---
name: "hashcat-advanced-password-recovery"
description: "Audit password hash resistance against high-speed GPU cracking attacks with Hashcat."
metadata:
  author: "hashcat"
  version: "1.0.0"
  runtime_compatibility:
    - "codex"
    - "claude-code"
    - "cursor"
    - "windsurf"
triggers:
  - "audit hashes with hashcat"
  - "run gpu hashcat audit"
  - "test hash resistance hashcat"
permissions:
  fs_read: true
  fs_write: "workspace"
  shell_exec: false
  net_access: false
---

# Hashcat GPU-Accelerated Password Hash Auditing

Tests password hash strength with Hashcat: multi-GPU OpenCL/CUDA acceleration, attack modes (straight dictionary, combination, mask attacks), hash types (MD5, SHA-256, bcrypt), and rule permutations.

## When to Invoke
Invoke this skill whenever you need to:
- audit hashes with hashcat
- run gpu hashcat audit
- test hash resistance hashcat

## Execution SOP & Rules
1. Run hashcat -m <hash_type> -a 0 hashes.txt wordlist.txt -r rules/best64.rule.
2. Monitor GPU temperature and workload throttling using hashcat status indicators.
3. Use mask attacks (-a 3) to test exhaustive keyspace coverage of specific character lengths.
4. Recommend modern memory-hard hashing algorithms (Argon2id, bcrypt) to mitigate GPU cracking.

## Verification Checklist
- Run local linting, syntax validation, and type-checks before reporting completion.
- Ensure all created or modified files adhere to workspace boundaries and avoid uncommitted secrets.
- Verify tests or build commands exit cleanly with return code 0.