Jump to content
Nytro

Hash Detector Tool

By Nytro, in Programe utile

Recommended Posts

Nytro Mentor

Nytro

Posted
Posted

[h=2]Hash Detector Tool[/h]

Since 2009 when I wrote: "

The string Decoding Process" (published by hakin9 magazine) I use crafted tools to automatically decode strings (some of them have been published on this blog). Decoding strings results pretty hard especially nowadays where many encoding algorithms are commonly used over planty "daily life tools". Understanding what encoding we are facing becomes really important if we are analyzing Hashing. Let's assume we 've just got a file including hundreds of different hash strings, how to identify what kind of hashing algorithm have been used ? Having a list o hashes, that potentially could "hide" passwords or important data, having the power of a bruteforce machine and the right tools to attack the hash list without knowing what algorithm have been used could be pretty nesty for attackers. Indeed attackers might have difficult time in attacking hashes without knowing what is the generation algorithm.

Surfing on this "painful wave" I decided to share a pretty python code that helped me out in solving this specific problem. The script can be downloaded here (pastebin). The following image shows how simple the script is, and how could be really easy to update it within new hashing algorithms. If you are planning to add new features to the script, please give me the diff file, so that we can create a more generic tool able to detect as many different hashing algorithms as possible.

[TABLE=class: tr-caption-container, align: center]

[TR]

[TD=align: center]Screen+Shot+2013-06-24+at+8.33.11+AM.png[/TD]

[/TR]

[TR]

[TD=class: tr-caption, align: center]HashFinder.py (click to enlarge)[/TD]

[/TR]

[/TABLE]

The script is quite modular and easy to update. What you need to to is to add your new hashing function within its own identifier into the "algorithms" array (lets see the following image).

[TABLE=class: tr-caption-container, align: center]

[TR]

[TD=align: center]Screen+Shot+2013-06-24+at+12.23.31+PM.png[/TD]

[/TR]

[TR]

[TD=class: tr-caption, align: center]Algorithms array list: easy to expand (click to enlarge)[/TD]

[/TR]

[/TABLE]

After having filled up the "algorithms" array, you need to add the new function which finds out if the string you are processing might be generated (or not) from the hash algorithm you 've just "declared" in the "algorithms" array. The following image shows to you some examples already implemented.

[TABLE=class: tr-caption-container, align: center]

[TR]

[TD=align: center]Screen+Shot+2013-06-24+at+12.27.25+PM.png[/TD]

[/TR]

[TR]

[TD=class: tr-caption, align: center]Function that perform the detection (click to enlarge)[/TD]

[/TR]

[/TABLE]

Finally, in a very quick'n dirty way you want to process the input string by adding the generated function to the main flow.

[TABLE=class: tr-caption-container, align: center]

[TR]

[TD=align: center]Screen+Shot+2013-06-24+at+12.29.29+PM.png[/TD]

[/TR]

[TR]

[TD=class: tr-caption, align: center]Adding functions to control flow (click to enlarge)[/TD]

[/TR]

[/TABLE]

Hope it could be useful to everybody, enjoy your new hash detector tool !

#!/usr/bin/env python

logo=''' #########################################################################

# modified, adapted and encreased for www.marcoramilli.blogspot.com #

#########################################################################'''

