# Crack The Hash ~ Try Hack Me * * * ![Crack The Hash ~ Try Hack Me](https://cdn.hashnode.com/res/hashnode/image/upload/v1680985464949/7525ea01-051a-4258-91ad-791073c0727e.jpeg) Since I recently got more involved in cracking and setup hashcat on my host PC I thought this would be a good time to try this room by `Try Hack Me`! Lesgeddit. * * * Task 1 ------ The first task was to crack 5 hashes. I have decided to go with the `[RockYou.Txt](https://github-releases.githubusercontent.com/97553311/d4f580f8-6b49-11e7-8f70-7f460f85ab3a?X-Amz-Algorithm=AWS4-HMAC-SHA256&X-Amz-Credential=AKIAIWNJYAX4CSVEH53A%2F20210221%2Fus-east-1%2Fs3%2Faws4_request&X-Amz-Date=20210221T220418Z&X-Amz-Expires=300&X-Amz-Signature=e1b20c7e026b1bf39a10d1e8611f750c9ef197204b271cf777837148402d0d10&X-Amz-SignedHeaders=host&actor_id=0&key_id=0&repo_id=97553311&response-content-disposition=attachment%3B%20filename%3Drockyou.txt&response-content-type=application%2Foctet-stream)` wordlist. > 1.1 ~ MD5 48bb6e862e54f2a795ffc4e541caed4d : MD5 ### Hash Identifier ![Crack The Hash ~ Try Hack Me](https://cdn.hashnode.com/res/hashnode/image/upload/v1680985466223/eda6d7c3-89c6-4402-a339-8164680a4e03.png) ### Hashcat ![Crack The Hash ~ Try Hack Me](https://cdn.hashnode.com/res/hashnode/image/upload/v1680985468151/3923482b-3f36-464f-96fa-96d7296618c8.png) .\hashcat.exe -m 0 .\hashes\hash.txt .\wordlists\rockyou.txt -O --force > 1.2 ~ SHA-1 CBFDAC6008F9CAB4083784CBD1874F76618D2A97 : SHA-1 ### Hash Identifier ![Crack The Hash ~ Try Hack Me](https://cdn.hashnode.com/res/hashnode/image/upload/v1680985469919/7725b31d-79cf-4ec2-ac7a-d2a6e4c9528a.png) ### Hashcat ![Crack The Hash ~ Try Hack Me](https://cdn.hashnode.com/res/hashnode/image/upload/v1680985471162/3ca8cb18-ef84-4449-96eb-cd6c5e059caa.png) .\hashcat.exe -m 100 .\hashes\hash.txt .\wordlists\rockyou.txt -O --force > 1.3 ~ SHA-256 1C8BFE8F801D79745C4631D09FFF36C82AA37FC4CCE4FC946683D7B336B63032 : SHA-256 ### Hash Identifier ![Crack The Hash ~ Try Hack Me](https://cdn.hashnode.com/res/hashnode/image/upload/v1680985472288/f24af618-6ea2-45f0-b788-e15b0866c8ed.png) ### Hashcat ![Crack The Hash ~ Try Hack Me](https://cdn.hashnode.com/res/hashnode/image/upload/v1680985473369/a0fd75a0-f181-4efe-b6bc-8a4e89d0cf4e.png) .\hashcat.exe -m 1400 .\hashes\hash.txt .\wordlists\rockyou.txt -O --force > 1.4 ~ Bcrypt For this one, Hash-Identifier was not able to detect the type of hash. Thus, I used an online tool named [Hash Analyzer](https://www.tunnelsup.com/hash-analyzer/). $2y$12$Dwt1BZj6pcyc3Dy1FWZ5ieeUznr71EeNkJkUlypTsgbX1H68wsRom : Bcrypt ### Hash Analyzer ![Crack The Hash ~ Try Hack Me](https://cdn.hashnode.com/res/hashnode/image/upload/v1680985475353/9bd60454-eeab-433f-8869-cd5cea145d17.png) ### Hashcat ![Crack The Hash ~ Try Hack Me](https://cdn.hashnode.com/res/hashnode/image/upload/v1680985476725/f8558a9d-e635-4a52-bb90-a0010c4731b0.png) .\hashcat.exe -m 3200 .\hashes\hash.txt .\wordlists\rockyou.txt -O --force Cracking Bcrypt usually takes about 10-15 hours; Cracked Password = bleh > 1.5 ~ MD4 279412f945939ba78ce0758d3fd83daa : MD4 ### Hash Identifier ![Crack The Hash ~ Try Hack Me](https://cdn.hashnode.com/res/hashnode/image/upload/v1680985477972/f71639bc-b2d8-4f64-845b-dcb7700adf13.png) ### Hashcat ![Crack The Hash ~ Try Hack Me](https://cdn.hashnode.com/res/hashnode/image/upload/v1680985479005/eae33ad2-91e2-4c62-b6b2-d73d207e7a86.png) .\hashcat.exe -m 900 .\hashes\hash.txt .