hashcat Info

cyclone

Latest compiled binaries by cyclone (w/custom kernels)
https://github.com/cyclone-github/hashcat

Custom Kernels:
metamask -m 26620
https://github.com/cyclone-github/hashcat_26620_kernel
sha1eminor -m 9200
https://github.com/PlumLulz/sha1_eMinor

cyclone

update: hashcat v7.1.1 released
https://github.com/hashcat/hashcat/releases/tag/v7.1.1

changelog:

* changes v7.1.0 -> v7.1.1

##
## Improvements
##

Docker: Add initial support for AMD GPUs when running Hashcat inside Docker using HIP and OpenCL
Hardware Monitor: Suppress fan speed warnings for unified memory setups (typically internal GPUs)
Testing Framework: Enable hardware monitor to improve testing of memory-heavy algorithms
Unit tests: Updated install_modules.sh to use an external module for Digest::MD6

##
## Bugs
##

- Fixed multi-hash handling in LUKS2 and KeePass (KDBX4), while single-hash remained unaffected

* changes v7.0.0 -> v7.1.0

##
## New Algorithms
##

## Endpoint

- Added hash-mode: AS/400 DES
- Added hash-mode: AS/400 SSHA1
- Added hash-mode: Blockchain, My Wallet, Legacy Wallets
- Added hash-mode: Cisco-ISE Hashed Password (SHA256)
- Added hash-mode: Keepass4
- Added hash-mode: SAP CODVN H (PWDSALTEDHASH) isSHA512
- Added hash-mode: sm3crypt $sm3$, SM3 (Unix)

## Primitives, KDFs, Libraries

- Added hash-mode: BLAKE2b-256
- Added hash-mode: MD6 (256)

## Constructs

- Added hash-mode: BLAKE2b-256($pass.$salt)
- Added hash-mode: BLAKE2b-256($salt.$pass)
- Added hash-mode: sha224($pass.$salt)
- Added hash-mode: sha224($salt.$pass)
- Added hash-mode: sha224(sha1($pass))
- Added hash-mode: sha224(sha224($pass))

##
## Improvements
##

- Attack-Modes: Use 64-bit counters for amplifier keyspace
- Host Memory: Update method to query free host memory using /proc/meminfo when available
- Docker: Add initial support for running hashcat inside Docker
- Device Memory: Warn instead of waiting on high GPU memory usage
- Backends: Enhanced AMD Windows OpenCL and HIP compatibility for legacy models
- Rules: Add early syntax check for -j and -k rules
- Device Memory: Do not disable hwmon interface by default in speed-only and progress-only mode
- JSON output: Refactor Bridge unit reporting for clarity
- Backends: Ignore devices from Microsoft OpenCL D3D12 platform
- Building: Add MAINTAINER_MODE flag to disable hardcoded CPU optimization flags
- Bash: Add missing parameters to bash completion script
- Dependencies: Downgraded unrar source from 6.2.7 to 6.0.5
- Benchmark: Update default hash-mode selection
- Libraries: DES and Blowfish restructure
- Building: Add initial support for OpenBSD and DragonflyBSD

##
## Bugs
##

- Fix broken JSON formatting when using the --status-json flag
- Fix issue where -k single rules were ignored when used with -a 1 and -S

##
## Python Bridge
##

- Fix unsalted hashlist support
- Fix the esalt structure, it was too large
- Improve support from 1:1 password-to-hash to 1:N password-to-hashes
- Improve stand-alone debugging of Python Bridge stubs
- Improve salt/esalt debugging of Python Bridge stubs
- Enable potfile output by default for -m 73000 and 72000

##
## Other changes
##

- Argon2: Add argon2_init() wrappers to support private address space
- Change hash-category for hash-modes 25600, 25800, 28400 and 30600 to HASH_CATEGORY_RAW_HASH_SALTED
- Suppress optimization advice in final approach mode
- Backend: Split backend_session_begin() into smaller compute-runtime specific functions
- Sanity check: Abort if a custom-charset is defined on the command line and a mask file is used
- Building: Disable Argon2 optimized path on RISC-V
- Shared: improved 32-bit and 64-bit add and multiply overflow helper functions

cyclone

hashcat v8.0.0 Released
https://github.com/hashcat/hashcat/releases/tag/v8.0.0

hashcat v8.0.0 was officially released on October 25, 2026, bringing the largest update in hashcat's history. This release introduces new attack modes, additional hashing algorithms, major performance optimizations, and improved distributed cracking capabilities.

Release Highlights

11 major features, including 4 new attack modes.
146 new hash modes and 26 new cryptographic primitives.
306 bug fixes, including 64 memory safety fixes.
Performance improvements exceeding 50x for certain algorithms.
FPGA acceleration support, initially for bcrypt.
Improved distributed cracking, keyspace management, and GPU utilization.
Contributions from 63 developers across 4,091 modified files.

Major New Features

PCFG Attacks -a 4: Probabilistic password generation using trained grammars, with support for distributed cracking.
Hash Recipes -m 4000: Define custom hashing algorithms directly from the command line without writing dedicated hashcat modules.
FPGA Support -m 75000: Hardware acceleration for bcrypt using supported FPGA boards alongside GPUs.
Table Attacks -a 5: Return of the original hashcat-legacy table attack mode.
Wordlists in Masks -a 12: Insert wordlist candidates into masks using ?w and ?q.
Feed Plugins -a 8: Integrate external candidate generators with distributed processing and restore support.
Association Attacks -a 9: Improved account-specific password candidate generation.
Expanded Rule Support: Apply rules across additional attack modes.
Password Lookup --lookup: Check whether an attack generates a specific password and determine its position.

Performance Improvements

Several algorithms received substantial optimizations:

Algorithm	Speedup	Hardware
Raw Private Keys	32x to 58x	RTX 4090 / RX 7900 XTX / Arc A770
PKZIP	13.8x	RTX 4090
Radmin3	11x	RTX 4090
RACF KDFAES	10.9x	Arc A770
LM	8.7x	Arc A770
NetNTLMv1	2.9x to 3.8x	Apple Metal

Additional improvements include faster GPU autotuning, better multi-GPU utilization, reduced memory overhead, and faster hash loading.

New Hash Modes and Platform Support

The 146 new hash modes include support for yescrypt, Kerberos 5 etype 3, FreeBSD GELI, OpenBSD softraid, Google fscrypt, KDE KWallet, OpenSSH bcrypt-pbkdf, BIP39 passphrases, MSSQL 2025, and iClass.

Platform improvements include Apple Metal 4, AMD Mesa rusticl OpenCL support, and a new shared libhashcat library.

Distributed cracking improvements include seekable compressed wordlists xz and zstd, expanded keyspace controls, a redesigned Brain database, and configurable memory limits.

Important Upgrade Notes

--restore now displays the saved command rather than executing it (CVE-2026-68766).
Brain protocol upgraded to v2. Clients and servers must be updated together.
Custom v7.1.2 plugins require rebuilding.
The -w workload parameter is now ignored.
Hash mode 72000 has been replaced by 73000.
Several fixes address missed passwords in WPA, NTLM, SAP, and Argon2 attacks.

Downloads and Release Notes

Download: https://hashcat.net/hashcat/
GitHub Release: https://github.com/hashcat/hashcat/releases/tag/v8.0.0
Full Release Notes (PDF): https://github.com/hashcat/hashcat/blob/v8.0.0/docs/releases_notes_v8.0.0.pdf
Source Code: https://github.com/hashcat/hashcat

Special thanks to atom (Jens Steube) and all the hashcat developers, contributors, and testers for their continued work on this project!

hashpwn