# Standards and References - Hash Cracking with Hashcat

## Tools

### Hashcat
- **URL**: https://hashcat.net/hashcat/
- **GitHub**: https://github.com/hashcat/hashcat
- **Wiki**: https://hashcat.net/wiki/
- **Hash modes**: https://hashcat.net/wiki/doku.php?id=hashcat

### Wordlists
- **SecLists**: https://github.com/danielmiessler/SecLists
- **RockYou**: Classic breach wordlist (14 million passwords)
- **CrackStation**: https://crackstation.net/crackstation-wordlist-password-cracking-dictionary.htm

## Standards

### NIST SP 800-63B - Digital Identity Guidelines (Authentication)
- **URL**: https://pages.nist.gov/800-63-3/sp800-63b.html
- **Description**: Password requirements and memorized secret guidelines

### OWASP Password Storage Cheat Sheet
- **URL**: https://cheatsheetseries.owasp.org/cheatsheets/Password_Storage_Cheat_Sheet.html

## Legal Framework

- Computer Fraud and Abuse Act (CFAA) - US
- Computer Misuse Act 1990 - UK
- Always obtain written authorization before testing
- Follow penetration testing rules of engagement