\wordlists\rockyou.txt -O --force The password for this task actually doesn't exist in the `RockYou.txt` wordlist. Thus, I decided to use an online cracker for this task. ![Crack The Hash ~ Try Hack Me](https://cdn.hashnode.com/res/hashnode/image/upload/v1680985480154/26024dc0-6dd4-454f-9da6-8ce9ea99451c.png) * * * Task 2 ------ > 2.1 ~ SHA-256 F09EDCB1FCEFC6DFB23DC3505A882655FF77375ED8AA2D1C13F640FCCC2D0C85 : SHA-256 ### Hash Identifier ![Crack The Hash ~ Try Hack Me](https://cdn.hashnode.com/res/hashnode/image/upload/v1680985481154/d875c6d3-379d-4905-aa5a-7228654b97b1.png) ### Hashcat ![Crack The Hash ~ Try Hack Me](https://cdn.hashnode.com/res/hashnode/image/upload/v1680985482236/1a6d4b01-8995-4c30-9093-dd4bd431e292.png) .\hashcat.exe -m 1400 .\hashes\hash.txt .\wordlists\rockyou.txt -O --force This task was the exact same as `1.3`. > 2.1 ~ SHA-256 F09EDCB1FCEFC6DFB23DC3505A882655FF77375ED8AA2D1C13F640FCCC2D0C85 : SHA-256 ### Hash Identifier ![Crack The Hash ~ Try Hack Me](https://cdn.hashnode.com/res/hashnode/image/upload/v1680985483296/0e8b0df2-a21d-4c34-aad6-0330124699b5.png) ### Hashcat ![Crack The Hash ~ Try Hack Me](https://cdn.hashnode.com/res/hashnode/image/upload/v1680985484324/04b508e0-2a27-4a3f-aef4-5618e9d98cb1.png) .\hashcat.exe -m 1400 .\hashes\hash.txt .\wordlists\rockyou.txt -O --force This task was the exact same as `1.3`. > 2.2 ~ NTLM 1DFECA0C002AE40B8619ECF94819CC1B : NTLM ### Hash Identifier Hash Identifier actually falsely identified the hash as MD4/MD4. I then went by the possible hashes to find out that it was NTLM. ![Crack The Hash ~ Try Hack Me](https://cdn.hashnode.com/res/hashnode/image/upload/v1680985485691/c9a31f20-03b0-403e-bdf0-3e321a25f620.png) ### Hashcat ![Crack The Hash ~ Try Hack Me](https://cdn.hashnode.com/res/hashnode/image/upload/v1680985486755/cc72b6a5-d374-40f6-80d0-c7035e9ec028.png) .\hashcat.exe -m 1000 .\hashes\hash.txt .\wordlists\rockyou.txt -O --force > 2.3 ~ sha512crypt $6$aReallyHardSalt$6WKUTqzq.UQQmrm0p/T7MPpMbGNnzXPMAXi4bJMl9be.cfi3/qxIf.hsGpS41BqMhSrHVXgMpdjS6xeKZAs02. : sha512crypt ### Hash Identification Hash Identifier was not able to identify this hash. Thus, I set out to find an online identifier which was able to identify the has type. That's when I landed on `[suIP.biz](https://suip.biz/?act=hashtag)`'s hash identifier. It was not only able to identify the hash type, but it also gave me the hashcat mode to use. ![Crack The Hash ~ Try Hack Me](https://cdn.hashnode.com/res/hashnode/image/upload/v1680985487894/74619414-28ac-437a-b2e8-054c5512d413.png) ### Hashcat ![Crack The Hash ~ Try Hack Me](https://cdn.hashnode.com/res/hashnode/image/upload/v1680985489169/d81b2ee0-f936-427e-9610-b464cd89d9be.png) .\hashcat.exe -m 1800 .\hashes\hash.txt .\wordlists\rockyou.txt > 2.4 ~ SHA1 e5d8870e5bdd26602cab8dbe07a942c8669e56d6:tryhackme : SHA1 ### Hash Identification ![Crack The Hash ~ Try Hack Me](https://cdn.hashnode.com/res/hashnode/image/upload/v1680985490256/917fec81-3c39-441b-8b47-f45adf42584b.png) ### Hashcat ![Crack The Hash ~ Try Hack Me](https://cdn.hashnode.com/res/hashnode/image/upload/v1680985491282/9662c4eb-1886-49f1-b336-0992ff29a7cc.png) .\hashcat.exe -m 160 .\hashes\hash.txt .\wordlists\rockyou.txt * * * Interesting challenge! Was able to learn so much about cracking and the types of hashes! ![Crack The Hash ~ Try Hack Me](https://cdn.hashnode.com/res/hashnode/image/upload/v1680985492365/2acb93ad-ee83-422a-9295-d5524bde2d07.png)