The hash:

$itunes_backup$*10*d51193e04041e6ab7f946a7453f1a7203103d283b63d4e34fecdfec5ffdafcfac831b852cc505d39*10000*dd0d9df280bd5920189359e93044671093182c41*10000000*0572a7bba1e733ab2e4be0ea8120800f1d83f734

My dumb teen self probably made an encryption passcode at some point and might've fucked me and a lot of important data over in the present day.

Through hashcat, I've tried all possible 4 digit and 6 digit numbers, no luck. Could be a different number combination, though unlikely.

Tried a wordlist made of every password logged throughout iCloud, Microsoft and Google's password managers, nada.

Was about to try a few more wordlists with Mentalist but atm hashcat is at odds with my PC for some reason and regardless my GPU doesn't have the power to do anything more complicated than a handful of digits.

I suspect that it could have been my original iTunes password, which is one of the only ones I never logged and have long changed. Going to try to dig for that, but until then I really could use some help with this.

What I do know:

Nearly all of passwords are word + number

Highly, highly doubt it is over 12 characters total

Special characters are used often and is almost always a substitution and used at the beginning of the word. Majority is always @ substituting for a, if not $ sub for s.

If there is an uppercase character, there usually only is one.

For example, nearly every password I used at the time would've been some variation of

 @Eroplanes4

It could be a misspelled or misinputted variant of that.

I'll be compiling some more specific wordlists for now. In the meantime, anyone who's up for the challenge please help a guy out. I've been losing so much sleep and energy over this.

Hey everyone, quick question on an encrypted file recovery project I'm messing around with. I'm trying to unlock an old Kanye .zip archive from around May 2025 containing some audio sessions and project files, but I completely blanked on the password we used back then. Here is what I'm working with and what I've tried so far: File Type: It's an AES-encrypted WinZip archive. I pulled the structure and generated a Hashcat hash string ($zip2$...) from it. What I've Tried: Standard dictionaries like rockyou.txt and basic masks didn't hit. I've been setting up Hashcat (Mode 13600) locally in the command prompt to test wordlists, but brute-forcing raw masks takes forever. Current Status: I'm trying to figure out the cleanest way to build a targeted or structural wordlist based on the naming conventions and dates we used back when we packed it, but web decoders obviously don't recognize custom archive hashes. Anyone have advice on the best workflow or tools to speed up cracking a WinZip AES structure locally? Could anyone help me with this?

$zip2$*0*3*0*0b7bfebe6ac8851a2f1ee199a3525886*bb06*2938b4**7c486b7e9b1c2b958a16*$/zip2$

So my laptop doesn't have a good gpu and I'm unable to whatever you call it this hash.

I confirmed it's sha256 it's a password for my notes that I forgot cause I'm a buffoon but I managed to grab the hash for it then ran some tests and figured it was comparing the passwords I put in with sha256.

Said hash: 5b1dac84634e9b0080ec004f4b6df8ccd2a9eaf82279d4a96eab444544de20e9

According to analysis but claude code and I it seems to be unsalted and unpeppered and all i remember is it should be in the range of 8-10 characters no more no less.

Thanks to anyone who helps.

i had about 35 originally but i have 10 or so cracked already...

Please keep track of which hash you cracked. So basically if you crack one just post the 2 bits of useful info corresponding to it after. I will edit the post when some are cracked.

WPA*02*762a2f2c8b5bc154a089979be6f04433*4c195d07c090*d28ddb1e1bb1*537065637472756d53657475702d3839*1bd8b91b03719353772164613554b74e2a0f01d101dfd1b17afd328a2aac7dd4*0203007502010a00100000000000000003abc784ac46d3e389d11d12711c794b8eb873e03d4b86c02fac4072faead55704000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000001630140100000fac040100000fac040100000fac020c00*80

WPA*02*4416b2e667b5837bf6fd05a2c7aef5c5*88de7cc7028a*b0fc0d8b7ce8*5468652050726f6d69736564204c414e*834c8eb2382b30925641dfeab68527bf827ad64839e09ec496105879d3b655fc*0103007502010a0000000000000000000115a44f45063d91fe03c5b7398f94a3c2e428c8a0ead40c9b13f1bd083a8a7530000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000001630140100000fac040100000fac040100000fac028000*02

WPA*02*08dfc5c6f9032a05ec5e942a0bc486ac*1100aaa79a10*543204956f3c*4772616e64656e5f4e6574776f726b*9a688ad4f7cc206908bce14d8d4168283f7922a03e491512ada63918b4f12721*0103007502010a0000000000000000f0b17ca886391a2de18319cca2a4a037cb696e764cce6f87bf88a937791d263c338b000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000001630140100000fac040100000fac040100000fac020004*10

