Initial commit - 611 cybersecurity skills across all subdomains

skills/performing-hash-cracking-with-hashcat/references/standards.md

@@ -0,0 +1,30 @@
+# Standards and References - Hash Cracking with Hashcat
+
+## Tools
+
+### Hashcat
+- **URL**: https://hashcat.net/hashcat/
+- **GitHub**: https://github.com/hashcat/hashcat
+- **Wiki**: https://hashcat.net/wiki/
+- **Hash modes**: https://hashcat.net/wiki/doku.php?id=hashcat
+
+### Wordlists
+- **SecLists**: https://github.com/danielmiessler/SecLists
+- **RockYou**: Classic breach wordlist (14 million passwords)
+- **CrackStation**: https://crackstation.net/crackstation-wordlist-password-cracking-dictionary.htm
+
+## Standards
+
+### NIST SP 800-63B - Digital Identity Guidelines (Authentication)
+- **URL**: https://pages.nist.gov/800-63-3/sp800-63b.html
+- **Description**: Password requirements and memorized secret guidelines
+
+### OWASP Password Storage Cheat Sheet
+- **URL**: https://cheatsheetseries.owasp.org/cheatsheets/Password_Storage_Cheat_Sheet.html
+
+## Legal Framework
+
+- Computer Fraud and Abuse Act (CFAA) - US
+- Computer Misuse Act 1990 - UK
+- Always obtain written authorization before testing
+- Follow penetration testing rules of engagement

skills/performing-hash-cracking-with-hashcat/references/workflows.md

@@ -0,0 +1,62 @@
+# Workflows - Hash Cracking with Hashcat
+
+## Workflow 1: Hash Identification and Cracking
+
+```
+[Captured Hashes]
+      |
+[Identify Hash Type]
+(hashcat --identify, hashid, haiti)
+      |
+[Select Attack Strategy]:
+  1. Dictionary attack (rockyou.txt)
+  2. Dictionary + rules (best64.rule)
+  3. Mask attack (brute-force)
+  4. Hybrid (wordlist + mask)
+      |
+[Execute Hashcat]
+      |
+[Analyze Results]
+(cracked count, time, patterns)
+      |
+[Generate Password Strength Report]
+```
+
+## Workflow 2: Hashcat Command Examples
+
+```bash
+# Dictionary attack
+hashcat -m 0 -a 0 hashes.txt rockyou.txt
+
+# Dictionary + rules
+hashcat -m 0 -a 0 hashes.txt rockyou.txt -r best64.rule
+
+# Mask (brute-force 8-char lowercase)
+hashcat -m 0 -a 3 hashes.txt ?l?l?l?l?l?l?l?l
+
+# Hybrid (wordlist + 4 digits)
+hashcat -m 0 -a 6 hashes.txt rockyou.txt ?d?d?d?d
+
+# Show cracked passwords
+hashcat -m 0 hashes.txt --show
+```
+
+## Workflow 3: Password Audit Report
+
+```
+[Cracking Results]
+      |
+[Categorize]:
+  - Cracked in < 1 min: CRITICAL
+  - Cracked in < 1 hour: HIGH
+  - Cracked in < 1 day: MEDIUM
+  - Not cracked: Acceptable
+      |
+[Pattern Analysis]:
+  - Common base words
+  - Character set distribution
+  - Length distribution
+  - Policy compliance
+      |
+[Generate Report with Recommendations]
+```