algorithms={"102020":"ADLER-32", "102040":"CRC-32", "102060":"CRC-32B", "101020":"CRC-16", "101040":"CRC-16-CCITT", "104020":"DES(Unix)", "101060":"FCS-16", "103040":"GHash-32-3", "103020":"GHash-32-5", "115060":"GOST R 34.11-94", "109100":"Haval-160", "109200":"Haval-160(HMAC)", "110040":"Haval-192", "110080":"Haval-192(HMAC)", "114040":"Haval-224", "114080":"Haval-224(HMAC)", "115040":"Haval-256", "115140":"Haval-256(HMAC)", "107080":"Lineage II C4", "106025":"Domain Cached Credentials - MD4(MD4(($pass)).(strtolower($username)))", "102080":"XOR-32", "105060":"MD5(Half)", "105040":"MD5(Middle)", "105020":"MySQL", "107040":"MD5(phpBB3)", "107060":"MD5(Unix)", "107020":"MD5(Wordpress)", "108020":"MD5(APR)", "106160":"Haval-128", "106165":"Haval-128(HMAC)", "106060":"MD2", "106120":"MD2(HMAC)", "106040":"MD4", "106100":"MD4(HMAC)", "106020":"MD5", "106080":"MD5(HMAC)", "106140":"MD5(HMAC(Wordpress))", "106029":"NTLM", "106027":"RAdmin v2.x", "106180":"RipeMD-128", "106185":"RipeMD-128(HMAC)", "106200":"SNEFRU-128", "106205":"SNEFRU-128(HMAC)", "106220":"Tiger-128", "106225":"Tiger-128(HMAC)", "106240":"md5($pass.$salt)", "106260":"md5($salt.'-'.md5($pass))", "106280":"md5($salt.$pass)", "106300":"md5($salt.$pass.$salt)", "106320":"md5($salt.$pass.$username)", "106340":"md5($salt.md5($pass))", "106360":"md5($salt.md5($pass).$salt)", "106380":"md5($salt.md5($pass.$salt))", "106400":"md5($salt.md5($salt.$pass))", "106420":"md5($salt.md5(md5($pass).$salt))", "106440":"md5($username.0.$pass)", "106460":"md5($username.LF.$pass)", "106480":"md5($username.md5($pass).$salt)", "106500":"md5(md5($pass))", "106520":"md5(md5($pass).$salt)", "106540":"md5(md5($pass).md5($salt))", "106560":"md5(md5($salt).$pass)", "106580":"md5(md5($salt).md5($pass))", "106600":"md5(md5($username.$pass).$salt)", "106620":"md5(md5(md5($pass)))", "106640":"md5(md5(md5(md5($pass))))", "106660":"md5(md5(md5(md5(md5($pass)))))", "106680":"md5(sha1($pass))", "106700":"md5(sha1(md5($pass)))", "106720":"md5(sha1(md5(sha1($pass))))", "106740":"md5(strtoupper(md5($pass)))", "109040":"MySQL5 - SHA-1(SHA-1($pass))", "109060":"MySQL 160bit - SHA-1(SHA-1($pass))", "109180":"RipeMD-160(HMAC)", "109120":"RipeMD-160", "109020":"SHA-1", "109140":"SHA-1(HMAC)", "109220":"SHA-1(MaNGOS)", "109240":"SHA-1(MaNGOS2)", "109080":"Tiger-160", "109160":"Tiger-160(HMAC)", "109260":"sha1($pass.$salt)", "109280":"sha1($salt.$pass)", "109300":"sha1($salt.md5($pass))", "109320":"sha1($salt.md5($pass).$salt)", "109340":"sha1($salt.sha1($pass))", "109360":"sha1($salt.sha1($salt.sha1($pass)))", "109380":"sha1($username.$pass)", "109400":"sha1($username.$pass.$salt)", "1094202":"sha1(md5($pass))", "109440":"sha1(md5($pass).$salt)", "109460":"sha1(md5(sha1($pass)))", "109480":"sha1(sha1($pass))", "109500":"sha1(sha1($pass).$salt)", "109520":"sha1(sha1($pass).substr($pass,0,3))", "109540":"sha1(sha1($salt.$pass))", "109560":"sha1(sha1(sha1($pass)))", "109580":"sha1(strtolower($username).$pass)", "110020":"Tiger-192", "110060":"Tiger-192(HMAC)", "112020":"md5($pass.$salt) - Joomla", "113020":"SHA-1(Django)", "114020":"SHA-224", "114060":"SHA-224(HMAC)", "115080":"RipeMD-256", "115160":"RipeMD-256(HMAC)", "115100":"SNEFRU-256", "115180":"SNEFRU-256(HMAC)", "115200":"SHA-256(md5($pass))", "115220":"SHA-256(sha1($pass))", "115020":"SHA-256", "115120":"SHA-256(HMAC)", "116020":"md5($pass.$salt) - Joomla", "116040":"SAM - (LM_hash:NT_hash)", "117020":"SHA-256(Django)", "118020":"RipeMD-320", "118040":"RipeMD-320(HMAC)", "119020":"SHA-384", "119040":"SHA-384(HMAC)", "120020":"SHA-256", "121020":"SHA-384(Django)", "122020":"SHA-512", "122060":"SHA-512(HMAC)", "122040":"Whirlpool", "122080":"Whirlpool(HMAC)"}

# hash.islower() minusculas

# hash.isdigit() numerico

# hash.isalpha() letras

# hash.isalnum() alfanumerico

def CRC16():

hs='4607'

if len(hash)==len(hs) and hash.isalpha()==False and hash.isalnum()==True:

jerar.append("101020")

def CRC16CCITT():

hs='3d08'

if len(hash)==len(hs) and hash.isdigit()==False and hash.isalpha()==False and hash.isalnum()==True:

jerar.append("101040")

def FCS16():

hs='0e5b'

if len(hash)==len(hs) and hash.isdigit()==False and hash.isalpha()==False and hash.isalnum()==True:

jerar.append("101060")

def CRC32():

hs='b33fd057'

if len(hash)==len(hs) and hash.isdigit()==False and hash.isalpha()==False and hash.isalnum()==True:

jerar.append("102040")

def ADLER32():

hs='0607cb42'

if len(hash)==len(hs) and hash.isdigit()==False and hash.isalpha()==False and hash.isalnum()==True:

jerar.append("102020")

def CRC32B():

hs='b764a0d9'

if len(hash)==len(hs) and hash.isdigit()==False and hash.isalpha()==False and hash.isalnum()==True:

jerar.append("102060")

def XOR32():

hs='0000003f'

if len(hash)==len(hs) and hash.isdigit()==False and hash.isalpha()==False and hash.isalnum()==True:

jerar.append("102080")

def GHash323():

hs='80000000'

if len(hash)==len(hs) and hash.isdigit()==True and hash.isalpha()==False and hash.isalnum()==True:

jerar.append("103040")

def GHash325():

hs='85318985'

if len(hash)==len(hs) and hash.isdigit()==True and hash.isalpha()==False and hash.isalnum()==True:

jerar.append("103020")

def DESUnix():

hs='ZiY8YtDKXJwYQ'

if len(hash)==len(hs) and hash.isdigit()==False and hash.isalpha()==False:

jerar.append("104020")

def MD5Half():

hs='ae11fd697ec92c7c'

if len(hash)==len(hs) and hash.isdigit()==False and hash.isalpha()==False and hash.isalnum()==True:

jerar.append("105060")

def MD5Middle():

hs='7ec92c7c98de3fac'

if len(hash)==len(hs) and hash.isdigit()==False and hash.isalpha()==False and hash.isalnum()==True:

jerar.append("105040")

def MySQL():

hs='63cea4673fd25f46'

if len(hash)==len(hs) and hash.isdigit()==False and hash.isalpha()==False and hash.isalnum()==True:

jerar.append("105020")

def DomainCachedCredentials():

hs='f42005ec1afe77967cbc83dce1b4d714'

if len(hash)==len(hs) and hash.isdigit()==False and hash.isalpha()==False and hash.isalnum()==True:

