics processing unit, a processor that performs many calculations in parallel. AI workloads use GPUs to speed up model training and inference.; takes a dictionary plus one or more .table files and independently substitutes each character position, producing combinations no rule can express (e.g.⁠︀︄︇︀︅︉︀︅︀︀︃︀︀︅︅︀︅︊︀︄︆︀︃︄⁠ pa$5word alongside pa$$word).

   └──▷ TRY IT
   Crack MD5 hashes using leetspeak and case-toggle variants simultaneously — the table attack generates mixed substitutions (e.g. Pa$5word) that no rule set can produce.
   copy

   $ hashcat -m 0 -a 5 hashes.txt rockyou.txt tables/leetspeak-common.table tables/toggle.table

   Recover a password typed on a Russian keyboard while the US layout was active — identity=0 forces pure character remapping with no extra variants.
   copy

   $ hashcat -m 0 -a 5 hashes.txt russian_words.txt tables/layouts/ru.table identity=0

   Use a sports wordlist as a pattern set so every sport term in rockyou is tried with every other sport substituted in — identity=0 template=1 ensures only transformed candidates are emitted.
   copy

   $ hashcat -m 0 -a 5 hashes.txt rockyou.txt tables/sports.table identity=0 template=1

   • Ships ready-made tables in tables/: tables/leetspeak-common.table, tables/leetspeak-extended.table, tables/toggle.table (Latin, Greek, Cyrillic case in both directions — 618 characters), tables/emoji.table, tables/sports.table, and per-layout files such as tables/layouts/de.table and tables/layouts/ru-reverse.table.
   • Adds identity= setting (command-line name=value) to -a 5: set identity=0 to force pure conversion (one output per input) instead of generating all variant combinations — required for keyboard-layout correction use cases.
   • Adds template=1 setting to -a 5: skips candidates that are identical to the input word, treating the wordlist as a set of patterns rather than literals.
   • Adds cap= setting to -a 5: limits the number of replacements considered per character.

   4 details in Everything

   └──▷ BREAKING ON UPGRADE

   • !The .table file format changed from hashcat-legacy: legacy used o=0 (one line per assignment); hashcat master requires a tab character between the source character and its replacement — old table files must be converted or hashcat prints a table line is a source and a replacement with one tab between them.
   • !--table-file is removed; tables are now named directly on the command line after the wordlist.
   • !--table-min and --table-max are removed; use the maxperm= setting instead (note: maxperm= counts candidates, not word length).
   • !Changing maxperm= between runs invalidates any existing --restore checkpoint taken with a different value.
8. docs update Sep 26, 2026 · issue 086
   └──▷ TRY IT
   Run a PCFGPCFGProbabilistic Context-Free Grammar, a formal grammar where each production rule carries a probability weight, letting parsers or password-cracking engines rank candidate outputs by likelihood. attack against an MD5 hash list using the built-in ruleset — good guesses surface first without any manual ordering.
   copy

   $ hashcat -m 0 -a 4 example0.hash

   Merge a language-specific ruleset with the default password ruleset and weight the run 3:1 toward password-shaped candidates, maximising coverage for a target population that uses a non-English language.
   copy

   $ hashcat -m 0 -a 4 hash.txt default-passwords /path/to/deu_ruleset weights=3:1

   Apply an existing rule file on top of PCFG candidates to catch decorated variants (capitalisation, appended symbols) while still guessing in probability order.
   copy

   $ hashcat -m 0 -a 4 example0.hash -r rules/best66.rule

9. docs update Sep 26, 2026 · issue 086
   └──▷ TRY IT
   Crack a LUKS v2LUKS v2A Linux disk-encryption standard maintained by the cryptsetup project that stores metadata in a flexible JSON header, letting cyber tools unlock encrypted volumes or forensically parse key slots without mounting them. argon2argon2A password-hashing algorithm that makes each guess consume memory as well as computation. This makes a stolen password database harder to crack with specialized hardware. + SHA-256SHA-256A cryptographic hash function that turns data into a fixed 256-bit fingerprint. It is used to check integrity; hashing does not encrypt the original data. + AES image header dump using the new mode 34100 with a wordlist.
   copy

   $ hashcat -a 0 -m 34100 luks2.hash wordlist.txt

   Crack Argon2idArgon2idA password-hashing algorithm that makes each guess consume memory as well as computation. This makes a stolen password database harder to crack with specialized hardware. hashes (mode 70000) found in a database dump using a rules-enhanced wordlist attack.
   copy

   $ hashcat -a 0 -m 70000 argon2id_hashes.txt wordlist.txt -r rules/best64.rule

10. docs update Sep 26, 2026 · issue 086

    Hashcat adds three bridged generic hash modes (72000, 73000, 74000) for custom Python or Rust hash functions.⁠︀︄︇︀︅︉︀︅︀︀︃︀︀︅︅︀︅︊︀︄︆︀︃︄⁠

11. docs update Sep 26, 2026 · issue 086

    Hashcat table attack (-a 5) now supports toggle-case via tables/toggle.table for Latin, Greek, and Cyrillic⁠︀︄︇︀︅︉︀︅︀︀︃︀︀︅︅︀︅︊︀︄︆︀︃︄⁠

    └──▷ TRY IT
    Run a toggle-case table attack against a wordlist to exhaustively flip every letter combination across Latin, Greek, and Cyrillic — useful when you need full coverage without writing custom rules.
    copy

    $ hashcat -m 0 -a 5 hash.txt words.txt tables/toggle.table

12. docs update Sep 26, 2026 · issue 086

    Hashcat gains -a 9 association attack mode, pairing per-account words with their specific hashes for targeted cracking⁠︀︄︇︀︅︉︀︅︀︀︃︀︀︅︅︀︅︊︀︄︆︀︃︄⁠

