known_hosts-hashcat
A tool and guide for cracking hashed SSH known_hosts files using hashcat to recover IP addresses.
What is known_hosts-hashcat?
known_hosts-hashcat is a security tool and guide for cracking hashed entries in SSH known_hosts files to recover the original IP addresses. It converts HMAC-SHA1 hashed known_hosts data into a format usable by hashcat, enabling efficient brute-force attacks against the IPv4 address space. This is useful for penetration testers and red teams to uncover network targets without triggering alarms.
Penetration testers, red team operators, and security researchers who need to extract IP addresses from compromised systems with hashed known_hosts files for network reconnaissance.
It provides an optimized, GPU-accelerated approach using hashcat mask attacks, avoiding the need for large IP dictionary files. The tool is specifically tailored for the HMAC-SHA1 hashing used by OpenSSH's HashKnownHosts feature, making it a practical solution for real-world engagements.
Overview
A guide and tool for cracking ssh known_hosts files with hashcat
Use Cases
Best For
- Recovering IP addresses from hashed known_hosts files during penetration tests
Related Projects
Found a gem we're missing?
Open-Awesome is built by the community, for the community. Submit a project, suggest an awesome list, or help improve the catalog on GitHub.