jerar.append("106025")

def Haval128():

hs='d6e3ec49aa0f138a619f27609022df10'

if len(hash)==len(hs) and hash.isdigit()==False and hash.isalpha()==False and hash.isalnum()==True:

jerar.append("106160")

def Haval128HMAC():

hs='3ce8b0ffd75bc240fc7d967729cd6637'

if len(hash)==len(hs) and hash.isdigit()==False and hash.isalpha()==False and hash.isalnum()==True:

jerar.append("106165")

def MD2():

hs='08bbef4754d98806c373f2cd7d9a43c4'

if len(hash)==len(hs) and hash.isdigit()==False and hash.isalpha()==False and hash.isalnum()==True:

jerar.append("106060")

def MD2HMAC():

hs='4b61b72ead2b0eb0fa3b8a56556a6dca'

if len(hash)==len(hs) and hash.isdigit()==False and hash.isalpha()==False and hash.isalnum()==True:

jerar.append("106120")

def MD4():

hs='a2acde400e61410e79dacbdfc3413151'

if len(hash)==len(hs) and hash.isdigit()==False and hash.isalpha()==False and hash.isalnum()==True:

jerar.append("106040")

def MD4HMAC():

hs='6be20b66f2211fe937294c1c95d1cd4f'

if len(hash)==len(hs) and hash.isdigit()==False and hash.isalpha()==False and hash.isalnum()==True:

jerar.append("106100")

def MD5():

hs='ae11fd697ec92c7c98de3fac23aba525'

if len(hash)==len(hs) and hash.isdigit()==False and hash.isalpha()==False and hash.isalnum()==True:

jerar.append("106020")

def MD5HMAC():

hs='d57e43d2c7e397bf788f66541d6fdef9'

if len(hash)==len(hs) and hash.isdigit()==False and hash.isalpha()==False and hash.isalnum()==True:

jerar.append("106080")

def MD5HMACWordpress():

hs='3f47886719268dfa83468630948228f6'

if len(hash)==len(hs) and hash.isdigit()==False and hash.isalpha()==False and hash.isalnum()==True:

jerar.append("106140")

def NTLM():

hs='cc348bace876ea440a28ddaeb9fd3550'

if len(hash)==len(hs) and hash.isdigit()==False and hash.isalpha()==False and hash.isalnum()==True:

jerar.append("106029")

def RAdminv2x():

hs='baea31c728cbf0cd548476aa687add4b'

if len(hash)==len(hs) and hash.isdigit()==False and hash.isalpha()==False and hash.isalnum()==True:

jerar.append("106027")

def RipeMD128():

hs='4985351cd74aff0abc5a75a0c8a54115'

if len(hash)==len(hs) and hash.isdigit()==False and hash.isalpha()==False and hash.isalnum()==True:

jerar.append("106180")

def RipeMD128HMAC():

hs='ae1995b931cf4cbcf1ac6fbf1a83d1d3'

if len(hash)==len(hs) and hash.isdigit()==False and hash.isalpha()==False and hash.isalnum()==True:

jerar.append("106185")

def SNEFRU128():

hs='4fb58702b617ac4f7ca87ec77b93da8a'

if len(hash)==len(hs) and hash.isdigit()==False and hash.isalpha()==False and hash.isalnum()==True:

jerar.append("106200")

def SNEFRU128HMAC():

hs='59b2b9dcc7a9a7d089cecf1b83520350'

if len(hash)==len(hs) and hash.isdigit()==False and hash.isalpha()==False and hash.isalnum()==True:

jerar.append("106205")

def Tiger128():

hs='c086184486ec6388ff81ec9f23528727'

if len(hash)==len(hs) and hash.isdigit()==False and hash.isalpha()==False and hash.isalnum()==True:

jerar.append("106220")

def Tiger128HMAC():

hs='c87032009e7c4b2ea27eb6f99723454b'

if len(hash)==len(hs) and hash.isdigit()==False and hash.isalpha()==False and hash.isalnum()==True:

jerar.append("106225")

def md5passsalt():

hs='5634cc3b922578434d6e9342ff5913f7'

if len(hash)==len(hs) and hash.isdigit()==False and hash.isalpha()==False and hash.isalnum()==True:

jerar.append("106240")

def md5saltmd5pass():

hs='245c5763b95ba42d4b02d44bbcd916f1'

if len(hash)==len(hs) and hash.isdigit()==False and hash.isalpha()==False and hash.isalnum()==True:

jerar.append("106260")

def md5saltpass():

hs='22cc5ce1a1ef747cd3fa06106c148dfa'

if len(hash)==len(hs) and hash.isdigit()==False and hash.isalpha()==False and hash.isalnum()==True:

jerar.append("106280")

def md5saltpasssalt():

hs='469e9cdcaff745460595a7a386c4db0c'

if len(hash)==len(hs) and hash.isdigit()==False and hash.isalpha()==False and hash.isalnum()==True:

jerar.append("106300")

def md5saltpassusername():

hs='9ae20f88189f6e3a62711608ddb6f5fd'

if len(hash)==len(hs) and hash.isdigit()==False and hash.isalpha()==False and hash.isalnum()==True:

jerar.append("106320")

def md5saltmd5pass():

hs='aca2a052962b2564027ee62933d2382f'

if len(hash)==len(hs) and hash.isdigit()==False and hash.isalpha()==False and hash.isalnum()==True:

jerar.append("106340")

def md5saltmd5passsalt():

hs='de0237dc03a8efdf6552fbe7788b2fdd'

if len(hash)==len(hs) and hash.isdigit()==False and hash.isalpha()==False and hash.isalnum()==True:

