Cracking hashes online
Often when we come across hashes while pentesting, it's a good idea to check the hash online: whether it has been already cracked or not. In this recipe, you will learn about some of the cool websites that provide the hash cracking service.
How to do it...
Let's take a look at identifying different types of hashes.
Hashkiller
The following steps demonstrate the use of Hashkiller:
- Hashkiller is a great service where we can submit our hashes, and if it has already been cracked in the past, it will show us the plaintext:
- The process is simple; we simply choose the option on the website where it says
Decrypter / Cracker
and then we click on the type of hash we want to crack:
- On the page that opens, we paste our hash, fill in the CAPTCHA, and then click on
Submit
:
- If the hash exists, it will show us the plaintext; else, we will see a message saying
Failed to find any hashes!
:
Crackstation
Crackstation is a free service that supports MD2, MD5, NTLM, and SHA1 cracking. It uses its...