how to HACK a password // password cracking with Kali Linux and HashCat
About this video
He frames the lesson as cracking a password for a user on his own coffee server, with explicit permission and for education only, contrasting manual guessing with automated attacks. First he demonstrates an online dictionary attack with Hydra in Kali Linux, supplying a username, a custom wordlist and the SSH service, and notes the built-in rockyou.txt list he says came from a 2009 breach. He explains that online attempts can trigger firewalls, timeouts and lockouts. He then explains hashing with examples such as MD5, SHA-256 and NTLM, showing that servers store a hash rather than plaintext and that offline cracking hashes each wordlist candidate until one matches. He demonstrates Hashcat in straight dictionary mode, using mode 1800 for SHA-512 Unix hashes and mode 1000 for NTLM, and ends with a challenge to apply both Hydra and Hashcat on his server.
Key takeaways
- Hydra automates online login attempts against services such as SSH using a wordlist
- A dictionary attack tries likely passwords rather than every possible combination
- Servers store password hashes, not plaintext, and verify logins by comparing hashes
- Hashcat cracks offline by hashing wordlist candidates until a hash matches
- He warns that cracking without explicit permission is illegal
Episode details: published August 21, 2020 · 12:57 long. Summary written by Self Growth Videos from the episode itself. Business results and any income figures mentioned are NetworkChuck’s own claims, shared for education — they are not typical or guaranteed.
← Previous: new Kali Linux GUI on Windows 10 (WSL 2) // 2020.3 Release · Next: how the OSI model works on YouTube (Application and Transport Layers) // FREE CCNA // EP 5 →
All NetworkChuck videos · NetworkChuck profile · NetworkChuck on YouTube
