[B00B5]

Hey guys. I coded this earlier today. It's nothing special, but it's useful nonetheless. Obviously, this requires hashcat and a little modification. You'll have to specify the paths to your hash and your wordlist.

Code

<!DOCTYPE HTML>
<html>
<body>
<center>

    <form action="" method="post">
    Hash:<br><input type="text" name="hash"><br><br>
    <input type="submit">
    </form>

    <br>
    <br>

<?php

if(isset($_POST["hash"])) {

    $hash = $_POST["hash"];

    $filename = rand(1, 100);
    $handle = fopen($filename, "w");
    fwrite($handle, $hash);
    fclose($handle);

    $crackhash = shell_exec("hashcat -a 0 -m 0 /opt/lampp/htdocs/$filename /home/jared/Documents/passwords/output.txt"); // SPECIFY HASH LOCATION AND WORDLIST LOCATION
    preg_match_all("#$hash:(.*)\s#", $crackhash, $output);
    if($output[1][0] != NULL)
        echo "Password is: <font color='green'><b>" . @$output[1][0] . "</b></font>";

    else
        echo "<font color='red'><b>Password was not found.</b></font>";

    exec("rm $filename");

}

?>

</center>
</body>
</html>

[DrWhat]

Im pretty sure the PHP application would timeout before the hash is cracked.
Im not sure tho.

you could have it post the hash, then add the hash to the users hash list as "cracking" and when its cracked will show in the hash list.

[3lit3]

You know that you can change the time limit..So change the timeout limit in PHP script and your server and you will be fine

[DrWhat]

You know that you can change the time limit..So change the timeout limit in PHP script and your server and you will be fine

and who will keep the broswer open for days on end... for that one thing.

[Alex™]

and who will keep the broswer open for days on end... for that one thing.

Me? My browser on my laptop has not been closed in weeks/months.

[B00B5]

If hashcat takes days to crack... you're running '98 or you have one HELL of a wordlist.

[Pillows]

I think this would better be used for a php command line script. Or if you could use ajax so there's no timeouts.

[B00B5]

I think this would better be used for a php command line script. Or if you could use ajax so there's no timeouts.

If it were command line it would be 100% useless. You could just ./hashcat instead.

[DrWhat]

If hashcat takes days to crack... you're running '98 or you have one HELL of a wordlist.

LOL wordlist thats funny, I use brute force.

If you can crack this in less then a day then maybe you should run the hashcat thing

7213fba3c54d2505269a6ac4875c8895

the guy with 24 AMD HD 6990 says his rig can go through all MD5 hashes in 1 day 16 hours

[DynamicW]

Nice script this seems pretty good.

[imaskiles741]

Nice script thanks for sharing !!

[account_]

LOL wordlist thats funny, I use brute force.

If you can crack this in less then a day then maybe you should run the hashcat thing

7213fba3c54d2505269a6ac4875c8895

the guy with 24 AMD HD 6990 says his rig can go through all MD5 hashes in 1 day 16 hours

7213fba3c54d2505269a6ac4875c8895:$k|21|3X

[SilentNuke]

7213fba3c54d2505269a6ac4875c8895:$k|21|3X

11 years later, someone cracked it 😆😆