Rubeus-to-Hashcat

hcxtools

A small set of tools to convert packets from capture files to hash files for use with Hashcat or John the Ripper.

7z2hashcat

extract information from password-protected .7z archives (and .sfx files) such that you can crack these "hashes" with hashcat

itunes_backup2hashcat

Extract the information needed from the Manifest.plist files to convert it to hashes compatible with hashcat

WINHELLO2hashcat

WINHELLO2hashcat is a Python tool that extracts the cryptographic hash from a Windows Hello PIN, enabling offline password recovery through Hashcat. It targets Windows 10 and 11 systems without TPM protection, providing a method for security testing and forensic analysis. ## Key Features - **Hash Extraction** — Retrieves Windows Hello PIN hashes from system hives and cryptographic directories. - **Hashcat Compatibility** — Outputs hashes in the format required for Hashcat mode 28100. - **Offline Analysis** — Works on offline Windows directories or mounted images without live system interaction. - **Flexible Input** — Accepts either the NGC directory or a specific PIN GUID for hash extraction. - **Admin/SYSTEM Privilege Support** — Includes guidance for accessing protected NGC folders on live or mounted systems. ## Philosophy The tool is designed for security professionals and forensic investigators to assess Windows Hello PIN strength, emphasizing offline, non-destructive analysis where TPM-based protections are absent.