Herramienta para descifrar hashes SHA modificados mediante ataque de diccionario.

Herramienta para descifrar contraseñas, que intenta encontrar la contraseña original a partir de un hash y una salt dados. Utiliza una lista de palabras para probar cada contraseña y aplicar el hash utilizando el algoritmo de hash especificado (SHA1 en este caso). Si el hash de una contraseña intentada coincide con el hash dado, la contraseña se considera encontrada y se muestra.

---

Es posible descifrar estos hashes, utilizando openssl y john o hashcat.

It is possible to crack theese hashes by using openssl and john or hashcat.

• Creación del hash sha1 modificado / modified sha1 hash creation

printf "%s%s" d monkeybizness | openssl dgst -sha1 -binary | base64 -w 0 | tr '+/' '-/' | tr '/' '_'

---

Tool for cracking modified SHA hashes by dictionary attack.

Password cracking tool that attempts to find the original password from a given hash and salt. It uses a wordlist to try each password and hash it using the specified hash algorithm (SHA1 in this case). If the hash of a tried password matches the given hash, the password is considered found and displayed.

---

Require:

• TQDM Librarie.

pip install tqdm

---

Usage:

• straight:

python3 /full/file/path/to/sha2text.py <salt> <hash> <wordlist>

• By alias:

# into ~/.zshrc create a new alias.
alias sha2text='python3 /full/file/path/to/sha2text.py'

sha2text <salt> <hash> <wordlist>

---

Example:

python3 sha2text.py 'd' '$SHA1$d$uP0_QaVBpDWFeo8-dRzDqRwXQ2I=' '/usr/share/wordlists/rockyou.txt'

---

Output:

└─$ sha2text 'd' '$SHA1$d$uP0_QaVBpDWFeo8-dRzDqRwXQ2I=' '/usr/share/wordlists/rockyou.txt'
Processing:  10%|██████████████████████▎                                                                                                                                                                     | 1478437/14344392 [00:04<00:34, 369078.27it/s]

 [+] Pwnd !!! $SHA1$d$uP0_QaVBpDWFeo8-dRzDqRwXQ2I=::::monkeybizness