jerar.append("106360")

def md5saltmd5passsalt():

hs='5b8b12ca69d3e7b2a3e2308e7bef3e6f'

if len(hash)==len(hs) and hash.isdigit()==False and hash.isalpha()==False and hash.isalnum()==True:

jerar.append("106380")

def md5saltmd5saltpass():

hs='d8f3b3f004d387086aae24326b575b23'

if len(hash)==len(hs) and hash.isdigit()==False and hash.isalpha()==False and hash.isalnum()==True:

jerar.append("106400")

def md5saltmd5md5passsalt():

hs='81f181454e23319779b03d74d062b1a2'

if len(hash)==len(hs) and hash.isdigit()==False and hash.isalpha()==False and hash.isalnum()==True:

jerar.append("106420")

def md5username0pass():

hs='e44a60f8f2106492ae16581c91edb3ba'

if len(hash)==len(hs) and hash.isdigit()==False and hash.isalpha()==False and hash.isalnum()==True:

jerar.append("106440")

def md5usernameLFpass():

hs='654741780db415732eaee12b1b909119'

if len(hash)==len(hs) and hash.isdigit()==False and hash.isalpha()==False and hash.isalnum()==True:

jerar.append("106460")

def md5usernamemd5passsalt():

hs='954ac5505fd1843bbb97d1b2cda0b98f'

if len(hash)==len(hs) and hash.isdigit()==False and hash.isalpha()==False and hash.isalnum()==True:

jerar.append("106480")

def md5md5pass():

hs='a96103d267d024583d5565436e52dfb3'

if len(hash)==len(hs) and hash.isdigit()==False and hash.isalpha()==False and hash.isalnum()==True:

jerar.append("106500")

def md5md5passsalt():

hs='5848c73c2482d3c2c7b6af134ed8dd89'

if len(hash)==len(hs) and hash.isdigit()==False and hash.isalpha()==False and hash.isalnum()==True:

jerar.append("106520")

def md5md5passmd5salt():

hs='8dc71ef37197b2edba02d48c30217b32'

if len(hash)==len(hs) and hash.isdigit()==False and hash.isalpha()==False and hash.isalnum()==True:

jerar.append("106540")

def md5md5saltpass():

hs='9032fabd905e273b9ceb1e124631bd67'

if len(hash)==len(hs) and hash.isdigit()==False and hash.isalpha()==False and hash.isalnum()==True:

jerar.append("106560")

def md5md5saltmd5pass():

hs='8966f37dbb4aca377a71a9d3d09cd1ac'

if len(hash)==len(hs) and hash.isdigit()==False and hash.isalpha()==False and hash.isalnum()==True:

jerar.append("106580")

def md5md5usernamepasssalt():

hs='4319a3befce729b34c3105dbc29d0c40'

if len(hash)==len(hs) and hash.isdigit()==False and hash.isalpha()==False and hash.isalnum()==True:

jerar.append("106600")

def md5md5md5pass():

hs='ea086739755920e732d0f4d8c1b6ad8d'

if len(hash)==len(hs) and hash.isdigit()==False and hash.isalpha()==False and hash.isalnum()==True:

jerar.append("106620")

def md5md5md5md5pass():

hs='02528c1f2ed8ac7d83fe76f3cf1c133f'

if len(hash)==len(hs) and hash.isdigit()==False and hash.isalpha()==False and hash.isalnum()==True:

jerar.append("106640")

def md5md5md5md5md5pass():

hs='4548d2c062933dff53928fd4ae427fc0'

if len(hash)==len(hs) and hash.isdigit()==False and hash.isalpha()==False and hash.isalnum()==True:

jerar.append("106660")

def md5sha1pass():

hs='cb4ebaaedfd536d965c452d9569a6b1e'

if len(hash)==len(hs) and hash.isdigit()==False and hash.isalpha()==False and hash.isalnum()==True:

jerar.append("106680")

def md5sha1md5pass():

hs='099b8a59795e07c334a696a10c0ebce0'

if len(hash)==len(hs) and hash.isdigit()==False and hash.isalpha()==False and hash.isalnum()==True:

jerar.append("106700")

def md5sha1md5sha1pass():

hs='06e4af76833da7cc138d90602ef80070'

if len(hash)==len(hs) and hash.isdigit()==False and hash.isalpha()==False and hash.isalnum()==True:

jerar.append("106720")

def md5strtouppermd5pass():

hs='519de146f1a658ab5e5e2aa9b7d2eec8'

if len(hash)==len(hs) and hash.isdigit()==False and hash.isalpha()==False and hash.isalnum()==True:

jerar.append("106740")

def LineageIIC4():

hs='0x49a57f66bd3d5ba6abda5579c264a0e4'

if len(hash)==len(hs) and hash.isdigit()==False and hash.isalpha()==False and hash.isalnum()==True and hash[0:2].find('0x')==0:

jerar.append("107080")

def MD5phpBB3():

hs='$H$9kyOtE8CDqMJ44yfn9PFz2E.L2oVzL1'

if len(hash)==len(hs) and hash.isdigit()==False and hash.isalpha()==False and hash.isalnum()==False and hash[0:3].find('$H$')==0:

jerar.append("107040")

def MD5Unix():

hs='$1$cTuJH0Ju$1J8rI.mJReeMvpKUZbSlY/'

if len(hash)==len(hs) and hash.isdigit()==False and hash.isalpha()==False and hash.isalnum()==False and hash[0:3].find('$1$')==0:

jerar.append("107060")

def MD5Wordpress():

hs='$P$BiTOhOj3ukMgCci2juN0HRbCdDRqeh.'

