Hashcat-gui: Save Charset Groups As Jobs To Crack Future Hashes

Recently I have started using Hashcat-gui a lot more to test the strength of various passwords for certain clients. One of the things I wasn’t sure of at first was how to save charsets in the Bruteforce Settings window and while it would be nice if you could have a text file that included various charsets you could select from the drop down menu it is also easy to save your preferred charsets as Hashcat Jobs. Below is information on how to save charsets as Hashcat Jobs as well as recommended charsets you might want to save.

Save Hashcat Jobs To Load Charset Groups:

  1. Launch Hashcat-gui: First launch the Hashcat-gui which may already have information in the various fields depending on what was there when you closed the application last time.

    Launch Hashcat-gui

  2. Configure Hashcat-gui Settings: I recommend setting the Mode to Bruteforce, setting the Password Length options, the Hash option, and the first charset you will be saving. Leave the other configuration fields blank so you remember to modify them as necessary when launching the job. The example image below displays Hashcat-gui with basic brute force settings and a lowercase only charset.

    Hashcat-gui With Basic Brute Force Settings And Lowercase Charset

  3. Create Hashcat Job Folder: I recommend first creating a folder where your jobs can be saved. When you attempt to first save a Hashcat Job it is going to open a specific folder under your username on Windows which is in the hashcat folder underneath My Documents. The default hashcat folder on Windows 7 is displayed below.

    My suggestion would be to create a folder within the hashcat folder above called jobs so the files you save are organized. An example of the path to the jobs folder is below.

  4. Save Hashcat Job: Now click File in the Hashcat-gui top navigation menu and select Save As from the drop down. This should open to the hashcat folder mentioned in step three and you should click on the jobs folder to save the new job within that folder for organization. Below is a view of Hashcat-gui after a job has been saved which now shows the path to the job at the top of Hashcat-gui.

    Hashcat-gui Save Brute Force Job

    Notice the name of the job that I saved was BF-lower.hcj. I recommend doing your best to make the names of the jobs descriptive so you can bring them up easily such as this example where BF means Brute Force and lower means the lowercase charset.

You can now bring this job up in the future by clicking on File in the top navigation menu, selecting Open from the drop down menu, and then browsing to your jobs folder. Depending on the amount of password cracking you do this will come in handy with various charsets and brute forcing.

Example Hashcat-gui Charsets To Use:

  • DIGIT: 0123456789
  • LOWER: abcdefghijklmnopqrstuvwxyz
  • SPECIAL: ! “#$%&'()*+,-./:;<=>?@[\]^_`{|}~
  • LOWER/DIGIT: abcdefghijklmnopqrstuvwxyz0123456789
  • LOWER/UPPER/DIGIT: ABCDEFGHIJKLMNOPQRSTUVWXYZabcdefghijklmnopqrstuvwxyz0123456789
  • FULLCHARSET: ABCDEFGHIJKLMNOPQRSTUVWXYZabcdefghijklmnopqrstuvwxyz0123456789! “#$%&'()*+,-./:;<=>?@[\]^_`{|}~

The above example should provide a good initial set of charsets you might want to save with Hashcat Jobs.

Brute Force: Cracking the Data Encryption Standard (Hardcover)

List Price: $25.00 USD
New From: $4.23 USD In Stock
Used from: $0.01 USD In Stock

Brute Force: Cracking the Data Encryption Standard (Hardcover)

List Price: $25.00 USD
New From: $4.23 USD In Stock
Used from: $0.01 USD In Stock