sp00ks-git / hat

HAT (Hashcat Automation Tool) - An Automated Hashcat Tool for common wordlists and rules to speed up the process of cracking hashes during engagements. Created for Linux based systems

HAT - Hashcat Automation Tool

An automated Hashcat tool for common wordlists and rules to speed up the process of cracking hashes during engagements. HAT is simply a wrapper for Hashcat (with a few extra features) - https://hashcat.net, however I take no credit for that superb tool.

Walkthrough of features - https://sp00ks-git.github.io/posts/HAT-Features/

This version is for Linux only - see the Windows Repo

Supported Hashes:

NTLMv2 (NTHASH) -> NetNTLMv1 -> NetNTLMv2 -> MD5 -> SHA-512 -> RC4-HMAC-MD5 (Kerberoasting)

Features:

• Straight Wordlist testing from publicy known breaches (dependant on your wordlists)
• Straight Wordlists using the Oxford Dictionary incrmementing through various combinations
• Common Rule sets used in corporate environments
• Smart ordering of compromised hashes alphabetically in (Username::Domain:Hash:Password) format.
• Visual hash cracking status showing you how many hashes you have left to crack
• Cewl Integration for finding specific words common to the business not found in dictionaries or breached lists
• Rsmangler Integration for finding permutations of a specific word that the firm might be using. (includes incrementing various combinations on either side)

The directory structure that HAT expects is.. (of course you can just ammend the code to your own needs)

-> /opt/worliststs/rockyou.txt
-> /opt/wordlists/1GB-4GB/
-> /opt/wordlists/4GB+/
-> /opt/wordlists/english-words/
-> /opt/wordlists/merged_list/

Suggested Wordlists download links (HTTP) - working as of 14/10/2019

• https://github.com/brannondorsey/naive-hashcat/releases/download/data/rockyou.txt (~14,300,000 words)
• http://www.mediafire.com/file/9tf3n2d45tgktq1/Rocktastic12a.7z/file (1.37GB - Compressed)
• https://github.com/dwyl/english-words/blob/master/words.txt (~466,000 words)
• http://storage.aircrack-ng.org/users/PsycO/PsycOPacKv2.rar (1.4GB)
• https://download.g0tmi1k.com/wordlists/large/sp00ks_merged_file_uniq.7z (2.7 GB - Compressed)
• https://crackstation.net/files/crackstation-human-only.txt.gz (4.2 GB)
• https://download.g0tmi1k.com/wordlists/large/crackstation.txt.gz (4.5 GB)
• https://download.g0tmi1k.com/wordlists/large/10-million-combos.zip (8.8 GB)
• https://download.g0tmi1k.com/wordlists/large/36.4GB-18_in_1.lst.7z (48.4 GB)
• https://download.g0tmi1k.com/wordlists/large/b0n3z-wordlist-sorted-something.tar.gz (165 GB)
• http://download1568.mediafire.com/yuh4jmehecwg/8oazhwqzexid771/WordlistBySheez_v8.7z (166.17 GB)
• https://hashkiller.io/downloads/hashkiller-dict-2020-01-26.7z

Thanks to:

Cewl - @digininja - https://github.com/digininja/CeWL
Passphrases - @initstring - https://github.com/initstring/passphrase-wordlist
Rsmangler - @digininja - https://github.com/digininja/RSMangler

hat's Issues

UnboundLocalError: local variable 'hashes_cracked' referenced before assignment

I have noticed a small bug in the tool.

When I am trying to use the tool with a new hash list or file, I am getting the following error:

 Percentage Cracked:
Traceback (most recent call last):
  File "./hat.py", line 1131, in <module>
    main_menu()
  File "./hat.py", line 1124, in main_menu
    options[task]()
  File "./hat.py", line 1096, in hash_from_file
    crack_menu()
  File "./hat.py", line 961, in crack_menu
    percent_cracked = (hashes_cracked * 100 / HASHES_LOADED)
UnboundLocalError: local variable 'hashes_cracked' referenced before assignment

I amended the hat.py file to include hashes_cracked = 0 at line 960, to arbitrarily set the variable if the pot file does not exist (shown below):

POT = POT + '.pot'
pot_absolute = os.path.join(L00T_POT_DIR, POT)
if os.path.exists(pot_absolute):
    with open(pot_absolute) as lines:
    hashes_cracked = len(lines.readlines())
    prGreen(hashes_cracked)
else:
    prRed("0")
    hashes_cracked = 0
print" " + "Percentage Cracked:",
percent_cracked = (hashes_cracked * 100 / HASHES_LOADED)

availability of sp00ks_merged_file_uniq

It appears that no full, valid version of sp00ks_merged_file_uniq is available.

• The file at https://download.g0tmi1k.com/wordlists/large/sp00ks_merged_file_uniq.7z has a 7z extension but is actually a zipfile. It also appears to be truncated - Linux unzip won't unzip it. p7zip will do a best-effort unpack but the resulting file is clearly truncated:

$ tail sp00ks_merged_file_uniq.txt
2653841
2653842
2653843359
2653845
2653849
265385
2653850
26538502
2653851
2653858VERINE

• The mirror at https://srv-file4.gofile.io/download/NHXEGm/sp00ks_merged_file_uniq.7z appears to be gone.