When I want to mass crack hashes and I obtain all the passwords, how do I get them to the correct email without having to search through all of the hashes and combine them manually. Say I just cracked 1000+ hash passwords, how would I combine them to their correct emails?
if you have a list of email:hash you can use --show with --username combined:
Code:
hashcat -m 99999 --show --username user_hash.txt
user1:passwd1:passwd1
user2:passwd2:passwd2
user3:passwd3:passwd3
user4:passwd4:passwd4
user5:passwd5:passwd5
user6:passwd6:passwd6
user7:passwd7:passwd7
user8:passwd8:passwd8
user9:passwd9:passwd9
user10:passwd10:passwd10
(just for demonstration purposes this is mode 99999 where hash = password)
Whenever i put --show into it, it's doesn't work. with --username it's fine but --show messes up my code, there's a long list of passwords that just say "changeme"
short answer: --show should never be used while you are cracking (it's used afterwards, when already cracked)
see:
https://hashcat.net/faq#how_can_i_show_p...ilpassword
btw: you always need to set -m to the correct hash type... just have a look at the --help output of hashcat
first crack (with dictionary -a 0, or mask -a 3 etc), then after cracking use --show without any dictionary, without any mask etc