if len(hash)==len(hs) and hash.isdigit()==False and hash.isalpha()==False and hash.isalnum()==False and hash[0:3].find('$P$')==0:

jerar.append("107020")

def MD5APR():

hs='$apr1$qAUKoKlG$3LuCncByN76eLxZAh/Ldr1'

if len(hash)==len(hs) and hash.isdigit()==False and hash.isalpha()==False and hash[0:4].find('$apr')==0:

jerar.append("108020")

def Haval160():

hs='a106e921284dd69dad06192a4411ec32fce83dbb'

if len(hash)==len(hs) and hash.isdigit()==False and hash.isalpha()==False and hash.isalnum()==True:

jerar.append("109100")

def Haval160HMAC():

hs='29206f83edc1d6c3f680ff11276ec20642881243'

if len(hash)==len(hs) and hash.isdigit()==False and hash.isalpha()==False and hash.isalnum()==True:

jerar.append("109200")

def MySQL5():

hs='9bb2fb57063821c762cc009f7584ddae9da431ff'

if len(hash)==len(hs) and hash.isdigit()==False and hash.isalpha()==False and hash.isalnum()==True:

jerar.append("109040")

def MySQL160bit():

hs='*2470c0c06dee42fd1618bb99005adca2ec9d1e19'

if len(hash)==len(hs) and hash.isdigit()==False and hash.isalpha()==False and hash.isalnum()==False and hash[0:1].find('*')==0:

jerar.append("109060")

def RipeMD160():

hs='dc65552812c66997ea7320ddfb51f5625d74721b'

if len(hash)==len(hs) and hash.isdigit()==False and hash.isalpha()==False and hash.isalnum()==True:

jerar.append("109120")

def RipeMD160HMAC():

hs='ca28af47653b4f21e96c1235984cb50229331359'

if len(hash)==len(hs) and hash.isdigit()==False and hash.isalpha()==False and hash.isalnum()==True:

jerar.append("109180")

def SHA1():

hs='4a1d4dbc1e193ec3ab2e9213876ceb8f4db72333'

if len(hash)==len(hs) and hash.isdigit()==False and hash.isalpha()==False and hash.isalnum()==True:

jerar.append("109020")

def SHA1HMAC():

hs='6f5daac3fee96ba1382a09b1ba326ca73dccf9e7'

if len(hash)==len(hs) and hash.isdigit()==False and hash.isalpha()==False and hash.isalnum()==True:

jerar.append("109140")

def SHA1MaNGOS():

hs='a2c0cdb6d1ebd1b9f85c6e25e0f8732e88f02f96'

if len(hash)==len(hs) and hash.isdigit()==False and hash.isalpha()==False and hash.isalnum()==True:

jerar.append("109220")

def SHA1MaNGOS2():

hs='644a29679136e09d0bd99dfd9e8c5be84108b5fd'

if len(hash)==len(hs) and hash.isdigit()==False and hash.isalpha()==False and hash.isalnum()==True:

jerar.append("109240")

def Tiger160():

hs='c086184486ec6388ff81ec9f235287270429b225'

if len(hash)==len(hs) and hash.isdigit()==False and hash.isalpha()==False and hash.isalnum()==True:

jerar.append("109080")

def Tiger160HMAC():

hs='6603161719da5e56e1866e4f61f79496334e6a10'

if len(hash)==len(hs) and hash.isdigit()==False and hash.isalpha()==False and hash.isalnum()==True:

jerar.append("109160")

def sha1passsalt():

hs='f006a1863663c21c541c8d600355abfeeaadb5e4'

if len(hash)==len(hs) and hash.isdigit()==False and hash.isalpha()==False and hash.isalnum()==True:

jerar.append("109260")

def sha1saltpass():

hs='299c3d65a0dcab1fc38421783d64d0ecf4113448'

if len(hash)==len(hs) and hash.isdigit()==False and hash.isalpha()==False and hash.isalnum()==True:

jerar.append("109280")

def sha1saltmd5pass():

hs='860465ede0625deebb4fbbedcb0db9dc65faec30'

if len(hash)==len(hs) and hash.isdigit()==False and hash.isalpha()==False and hash.isalnum()==True:

jerar.append("109300")

def sha1saltmd5passsalt():

hs='6716d047c98c25a9c2cc54ee6134c73e6315a0ff'

if len(hash)==len(hs) and hash.isdigit()==False and hash.isalpha()==False and hash.isalnum()==True:

jerar.append("109320")

def sha1saltsha1pass():

hs='58714327f9407097c64032a2fd5bff3a260cb85f'

if len(hash)==len(hs) and hash.isdigit()==False and hash.isalpha()==False and hash.isalnum()==True:

jerar.append("109340")

def sha1saltsha1saltsha1pass():

hs='cc600a2903130c945aa178396910135cc7f93c63'

if len(hash)==len(hs) and hash.isdigit()==False and hash.isalpha()==False and hash.isalnum()==True:

jerar.append("109360")

def sha1usernamepass():

hs='3de3d8093bf04b8eb5f595bc2da3f37358522c9f'

if len(hash)==len(hs) and hash.isdigit()==False and hash.isalpha()==False and hash.isalnum()==True:

jerar.append("109380")

def sha1usernamepasssalt():

hs='00025111b3c4d0ac1635558ce2393f77e94770c5'

if len(hash)==len(hs) and hash.isdigit()==False and hash.isalpha()==False and hash.isalnum()==True:

jerar.append("109400")

def sha1md5pass():

hs='fa960056c0dea57de94776d3759fb555a15cae87'

if len(hash)==len(hs) and hash.isdigit()==False and hash.isalpha()==False and hash.isalnum()==True:

jerar.append("1094202")

def sha1md5passsalt():