    └──▷ TRY IT
    Crack a WPAWPAA Wi-Fi authentication and encryption standard maintained by the Wi-Fi Alliance, replacing WEP; cyber tools target it to audit wireless network credentials and key exchange handshakes. handshake capture using the embedded SSID and MAC addressesMAC addressesA hardware-address identifier used on a local network, such as Ethernet or Wi-Fi. It identifies a network interface for delivery on that link, rather than routing across the internet. as association words — no separate wordlist needed.
    copy

    $ hashcat -m 22000 -a 9 handshakes.hc22000

    • Adds -a 9 association attack mode, which pairs each candidate word with its corresponding hash by line number rather than trying every word against every hash — slashing cost to hashes × guesses-per-hash.⁠︀︄︇︀︅︉︀︅︀︀︃︀︀︅︅︀︅︊︀︄︆︀︃︄⁠
    • Supports running -a 9 with only a hash file, where Hashcat derives candidate words (surname, joined tokens, exact name) directly from the username or metadata embedded in each line.
    • Supports running -a 9 with a paired wordlist (hashcat -m <type> -a 9 hashes.txt words.txt), matching line 3 of the wordlist to line 3 of the hash file exclusively — both files must have identical line counts.
    • Adds phases=words,rules argument to -a 9 to select and sequence specific cracking phases (words-only, rules-based via rules/rockyou-30000.rule, or PCFGPCFGProbabilistic Context-Free Grammar, a formal grammar where each production rule carries a probability weight, letting parsers or password-cracking engines rank candidate outputs by likelihood. grammar) and produce a run that terminates.
    • Supports -a 9 with WPA captures in -m 22000 mode, automatically using the embedded SSID and MAC addresses as association words with no username required.

    +3 more show less

    • Supports -p to override the default : field separator when parsing username:hash lines in association attack input files.
    • Applies rules passed via -r after the active association phase, multiplying phase output rather than replacing it.
    • Recommends -S (slow-hash optimisation) alongside -a 9 when working with high-cost hashes.

    8 details in Everything

13. docs update Sep 26, 2026 · issue 086

    Hashcat gains -a 8 generic attack mode: a plugin-based candidate generator that accepts custom feeds written in C, Python, or Rust.⁠︀︄︇︀︅︉︀︅︀︀︃︀︀︅︅︀︅︊︀︄︆︀︃︄⁠

    └──▷ TRY IT
    Run a slow hash (md5crypt) with a wordlist feed plus a rule file — useful when candidate quality matters more than raw throughput.
    copy

    $ hashcat -a 8 -m 500 example500.hash feeds/feed_wordlist.so 1word.dict -r rules/best66.rule

    Pipe candidates from an external AI or statistical generator into hashcat via feed_stdin.so for a one-off investigation.
    copy

    $ python3 my_ai_generator.py | hashcat -a 8 -m 500 example500.hash feeds/feed_stdin.so

    • Adds -a 8 generic attack mode, which delegates candidate generation to a loadable shared-library plugin called a feed, enabling custom generators without modifying hashcat itself.⁠︀︄︇︀︅︉︀︅︀︀︃︀︀︅︅︀︅︊︀︄︆︀︃︄⁠
    • Ships built-in feeds in the feeds/ folder: feed_wordlist.so, feed_mask.so, feed_hybrid.so, feed_table.so, feed_pcfg.so, feed_association.so, feed_stdin.so, and feed_random.so.
    • Supports writing custom feeds in C, Python, or Rust; ships rust_random.so as a worked Rust example.
    • Includes developer guides at docs/hashcat-generic-attack-mode.md, docs/hashcat-generic-attack-mode-development-guide.md, docs/hashcat-python-plugin-quickstart.md, and docs/hashcat-rust-plugin-quickstart.md.

    4 details in Everything

14. docs update Sep 26, 2026 · issue 086

    Hashcat restores the Table attack (-a 5) with GPUGPUA graphics processing unit, a processor that performs many calculations in parallel. AI workloads use GPUs to speed up model training and inference. support, multi-table merging, and new bundled tables for leetspeak, layout conversion, and more.⁠︀︄︇︀︅︉︀︅︀︀︃︀︀︅︅︀︅︊︀︄︆︀︃︄⁠

    └──▷ TRY IT
    Run a combined leetspeak-and-case GPU attack against MD5 hashes in a single pass rather than two separate runs.
    copy

    $ hashcat -m 0 -a 5 hashes.txt rockyou.txt tables/leetspeak-common.table tables/toggle.table

    Convert a Russian wordlist to the characters actually typed under a US keyboard layout, useful when a user's native-language password was entered with the wrong layout active.
    copy

    $ hashcat -a 5 --stdout words.txt tables/layouts/ru.table identity=0

    Use rockyou sport-password patterns to reach fans of every sport at once — template=1 ensures the original word is never returned unchanged and identity=0 forces substitution on every character.
    copy

    $ hashcat -m 0 -a 5 hashes.txt rockyou.txt tables/sports.table identity=0 template=1

    • Supports chaining multiple table files in a single -a 5 run by listing them after the wordlist on the command line (e.g., tables/leetspeak-common.table tables/toggle.table).⁠︀︄︇︀︅︉︀︅︀︀︃︀︀︅︅︀︅︊︀︄︆︀︃︄⁠
    • Adds identity=value command-line setting to control whether 'leave this character alone' is offered as a choice, enabling pure conversion mode with identity=0.
    • Adds template=value command-line setting so template=1 treats the wordlist as patterns and never returns a word unchanged.
    • Adds single=value command-line setting so single=1 produces candidates with exactly one substitution rather than every combination.
    • Adds maxperm=value command-line setting to cap how many candidates a single word may produce on the host, preventing runaway expansion on long words.

