How to install HAT on Kali Linux?

Since HAT is a wrapper for Hashcat, you'll need to install Hashcat first via apt, then clone the HAT repository and set up the required wordlist directories as specified in the README. Ensure you have dependencies like Cewl and Rsmangler installed for full functionality.

HAT vs Hashcat: which is easier for automated cracking?

HAT is better for automation with pre-configured workflows and integrations, while Hashcat offers more manual control. If you want to save time on common tasks, use HAT; for custom or advanced attacks, stick with Hashcat directly.

Does HAT support cracking WPA2 handshakes?

No, HAT only supports specific hash types like NTLMv2 and SHA-512, not WPA2. For that, you'd need to use Hashcat or other tools designed for wireless network cracking.

How to update the wordlists in HAT?

You must manually download and place new wordlists into the /opt/wordlists/ directory structure, as HAT doesn't include an auto-update feature. Check the README for suggested sources, but be aware links may be outdated.

Can I use custom rule sets with HAT?

HAT includes common rule sets, but for custom ones, you may need to modify the code or integrate them manually into Hashcat, as the automation is focused on pre-configured workflows.

Is HAT good for password auditing in corporate environments?

Yes, its integration of corporate rule sets and breach wordlists makes it efficient for auditing common passwords, but ensure you have legal authorization and the supported hash types.

Open-Awesome

hat

GPL-3.0Python

An automated Hashcat wrapper that speeds up hash cracking during security engagements with pre-configured wordlists and rules.

GitHub

309 stars29 forks0 contributors

What is hat?

HAT (Hashcat Automation Tool) is an automated wrapper for Hashcat that accelerates hash cracking during security engagements by integrating common wordlists, rule sets, and utilities. It simplifies the process of testing hashes against breached password lists, dictionary variations, and custom wordlists, reducing manual effort for penetration testers and security researchers.

Target Audience

Security professionals, penetration testers, and red teamers conducting hash cracking as part of security assessments on Linux-based systems.

Value Proposition

Developers choose HAT for its pre-configured automation, which combines Hashcat’s power with optimized workflows, curated wordlists, and integrations like Cewl and Rsmangler to speed up cracking tasks without extensive manual setup.

Overview

HAT (Hashcat Automation Tool) - An Automated Hashcat Tool for common wordlists and rules to speed up the process of cracking hashes during engagements. Created for Linux based systems

Use Cases

Best For

Automating hash cracking workflows during penetration tests
Testing hashes against breached password lists and dictionary variations
Integrating Cewl for generating target-specific wordlists
Using Rsmangler to create permutations for targeted password attacks
Cracking common hash types like NTLMv2, MD5, and SHA-512 efficiently
Visualizing progress and organizing cracked hash output in security engagements

Not Ideal For

Windows-based penetration testing environments without a Linux setup
Security assessments requiring cracking of unsupported hash types like bcrypt or argon2
Teams needing deep, manual customization of Hashcat parameters beyond pre-configured workflows

Pros & Cons

Pros

Automated Tool Integration

Seamlessly integrates Cewl for custom wordlist generation and Rsmangler for password permutations, reducing manual effort in targeted attacks as highlighted in the README.

Visual Progress Tracking

Displays real-time status of remaining hashes during cracking sessions, improving user oversight and efficiency during engagements.

Structured Output Formatting

Organizes cracked hashes alphabetically in a clear (Username::Domain:Hash:Password) format, making results easier to parse and report.

Curated Wordlist Support

Leverages public breach wordlists and Oxford Dictionary variations, automating access to common resources for faster cracking starts.

Cons

Platform Limitation

Linux-only with a separate Windows repo, potentially fragmenting support and features, as admitted in the README.

Outdated Resource Dependencies

Suggested wordlist download links are from 2019, which may be broken or not updated, requiring manual maintenance.

Inflexible Setup Requirements

Requires a specific directory structure for wordlists (e.g., /opt/wordlists/), which can clash with existing user setups.

Frequently Asked Questions

Related Projects

hate_crack

A tool for automating cracking methodologies through Hashcat from the TrustedSec team.

Stars1,857

Forks287

Last commit5 days ago

Naive hashcat

Crack password hashes without the fuss :cat2:

Stars1,418

Forks176

Last commit4 years ago

autocrack

Hashcat wrapper to help automate the cracking process

Stars128

Forks34

Last commit8 years ago

Community-curated · Updated weekly · 100% open source

Found a gem we're missing?

Open-Awesome is built by the community, for the community. Submit a project, suggest an awesome list, or help improve the catalog on GitHub.

Submit a project Star on GitHub

hat