hs='1dad2b71432d83312e61d25aeb627593295bcc9a'

if len(hash)==len(hs) and hash.isdigit()==False and hash.isalpha()==False and hash.isalnum()==True:

jerar.append("109440")

def sha1md5sha1pass():

hs='8bceaeed74c17571c15cdb9494e992db3c263695'

if len(hash)==len(hs) and hash.isdigit()==False and hash.isalpha()==False and hash.isalnum()==True:

jerar.append("109460")

def sha1sha1pass():

hs='3109b810188fcde0900f9907d2ebcaa10277d10e'

if len(hash)==len(hs) and hash.isdigit()==False and hash.isalpha()==False and hash.isalnum()==True:

jerar.append("109480")

def sha1sha1passsalt():

hs='780d43fa11693b61875321b6b54905ee488d7760'

if len(hash)==len(hs) and hash.isdigit()==False and hash.isalpha()==False and hash.isalnum()==True:

jerar.append("109500")

def sha1sha1passsubstrpass03():

hs='5ed6bc680b59c580db4a38df307bd4621759324e'

if len(hash)==len(hs) and hash.isdigit()==False and hash.isalpha()==False and hash.isalnum()==True:

jerar.append("109520")

def sha1sha1saltpass():

hs='70506bac605485b4143ca114cbd4a3580d76a413'

if len(hash)==len(hs) and hash.isdigit()==False and hash.isalpha()==False and hash.isalnum()==True:

jerar.append("109540")

def sha1sha1sha1pass():

hs='3328ee2a3b4bf41805bd6aab8e894a992fa91549'

if len(hash)==len(hs) and hash.isdigit()==False and hash.isalpha()==False and hash.isalnum()==True:

jerar.append("109560")

def sha1strtolowerusernamepass():

hs='79f575543061e158c2da3799f999eb7c95261f07'

if len(hash)==len(hs) and hash.isdigit()==False and hash.isalpha()==False and hash.isalnum()==True:

jerar.append("109580")

def Haval192():

hs='cd3a90a3bebd3fa6b6797eba5dab8441f16a7dfa96c6e641'

if len(hash)==len(hs) and hash.isdigit()==False and hash.isalpha()==False and hash.isalnum()==True:

jerar.append("110040")

def Haval192HMAC():

hs='39b4d8ecf70534e2fd86bb04a877d01dbf9387e640366029'

if len(hash)==len(hs) and hash.isdigit()==False and hash.isalpha()==False and hash.isalnum()==True:

jerar.append("110080")

def Tiger192():

hs='c086184486ec6388ff81ec9f235287270429b2253b248a70'

if len(hash)==len(hs) and hash.isdigit()==False and hash.isalpha()==False and hash.isalnum()==True:

jerar.append("110020")

def Tiger192HMAC():

hs='8e914bb64353d4d29ab680e693272d0bd38023afa3943a41'

if len(hash)==len(hs) and hash.isdigit()==False and hash.isalpha()==False and hash.isalnum()==True:

jerar.append("110060")

def MD5passsaltjoomla1():

hs='35d1c0d69a2df62be2df13b087343dc9:BeKMviAfcXeTPTlX'

if len(hash)==len(hs) and hash.isdigit()==False and hash.isalpha()==False and hash.isalnum()==False and hash[32:33].find(':')==0:

jerar.append("112020")

def SHA1Django():

hs='sha1$Zion3R$299c3d65a0dcab1fc38421783d64d0ecf4113448'

if len(hash)==len(hs) and hash.isdigit()==False and hash.isalpha()==False and hash.isalnum()==False and hash[0:5].find('sha1$')==0:

jerar.append("113020")

def Haval224():

hs='f65d3c0ef6c56f4c74ea884815414c24dbf0195635b550f47eac651a'

if len(hash)==len(hs) and hash.isdigit()==False and hash.isalpha()==False and hash.isalnum()==True:

jerar.append("114040")

def Haval224HMAC():

hs='f10de2518a9f7aed5cf09b455112114d18487f0c894e349c3c76a681'

if len(hash)==len(hs) and hash.isdigit()==False and hash.isalpha()==False and hash.isalnum()==True:

jerar.append("114080")

def SHA224():

hs='e301f414993d5ec2bd1d780688d37fe41512f8b57f6923d054ef8e59'

if len(hash)==len(hs) and hash.isdigit()==False and hash.isalpha()==False and hash.isalnum()==True:

jerar.append("114020")

def SHA224HMAC():

hs='c15ff86a859892b5e95cdfd50af17d05268824a6c9caaa54e4bf1514'

if len(hash)==len(hs) and hash.isdigit()==False and hash.isalpha()==False and hash.isalnum()==True:

jerar.append("114060")

def SHA256():

hs='2c740d20dab7f14ec30510a11f8fd78b82bc3a711abe8a993acdb323e78e6d5e'

if len(hash)==len(hs) and hash.isdigit()==False and hash.isalpha()==False and hash.isalnum()==True:

jerar.append("115020")

def SHA256HMAC():

hs='d3dd251b7668b8b6c12e639c681e88f2c9b81105ef41caccb25fcde7673a1132'

if len(hash)==len(hs) and hash.isdigit()==False and hash.isalpha()==False and hash.isalnum()==True:

jerar.append("115120")

def Haval256():

hs='7169ecae19a5cd729f6e9574228b8b3c91699175324e6222dec569d4281d4a4a'

if len(hash)==len(hs) and hash.isdigit()==False and hash.isalpha()==False and hash.isalnum()==True:

jerar.append("115040")

def Haval256HMAC():

hs='6aa856a2cfd349fb4ee781749d2d92a1ba2d38866e337a4a1db907654d4d4d7a'