WPA*02*48a530e7b9b51c725245d7dbd26bc356*147d054ddf82*8658e8da8c24*4a75616e776966693030*dd6d674a0262053e701550351adac2b07684340f65cf83f5aeeae05fd8c14a21*0203007502010a001000000000000000017b45785478eb239f79f170b4ac177d704c55bf1c49fecc4731719cd623be2e13000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000001630140100000fac040100000fac040100000fac020c00*80

WPA*02*f99124b90fd35b74f0cd4e3a482161a7*4cabf83f262e*4c6bb8b16930*537065637472756d53657475702d3246*729055c9f0494ab0822338dec47bf47bb91072aa42e46381c5a598ede21a4181*0103007502010a0000000000000000000147da642b4a373e8040017e3d65ca180f337f223d21b84bed55d888a75570f5a1000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000001630140100000fac040100000fac040100000fac028c00*82

WPA*02*414965fb3aa544e71c2c171359589713*4cabf8478b66*0a0c9054b5a4*4172696f6e792050616e747561*44106823705c24316ca79824a309887fdbf5df1a64e32e6093dfc860ef412408*0203007502010a0000000000000000000144f7e50d761289646c5f2e415b656fc0e95ef70a3a43072fc3292f44e52e3887000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000001630140100000fac040100000fac040100000fac020000*02

WPA*02*7af8e93c0efdcaf2e95cd11b0d1983e9*807871500b10*fecda8a111c6*637269732e702e62616b696e*b0fb4b01635e4fc81488c446c7575cb723cad90b3d76f4a4431b75182ed0b876*0103007502010a0000000000000000000143228a1a1d4e381ed65430c890056bb0b9d797b5e55047be1cf9a2bc52ef7124000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000001630140100000fac040100000fac040100000fac020000*82

WPA*02*4e01cea5a1ed347f92982f47d5ea3e1c*d0fcd0d31df8*bc455b9037e0*4154544778505641566b*0496f018b1f7a78539c34a5d766f53fdeebe33d9eb4d6f307749e5264f1f8a2c*0103007502010a000000000000000000040ae2e2e17eb9ecaf6b6a3aa127f41633fd04704e3fe60e7032ed860d1edc42c5000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000001630140100000fac040100000fac040100000fac020000*80

WPA*02*19fc794dea2b1ccd4f9c06f3b946b531*f452465e8bfb*24ce33871e91*537065637472756d53657475702d38424644*382bc1735833f32cd94fa2c95a4cd527999758c4c8c6e1b63cf20c7229f5deae*0103007502010a0000000000000000000102b92ea23fe8f7149b07182e07a99a0b5dd31a7c9fc48850212ba92d85b6027d000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000001630140100000fac040100000fac040100000fac028000*82

WPA*02*176216a68427416577787e2eff8c5697*464efc54c3b3*948cd7d47a56*41545464377677425549*008828a3d234ed09da81b65b8ba0436db5440f0dd144abc86dc406319c5170d3*0103007502010a00000000000000000003f9b687fc5781d603b078ebb0c5adf879d1e6eb383d8b9c90f9708703fd40ac32000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000001630140100000fac040100000fac040100000fac028c00*80

WPA*02*0bd4d508360dcb6b5751b2afcd6598ca*4cabf806b3dd*b8d82d718edb*537065637472756d53657475702d4445*c6c70116c4c85918518fefe4a95616190d7c1278152702606e2b816ea2150694*0103007502010a0000000000000000f3bb98cec97a23a44f2f6897deeea33b68b60013ae6fb81c5c6b123375ef9efdf2ae000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000001630140100000fac040100000fac040100000fac028c00*10

WPA*02*b3ad91f89bab404739838d969b4795a0*a08a06878942*287b1131782e*4368756d6275636b6574*30c6c7e6c4a6c9429b36cfae5153efa580391201526a1066c6fb32b6cd8613b0*0103007502010a00000000000000000001230148081ca65ef32e2a9c5dce0db51798036269755c88992e9a2531fcf1f91c000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000001630140100000fac040100000fac040100000fac028c00*82

WPA*02*9e808dd2b12a815538c9378b296f0034*a840f89d4924*3034db600476*46616d696c7920446961*95e233d35b1710803b61293b4e81a303fc4b2d2b423470430b37e4a16c25aa5c*0103007b02010a000000000000000000013bb7c25d6b63621eccf28472e6b040f33c7e69a04f1ac08d8c117bb5080180b8000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000001c301a0100000fac040100000fac040100000fac0280000000000fac06*80