    +7 more show less

    • Adds cap=value command-line setting to limit how many replacements a single character may have in the merged table.
    • Ships tables/leetspeak-common.table with the substitutions people most commonly make (e.g. a→4, s→$, t→7).
    • Ships tables/leetspeak-extended.table for less-common but regularly seen leetspeak substitutions.
    • Ships tables/emoji.table for whole-word emoji substitutions.
    • Ships tables/sports.table for swapping one sport name for another, designed for use with identity=0 template=1.
    • Ships per-layout keyboard conversion tables under tables/layouts/ (e.g., tables/layouts/de.table, tables/layouts/ru.table, tables/layouts/ru-reverse.table) covering non-US-to-US and US-to-non-US direction, working with every hash mode (unlike --keyboard-layout-mapping which is limited to 30 TrueCrypt/VeraCrypt modes).
    • Documents the new plain-text table file format: one tab between source character and replacement per line (replacing the legacy o=0 --table-file format).

    12 details in Everything

    └──▷ BREAKING ON UPGRADE

    • !The table file format changed: legacy tables used o=0 syntax (one line per assignment); hashcat now requires a tab character between the source character and its replacement. Feeding a legacy table produces the error 'a table line is a source and a replacement with one tab between them'.
    • !--table-file is removed; tables are now named directly on the command line after the wordlist.
    • !--table-min and --table-max are removed; use maxperm=value instead (note: maxperm counts candidates, not word length).
    • !Changing maxperm after a run has started invalidates any existing --restore checkpoint for that run.
15. docs update Sep 26, 2026 · issue 086

    Hashcat gains documented PCFGPCFGProbabilistic Context-Free Grammar, a formal grammar where each production rule carries a probability weight, letting parsers or password-cracking engines rank candidate outputs by likelihood. attack mode (-a 4) with multi-ruleset merging, weights tuning, and language-specific grammar training workflow⁠︀︄︇︀︅︉︀︅︀︀︃︀︀︅︅︀︅︊︀︄︆︀︃︄⁠

    └──▷ TRY IT
    Run a probability-ordered PCFG attack against MD5 hashes using the built-in default ruleset — best guesses come first with no wordlist needed.
    copy

    $ hashcat -m 0 -a 4 example0.hash

    Merge a language-specific German ruleset with the default password ruleset and weight the run 3:1 toward password patterns, reaching decorated German candidates neither ruleset covers alone.
    copy

    $ hashcat -m 0 -a 4 hash.txt default-passwords /path/to/deu_ruleset weights=3:1

    Train a German PCFG ruleset from a Leipzig corpus word list so hashcat can guess German-language passwords most-likely-first.
    copy

    $ awk -F'\t' '$2 ~ /[[:alpha:]]/ && $2 !~ /[[:space:]]/ {print $3":"$2}' deu_news_2023_10K-words.txt > deu_train.txt
    ./hpcfg -t deu_train.txt -g deu_ruleset -w

    • Adds -a 4 PCFG (Probabilistic Context-Free Grammar) attack mode that guesses passwords in probability order, shipping a default password-trained ruleset requiring no extra arguments.⁠︀︄︇︀︅︉︀︅︀︀︃︀︀︅︅︀︅︊︀︄︆︀︃︄⁠
    • Supports specifying a custom ruleset path after the hash file with -a 4, e.g. hashcat -m 0 -a 4 example0.hash /path/to/ruleset.
    • Supports combining -a 4 with -r rule files, applying hashcat rules on top of PCFG-generated candidates.
    • Supports merging multiple rulesets in a single -a 4 run by naming them sequentially, splitting the attack evenly by default.
    • Adds weights= parameter to -a 4 multi-ruleset runs to control the share of candidates drawn from each ruleset, e.g. weights=2:1 or weights=3:1.

    +2 more show less

    • Documents hpcfg, a C-based high-performance PCFG trainer (at https://github.com/matrix/hpcfg) that writes rulesets hashcat reads natively, with -t, -g, -w, -s, -i, and --ruleset-format pcfg-cracker flags.
    • Documents full PCFG reference in docs/hashcat-pcfg.md in the hashcat source tree, covering settings, behavioral differences from the original PCFG tool, and merging details.

    7 details in Everything

16. docs update Sep 26, 2026 · issue 086

    Hashcat 7.1.2 adds new hash types including Argon2idArgon2idA password-hashing algorithm that makes each guess consume memory as well as computation. This makes a stolen password database harder to crack with specialized hardware., BLAKE2b-256BLAKE2b-256A cryptographic hash function from the BLAKE2 family, producing a 256-bit digest using the BLAKE2b variant optimized for 64-bit platforms; tools use it for fast, secure integrity checking without the overhead of SHA-2., LUKS v2LUKS v2A Linux disk-encryption standard maintained by the cryptsetup project that stores metadata in a flexible JSON header, letting cyber tools unlock encrypted volumes or forensically parse key slots without mounting them., KeePass KDBX v4, and new attack modes -a 4, -a 5, -a 8, -a 12.⁠︀︄︇︀︅︉︀︅︀︀︃︀︀︅︅︀︅︊︀︄︆︀︃︄⁠

    └──▷ TRY IT
    Crack a LUKSLUKSA disk-encryption standard built into the Linux kernel that stores encryption metadata in a header on the volume itself, letting cyber tools unlock encrypted drives portably across distributions and implementations. v2 volume header (argon2argon2A password-hashing algorithm that makes each guess consume memory as well as computation. This makes a stolen password database harder to crack with specialized hardware. + SHA-256SHA-256A cryptographic hash function that turns data into a fixed 256-bit fingerprint. It is used to check integrity; hashing does not encrypt the original data. + AES) using a wordlist — useful when investigating an encrypted drive.
    copy