if len(hash)==len(hs) and hash.isdigit()==False and hash.isalpha()==False and hash.isalnum()==True:

jerar.append("115140")

def GOSTR341194():

hs='ab709d384cce5fda0793becd3da0cb6a926c86a8f3460efb471adddee1c63793'

if len(hash)==len(hs) and hash.isdigit()==False and hash.isalpha()==False and hash.isalnum()==True:

jerar.append("115060")

def RipeMD256():

hs='5fcbe06df20ce8ee16e92542e591bdea706fbdc2442aecbf42c223f4461a12af'

if len(hash)==len(hs) and hash.isdigit()==False and hash.isalpha()==False and hash.isalnum()==True:

jerar.append("115080")

def RipeMD256HMAC():

hs='43227322be1b8d743e004c628e0042184f1288f27c13155412f08beeee0e54bf'

if len(hash)==len(hs) and hash.isdigit()==False and hash.isalpha()==False and hash.isalnum()==True:

jerar.append("115160")

def SNEFRU256():

hs='3a654de48e8d6b669258b2d33fe6fb179356083eed6ff67e27c5ebfa4d9732bb'

if len(hash)==len(hs) and hash.isdigit()==False and hash.isalpha()==False and hash.isalnum()==True:

jerar.append("115100")

def SNEFRU256HMAC():

hs='4e9418436e301a488f675c9508a2d518d8f8f99e966136f2dd7e308b194d74f9'

if len(hash)==len(hs) and hash.isdigit()==False and hash.isalpha()==False and hash.isalnum()==True:

jerar.append("115180")

def SHA256md5pass():

hs='b419557099cfa18a86d1d693e2b3b3e979e7a5aba361d9c4ec585a1a70c7bde4'

if len(hash)==len(hs) and hash.isdigit()==False and hash.isalpha()==False and hash.isalnum()==True:

jerar.append("115200")

def SHA256sha1pass():

hs='afbed6e0c79338dbfe0000efe6b8e74e3b7121fe73c383ae22f5b505cb39c886'

if len(hash)==len(hs) and hash.isdigit()==False and hash.isalpha()==False and hash.isalnum()==True:

jerar.append("115220")

def MD5passsaltjoomla2():

hs='fb33e01e4f8787dc8beb93dac4107209:fxJUXVjYRafVauT77Cze8XwFrWaeAYB2'

if len(hash)==len(hs) and hash.isdigit()==False and hash.isalpha()==False and hash.isalnum()==False and hash[32:33].find(':')==0:

jerar.append("116020")

def SAM():

hs='4318B176C3D8E3DEAAD3B435B51404EE:B7C899154197E8A2A33121D76A240AB5'

if len(hash)==len(hs) and hash.isdigit()==False and hash.isalpha()==False and hash.isalnum()==False and hash.islower()==False and hash[32:33].find(':')==0:

jerar.append("116040")

def SHA256Django():

hs='sha256$Zion3R$9e1a08aa28a22dfff722fad7517bae68a55444bb5e2f909d340767cec9acf2c3'

if len(hash)==len(hs) and hash.isdigit()==False and hash.isalpha()==False and hash.isalnum()==False and hash[0:6].find('sha256')==0:

jerar.append("117020")

def RipeMD320():

hs='b4f7c8993a389eac4f421b9b3b2bfb3a241d05949324a8dab1286069a18de69aaf5ecc3c2009d8ef'

if len(hash)==len(hs) and hash.isdigit()==False and hash.isalpha()==False and hash.isalnum()==True:

jerar.append("118020")

def RipeMD320HMAC():

hs='244516688f8ad7dd625836c0d0bfc3a888854f7c0161f01de81351f61e98807dcd55b39ffe5d7a78'

if len(hash)==len(hs) and hash.isdigit()==False and hash.isalpha()==False and hash.isalnum()==True:

jerar.append("118040")

def SHA384():

hs='3b21c44f8d830fa55ee9328a7713c6aad548fe6d7a4a438723a0da67c48c485220081a2fbc3e8c17fd9bd65f8d4b4e6b'

if len(hash)==len(hs) and hash.isdigit()==False and hash.isalpha()==False and hash.isalnum()==True:

jerar.append("119020")

def SHA384HMAC():

hs='bef0dd791e814d28b4115eb6924a10beb53da47d463171fe8e63f68207521a4171219bb91d0580bca37b0f96fddeeb8b'

if len(hash)==len(hs) and hash.isdigit()==False and hash.isalpha()==False and hash.isalnum()==True:

jerar.append("119040")

def SHA256s():

hs='$6$g4TpUQzk$OmsZBJFwvy6MwZckPvVYfDnwsgktm2CckOlNJGy9HNwHSuHFvywGIuwkJ6Bjn3kKbB6zoyEjIYNMpHWBNxJ6g.'