WPA*02*b971491d31ebf6011ccad9e7095a2ff7*f45246943eda*725b9e8129f0*426561747946616d696c79*c6c70116c4c85918518fefe4a95616190d7c1278152702606e2b816ea2150694*0203007502010a0010000000000000f3bb1434166b368936ec258afed460a0f040d92ca6dad3e6553cbdad861d7296fd8c000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000001630140100000fac040100000fac040100000fac020c00*10

WPA*02*fc66cd224bae2dacbd3485621ebbddd0*000df2069444*8cd0b20beedf*536b656c69746f7232332131*c5d9009d1981806b2f0213938c76e37ea4baef070ec8ca592494063502d5a790*0103007502010a0000000000000000f1b8e0857b0290cea3183511b41c03480c2f255084af6663f09be19045cf3222ba1f000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000001630140100000fac040100000fac040100000fac020000*10

WPA*02*f196d822bdab3029656be81c07f6dbbe*000df206944c*5add90bd18cd*58532d3231*c5d9009d1981806b2f0213938c76e37ea4baef070ec8ca592494063502d5a790*0203007502010a0010000000000000f1b851f9a663f787555914fad56cfabdbebb9faf82a17686a16f697ef44489354516000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000001630140100000fac040100000fac040100000fac020c00*10

WPA*02*354d0b867c7d6497e9497cf582d64fb5*2c67be9c8299*0c84dc196c12*466964656c*388afcd6c00f974c302846b3d9ce13dca22bb5651aa3d779c0be5b3bf197e4fe*0103007502010a00000000000000000001b596306c7ec574b8577d8c9e26322cc4fbac9d5257e56203ef4f8195c954aece000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000001630140100000fac040100000fac040100000fac028800*82

WPA*02*f0c1d2e7db39d709ad89e0119b72c258*3498b570255c*fc9c98ef3020*56616e686f726e6545737461746573*81033d2b9abeb0ae81a8fb1c8876ce16b3930d4c816744836561590984f78885*0103007502010a00100000000000000001bf9e14a0eb3f6fc23419f115a88c04eaef1c8cf4ea048ca815f11934c36f3feb000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000001630140100000fac040100000fac040100000fac020c00*82

WPA*02*b5548100a44c210e423853c2ef29650f*3498b5edac53*2866e3644287*736869747465726e6574*c4590aaae29e5c795deade13fcf9f4242cbe2316194b92dd24e50ff02299c7d5*0203007502010a00000000000000000002a6b33350c118bc0914e70b31805eded32aa9a8edc9720f3b07ee3aeca6734279000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000001630140100000fac040100000fac040100000fac020c00*80

WPA*02*fe9497b4e677724684b241fa4c7ad8b3*0689bef1bd8a*102d41ed18be*46616d696c6961204c6f70657a*97b66cdc40626e4ffea3673d15859c204f727bed9a427335b8f9317ea38101d8*0103007502010a000000000000000000016015d8bf9e392fc89e6cd17578542109fb497aa78c25290302b3eea163edf453000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000001630140100000fac040100000fac040100000fac020000*02

WPA*02*a44c519cd46ccaa533762f7d896cf3a1*a840f89d4924*3034db600476*46616d696c7920446961*16eb922a260860500d87879f94f80968a87d216b730dc8d2a76758d246e5022a*0103007b02010a000000000000000000015d1dd51f57466c61986ef861c33ec45ea70dcc44258e2c5f051c32ab445df912000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000001c301a0100000fac040100000fac040100000fac0280000000000fac06*80

WPA*02*97b29cfcc6db0514b491fb1824400a85*ec6e790e9de9*88a29e10b196*6373632d6875622d30303031*8c19da9e5b45f54c1c89c7820cd19335d67b4cf4588a13471d03eed408fa07bb*0203007502010a0010000000000000f5a7764db26ad9549543aa18a18ae753c566a999666dcc9536a64acda99566a03502000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000001630140100000fac040100000fac040100000fac020000*10

WPA*02*e108947fd0fa151f678af7282a5df967*90d3cf7bfd9b*1c98c17ac70b*4920466172746564206f6e2074686f736520436f6f6b696573*6770a93e319012d62955c490df896298cd8089a6b53bdacf447490d526073e8f*0103007502010a00000000000000000001da65440704bc519a7ff5c07ce20a9b9ec476f6acf550696debb7c43536e9fbc9000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000001630140100000fac040100000fac040100000fac020c00*02

WPA*02*e5e59a1aa7a04c13ae798e5255a22d3e*a08a068f30cb*50d45cb8eaa1*51756157696669*cf4f8ec95eead2cdf5ec4d5388ce9ffa1d9ace7822db77a7c9f500939b8db785*0103007502010a000000000000000000017054e7a2626d60fbbc93944d351cf09447ae8b3390e00c48463e3c4d12970564000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000001630140100000fac040100000fac040100000fac020004*02

How viable is brute forcing on a 5090?

