> For the complete documentation index, see [llms.txt](https://lightorithm.gitbook.io/searchlight/llms.txt). Markdown versions of documentation pages are available by appending `.md` to page URLs; this page is available as [Markdown](https://lightorithm.gitbook.io/searchlight/crack-the-hash.md).

# Crack The Hash

My walkthrough for Crack The Hash challenge hosted by Tryhackme.com created by Ben.

I'm new to cracking hashes and looking at the passwords combinations list on [Hashcat.net](https://hashcat.net/wiki/doku.php?id=example_hashes) scares me, however its a nice little room to break you in gently. 

![](https://2920913380-files.gitbook.io/~/files/v0/b/gitbook-legacy-files/o/assets%2F-MP5NPrsLmit8fMe2lxo%2F-MPa_vfaSrLRxnYz9Ynh%2F-MPaa6tJyzvm9q9ncnXN%2F2020-12-27%2023_45_57-Window.png?alt=media\&token=6fe36d2f-87b7-4d42-9f49-ae5cbffd96f0)

**Introduction**\
\
This room starts with some nice little hashes which can be found online at [Crackstation](https://crackstation.net/) but I opted to use hashid in Kali. If you want to use it also simply open up a terminal and type \
\
**hashid \<INSERT HASH>** \
\
I'm not saying this is 100% however it got me through the first batch and even some on Task 2.&#x20;

![hashid](https://2920913380-files.gitbook.io/~/files/v0/b/gitbook-legacy-files/o/assets%2F-MP5NPrsLmit8fMe2lxo%2F-MPa_vfaSrLRxnYz9Ynh%2F-MPaad7I901_vkvjFiCh%2F2020-12-27%2023_48_18-Kali%20Linux%202020%20-%20VMware%20Workstation%2016%20Player%20\(Non-commercial%20use%20only\).png?alt=media\&token=b8077327-9896-4ede-b9fe-30a7486ed8f5)

**Task 1** \
\
*1.1*\
**48bb6e862e54f2a795ffc4e541caed4d**\
easy\
\
MD5 > hashcat -m 0 hash.txt rockyou.txt \
\
*1.2*\
**CBFDAC6008F9CAB4083784CBD1874F76618D2A97**\
password123\
\
SHA1 > hashcat -m 100 hash.txt rockyou.txt\
\
*1.3*\
**1C8BFE8F801D79745C4631D09FFF36C82AA37FC4CCE4FC946683D7B336B63032**\
letmein\
\
SHA2-256 > hashcat -m 1400 hash.txt rockyou.txt\
\
*1.4*\
**$2y$12$Dwt1BZj6pcyc3Dy1FWZ5ieeUznr71EeNkJkUlypTsgbX1H68wsRom**\
bleh\
\
Bcrypt, blowfish (unix) > hashcat -m 3200 hash.txt rockyou.txt \
\
*1.5*\
**279412f945939ba78ce0758d3fd83daa**\
Eternity22\
\
hashid 279412f945939ba78ce0758d3fd83daa > MD4 -m 900\
\
Didn't find anything, So I made use of the Best64.rule in the event of any changes in the password and so there was, this is available on hashcat and does the following &#x20;

![Best64.rule ](https://2920913380-files.gitbook.io/~/files/v0/b/gitbook-legacy-files/o/assets%2F-MP5NPrsLmit8fMe2lxo%2F-MPaj8GesWhZoS2uaJ6J%2F-MPajAh1TrKANaAuURHl%2F2020-12-28%2000_25_33-Window.png?alt=media\&token=c196685c-d09e-414d-9435-5c35e5317c32)

There are more available just visit [Best64 Rule Details](https://www.question-defense.com/2012/04/21/hashcat-best64-rule-details-updated-after-the-best64-challenge) to get more info. This rule can also be found in your Kali under usr>share>hashcat>rules \
\
Command > hashcat -m 900 hash.txt rockyou.txt -r Best64.rule \
\
This password was cracked in about 3 seconds.&#x20;

![](https://2920913380-files.gitbook.io/~/files/v0/b/gitbook-legacy-files/o/assets%2F-MP5NPrsLmit8fMe2lxo%2F-MPa_vfaSrLRxnYz9Ynh%2F-MPabdW0UFwQ94YkKtVW%2F2020-12-27%2023_52_46-TryHackMe%20_%20Crack%20the%20hash%20-%20Personal%20-%20Microsoft%E2%80%8B%20Edge.png?alt=media\&token=5a9ee193-dcc2-4445-b4bb-1f70ffcb6b38)

**Task 2** \
\
*2.1*\
**Hash: F09EDCB1FCEFC6DFB23DC3505A882655FF77375ED8AA2D1C13F640FCCC2D0C85**\
paule\
\
SHA2-256 > hashcat -m 1400 hash.txt rockyou.txt\
\
*2.2*\
**Hash: 1DFECA0C002AE40B8619ECF94819CC1B**\
n63umy8lkf4i\
\
NTLM > hashcat -m 1000 hash.txt rockyou.txt \
\
*(Mixed alpha:numeric took 14 seconds)*\
\
*2.3*\
**Hash: $6$aReallyHardSalt$6WKUTqzq.UQQmrm0p/T7MPpMbGNnzXPMAXi4bJMl9be.cfi3/qxIf.hsGpS41BqMhSrHVXgMpdjS6xeKZAs02.**

Salt: aReallyHardSalt Rounds: 5\
waka99\
\
Thankfully using the [Hash Type Identifie](https://hashes.com/en/tools/hash_identifier)r made this task easier and helped identify this hash as SHA512crypt so cross referencing this with Hashcat.net helped me get the code **-m 1800** to crack this but it took a while. \ <br>

![Hash Identifier ](https://2920913380-files.gitbook.io/~/files/v0/b/gitbook-legacy-files/o/assets%2F-MP5NPrsLmit8fMe2lxo%2F-MPad5zNmPGS6ZgcBpHS%2F-MPadyaG5wVx8Q8yCBfL%2F2020-12-28%2000_00_36-Window.png?alt=media\&token=e202bcee-2865-4e07-8751-ec0e14abad64)

*2.4*\
**Hash: e5d8870e5bdd26602cab8dbe07a942c8669e56d6**\
Salt: tryhackme\
481616481616\
\
This was similar to above however I couldn't just use SHA i had to check the hint which annoyed me because i had gone down the list on HashCat and stopped at 140, I was 2 away from getting it on my own. \
\
Just so you know, create a txt file save to desktop and add the **hash:salt** and save the file then crack it in ***hashcat -m 1600 hash.txt rockyou.txt***&#x20;

![](https://2920913380-files.gitbook.io/~/files/v0/b/gitbook-legacy-files/o/assets%2F-MP5NPrsLmit8fMe2lxo%2F-MPa_vfaSrLRxnYz9Ynh%2F-MPacoskXTO1VIXSfQeF%2F2020-12-27%2023_57_30-Window.png?alt=media\&token=6a80d21b-0c67-4cd4-b323-c534ff1783f9)

![](https://2920913380-files.gitbook.io/~/files/v0/b/gitbook-legacy-files/o/assets%2F-MP5NPrsLmit8fMe2lxo%2F-MPad5zNmPGS6ZgcBpHS%2F-MPaf3rBAzB4WCV_yUNf%2F2020-12-27%2023_55_31-TryHackMe%20_%20Crack%20the%20hash%20-%20Personal%20-%20Microsoft%E2%80%8B%20Edge.png?alt=media\&token=388ce9d7-7a46-49c2-a276-dca0922fc109)