All right now that we have everything ready I have hashcash already extracted in here.
I have my handshake and my wordlist so I'm ready to use hash cut to crack the password.
So first of all we have to open the command prompt.
So I'm going to go to the Start Menu.
I'm going to type ACMD to access my command prompt.
Now I'm going to navigate to the location where I extracted hash cut.
So it was in C..
So I'm going to do is I'm going to do.
See the forward slash to go all the way back to the root of the C directory.
Then I'm going to do to list all available directories.
This is the equivalent to ls in Linux.
And as you can see now I have a directory called hash cat.
So I want to navigate into that and to do that we're going to do see the hash cat and I'm going to press
tab to autocomplete and then I'm going to do there again to list all the files in this current directory.
And as you can see I have hashcash pineries in here.
I have a 32 bit and 64 bit binary.
So you need to run the one that's compatible with your processor and you can see I also have my handshake
that I copied earlier and I have my word list right there.
Now to run Hauschka.
We're going to do hash cat 64 dot X and I'm going to do dash dash help to see all the options and arguments
that I can use with the tool and as you can see we get a big list that show us all the options and how
to exactly use the tool.
So at the top here you can see the usage of the tool.
So this is the default syntax that you should use the tool with.
And this is exactly the same whether you use the tool from Linux or from windows.
So I'm showing you how to use it from Windows.
But if you manage to install your graphics card drivers on your Linux then you can use it the same way
that I'm showing you here.
So basically you need to give the full name at the start which is Hauschka and then we're going to set
the options and you can see we have a big list of options here at the bottom.
Then you are going to give the file that contains the data that you want to crack.
And in our case the hate C-cup X-File followed by the dictionary to run the attack.
And in our case it's going to be called Raku.
So I'm going to type in flashcard now because I'm on Windows.
I'm going to have to type Pashka 64 the X.
But if you're on Linux you're just going to do Hosh card then we're going to have to set the options.
And as you can see we have a huge list of options that we can set for each option.
We can see the option name we can see the type.
So this is the value that this option can take it can be a number it could be a file could be a character.
We can see that description.
So this tells us what we can set with this option and then we have an example at the end showing us
an example of setting this option to a certain value.
Now the first option or argument that I want to use is the minus capital.
And it's the description you can see that this argument will show us information about the devices in
this computer that can be used for cracking.
So if we just do minor you can see that we have two devices that we can use for cracking.
We have my device number one which is the GP you and it has an idea of one and you can see all the information
about this device in here including its memory then we can see we have another device and that is astrology
for you.
And again you can see all the information related to this device.
Now the next option that I want to use is D-minus m.
Now this specifies the Hosh type.
So the type of hash that you want to crack now the hash type is a number.
So we have to give a number that corresponds to the hash that we want to crack and the free scroll down
you'll see that we have a table called hash modes and it contains all the hashes that we can crack on
their corresponding number.
So my target is a WPA Hosh or WPA 2 and you can see that the number corresponding to this is 2500 so
to set this option we're going to do minus and and we're going to put 2500 to tell Hoshko that I want
to cry a WPA or WPA too harsh.
Now the next option that I want to set is the minus D.
To tell hashcash which device I want to use for cracking.
So when we did minus I mean we had two devices we had number one which was my GP you and we had number
two which was my CPQ.
So I want to use the GP for cracking and therefore I'm going to do my nails minus the one.
Now let's go up and have another look on the usage of the tool to make sure that we're using it properly.
So we've already said Hauschka.
We've already set the options and the next thing that we need to do is to give the cap X-File followed
by the wordless file.
So we've already converted our handshake to the Hitachi cap x extension and we placed it with the wordlist
both in the same directory as Hosh cut.
So that's our current working directory as you can see here.
I have my wordlist.
I have my hate C-cup file right here.
So my handshake is called handshake doated C-cup X and my word list is called Rock You dirty XTi.
So now our command is done.
And let me go over just one more time so that it's clear to you first of all we put the tool name which
is Hauschka.
And we put Sixty-Four because I have a 64 bit processor.
So we're doing hashcash 64 RTX either word do in-dash to specify the hash type and I'm put in 2500 because
we weren't on the hash Mode's table.
And we've seen that 2500 is the number for WPA and WPA to hushes.
Then I did dash the and I put number one to tell Hoshko that I want to use device number one for cracking.
That's my GP you and I was able to see all my devices by doing hotshot dash.
So we did that at the start and we've seen the list and then we've seen that device number one corresponds
to my GP you then according to the usage of the tool we see that we have to specify the handshake file
after that and I've already converted my handshake file to a hasty CapEx extension and it's already
in the same working directory.
That's why I don't need to give a full path and it's called handshake to take CapEx.
And finally we had to we have to give the wordlist and again the wordlist and the same working directory
so we don't have to give a full path and we just had to say Raku that the XTi which is the name of my
wordlist.
Now I'm going to hit enter and hashcash it is going to start the cracking process using my GP you instead
of the C.P. you
now as you can see we can actually pause and rescue him using the P and R if we want.
And this way we'll be able to save our progress so that we can stop and come back to the cracking whenever
we want
OK.
Now as you can see hashed out is done and it's managed to get the password for me and this is the network
name so that's the name of my network.
And you can see that in my house to get me the password which is one two three four a b c d.
It took it one minute and seven seconds to get to this password and I've actually moved the password
manually to the end of the wordlist to make sure that we go through the whole wordlist and the structure.
Now let me show you how big the wordlist is it's actually not a small world.
It's not a huge wordlist but it's big enough.
So one minute and seven seconds.
It's a really really good time to go through this wordlist.
So I'm just going to open it right here and I'm going to scroll all the way down.
And as you can see we managed to go through about 14 million passwords within one minute seven seconds.
Now put my password is actually at the bottom but it's not the very last password so it's around 14
million.
But this is a very impressive time compared to the time that you get with you.
Again 14 million passwords within one minute seven seconds.
Now I'm not using the best GP you in the market.
So if you have a better GP you then you'll be even faster than this.
But even with that it's a very very good time.
So as you can see using the GP will make the cracking process much much faster than what it would be
if we're using a C.P you even if you're C-p is very fast.
Now just as an idea or for something for you to try as practice you can actually pipe crunch to hashcash
exactly the same way that I showed you how to do it with aircraft.
So you can practice that yourself and hashcash already supports pas and rescue.
So you'll be able to use huge or at least you'll be able to save your progress.
And you'll also be using your GP for the cracking.
So you'll be able to go through the wordlist much faster than what you would if you're using aircraft
ngi.