Hashcat

wpa

cap2hccapx.bin NAME-OF-YOUR.cap NAME-OF-YOUR.hccapx
hashcat.exe -m 2500 NAME-OF-YOUR.hccapx rockyou.txt

md5crypt $1$, MD5(Unix)

hashcat -a 0 -m 500 hash.txt wordlist.txt 

bcrypt $2*$, Blowfish(Unix)

hashcat -a 0 -m 200 hash.txt wordlist.txt

sha256crypt $5$, SHA256(Unix)

hashcat -a 0 -m 400 hash.txt wordlist.txt

sha512crypt $6$, SHA512(Unix)

hashcat -a 0 -m 1800 hash.txt wordlist.txt

LM Windows

hashcat -a 0 -m 3000 hash.txt wordlist.txt

NTLM Windows

hashcat -a 0 -m 1000 hash.txt wordlist.txt

Windows Password dump tools

• NTLMv1/2 Hash Dumper
• Mimikatz latest implementation

Mask best practices

?l?d?d?l?u?u?l?l
?l?d?d?u?l?u?l?l
?l?d?d?u?u?l?l?l
?l?d?l?d?u?u?l?l
?l?d?u?d?l?u?l?l
?l?d?u?d?u?l?l?l
?l?d?l?u?d?u?l?l
?l?d?u?l?d?u?l?l
?l?d?u?u?d?l?l?l
?l?d?l?u?u?d?l?l
?l?d?u?l?u?d?l?l
?l?d?u?u?l?d?l?l