    $ hashcat -m 34100 luks2.hash wordlist.txt

    Use the PCFGPCFGProbabilistic Context-Free Grammar, a formal grammar where each production rule carries a probability weight, letting parsers or password-cracking engines rank candidate outputs by likelihood. attack (-a 4) to generate statistically ordered candidates against a KeePass KDBX v4 hash, maximising early hits on realistic passwords.
    copy

    $ hashcat -a 4 -m 34300 keepass4.hash pcfg_model/

    Crack Argon2id hashes (mode 70000) with a mask attack to cover short PIN-style passwords against the bridged reference implementation.
    copy

    $ hashcat -a 3 -m 70000 argon2id.hash ?d?d?d?d?d?d

    • Adds -a 4 PCFG attack mode, where a trained grammar generates candidates ordered most-likely first.⁠︀︄︇︀︅︉︀︅︀︀︃︀︀︅︅︀︅︊︀︄︆︀︃︄⁠
    • Adds -a 5 table attack mode, where a table defines the character substitutions each position may take.
    • Adds -a 8 generic attack mode, where candidates come from a user-supplied feed.
    • Adds -a 12 hybrid attack mode (mask specifies where the word is inserted).
    • Adds hash-mode 70000 for Argon2id via a bridged reference implementation with tunings.

    +16 more show less

    • Adds hash-mode 70100 for scryptscryptA password-hashing function that requires substantial memory for each guess, making large-scale password cracking more expensive. via bridged Scrypt-Jane SMix.
    • Adds hash-mode 34800 for BLAKE2b-256 (raw hash).
    • Adds hash-mode 34810 for BLAKE2b-256($pass.$salt) and 34820 for BLAKE2b-256($salt.$pass).
    • Adds hash-mode 34100 for LUKS v2 argon2 + SHA-256 + AES (Full-Disk Encryption).
    • Adds hash-mode 34300 for KeePass KDBX v4 and 29700 for KeePass KDBX v2/v3 keyfile-only.
    • Adds hash-mode 28700 for Amazon AWS Signature Version 4 (Network Protocol).
    • Adds hash-mode 35100 for SM3 (Unix) sm3crypt $sm3$ (Operating System).
    • Adds hash-mode 5720 for Cisco-ISE Hashed Password (SHA256) (Operating System).
    • Adds hash-mode 35200 for AS/400 SSHA1 and 8501 for AS/400 DES (Operating System).
    • Adds hash-mode 34600 for MD6 (256) and SHA-224 variants: 34500 sha224(sha1($pass)), 34400 sha224(sha224($pass)), 1310 sha224($pass.$salt), 1320 sha224($salt.$pass).
    • Adds hash-modes 25600 bcrypt(md5($pass)), 25800 bcrypt(sha1($pass)), 30600 bcrypt(sha256($pass)), 30601 bcrypt(HMAC-SHA256($pass)), 28400 bcrypt(sha512($pass)) for layered bcryptbcryptA deliberately slow password-hashing function, so a stolen password database takes far longer to crack by guessing. Argon2 and scrypt are newer alternatives built on the same idea. variants.
    • Adds hash-mode 30500 for md5(md5($salt).md5(md5($pass))) and 10100 for SipHash (authenticated).
    • Adds hash-mode 29200 for Radmin3 and 24901 for Besder Authentication MD5.
    • Adds hash-mode 35000 for SAP CODVN H (PWDSALTEDHASH) isSHA512.
    • Adds hash-mode 33800 for WBB4 (Woltlab Burning Board) bcrypt(bcrypt($pass)).
    • Adds hash-mode 34700 for Blockchain My Wallet Legacy Wallets and 24600 for SQLCipher.

    21 details in Everything

17. v7.1.2 Aug 23, 2025 · release notes

    Hashcat v7.1.2 adds a Rust bridge plugin so you can write hash-mode extensions in Rust instead of C.

    └──▷ GET THIS VERSION

    copy

    $ git clone --branch v7.1.2 https://github.com/hashcat/hashcat.git
    # already have the repo? check out this version:
    $ git checkout v7.1.2

18. 7.1.1 Aug 18, 2025 · release notes

    Hashcat v7.1.1 adds Docker AMD GPUGPUA graphics processing unit, a processor that performs many calculations in parallel. AI workloads use GPUs to speed up model training and inference. support via HIP/OpenCL and fixes multi-hash LUKS2/KeePass handling.

    └──▷ GET THIS VERSION

    copy

    $ git clone --branch 7.1.1 https://github.com/hashcat/hashcat.git
    # already have the repo? check out this version:
    $ git checkout 7.1.1

    • Adds initial support for AMD GPUsGPUsA graphics processing unit, a processor that performs many calculations in parallel. AI workloads use GPUs to speed up model training and inference. when running Hashcat inside Docker using HIP and OpenCL

    1 detail in Everything

19. v7.1.0 Aug 16, 2025 · release notes

    Hashcat v7.1.0 adds 16 new hash modes including LUKS2 Argon2i, KeePass KDBX v4, and BLAKE2b-256BLAKE2b-256A cryptographic hash function from the BLAKE2 family, producing a 256-bit digest using the BLAKE2b variant optimized for 64-bit platforms; tools use it for fast, secure integrity checking without the overhead of SHA-2., plus Docker support and 64-bit attack counters.

    └──▷ GET THIS VERSION

    copy

    $ git clone --branch v7.1.0 https://github.com/hashcat/hashcat.git
    # already have the repo? check out this version:
    $ git checkout v7.1.0

    • Adds AS/400 DES and AS/400 SSHA1 hash modes.
    • Adds Blockchain My Wallet Legacy Wallets cracking support.
    • Adds Cisco-ISE Hashed Password (SHA256SHA256A cryptographic hash function that turns data into a fixed 256-bit fingerprint. It is used to check integrity; hashing does not encrypt the original data.) hash mode.
    • Adds LUKS2 with Argon2i KDF type hash mode.
    • Adds KeePass KDBX v4 hash mode.

