What does this tool do?
Hashcat Command Builder generates a ready-to-run hashcat command by selecting hash type (-m: MD5=0, NTLM=1000, bcrypt=3200, sha512crypt=1800, Kerberoast=13100, AS-REP=18200, NetNTLMv2=5600, WPA=22000), attack mode (-a 0 wordlist, 3 mask/brute-force, 6 wordlist+mask, 1 combinator), hash file, wordlist (rockyou.txt), rules (best64.rule), mask (?l?u?d?s?a) and the -O optimized kernel. It is ideal for cracking captured hashes, Kerberoasting and WPA. Everything runs in your browser — no data is sent to any server.
How to use it
- Enter your listener IP and port.
- Pick the command or payload that fits your setup.
- Copy it and use it only on systems you are authorized to test.
What it solves
When you capture a hash you must match the right -m mode and attack strategy. This tool builds the full command by clicking — e.g. 'hashcat -m 1000 -a 0 hashes.txt rockyou.txt -r rules/best64.rule -O' — ready to crack NTLM dumps, Kerberoast ticket hashes (-m 13100) or WPA handshakes (-m 22000). It is a practical starting point for password cracking during the OSCP and HackTheBox post-exploitation phase.
Masks and attack modes
In a mask attack (-a 3) each character class is a token: ?l lowercase, ?u uppercase, ?d digit, ?s symbol, ?a all. For example '?u?l?l?l?l?d?d' tries passwords that start with an uppercase letter and end in four lowercase letters and two digits. With -a 6, 'rockyou.txt ?d?d?d' appends three digits to each word — very effective at catching human patterns like 'Password123'. The -O optimized kernel boosts speed but caps password length (often 27 chars).
Frequently asked questions
How do I pick the right -m mode?
First identify the hash format: length, prefix ($2y$ bcrypt, $6$ sha512crypt, krb5tgs Kerberoast) and structure are clues. Use a hash identifier to determine the type, then look up the matching -m number in Hashcat's example hashes (--example-hashes); choosing the wrong mode is the most common reason a hash never cracks.
What is the difference between the attack modes?
-a 0 (straight) tries every wordlist word, optionally transformed by -r rules — the most common first step. -a 3 (brute-force/mask) generates all combinations within a defined mask, good for short or patterned passwords. -a 1 (combinator) joins two wordlists, while -a 6 appends a mask to wordlist words.
Is Hashcat Command Builder free?
Yes. Hashcat Command Builder and all 300+ tools on MagmaNex are completely free with no signup or account required.
Is my data safe?
Yes. Everything runs locally in your browser. The data you enter is never sent to a server, stored, or shared.
Does it work on mobile?
Yes. Hashcat Command Builder works on phones, tablets and desktops — no app download needed.
🔒 Privacy: everything runs in your browser, your data is never sent to a server.