Here’s a proper write-up for the room on TryHackMe. This level focuses on more complex hashes (non-MD5/NTLM) and requires using tools like hashcat , john , and online databases when needed. TryHackMe – Crack the Hash (Level 2) Write-up Task 1 – Get cracking Goal: Identify and crack each hash. Some are salted, some use key derivation functions. Hash 1 f09ed3e69444e2eaa2b258c7a612edf9c3efcbaa82289b419dcebea2e5c0fefc
No salt mentioned. Try with hashcat (mode 1400 = SHA256) and RockYou:
✅ Answer: football $6$3fFdQwPOhZAEcZcs$01XeMlFbtOetp4bRoeE/pC0UY6uPKiNccpsd6kX6dSdRVZNKPTh2LvrCqH3odoyGpYkcevcVYbVBlO3R9hfj/0
Using john --format=raw-sha256 and rockyou yields nothing.
Crack with rockyou – takes time but yields princess
✅ Answer: letmein 4e1c6d31624d8eacfb7acf7b5e3de972ef8223e0a17f4c5b3aeeea60660f1e2e
Bcrypt is slow – use small wordlist or single guess if common.
✅ Answer: samsung a2b9071e2d0be36c14fcf2833ddf66ed49e6ccbd4ef4a01a7bf3e1cdb183df85