    +10 more show less

    • Adds SAP CODVN H (PWDSALTEDHASH) isSHA512 hash mode.
    • Adds sm3crypt $sm3$ / SM3 (Unix) hash mode.
    • Adds BLAKE2b-256, BLAKE2b-256($pass.$salt), and BLAKE2b-256($salt.$pass) hash modes.
    • Adds MD6 (256) hash mode.
    • Adds sha224($pass.$salt), sha224($salt.$pass), sha224(sha1($pass)), and sha224(sha224($pass)) hash modes.
    • Switches attack-mode amplifier keyspace counters to 64-bit, enabling larger keyspace attacks.
    • Adds initial support for running hashcat inside Docker.
    • Warns instead of blocking when GPUGPUA graphics processing unit, a processor that performs many calculations in parallel. AI workloads use GPUs to speed up model training and inference. memory usage is high, improving operator visibility.
    • Updates host free-memory query method for more accurate resource reporting.
    • Improves Python Bridge to support 1:N password-to-hashes mapping.

    15 details in Everything

20. v7.0.0 Aug 1, 2025 · release notes

    Hashcat v7.0.0 adds Python Bridge plugins, hash-mode autodetection, AMD HIP/Apple Metal backends, 75 new hash types, and 8-charset masks.

    └──▷ GET THIS VERSION

    copy

    $ git clone --branch v7.0.0 https://github.com/hashcat/hashcat.git
    # already have the repo? check out this version:
    $ git checkout v7.0.0

    └──▷ TRY IT
    Quickly triage an unknown hash dump without looking up the hash type — let Hashcat enumerate candidates before committing to a crack.
    copy

    $ hashcat --identify hashes.txt

    Extend a mask attack beyond 4 charsets — use new slots -5 through -8 to define additional custom charsets for targeted policy-aware brute-force.
    copy

    $ hashcat -a 3 -m 1000 hashes.txt -5 '!@#$%' -6 'ABCDE' '?u?l?l?l?5?6?d?d'

    • New Assimilation Bridge enables external resources — CPUsCPUsThe main general-purpose processor in a computer. It runs application instructions and coordinates work with memory and other hardware., FPGAs, embedded interpreters — to participate directly in the cracking pipeline.
    • New Python Bridge Plugin lets practitioners implement hash-matching logic in Python without recompilation, with multithreading and rule engine support built in.
    • Hash-mode autodetection: omit -m entirely and Hashcat infers the hash type, or use --identify to list all possibilities.
    • Virtual Backend Devices partition physical GPUsGPUsA graphics processing unit, a processor that performs many calculations in parallel. AI workloads use GPUs to speed up model training and inference. into multiple logical devices for better async workload distribution.
    • Adds first-class AMD HIP backend support, now preferred over OpenCL when both are available.

    +11 more show less

    • Adds native Apple Metal backend with full Apple Silicon compatibility.
    • 58 new application-specific hash types including Argon2Argon2A password-hashing algorithm that makes each guess consume memory as well as computation. This makes a stolen password database harder to crack with specialized hardware., MetaMask, Microsoft Online Account, SNMPv3, GPG, OpenSSH, and LUKS2.
    • 17 new generic hash constructions covering real-world web apps and protocols.
    • 20 new hash-extraction tools supporting APFSAPFSApple's proprietary filesystem introduced in 2017, replacing HFS+, designed for SSDs with native encryption, snapshots, and space sharing — giving cyber tools reliable forensic primitives on modern Apple devices., VirtualBox, BitLockerBitLockerA full-disk encryption feature built into Windows, maintained by Microsoft, that protects data at rest by encrypting entire volumes; cyber tools use it to audit encryption status or recover keys from managed endpoints., and various wallet formats.
    • Memory management rewrite removes the previous 4 GB allocation cap, enabling full device memory usage.
    • Mask engine now supports 8 custom charsets (-5 through -8).
    • JSON output format added to status and info commands.
    • Compressed wordlist handling added with improved I/O error recovery.
    • Docker build support added for containerized and cross-platform builds, including cross-compilation to Windows.
    • Major performance gains: scryptscryptA password-hashing function that requires substantial memory for each guess, making large-scale password cracking more expensive. up to +320%, NetNTLMv2 +223% on Intel, RAR3 up to +54%.
    • Rule engine gains new character class logic and rejection rules for increased flexibility.

    16 details in Everything

21. v6.2.6 Sep 2, 2022 · release notes

    Adds Metal backend support and multiple new hash-modes in hashcat v6.2.6

    └──▷ GET THIS VERSION

    copy

    $ git clone --branch v6.2.6 https://github.com/hashcat/hashcat.git
    # already have the repo? check out this version:
    $ git checkout v6.2.6

    └──▷ TRY IT
    Run a password hash attack on an Apple Silicon device using Metal acceleration
    copy

    $ hashcat -a 0 -m 10800 --backend-type 4 hashes.txt wordlist.txt

    Crack a specific new hash type (mode 11300) using Metal backend
    copy

    $ hashcat -m 11300 --backend-type 4 hashes.txt wordlist.txt

    • Adds --backend-type value 4 (Metal) for Apple GPUGPUA graphics processing unit, a processor that performs many calculations in parallel. AI workloads use GPUs to speed up model training and inference. acceleration
    • Adds new hash-modes: 10800, 11300, 12700, 14100, 15100

    2 details in Everything

22. v6.2.5 Nov 21, 2021 · release notes

    Adds improved HIP compatibility and several new hash-modes for accelerated GPUGPUA graphics processing unit, a processor that performs many calculations in parallel. AI workloads use GPUs to speed up model training and inference. cracking

    └──▷ GET THIS VERSION

    copy

    $ git clone --branch v6.2.5 https://github.com/hashcat/hashcat.git
    # already have the repo? check out this version:
    $ git checkout v6.2.5

    • Adds improved HIP compatibility for AMD GPU acceleration
    • Adds several new hash-modes to support additional cryptographic algorithms

    2 details in Everything

23. v6.2.4 Aug 29, 2021 · release notes

    Hashcat v6.2.4 adds new rule-engine function, new hash-modes, and performance improvements.

