Hashcat NTLM Crack

Crack NTLM hashes using wordlist attack

Curated and verified by Ahmad Alawneh, penetration tester (OSCP+, CRTE) · Last updated April 10, 2026

Tool: hashcat
Category: Credential Attacks / Hash Cracking
Platform: cross-platform
Requires: NTLM hash

Open in Command Manager

Syntax

Angle-bracket tokens are placeholders — replace them with your target's values, or open this command in the app to fill them in and copy the result.

hashcat -m 1000 <hash> <wordlist>

Examples

hashcat -m 1000 hashes.txt /usr/share/wordlists/rockyou.txt

Tags

hashcat ntlm cracking password

References

Hashcat AS-REP Roasting Cracking Crack AS-REP roasting hashes obtained from accounts without Kerberos pre-auth
Hashcat Kerberoast Crack Crack Kerberoasting hashes
Hashcat MSCacheV2 (DCC2) Cracking Crack MSCacheV2 (Domain Cached Credentials v2 / DCC2) hashes extracted from registry
Hashcat NTLMv2 Cracking Crack NTLMv2 (NetNTLMv2) challenge-response hashes captured from Responder or relay…