Understanding Results#

This guide covers how to view, interpret, and export cracking results in CipherSwarm v2.

Table of Contents#

• Viewing Cracked Hashes
• Understanding Hash Types
• Interpreting Attack Results
• Progress Tracking
• Exporting Data
• Recent Cracks Feed
• Result Analysis
• Security Considerations

Viewing Cracked Hashes#

From the Dashboard#

The dashboard provides a quick overview of cracking activity:

• Recently Cracked status card shows the number of hashes cracked in the last 24 hours
• This count is scoped to your currently selected project
• Click the card to navigate to detailed results

From a Campaign#

1. Navigate to Campaigns and select your campaign
2. The campaign page shows overall progress and recent activity
3. Click the Hash List name to view the full hash list with results
4. Cracked hashes display their plaintext values alongside the original hash

From a Hash List#

1. Navigate to Hash Lists in the top menu
2. Select the hash list you want to view
3. The hash list page shows:
   • Total hash count
   • Number cracked vs uncracked
   • Completion percentage
   • Individual hash entries with their status

Filtering Results#

Use the filter controls on the hash list page:

• All: Show all hashes (cracked and uncracked)
• Cracked: Show only hashes that have been cracked
• Uncracked: Show only hashes that remain uncracked
• Search: Search by hash value or plaintext

Understanding Hash Types#

CipherSwarm supports the same hash types as hashcat. Here are the most commonly encountered types:

The hash type is set when creating a hash list and determines how hashcat processes the hashes.

For a full list of supported hash types, refer to the hashcat documentation.

Interpreting Attack Results#

Success Rate#

The success rate indicates the percentage of hashes cracked by a specific attack:

Success Rate = (Hashes Cracked by Attack / Total Hashes in List) x 100

Typical success rates vary by attack type and hash complexity:

• Dictionary attacks: 30-60% for common password sets
• Rule-based attacks: 50-80% when combined with good wordlists
• Mask attacks: Variable, depends on pattern accuracy
• Brute force: Eventually 100% if keyspace is feasible, but very slow

Time to Crack#

Each cracked hash records when it was found. This helps you understand:

• Which attacks are most effective for your hash types
• How quickly easy passwords fall vs complex ones
• Whether your attack strategy is well-ordered

Attack Attribution#

When viewing cracked hashes, you can see which attack cracked each hash. This helps refine future attack strategies:

• If dictionary attacks crack most hashes, focus on better wordlists
• If rule attacks add significant cracks, invest in comprehensive rule files
• If mask attacks succeed, similar patterns likely exist in remaining hashes

Progress Tracking#

Campaign Completion Percentage#

The campaign progress bar shows overall completion across all attacks:

Overall Progress = Sum of (Attack Progress x Attack Weight) / Total Weight

Each attack contributes based on its keyspace size relative to the total campaign keyspace.

Attack Progress Indicators#

Individual attacks show:

• Progress Percentage: Keyspace processed vs total keyspace
• Speed: Current hash rate (hashes per second)
• ETA: Estimated time remaining based on current speed
• Tasks: Number of active, completed, and pending tasks

ETA Calculations#

ETA estimates are based on:

• Current aggregate hash rate across all agents working on the attack
• Remaining keyspace to process
• Historical performance data

ETAs become more accurate over time as the system collects more data points. Early estimates may fluctuate significantly.

Exporting Data#

CipherSwarm supports multiple export formats for cracking results.

CSV Export#

Exports cracked hashes as comma-separated values:

hash,plaintext,cracked_at
5f4dcc3b5aa765d61d8327deb882cf99,password,2026-01-15T10:30:00Z
e10adc3949ba59abbe56e057f20f883e,123456,2026-01-15T10:31:00Z

TSV Export#

Exports cracked hashes as tab-separated values:

hash	plaintext	cracked_at
5f4dcc3b5aa765d61d8327deb882cf99	password	2026-01-15T10:30:00Z

Hashcat Format Export#

Exports in hashcat-compatible format (hash