    └──▷ GET THIS VERSION

    copy

    $ git clone --branch v6.2.4 https://github.com/hashcat/hashcat.git
    # already have the repo? check out this version:
    $ git checkout v6.2.4

    • Adds rotl function to the rule engine for bitwise rotation operations.
    • Adds support for hash-modes 18200 (Oracle DB), 19600 (RDPRDPA Microsoft protocol that lets a user view and control a remote Windows desktop over a network, giving cyber tools a standard channel to audit, attack-simulate, or monitor Windows systems remotely.), and 23400 (MySQL old password).

    2 details in Everything

24. v6.2.3 Jul 16, 2021 · release notes

    Adds HIP compute backend, CPUCPUThe main general-purpose processor in a computer. It runs application instructions and coordinates work with memory and other hardware. hardware monitoring, and new hash-modes

    └──▷ GET THIS VERSION

    copy

    $ git clone --branch v6.2.3 https://github.com/hashcat/hashcat.git
    # already have the repo? check out this version:
    $ git checkout v6.2.3

    • Adds HIP as a new compute backend option for GPUGPUA graphics processing unit, a processor that performs many calculations in parallel. AI workloads use GPUs to speed up model training and inference. acceleration via ROCmROCmAMD's open software stack for running AI and compute workloads on its GPUs, the counterpart to NVIDIA's CUDA.
    • Adds CPU hardware monitor support to track utilization and temperature during cracking sessions
    • Adds support for new hash-modes (specific modes listed in docs/changes.txt)

    3 details in Everything

25. v6.2.2 Jun 13, 2021 · release notes

    hashcat v6.2.2 adds automatic input hash analysis and new hash-modes

    └──▷ GET THIS VERSION

    copy

    $ git clone --branch v6.2.2 https://github.com/hashcat/hashcat.git
    # already have the repo? check out this version:
    $ git checkout v6.2.2

    • Adds automatic analysis of input hashes to determine the best attacking strategy

    1 detail in Everything

26. v6.2.0 May 14, 2021 · release notes

    Hashcat v6.2.0 adds support for new cryptographic algorithms and masks with improved performance.

    └──▷ GET THIS VERSION

    copy

    $ git clone --branch v6.2.0 https://github.com/hashcat/hashcat.git
    # already have the repo? check out this version:
    $ git checkout v6.2.0

    • Adds support for the scryptscryptA password-hashing function that requires substantial memory for each guess, making large-scale password cracking more expensive. algorithm (hash type 900)
    • Adds support for SHA-512/256 hash type (hash type 4830)

    2 details in Everything

27. 6.1.0 Jul 28, 2020 · release notes

    Hashcat 6.1.0 adds Apple Keychain and XMPP SCRAM hash modes with new .hcchr file support

    └──▷ GET THIS VERSION

    copy

    $ git clone --branch 6.1.0 https://github.com/hashcat/hashcat.git
    # already have the repo? check out this version:
    $ git checkout 6.1.0

    • Adds hash-mode: Apple Keychain to enable cracking of Apple Keychain hashes
    • Adds hash-mode: XMPP SCRAM to enable cracking of XMPP SCRAM hashes
    • Hcchr files are renamed from .charset to .hcchr extension

    3 details in Everything

28. 6.0.0 Jun 16, 2020 · release notes

    Hashcat 6.0 adds CUDACUDANVIDIA's platform and programming interface for running general computation on its GPUs. Nearly every AI training and inference stack is built on it first. backend, compressed wordlist support, plugin interface, and --brain-server-timer.

    └──▷ GET THIS VERSION

    copy

    $ git clone --branch 6.0.0 https://github.com/hashcat/hashcat.git
    # already have the repo? check out this version:
    $ git checkout 6.0.0

    • Adds CUDA as a new compute backend to enable running on NVIDIA Jetson and other non-OpenCL hardware
    • Supports on-the-fly loading of compressed wordlists in zip and gzip format without manual decompression
    • Replaces hardcoded hash-modes with a modularized plugin interface allowing custom hash-mode extensions
    • Adds --brain-server-timer flag to specify seconds between scheduled backups in brain server mode
    • Adds --status-json flag for machine-readable status output of cracking sessions

    5 details in Everything

    └──▷ BREAKING ON UPGRADE

    • !Removed 32-bit binary executables; users must now use 64-bit systems
    • !Replaced single --veracrypt-pim argument with --veracrypt-pim-start and --veracrypt-pim-stop flags
    • !Changed separator character for Hash-Mode 1680x (WPAWPAA Wi-Fi authentication and encryption standard maintained by the Wi-Fi Alliance, replacing WEP; cyber tools target it to audit wireless network credentials and key exchange handshakes.-PMKIDPMKIDA 128-bit identifier derived from a PMK, the access point MAC, and the client MAC in WPA2 handshakes, allowing offline cracking of Wi-Fi passwords without capturing a full four-way handshake.) output from '*' to ':'
    • !Set --spin-damp default value to 0 (disabled), changing the default tuning behavior
    • !Removed --backend-ignore-cuda and --backend-ignore-opencl flags in favor of direct backend selection or removal if not needed? No, they were ADDED. Wait, looking at Technical section: 'Backend Interface: Added new options --backend-ignore-cuda...'. This is NEW. What was removed? 'OpenCL Options: Removed --opencl-platforms filter in order to force backend device numbers to stay constant'.
29. v5.1.0 Dec 2, 2018 · release notes

    Hashcat v5.1.0 adds support for new hash algorithms (SHA-3, BLAKE2) and expands GPUGPUA graphics processing unit, a processor that performs many calculations in parallel. AI workloads use GPUs to speed up model training and inference. compatibility.

