Anthropic-Cybersecurity-Skills/skills/performing-hash-cracking-with-hashcat/references/standards.md

Standards and References - Hash Cracking with Hashcat

Tools

Hashcat

• URL: https://hashcat.net/hashcat/
• GitHub: https://github.com/hashcat/hashcat
• Wiki: https://hashcat.net/wiki/
• Hash modes: https://hashcat.net/wiki/doku.php?id=hashcat

Wordlists

• SecLists: https://github.com/danielmiessler/SecLists
• RockYou: Classic breach wordlist (14 million passwords)
• CrackStation: https://crackstation.net/crackstation-wordlist-password-cracking-dictionary.htm

Standards

NIST SP 800-63B - Digital Identity Guidelines (Authentication)

• URL: https://pages.nist.gov/800-63-3/sp800-63b.html
• Description: Password requirements and memorized secret guidelines

OWASP Password Storage Cheat Sheet

• URL: https://cheatsheetseries.owasp.org/cheatsheets/Password_Storage_Cheat_Sheet.html

Legal Framework

• Computer Fraud and Abuse Act (CFAA) - US
• Computer Misuse Act 1990 - UK
• Always obtain written authorization before testing
• Follow penetration testing rules of engagement