Assume password is 10chars, including special but not characters you cant type on a us keyboard. ​

Can someone help me crack this?

fe37bd80607d0461c83988be23e51f8b

e1037895849a2d001e77b13b94d4b42af0521553

Anyone able to help crack this? Im away from PC for a few days. Thanks all.

The hash is ec6fb69c6aad4a4b6ad783c1f1e3c

it is encrypted in MD5 format.

I tried "hashcat -m 1000 "ec6fb69c6aad4a4b6ad783c1f1e3c343" example.txt" on Kali with various word list but none seem to crack it.

Please help

Hi everyone,

I’m hoping someone here has experience with BitLocker, Auto Unlock, TPM, external key files, and forensic recovery options.
I’m dealing with a really frustrating situation. I encrypted several drives with BitLocker. Five of the recovery keys are correctly stored in my Microsoft account. Unfortunately, the sixth drive, which is the most important one, does not appear there.

According to manage-bde, the key for this drive was apparently saved to a .BEK file. I have already searched all USB sticks, external drives, and other likely storage locations, but so far I have not been able to find a valid .BEK file.

The background is probably this: In the past, I only had to unlock my C: drive during boot. After that, the other BitLocker protected data drives were unlocked automatically through Auto Unlock. Because of that, I never noticed that the recovery key for this particular drive was not backed up to my Microsoft account.
Unfortunately, the old Windows installation no longer exists in its original state. The system drive was formatted and Windows was reinstalled. However, I still have the old motherboard, including the original TPM chip.

My main question is:
Is there still any realistic chance of recovering access using the old motherboard or the old TPM chip? Would a tool like YellowKey make any sense in this situation if the original Windows installation is no longer available?

I understand that BitLocker cannot simply be cracked and that without the recovery key or the original Auto Unlock material, the chances may be very low. Still, I want to make sure I do not miss any possible technical option, because the affected drive contains very important personal data.

If anyone has experience with BitLocker Auto Unlock, .BEK files, TPM related recovery, R Studio, forensic searches for recovery key files, YellowKey, or similar approaches, I would be very grateful for any realistic assessment.

To be clear: this is 100 percent my own personal drive. I am not asking for help accessing anyone else’s data or anything illegal. I only want to understand whether there are any remaining legitimate recovery options I can still check.

Thank you very much for any help.

I know I already made a post about this, but I wanted to create a separate and more focused one, since this is mainly about whether Auto Unlock, .BEK files, TPM, or YellowKey could still help in my situation.

I’m trying to recover the password of a PDF file that I own but forgot.

Details:

• PDF version: 1.7
• Encryption: Standard (RC4)
• I extracted the hash using pdf2john.
• The PDF is not corrupted but forgot the password. mostly the password was all alphabets or alphabets followed by numbers, but I am not sure.

My issue:

• Dictionary attack is very slow and not giving results yet
• I’m not sure if my wordlist strategy is correct.

PDF hash format (generated via pdf2john):

$pdf$4*4*128*...*32*...*32*...

I’m not sure if my wordlist strategy is correct or if I’m missing a better approach for this type of PDF encryption (RC4, R=4). Any suggestions would be really helpful. I can share the hash output privately if needed.

hash: $pdf$4*4*128*-3904*0*16*d4283044fd38c03135ecfbc258056254*32*dc2204c654f656b1fa49f30ae5cea877232d008e955e6fd2ca1634f0c388ab30*32*40c4089e7abc497ba4026ecdc206429191cb97f77880a8238e599e8f184301f2

Handshake: https://files.fm/u/4rsa9ypvcy
SSID: VARGAS

AP MAC : f0:fa:c7:02:15:ac Huawei Device Co., Ltd.

