Cracking Webmin hashes

In order to crack our Webmin hashes, we will leverage the same cracking mode that we would use for a Linux hash of the same type: SHA512. A quick run of hashcat –help and passing the output to grep SHA512 will help us find what we need, as shown in Figure 8.20:

Figure 8.20 – Looking for the right mode for UNIX-style sha512 hashes

We see our $6 sequence here under mode 1800, so let’s try that for cracking when using our RockYou wordlist. As always, use rules or better-targeted wordlists if you need to! Let’s run this hash (saved into a file called Webmin.txt) using the following command:

hashcat –a 0 –m 1800 webmin.txt rockyou.txt

This is shown in Figure 8.21:

Figure 8.21 – Starting our Webmin cracking operation against the SHA512 password hash

In this case, hashcat cracked this hash quite quickly, but not for the reasons you might think; the correct...