averroes / passwordcrackingsheets

How long will it take to crack a hash ?

Password Cracking Sheets

You've got a hash, nice ! But if you can't pass it (PtH) how long will it take to crack it ? A few seconds if the password is inside a wordlist (e.g: rockyou) or a bit longer if you use rules but it can take aaaaages if you use bruteforce.

We did a few sheets with hashcat on a 8 GTX1080 GPU box showing real cracking values (not bench) for:

1. NetNTLMv2
2. NTLM
3. MD5
4. SHA512

For each sheet:

1. The first line is the number of characters of the plaintext password.
2. The second line is the maximum time the bruteforce will last using the default hashcat mask (https://hashcat.net/wiki/doku.php?id=mask_attack)
3. The third line is the maximum time the bruteforce will last using full charset (avoid this one).

NetNTLMv2

NTLM

MD5

SHA512

License

The Password Cracking Sheets is an open source project released under the CC-BY-SA 4.0 licence.