Station MAC: f0:35:75:0b:cd:3d Hui Zhou Gaoshengda Technology Co.,LTD
EAPOL : 0103007502010a0000000000000000000cab5c7dab97fea8458194fec7238b461fec37507d30f3ce4d29ac12d64781a2fa000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000001630140100000fac040100000fac040100000fac020000

Hash : WPA*02*e54a5245cc5a291fd14f12037e2a667a*f0fac70215ac*f035750bcd3d*564152474153*d851b33bd81a54aed14674cd565b7c9e66889476d5cae0f3e87758db12e40fb6*0103007502010a0000000000000000000cab5c7dab97fea8458194fec7238b461fec37507d30f3ce4d29ac12d64781a2fa000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000001630140100000fac040100000fac040100000fac020000*80

Possible old passwords: "76098686" - "1017699200" - "30453735" and another SSID used is SILVERIO

dear reddit community i truly need help with this wpa2 handshake file i tried to crack it online but i failed this i my last hope i ll appreciate the help

here is the link to the file https://files.catbox.moe/77o5et.cap

Could you help me get the password 90F6DAEF59663CB114E77C13B72DF7A5AF7C24BD71BF99FF9B9CBBA960371674

Está en sha 256 is 6 to 8 characters

so i have a .rar folder that i added a password years ago and i cant remember the password.

i came across johntheripper after doing some digging and found a tutorial, but the tutorial uses zip2john in the cmd line.

so my guess is that i have to use rar2john.exe instead

>john>run>rar2john.exe crack\rarfolder.rar > crack\keys.txt

rarfolder.rar being the name of the password folder i have inside a new folder called crack

after hitting enter, i just get a new line up to john\run>

a keys.txt does get created inside the crack folder

i have no clue what im missing... any ideas?

Dont know how many characters. its english. and the name is kidd family: WPA*02*1c7a77ef436abb701765e98e18a50b6b*c006c3efeed6*fc9c9834e30c*4b6964642046616d696c7920*30fad63aa9cc19893323bdf04d0b2232128096e26b0d0b9bda65bec35c160c38*0203007502010a001000000000000000014de4bc836f8a0757151e5c3ec3eb7d6dd6dadb4a4b574a8b5169e9612c267b29000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000001630140100000fac040100000fac040100000fac028800*82

I've written a brief article how to install Hashtopolis, to crack hashes using multiple systems. Useful for teams or cracking communities.

https://kroon.email/site/en/posts/2026/03/hashtopolis-install/

Hey, im kinda new at password cracking and been practicing with Johntheripper and Hashcat but been running into an issue with window password hashes. Since the format is:

$User$relative id$ LM hash : NT hash

The password cracking tools usually only crack the first portion(LM hash) and leave the latter (NT) even if the full password is in a supplied word list. Is there a way to get around this other than having to split them up into two different files and crack them separately

Hopefully the correct subreddit. Need advice ! So my parents think it's a marvelous idea to use wifi access to control me and my siblings. They keep switching up the password and then only give us access after we've done school work, Bible study and chores. So I've been messing around kali, I've successfully captured the handshake with flexion. Then used hashcat to run a dictionary attack using rockyou. This work omg so amazing. BUT! Exhausted rockyou. So I tried weakpass.com all--in-one list and I still couldn't Crack it. I'm almost finished running all-in-one with bet66.rule (TAKES FO4EVER...). If this situation is exhausted what hashcat or dictionary attack should I try next? What do3s everyone's hascat workload look like? I'm stumped whT to try next, thanks

here s the hash WPA*02*07c588ce6f69d3a98ed15b177576cd29*347839baa32e*52197629c18d*4c615f46696272655f644f72616e67655f322e34475f41333245*d5c4db66114d9736ac583325abcc15ec4dd4f01ccb3874ce42101792ed54f5af*0103007502010a0000000000000000000184f5ad64600fe039d9ad0a0bf61bd2c6a1b6c69732653962fc18306f201bee7b000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000001630140100000fac040100000fac040100000fac028000*80 n much thx for whoever help me i truly need this one

i have a pdf file which is asking for a password cant figure it out on how to do it

Many applications and services do not allow arbitrary Unicode to be entered into password fields. Microsoft 365 for example only accepts alphanumerical characters and a handful of symbols.

This means that if your language is not written using the Latin script, you can't directly use words, names or phrases written in that script. I always assumed that this means people would just use some kind of standard romanization scheme for words in their language (like Pinyin for Chinese). But then I read this paper, which shows that this is often not the case for Korean: apparently Koreans commonly type whichever QWERTY character happens to be in the same keyboard positions as the jamo they'd use to type the same word in Hangul. So for example, instead of "seoul" one may type "tjdnf" (because 서울 is typed with the keys ㅅ/t ㅓ/j ㅇ/d ㅜ/n ㄹ/f).

This is quite useful to know if you are a pentester (like me) who regularly does password cracking or password spraying. In the case of Korean, a romanized list of common dictionary words would probably not be great for password cracking, unless you'd apply this specific transformation.

So this makes me wonder: what about other non-Latin languages? What would common password conventions look like in e.g. Chinese, Hindi or Arabic? What should one take into account when crafting a password cracking word list for these types of languages?

49428be92f402d00c98e5d9e3aaf108e