if len(hash)==len(hs) and hash.isdigit()==False and hash.isalpha()==False and hash.isalnum()==False and hash[0:3].find('$6$')==0:

jerar.append("120020")

def SHA384Django():

hs='sha384$Zion3R$88cfd5bc332a4af9f09aa33a1593f24eddc01de00b84395765193c3887f4deac46dc723ac14ddeb4d3a9b958816b7bba'

if len(hash)==len(hs) and hash.isdigit()==False and hash.isalpha()==False and hash.isalnum()==False and hash[0:6].find('sha384')==0:

print " [+] SHA-384(Django)"

jerar.append("121020")

def SHA512():

hs='ea8e6f0935b34e2e6573b89c0856c81b831ef2cadfdee9f44eb9aa0955155ba5e8dd97f85c73f030666846773c91404fb0e12fb38936c56f8cf38a33ac89a24e'

if len(hash)==len(hs) and hash.isdigit()==False and hash.isalpha()==False and hash.isalnum()==True:

jerar.append("122020")

def SHA512HMAC():

hs='dd0ada8693250b31d9f44f3ec2d4a106003a6ce67eaa92e384b356d1b4ef6d66a818d47c1f3a2c6e8a9a9b9bdbd28d485e06161ccd0f528c8bbb5541c3fef36f'

if len(hash)==len(hs) and hash.isdigit()==False and hash.isalpha()==False and hash.isalnum()==True:

jerar.append("122060")

def Whirlpool():

hs='76df96157e632410998ad7f823d82930f79a96578acc8ac5ce1bfc34346cf64b4610aefa8a549da3f0c1da36dad314927cebf8ca6f3fcd0649d363c5a370dddb'

if len(hash)==len(hs) and hash.isdigit()==False and hash.isalpha()==False and hash.isalnum()==True:

jerar.append("122040")

def WhirlpoolHMAC():

hs='77996016cf6111e97d6ad31484bab1bf7de7b7ee64aebbc243e650a75a2f9256cef104e504d3cf29405888fca5a231fcac85d36cd614b1d52fce850b53ddf7f9'

if len(hash)==len(hs) and hash.isdigit()==False and hash.isalpha()==False and hash.isalnum()==True:

jerar.append("122080")

print logo

while True:

jerar=[]

print """

-------------------------------------------------------------------------"""

hash = raw_input(" HASH: ")

ADLER32(); CRC16(); CRC16CCITT(); CRC32(); CRC32B(); DESUnix(); DomainCachedCredentials(); FCS16(); GHash323(); GHash325(); GOSTR341194(); Haval128(); Haval128HMAC(); Haval160(); Haval160HMAC(); Haval192(); Haval192HMAC(); Haval224(); Haval224HMAC(); Haval256(); Haval256HMAC(); LineageIIC4(); MD2(); MD2HMAC(); MD4(); MD4HMAC(); MD5(); MD5APR(); MD5HMAC(); MD5HMACWordpress(); MD5phpBB3(); MD5Unix(); MD5Wordpress(); MD5Half(); MD5Middle(); MD5passsaltjoomla1(); MD5passsaltjoomla2(); MySQL(); MySQL5(); MySQL160bit(); NTLM(); RAdminv2x(); RipeMD128(); RipeMD128HMAC(); RipeMD160(); RipeMD160HMAC(); RipeMD256(); RipeMD256HMAC(); RipeMD320(); RipeMD320HMAC(); SAM(); SHA1(); SHA1Django(); SHA1HMAC(); SHA1MaNGOS(); SHA1MaNGOS2(); SHA224(); SHA224HMAC(); SHA256(); SHA256s(); SHA256Django(); SHA256HMAC(); SHA256md5pass(); SHA256sha1pass(); SHA384(); SHA384Django(); SHA384HMAC(); SHA512(); SHA512HMAC(); SNEFRU128(); SNEFRU128HMAC(); SNEFRU256(); SNEFRU256HMAC(); Tiger128(); Tiger128HMAC(); Tiger160(); Tiger160HMAC(); Tiger192(); Tiger192HMAC(); Whirlpool(); WhirlpoolHMAC(); XOR32(); md5passsalt(); md5saltmd5pass(); md5saltpass(); md5saltpasssalt(); md5saltpassusername(); md5saltmd5pass(); md5saltmd5passsalt(); md5saltmd5passsalt(); md5saltmd5saltpass(); md5saltmd5md5passsalt(); md5username0pass(); md5usernameLFpass(); md5usernamemd5passsalt(); md5md5pass(); md5md5passsalt(); md5md5passmd5salt(); md5md5saltpass(); md5md5saltmd5pass(); md5md5usernamepasssalt(); md5md5md5pass(); md5md5md5md5pass(); md5md5md5md5md5pass(); md5sha1pass(); md5sha1md5pass(); md5sha1md5sha1pass(); md5strtouppermd5pass(); sha1passsalt(); sha1saltpass(); sha1saltmd5pass(); sha1saltmd5passsalt(); sha1saltsha1pass(); sha1saltsha1saltsha1pass(); sha1usernamepass(); sha1usernamepasssalt(); sha1md5pass(); sha1md5passsalt(); sha1md5sha1pass(); sha1sha1pass(); sha1sha1passsalt(); sha1sha1passsubstrpass03(); sha1sha1saltpass(); sha1sha1sha1pass(); sha1strtolowerusernamepass()

if len(jerar)==0:

print ""

print " Not Found."

elif len(jerar)>2:

jerar.sort()

print ""

print "Possible Hashs:"

print "[+] ",algorithms[jerar[0]]

print "[+] ",algorithms[jerar[1]]

print ""

print "Least Possible Hashs:"

for a in range(int(len(jerar))-2):

print "[+] ",algorithms[jerar[a+2]]

else:

jerar.sort()

print ""

print "Possible Hashs:"

for a in range(len(jerar)):

print "[+] ",algorithms[jerar[a]]

Posted by Marco Ramilli at 3:39 AM

Sursa: Marco Ramilli's Blog: Hash Detector Tool

  • Downvote 1

Join the conversation

You can post now and register later. If you have an account, sign in now to post with your account.

Guest
Reply to this topic...

×   Pasted as rich text.   Paste as plain text instead

  Only 75 emoji are allowed.

×   Your link has been automatically embedded.   Display as a link instead

×   Your previous content has been restored.   Clear editor

×   You cannot paste images directly. Upload or insert images from URL.

×
Go to topic listing
×
×
  • Create New...