CycloneHappy New Year!
Hashpwn wrapped up our first full year in 2025 and had a lot of fun along the way.
A big thank you to everyone who has been part of the community, and to our staff who helped turn an idea into a reality.
Here's to 2026!
hashpwn-2025 wordlist is available for download and now includes all founds submitted to forum.hashpwn.net from Oct 2024 - Dec 2025.
A special thanks to our sponsors this year which made the prizes possible. Participates won over $700 worth of prizes in 13 different puzzles!
• Hashpwn.net
Hashpwn is an ethical hash cracking forum that offers moderated discussion, shared research, custom tools, all in a friendly and professional community.
Sponsored: Daily Prizes, Grand Prize
• Lethologica.nl
Lethologica specializes in ethical crypto wallet recovery using advanced password research, digital forensics, and high-performance compute.
Sponsored: Daily Prizes, Grand Prize
• Hashes.com
Hashes.com is a site dedicated to hash recovery with hash lookups, an escrow service, and an API to tie it all together.
Sponsored: Grand Prize
• Hashmob.net
HashMob is a collaborative password research platform focused on hash recovery, analysis, and statistics. It provides shared hashlists, wordlists, tools, optimized rules, and APIs that help researchers and penetration testers improve real-world password security.
Sponsored: 3-month Diamond Patreon Vouchers to hashmob.net, Daily Prizes, Grand Prize
• Hashcracky.com
Hashcracky hosts gamified hash cracking events where participants crack hashes, earn loot, and compete on live leaderboards. It blends competitive fun with real cracking skills through themed, time-limited challenges.
Sponsored: Vouchers for 35k Gold and loot at hashcracky.com
#hashpwn #lethologica #hashescom #hashmob #hashcracky #hashcracking #challenge #puzzle #christmas
Looking for a language specific wordlist? We are too! Share yours with the hashpwn community.
https://forum.hashpwn.net/post/7639
#hashpwn #wordlist #hashcracking #language #hashcat #jtr #dict #dictionary
PsychoticSheepFOSS Advent Calendar - Door 6: Cracking Passwords with John the Ripper
Today we explore John the Ripper, one of the most powerful and flexible open-source password-cracking tools. It is widely used for security testing, digital forensics, and understanding how weak passwords can be recovered.
John works by taking a password hash and trying to recover the original password. It can do this in different ways, for example through brute force, where every possible combination is tried, or through wordlists, where John tests passwords from a predefined dictionary. When the generated hash matches the original, the password is revealed.
This tool is perfect for learning about cybersecurity, testing the strength of your own passwords, or experimenting with how attackers might attempt to crack weak credentials.
Pro tip: try using both brute force and a wordlist. You’ll immediately see how effective wordlists can be compared to testing every combination.
Which hashing algorithm gives you the most headaches?
Link: https://github.com/openwall/john
#FOSS #OpenSource #Linux #CLI #Terminal #JohnTheRipper #CyberSecurity #PasswordCracking #SecurityTools #HashCracking #Pentesting #EthicalHacking #DigitalForensics #Unix #Infosec #NerdContent #TechNerds #AdventCalendar #OpenTools #FOSSAdvent #adventkalender #adventskalender
Today we explore John the Ripper, one of the most powerful and flexible open-source password-cracking tools. It is widely used for security testing, digital forensics, and understanding how weak passwords can be recovered.
John works by taking a password hash and trying to recover the original password. It can do this in different ways, for example through brute force, where every possible combination is tried, or through wordlists, where John tests passwords from a predefined dictionary. When the generated hash matches the original, the password is revealed.
This tool is perfect for learning about cybersecurity, testing the strength of your own passwords, or experimenting with how attackers might attempt to crack weak credentials.
Pro tip: try using both brute force and a wordlist. You’ll immediately see how effective wordlists can be compared to testing every combination.
Which hashing algorithm gives you the most headaches?
Link: https://github.com/openwall/john
#FOSS #OpenSource #Linux #CLI #Terminal #JohnTheRipper #CyberSecurity #PasswordCracking #SecurityTools #HashCracking #Pentesting #EthicalHacking #DigitalForensics #Unix #Infosec #NerdContent #TechNerds #AdventCalendar #OpenTools #FOSSAdvent #adventkalender #adventskalender
New Release: Hashes.com Escrow API Tool
v1.1.2; 2025-11-21
fixed redundant new line logic
added http timeouts
Crackmon, a crack rate monitor for hashcat, now supports mdxfind in PR11.
Example: stop current attack if <100 cracks / 5 minutes.
crackmon -t 5 -c 100 hashcat {hashcat args}
or
crackmon -t 5 -c 100 mdxfind {mdxfind args}
🚀 New Release: hashgen v1.2.0
Big update packed with new features:
• Added 22 new modes: MySQL5, phpass, md5crypt, sha256crypt, sha512crypt, WordPress bcrypt-HMAC-SHA384 (wpbcrypt), base32 encode/decode, plus multiple hashcat modes including salted algos
• Updated yescrypt defaults to match Debian 12
• Read full changelog:
https://forum.hashpwn.net/post/5810
#hashgen #hashcat #infosec #golang #hashcracking #hashpwn #yescrypt #wordpressbcrypt
🎉 Happy 1st Birthday, hashpwn! 🎉
Officially launched on October 12, 2024, what started as an idea between a few friends has grown into a thriving global community. Over the past year, forum activity has surged over 250%, with users represented from all around the world...
Since Wordpress v6.8, the default hash func produces a custom bcrypt hash: $wp$2y$10$...
More info on this custom algo, how it uses hmac-sha384, and how to crack them with hashcat.
https://forum.hashpwn.net/post/4205
#wordpress #bcrypt #wpbcrypt #hashcracking #hashpwn #hashgen #hashcat