Cracking Hashes (hashcat / John)

This page aggregates cross-platform resources to practice Cracking Hashes (hashcat / John): retired Hack The Box machines, PortSwigger Web Security Academy labs and TryHackMe rooms, plus curated resources (HackTricks, PortSwigger, etc.) and related skills. Coverage: 47 challenges across 2 platforms — 25 HackTheBox · 22 TryHackMe. 25 with a Spanish writeup, 26 with a video writeup.

​

Where to start

Ordered by actual difficulty. At the same level: isolated lab first, then the guided room, and the full machine last.

1. TryHackMe — Advent of Cyber 2022 (Easy · ~1440 min) · 🇬🇧
2. TryHackMe — Advent of Cyber 2024 (Easy · ~1440 min) · 🇬🇧
3. TryHackMe — Basic Pentesting (Easy · ~45 min) · 🇬🇧 📹
4. TryHackMe — Brute It (Easy · ~45 min) · 🇬🇧
5. TryHackMe — Bugged (Easy · ~30 min) · 🇬🇧
6. TryHackMe — Crack the hash (Easy · ~45 min) · 🇬🇧

​

Curated resources

​

HTB machines practicing Cracking Hashes (hashcat / John) (25)

​

TryHackMe rooms practicing Cracking Hashes (hashcat / John) (22)

​

Related skills

• /en/skills/brute-force

---

← Back to the full glossary Last updated: 2026-08-17