Often when we come across hashes while pentesting, it's a good idea to check the hash online: whether it has been already cracked or not. In this recipe, you will learn about some of the cool websites that provide the hash cracking service.
Let's take a look at identifying different types of hashes.
The following steps demonstrate the use of Hashkiller:
- Hashkiller is a great service where we can submit our hashes, and if it has already been cracked in the past, it will show us the plaintext:
- The process is simple; we simply choose the option on the website where it says
Decrypter / Cracker
and then we click on the type of hash we want to crack:
- On the page that opens, we paste our hash, fill in the CAPTCHA, and then click on
Submit
:
- If the hash exists, it will show us the plaintext; else, we will see a message saying
Failed to find any hashes!
: