Hashcat with hashcat utils on Ubuntu 18.04 for Nvidia GPUs (:cuda), AMD GPUs (:latest), Intel GPUs (:intel-gpu), Intel CPUs (:intel-cpu), KVMs and AMD CPUs (:pocl).

docker pull dizcza/docker-hashcat

docker run --gpus all -it dizcza/docker-hashcat /bin/bash

Then inside the docker container run

# list the available CUDA and OpenCL interfaces
hashcat -I

# run a bechmark
hashcat -b

docker pull dizcza/docker-hashcat:latest

The :latest is a generic tag for both Nvidia and AMD GPUs. It includes CUDA and the (default) OpenCL backends. Hashcat will pick CUDA, if your hardware supports it, because CUDA is faster than OpenCL (see thread). If your compute device does not support CUDA, hashcat will fall back to the OpenCL backend.

docker pull dizcza/docker-hashcat:cuda

Recommended for Nvidia GPUs. If you have any issues running this container with Nvidia GPU, please drop a comment in this issue.

docker pull dizcza/docker-hashcat:intel-cpu

Suitable for Intel CPUs.

docker run -it --device /dev/dri:/dev/dri dizcza/docker-hashcat:intel-gpu

Intel NEO OpenCL driver (suitable for the majority of laptops with an embedded Intel graphics card).

docker pull dizcza/docker-hashcat:pocl

An alternative to :intel-cpu tag, the :pocl tag provides an open-source (but not officially supported by HashCat) implementation of OpenCL, which you can find in the pocl-opencl-icd linux package (usually, outdated). Suitable for Intel & AMD CPUs and KVMs. For more information about using POCL in hashcat refer to the discussion.

Try :pocl tag if no other tag worked for you.

docker pull dizcza/docker-hashcat:intel-cpu-legacy

The :intel-cpu-legacy tag keeps the latest successful build of Hashcat 6.2.6 + deprecated IntelCPU runtime file. Now it's superseded by the :intel-cpu tag, which contains up-to-date Intel OpenCL CPU drivers.

Benchmark command: hashcat -m2500 -b

If you have a laptop with an embedded Intel GPU card, you can combine intel-cpu and intel-gpu installations manually to utilize both CPU and GPU, increasing the speed up to 15000 H/s.

Along with the hashcat, the following utility packages are installed:

• hashcat-utils for converting raw Airodump to HCCAPX capture format; info cap2hccapx -h
• hcxtools for inspecting, filtering, and converting capture files;
• hcxdumptool for capturing packets from wlan devices in any format you might think of; info hcxdumptool -h
• kwprocessor for creating advanced keyboard-walk password candidates; info kwp -h

• Warning "Device #1: Unstable OpenCL driver detected!" can be suppressed by adding the --force flag to a hashcat command (f.i., hashcat -m2500 -b --force).

This Dockerfile is used in the hashcat-wpa-server project to automate WPA/WPA2 hashes cracking.

To build upon this Dockerfile with your custom packages, create a new Dockerfile that starts with

ARG branch=latest
FROM dizcza/docker-hashcat:$branch

The branch arg can be any tag listed above.