MD6 - The Failed SHA-3 Hash You Likely Never Heard Of

While MD6 never made it into NIST as SHA-3, it has recently made its way into a few hash cracking contests.

After a suggestion from Vavaldi from HashMob to add MD6 support to hashgen, I began working on a Pure Go MD6 port. Once that was complete, I added support for 5x common MD6 digest sizes to hashgen.

MD6 - Pure Go port
https://github.com/cyclone-github/md6

hashgen v1.3.1 - MD6 support
https://github.com/cyclone-github/hashgen

#md6 #nist #sha3 #hashcracking #hashgen #cmiyc #ctc #golang #port

Released: hashgen v1.3.0

New in this version:

* HMAC modes
* PBKDF2 modes
* scrypt support
* additional BLAKE2 modes
* hashcat UTF-16LE modes
* optimized salt RNG on salted hashes
* 95+ supported hash modes

https://forum.hashpwn.net/post/89

#hashgen #hashgenerator #hashcracking #hashpwn #golang

New version of hashgen released.

v1.2.2

- added mode: halfmd5 -m 5100
- added mode: morsedecode

https://forum.hashpwn.net/post/89

#hashgen #md5 #halfmd5 #hashcat #morsecode #morsedecode #hashcracking #hashpwn

🚀 New Release: hashgen v1.2.0

Big update packed with new features:

• Added 22 new modes: MySQL5, phpass, md5crypt, sha256crypt, sha512crypt, WordPress bcrypt-HMAC-SHA384 (wpbcrypt), base32 encode/decode, plus multiple hashcat modes including salted algos
• Updated yescrypt defaults to match Debian 12
• Read full changelog:
https://forum.hashpwn.net/post/5810

#hashgen #hashcat #infosec #golang #hashcracking #hashpwn #yescrypt #wordpressbcrypt

hashgen - the blazingly fast hash generator

New version of hashgen published. https://github.com/cyclone-github/hashgen/releases/tag/v1.2.0 v1.2.0; 2025-11-08 addressed raw base-16 issue https://github...

hashpwn

Since Wordpress v6.8, the default hash func produces a custom bcrypt hash: $wp$2y$10$...

More info on this custom algo, how it uses hmac-sha384, and how to crack them with hashcat.

https://forum.hashpwn.net/post/4205

#wordpress #bcrypt #wpbcrypt #hashcracking #hashpwn #hashgen #hashcat

Wordpress v6.8 Bcrypt - hmac-sha384

As announced on February 17, 2025, Wordpress is switching their hash function to their own rolled version of bcrypt: bcrypt(base64(hmac-sha384(key="wp-sha384...

hashpwn

As a fun experiment, I rewrote hashgen v1.2.0-dev in everyone's favorite memory safe, systems programming language, Rust.

Was it easy? No. Was it worth it? Yes.

Benchmarks show Rust is fast, but so is optimized Go.

https://forum.hashpwn.net/post/4020

#hashgen #golang #rust #benchmark #hashpwn #hashcracking

hashgen v1.2.0-dev update:

-added 20 new hash modes including Wordpress v6.8 Bcrypt, Linux shadow hashes, MySQL5, and multiple salted algos

https://forum.hashpwn.net/post/89

#hashgen #hashcracking #wordpressbcrypt #hmac_sha384 #linux #shadowfile #mysql

hashgen - the blazingly fast hash generator

New version of hashgen published. https://github.com/cyclone-github/hashgen/releases/tag/v1.2.0 v1.2.0; 2025-11-08 addressed raw base-16 issue https://github...

hashpwn

hashgen v1.1.5-dev update:

- hashgen now preserves original input order
- bug fixes / updates

https://github.com/cyclone-github/hashgen/pull/10

#hashgen #golang #infosec #hashcracking

added feature: preserve original input order by cyclone-github · Pull Request #10 · cyclone-github/hashgen

Preserves original input order by default. Addresses issue: #7 Example: #7 (comment)

GitHub

New Release: hashgen v1.1.4

This release adds multiple keccak and blake2 modes, a new benchmark option, and small performance boosts.

https://forum.hashpwn.net/post/2596

#hashgen #hashcracking #hashpwn

hashgen - the blazingly fast hash generator

New version of hashgen published. https://github.com/cyclone-github/hashgen/releases/tag/v1.2.0 v1.2.0; 2025-11-08 addressed raw base-16 issue https://github...

hashpwn

hashgen v1.1.3 published to github:

Changelog:
- added mode "hex" for $HEX[] formatted output
- improved "plaintext/dehex" logic to decode both $HEX[] and raw base-16 input

https://forum.hashpwn.net/post/679

#hashgen #hashcracking #wordlist #hex #base64 #base58 #hashpwn