Crack The Hash

Crack the Hash Room is THM room containing nine different hashes of varying difficulty. Due to THM policy, the cracked hashes won't be displayed however, the commands used in the cracking process are pasted in this write-up.

Hash 2

No boring story of my life. Same hashid used to identify hash type. -m 100 indicates SHA-1, -a 0 indicates dictionary attack mode, hash2 is hash to crack, --quiet tells hashcrack not to display status to screen and just display the cracked hash when done.

Hash 3

Same drill, -m 1400 indicates SHA-256

Hash 4

Bcrypt is a hash type intentionally built to be slow to crack, that would take days to get the right password hence THM gave a hint suggesting you extract and use 4 character passwords from the traditional rockyou.txt or create a hashcat guess mask which tries to bruteforce password characters of specific length.

I went for option A since pw-inspector exists (since my sed and awk sucks), this tool allows you to take a wordlist as input, manipulate it and create a new output file from it.

cat /usr/share/wordlists/rockyou.txt | pw-inspector -m 4 -M 4 > wordlist

code breakdown:

cat: read the content of rockyou.txt

| pw-inspector: pipes the content of rockyou.txt to pw-inspector to extract specific items

-m 4: extract word of minimum of 4 characters

-M 4: extracts words of maximum of 4 characters

> wordlist: sends the extracted words to a new file called wordlist

you may notice I didn't use hashid but rather Hashcat example page which contains examples of hashes Hashcat can crack and their equivalent mode, 3200 for bcrypt as seen below.

Hash 5

Here I used hash-identifier which works similarly to hashid, the hash was identified as MD5 and MD4, it is actually MD4 however, the password is not in rockyou.txt so I had to use an online hash cracker called Hashes.com

Hash 6

Same old...

Hash 7

NTLM hash, as you can see, it way at the bottom of the list, don't rule out a hash at the bottom of the Hashid result.

Hash 8

A SHA512 hash cracked with the command below:

hashcat -m 1800 -a 0 hash8 /usr/share/wordlists/rockyou.txt

yes...it took 1hour, 4mins to crack this 6 character password🥲

Hash 9