hashcat [options] hashfile [wordlist|mask]

# Basic dictionary attack
hashcat -m 0 hashes.txt rockyou.txt

# Show cracked passwords
hashcat -m 0 hashes.txt --show

# List hash types
hashcat --help | grep -i "hash modes"

# Benchmark all hash types
hashcat -b

# Benchmark specific hash type
hashcat -b -m 1000

# Dictionary attack
hashcat -m 0 -a 0 hashes.txt rockyou.txt

# Combinator attack (word1+word2)
hashcat -m 0 -a 1 hashes.txt wordlist1.txt wordlist2.txt

# Mask/Brute-force attack
hashcat -m 0 -a 3 hashes.txt '?a?a?a?a?a?a'

# Hybrid: wordlist + 4 digits
hashcat -m 0 -a 6 hashes.txt wordlist.txt '?d?d?d?d'

# Hybrid: 2 digits + wordlist
hashcat -m 0 -a 7 hashes.txt '?d?d' wordlist.txt

# 8 lowercase letters
hashcat -m 0 -a 3 hashes.txt '?l?l?l?l?l?l?l?l'

# Capital + 6 lowercase + digit
hashcat -m 0 -a 3 hashes.txt '?u?l?l?l?l?l?l?d'

# Company + 4 digits
hashcat -m 0 -a 3 hashes.txt 'Company?d?d?d?d'

# Custom charset: only use abc123
hashcat -m 0 -a 3 hashes.txt -1 abc123 '?1?1?1?1?1?1'

# Incrementing length (1-8 chars)
hashcat -m 0 -a 3 hashes.txt --increment --increment-min=1 --increment-max=8 '?a?a?a?a?a?a?a?a'

# List all hash modes
hashcat --help | grep -E '^\s+[0-9]'

# Search for specific hash type
hashcat --help | grep -i kerberos

# Use built-in rules
hashcat -m 0 -a 0 hashes.txt rockyou.txt -r /usr/share/hashcat/rules/best64.rule

# Chain multiple rule files
hashcat -m 0 -a 0 hashes.txt rockyou.txt -r rule1.rule -r rule2.rule

# Generate random rules
hashcat -m 0 -a 0 hashes.txt rockyou.txt -g 1000

# Maximum performance
hashcat -m 0 -a 0 -w 4 -O hashes.txt rockyou.txt

# Use specific GPU
hashcat -m 0 -a 0 -d 1 hashes.txt rockyou.txt

# List devices
hashcat -I

# Name a session
hashcat -m 0 hashes.txt rockyou.txt --session=mycrack

# Restore session
hashcat --session=mycrack --restore

# Show cracked passwords
hashcat -m 0 hashes.txt --show

# Output to file
hashcat -m 0 hashes.txt rockyou.txt -o cracked.txt

# Output format (hash:password)
hashcat -m 0 hashes.txt rockyou.txt -o cracked.txt --outfile-format=2

# Crack NTLM with wordlist
hashcat -m 1000 -a 0 ntlm.txt rockyou.txt

# Crack NTLM with rules
hashcat -m 1000 -a 0 ntlm.txt rockyou.txt -r best64.rule

# Kerberoast attack
hashcat -m 13100 -a 0 kerberos.txt rockyou.txt

# AS-REP Roasting
hashcat -m 18200 -a 0 asrep.txt rockyou.txt

# NetNTLMv2 (from Responder)
hashcat -m 5600 -a 0 netntlmv2.txt rockyou.txt

# WPA2 handshake
hashcat -m 22000 -a 0 capture.hc22000 rockyou.txt

# Linux shadow (SHA512)
hashcat -m 1800 -a 0 shadow.txt rockyou.txt

# MD5 with mask (8 chars, letter + numbers)
hashcat -m 0 -a 3 hashes.txt '?l?l?l?l?d?d?d?d'