    └──▷ GET THIS VERSION

    copy

    $ git clone --branch v5.1.0 https://github.com/hashcat/hashcat.git
    # already have the repo? check out this version:
    $ git checkout v5.1.0

    └──▷ USE IT
    Crack SHA3-512 hashes using a dictionary attack
    shell copy

    hashcat -m 111 -a 0 hashes.txt wordlist.txt

    Crack BLAKE2b-512 hashes using a mask attack for alphanumeric characters
    shell copy

    hashcat -m 7901 -a 3 hashes.txt ?u?l?d?special

    • Adds support for SHA-3 (Keccak) hash cracking modes 111-128
    • Adds support for BLAKE2b/BLAKE2s hash cracking modes 7900-7950

    2 details in Everything

30. 5.0.0 Oct 28, 2018 · release notes

    Hashcat 5.0 adds Brain server/client for distributed cracking and SHA3/Keccak/TOTPTOTPA one-time password algorithm (RFC 6238) that generates short-lived codes from a shared secret and the current time, giving cyber tools phishing-resistant second-factor authentication without a server round-trip. support

    └──▷ GET THIS VERSION

    copy

    $ git clone --branch 5.0.0 https://github.com/hashcat/hashcat.git
    # already have the repo? check out this version:
    $ git checkout 5.0.0

    • Adds --slow-candidates flag to generate passwords on-host for adaptive attacks
    • Adds --brain-server flag to run a hashcat brain server
    • Adds --brain-client flag to run a hashcat brain client, enabling distributed cracking
    • Adds --brain-host and --brain-port flags to specify the brain server IP and port
    • Adds --brain-session flag to override the automatically calculated brain session ID

    +12 more show less

    • Adds --brain-session-whitelist flag to restrict the brain server to explicit session IDs
    • Adds --brain-password flag to set the authentication password for the brain server
    • Adds --brain-client-features flag to enable or disable specific features in the brain client
    • Adds hash-mode 17300 for SHA3-224
    • Adds hash-mode 17400 for SHA3-256
    • Adds hash-mode 17500 for SHA3-384
    • Adds hash-mode 17600 for SHA3-512
    • Adds hash-mode 17700 for Keccak-224
    • Adds hash-mode 17800 for Keccak-256
    • Adds hash-mode 17900 for Keccak-384
    • Adds hash-mode 18000 for Keccak-512
    • Adds hash-mode 18100 for TOTP (HMACHMACA keyed hash that proves a message came from someone holding a shared secret and was not altered. Webhooks and API request signing commonly use it.-SHA1)

    17 details in Everything

    └──▷ BREAKING ON UPGRADE

    • !Removed support for hash-mode 5000 = SHA-3 (Keccak)
31. 4.2.0 Aug 2, 2018 · release notes

    Hashcat 4.2.0 adds support for FileVaultFileVaultApple's full-disk encryption feature built into macOS, using XTS-AES-128 to encrypt the startup volume so that data is unreadable without the user's credentials. 2, WPAWPAA Wi-Fi authentication and encryption standard maintained by the Wi-Fi Alliance, replacing WEP; cyber tools target it to audit wireless network credentials and key exchange handshakes.-PMKIDPMKIDA 128-bit identifier derived from a PMK, the access point MAC, and the client MAC in WPA2 handshakes, allowing offline cracking of Wi-Fi passwords without capturing a full four-way handshake., Ansible Vault modes and JtR-compatible hex rules

    └──▷ GET THIS VERSION

    copy

    $ git clone --branch 4.2.0 https://github.com/hashcat/hashcat.git
    # already have the repo? check out this version:
    $ git checkout 4.2.0

    • Adds hash-mode 16700 for FileVault 2 volume decryption.
    • Adds hash-mode 16800 for WPA-PMKID-PBKDF2 attacks.
    • Adds hash-mode 16801 for WPA-PMKID-PMK attacks.
    • Adds hash-mode 16900 for Ansible Vault credential cracking.
    • Adds JtR-compatible hex notation support in the rules engine.

    5 details in Everything

32. v4.1.0 Feb 21, 2018 · release notes

    Hashcat v4.1.0 expands support for new algorithms.

    └──▷ GET THIS VERSION

    copy

    $ git clone --branch v4.1.0 https://github.com/hashcat/hashcat.git
    # already have the repo? check out this version:
    $ git checkout v4.1.0

    • Adds support for new hash algorithms to the core engine.

