HashCracker is an advanced, multi-threaded password recovery tool written in Python. It is designed to be fast, efficient, and versatile, supporting multiple attack modes (Dictionary, Mask, Hybrid) and over 20 different hashing algorithms including MD5, SHA-series, NTLM, MySQL, and specialized formats like WinZip and Bcrypt.

• Multi-Core Processing: Utilizes Python's multiprocessing to maximize CPU usage.
• Auto-Detection: Automatically identifies common hash types (MD5, SHA1, SHA256, etc.).
• 5 Attack Modes:
  • Straight (Dictionary): Standard wordlist attack.
  • Combination: Combines words from two different wordlists.
  • Mask: Brute-force using specific patterns (e.g., 4 lowercase letters + 2 digits).
  • Hybrid: Combines Wordlists with Masks (append or prepend).
• Salt Support: robust support for salted hashes in hash:salt format.
• Live Statistics: Real-time progress bar showing speed (hashes/sec) and estimated completion.

• Python 3.x
• OS: Linux
• Optional Modules:
  • bcrypt (for Bcrypt support)

# Clone the repository
git clone https://github.com/ajayyanshu/HashCracker.git
cd HashCracker

# Execution
chmod +x password.py

# Insatll Python3 package 
apt install python3 

# (Optional) Install bcrypt for Mode 3200 support
pip3 install bcrypt

Basic Syntax

python3 password.py [HASH] [OPTIONS]

Reads passwords line-by-line from a wordlist.

python3 password.py -m 0 -d rockyou.txt '5d41402abc4b2a76b9719d911017c592'

Brute-forces based on a specific character pattern.

Mask Placeholders:

• ?l = Lowercase (a-z)
• ?u = Uppercase (A-Z)
• ?d = Digits (0-9)
• ?s = Special (!@#$...)
• ?a = All printable
• ?h / ?H = Hex (lower/upper)

Example: Crack a password known to be 4 lowercase letters followed by 2 digits (e.g., "pass12"):

python3 password.py -m 0 -a 3 --mask "?l?l?l?l?d?d" <hash>

Combines words from two files (e.g., names.txt + dates.txt).

python3 password.py -m 0 -a 1 -d words1.txt --wordlist2 words2.txt hash:salt

• Mode 6 (Wordlist + Mask): Appends mask to word (e.g., Password + 123).
• Mode 7 (Mask + Wordlist): Prepends mask to word (e.g., 123 + Password).

# Appends 3 digits to every word in rockyou.txt
python3 password.py -m 0 -a 6 -d words.txt --mask "?d?d?s" hash

Use --list to see the full table of 20+ algorithms.

Ajay Kumar Security Engineer & Developer Feedback or issues? Reach out at ajayyanshu@gmail.com