For this lab we need hashcat and the linux shell.
- The simplest way is to run hashcat inside docker. This will provide you with an environment that is identical to the one we used (all the examples will be exactly the same and you will be able to easily reproduce them all).
- If you want to appreciate the performance of hashcat exploiting your GPU, then you can additionally install hashcat natively.
- Finally, in case you are really in trouble with installing docker, an alternative solution is to run hashcat inside a virtualized linux box (e.g. virtualbox)
We give detailed instructions below.
This provides you with an environment that is identical to the one we used (all the examples will be exactly the same and you will be able to easily reproduce them all).
- Install Docker CE from here (note: hashcat does not run correctly from the Linux VM with docker already installed )
- Run the docker image (automatic download)
$ docker run -it --rm secunive/security1:hashcat root@d1d6f933a495:~# hashcat Usage: hashcat [options]... hash|hashfile|hccapxfile [dictionary|mask|directory]... Try --help for more help. root@d1d6f933a495:~#
Note: if you experiment problems with memory in docker you can increase it from the advanced setting
Installing hashcat natively
This option will give you the highest performance, possibly exploiting your GPU, but remember that, for uniformity, all the examples will be given in the linux shell you get from docker (see above).
- Installing on linux with apt: apt install hashcat
- Installing on osx with homebrew: brew install hashcat
- Installing on windows (download the latest binaries from here)
If you have troubles with docker you can still use virtualbox or any other virtualization solution. To have an image which is identical to the one in docker it is enough to install ubuntu 18:04 and run, from a shell:
sudo apt update sudo apt install -y hashcat wget wget https://github.com/brannondorsey/naive-hashcat/releases/download/data/rockyou.txt
How to start the lab
Go to Task 1