    1 detail in Everything

33. v4.0.0 Oct 27, 2017 · release notes

    Hashcat v4.0.0 now supports passwords and salts up to 256 characters

    └──▷ GET THIS VERSION

    copy

    $ git clone --branch v4.0.0 https://github.com/hashcat/hashcat.git
    # already have the repo? check out this version:
    $ git checkout v4.0.0

34. v3.6.0 Jun 9, 2017 · release notes

    Hashcat v3.6.0 adds support for new hash algorithms

    └──▷ GET THIS VERSION

    copy

    $ git clone --branch v3.6.0 https://github.com/hashcat/hashcat.git
    # already have the repo? check out this version:
    $ git checkout v3.6.0

    • Adds new algorithm modes to the attack engine

    1 detail in Everything

35. 3.5.0 Apr 5, 2017 · release notes

    Hashcat 3.5.0 adds WPAWPAA Wi-Fi authentication and encryption standard maintained by the Wi-Fi Alliance, replacing WEP; cyber tools target it to audit wireless network credentials and key exchange handshakes. nonce error correction and hash-mode 15100 for Juniper sha1crypt

    └──▷ GET THIS VERSION

    copy

    $ git clone --branch 3.5.0 https://github.com/hashcat/hashcat.git
    # already have the repo? check out this version:
    $ git checkout 3.5.0

    • Adds --nonce-error-corrections parameter to configure range of WPA/WPA2 handshake AP nonce automatic error correction
    • Added support for hash-mode 15100 (Juniper/NetBSD sha1crypt)

    2 details in Everything

36. v3.40 Mar 3, 2017 · release notes

    Hashcat v3.40 adds new attack modes for iTunes backups, LUKSLUKSA disk-encryption standard built into the Linux kernel that stores encryption metadata in a header on the volume itself, letting cyber tools unlock encrypted drives portably across distributions and implementations. volumes, and hccapx files

    └──▷ GET THIS VERSION

    copy

    $ git clone --branch v3.40 https://github.com/hashcat/hashcat.git
    # already have the repo? check out this version:
    $ git checkout v3.40

    • Added support to crack iTunes backups
    • Added support to crack LUKS volumes
    • Added support for hccapx files

    3 details in Everything

37. v3.30 Jan 6, 2017 · release notes

    Hashcat v3.30 adds a new hash-mode and general improvements alongside bug fixes.

    └──▷ GET THIS VERSION

    copy

    $ git clone --branch v3.30 https://github.com/hashcat/hashcat.git
    # already have the repo? check out this version:
    $ git checkout v3.30

    • Adds a new hash-mode for password cracking.

    1 detail in Everything

38. 3.20 Dec 2, 2016 · release notes

    Hashcat v3.20 adds libhashcat library, --speed-only, --keep-guessing, new hash modes and AMDGPU-Pro hardware support

    └──▷ GET THIS VERSION

    copy

    $ git clone --branch 3.20 https://github.com/hashcat/hashcat.git
    # already have the repo? check out this version:
    $ git checkout 3.20

    • Releases core as libhashcat, a MT-safe library for embeddingembeddingLists of numbers a model produces to represent the meaning of text, images or code, so similar items sit close together. They power semantic search and RAG. into distributed clients or GUIGUIA graphical user interface, controls such as windows, buttons and menus. It lets people use software visually rather than entering commands. frontends (CLI remains hashcat.bin/hashcat.exe) with example via make main_shared
    • Adds new CLI options: --speed-only, --keep-guessing, --restore-file-path, and --opencl-info
    • Supports --gpu-temp-retain and --powertune-enable for AMDGPU-Pro driver hardware management
    • Adds hash-modes 14000 (DES), 14100 (3DES), 14400 (SHA1(CX)), and 99999 (Plaintext)
    • Enables lowercase (?h) and uppercase (?H) ascii hex predefined charsets

    5 details in Everything

    └──▷ BREAKING ON UPGRADE

    • !Moved OpenCL requirement from v1.1 to v1.2 (OpenCL Kernels: Moved OpenCL requirement from v1.1 to v1.2)
39. v3.10 Aug 19, 2016 · release notes

    Adds @ rule support on GPUGPUA graphics processing unit, a processor that performs many calculations in parallel. AI workloads use GPUs to speed up model training and inference. in the rule engine and OpenCL workarounds for broken installations.

    └──▷ GET THIS VERSION

    copy

    $ git clone --branch v3.10 https://github.com/hashcat/hashcat.git
    # already have the repo? check out this version:
    $ git checkout v3.10

    • Enables the @ rule to be used on GPU within the rule-engine
    • Added workarounds to handle problems caused by broken OpenCL installations on the host system

    2 details in Everything

40. v3.00 Jun 29, 2016 · release notes

    hashcat v3.00 fuses CPUCPUThe main general-purpose processor in a computer. It runs application instructions and coordinates work with memory and other hardware. and GPUGPUA graphics processing unit, a processor that performs many calculations in parallel. AI workloads use GPUs to speed up model training and inference. into a single tool with --opencl-device-platforms and --opencl-device-types flags.

    └──▷ GET THIS VERSION

    copy

    $ git clone --branch v3.00 https://github.com/hashcat/hashcat.git
    # already have the repo? check out this version:
    $ git checkout v3.00

    └──▷ TRY IT
    Select specific OpenCL platforms (e.g., AMD and Nvidia) to run in parallel while ignoring others.
    copy

    $ hashcat --opencl-device-platforms 0,1 -m 0 hash.txt wordlist.txt

    Enable both GPU and CPU devices in the same cracking session despite potential performance trade-offs.
    copy

    $ hashcat --opencl-device-types 1,2 -m 0 hash.txt wordlist.txt

    Install hashcat to a local prefix with FHS-compliant directories for system-wide access.
    copy

    $ make install PREFIX=/usr/local DESTDIR=/opt/staging

    • Adds --opencl-device-platforms flag to select specific OpenCL runtimes in parallel within a single session
    • Adds --opencl-device-types flag to enable mixed device types (e.g., CPU + GPU) in parallel within a single session
    • Introduces hashcat-legacy naming for the original CPU-only variant while this release unifies CPU and GPU support
    • Adds native Makefile targets (make install, make uninstall) and Linux FHS compatibility for distribution packaging
    • Creates $HOME/.hashcat/ directory for home-specific pot, dict, and session files when using native compilation

    5 details in Everything