
Hashcat is a fast and advanced password recovery utility that supports various attack modes and hashing algorithms, and is open-source and community-driven.
Checked October 2026.
Hashcat is the world's fastest and most advanced password recovery utility, supporting five unique modes of attack for over 300 highly-optimized hashing algorithms. It currently supports CPUs, GPUs, and other hardware accelerators on Linux, Windows, and macOS, and has facilities to help enable distributed password cracking.
Hashcat is licensed under the MIT license and is open-source, allowing contributors to improve and optimize its functionality.
The tool provides various features, including five unique modes of attack, support for over 300 hashing algorithms, and the ability to utilize CPUs, GPUs, and other hardware accelerators.
Hashcat also has a strong community, with resources available such as a wiki, forum, and Discord channel, making it easy for users to get help and support.
No core features are listed for this product yet, so check the vendor's documentation for the full feature list.
No integrations are listed for this product yet. Check the vendor's documentation, or ask the vendor which integrations and APIs it supports.
Common questions about oclhashcat: features, pricing and alternatives.
oclhashcat is a product in the Penetration Testing category. It covers Password Recovery and Password Cracking.
oclhashcat is free. Download and setup instructions are at https://github.com/hashcat/hashcat/.
Alternatives to oclhashcat listed on CybersecTools:
Compare all oclhashcat alternatives at https://cybersectools.com/alternatives/oclhashcat
oclhashcat is available as on-premises software. It is listed for startups, small businesses, mid-market companies and enterprises. It is free.
Side by side: features, pricing model and the company behind each one.
A Python utility that identifies and exploits domains vulnerable to AWS name server takeover attacks by detecting misconfigured DNS settings.
A toolkit to attack Office365, including tools for password spraying, password cracking, token manipulation, and exploiting vulnerabilities in Office365 APIs and services.
A reconnaissance tool that retrieves information from Office 365 and Azure Active Directory using a valid credential.
A Burp Suite extension that detects NGINX alias traversal vulnerabilities by analyzing HTTP traffic patterns to identify path traversal misconfigurations.
An image with commonly used tools for creating a pentest environment easily and quickly, with detailed instructions for launching in a VPS.
Get a summary of this page from your assistant.
Mandos MCP: ask about all 9,030 products.
Connect your AI