hashpals / search-that-hash

🔎Searches Hash APIs to crack your hash quickly🔎 If hash is not found, automatically pipes into HashCat⚡

➡️ Discord ⬅️

The Fastest Hash Cracking System
pip3 install search-that-hash && sth

🤔 Overview

Tired of going to every website to crack your hash? Search-That-Hash automates this process in less than 2 seconds. Search-That-Hash searches the most popular hash cracking sites and automatically inputs your hash(s) for cracking

🔍 Features

• ⌨️ Auto-Type Identification - No need to know the hash type, Search-That-Hash uses Name-That-Hash to get accurate results on the type of the hash.
• 📵 Offline Mode - Not connected to the internet? No worries, Search-That-Hash will automatically run Hashcat for you.
• 💨 Fast - We're all busy people and that's why we've dedicated time to make Search-That-Hash as fast as possible.
• 🦾 JSON API - As well as JSON output for CLI we also offer an API.
• ♿ Accessible - We are 100% Accessible.
• 🎫 Extensible - Adding sites to Search-That-Hash is as easy as printing "hello world" !
• 🌈 Beautiful - The colours were hand-selected to be as gnarly and accessible as possible .
• ☮️ Ethical - We search hashes ethically and legally.

📴 Offline Mode

Couldn't find it in any API? 😢 STH automatically pipes your input into Hashcat 🥳

Make sure to specify a wordlist if you want STH to use HashCat with -w /path/to/wordlist. If you are on Windows you must specify the path to your HashCat binary and folder in config.json 🙂

🔨 Installation

Install Search-That-Hash as fast as you can read this README. No, seriously -- it's that easy 😎

pip3 install search-that-hash

or:

pip install search-that-hash

then:

sth

To run.

Note: We can't guarantee all of the APIs provide perfect privacy due to being closed source. If you need to crack sensitive, personal information please use the offline mode or Hashcat directly.

👪 Project Family

Like Search-That-Hash? We have 2 other projects you'll love!

Project Family
Name-That-Hash	Ciphey
Instantly identify what type of hash it is. With support for over 300 hashes, descriptions and popularity ratings!	Automatically decrypt ciphers, decode encodings, crack hashes, and more. Not sure what the text is? Use this!

🎥 Demos

Greppable mode

✨ Google Colab

We now have support for running STH on google colab for faster hashcat cracking, no need to worry about running hashcat on your machine anymore! Many thanks to Drago for making this :-)

https://github.com/vaishnavpardhi/colabsth/

📖 Documentation

Want to know how everything works?

Or maybe want to use the API!

Thats why we have documentation!

📚 Documentation	🐦 My Twitter (@ me for questions)	🎳 Discord
Wiki	JaySec	Discord

✍️ Contributing

We would love any contributions to search-that-hash, thats why we've made it as simple and as easy as we can to contribute! Simply follow the docs on "Contributing" 😇

❤️ Final thanks

Thank you so much to Bee who pretty much mentored me the whole way through this process and never failed to provide help and great resources for me to learn, carry on the great work! :)

Thank you also to Fawaz for the amazing website! 🚧

......And to Jabba & Skeletal for helping out with some of the code 💻

Thank you to the TryHackMe community, they taught me so much in infosec and its a pleasure being part of it!

Lastly, this project was inspired by Hashbuster so thank you for the work!

search-that-hash's Issues

Use NTH new Python API

https://github.com/HashPals/Name-That-Hash/releases/tag/1.4.0

Nothing gets pushed to the DB

See @SkeletalDemise , the code to push to the DB is never called.

Unverified hahses

The APi can return something unverified, such as this:

NTH should ask the user "This is unverified (we can't prove that the hash == this plaintext). We can continue searching if you want? Y/N".

Make color scheme more accessible to cmd users

Currently, the color scheme with cmd makes it really hard to view the hash. We should make it so it can easily be read:

Greppable doesn't work

It prints nothing at all :-(

Only search APIs if the hash is in the popular set

Using the popular API in name-that-hash, create a new API and argument to only search hashes if they appear in the most popular set. This is useful for Ciphey!

Detect if the user has been temporarily banned from a third-party website/API and display it

Some of the third-party website/APIs will temporarily ban your IP from inputting too many hashes in a day. STH should display this when it finds an error from a third-party website/API related to this.

An example is https://www.cmd5.org/, when it temporarily bans you it will output Please log in ! whenever you try to search any hash. STH should catch that error and say to the user that they were temporarily banned from that certain website.

Error on certain hash input

sth -t "E4F070309AC20334B70C5EA9268CE4FC6438202D"
Traceback (most recent call last):
  File "c:\users\redacted\miniconda3\lib\runpy.py", line 194, in _run_module_as_main
    return _run_code(code, main_globals, None,
  File "c:\users\redacted\miniconda3\lib\runpy.py", line 87, in _run_code
    exec(code, run_globals)
  File "C:\Users\redacted\miniconda3\Scripts\sth.exe\__main__.py", line 7, in <module>
  File "c:\users\redacted\miniconda3\lib\site-packages\click\core.py", line 829, in __call__
    return self.main(*args, **kwargs)
  File "c:\users\redacted\miniconda3\lib\site-packages\click\core.py", line 782, in main
    rv = self.invoke(ctx)
  File "c:\users\redacted\miniconda3\lib\site-packages\click\core.py", line 1066, in invoke
    return ctx.invoke(self.callback, **ctx.params)
  File "c:\users\redacted\miniconda3\lib\site-packages\click\core.py", line 610, in invoke
    return callback(*args, **kwargs)
  File "c:\users\redacted\miniconda3\lib\site-packages\search_that_hash\__main__.py", line 83, in main
    cracking_handler.start()
  File "c:\users\redacted\miniconda3\lib\site-packages\search_that_hash\cracker\handler.py", line 31, in start
    return self.fast.fast_crack()
  File "c:\users\redacted\miniconda3\lib\site-packages\search_that_hash\cracker\fast_mode_mod\runner.py", line 24, in fast_crack
    self.results.extend(results)
TypeError: 'NoneType' object is not iterable```

Breaks on file input

❯ sth -vvv -g -f hash.txt
2021-02-28 10:45:25 Saturnus root[9275] DEBUG Updated logging level
2021-02-28 10:45:25 Saturnus root[9275] INFO Called config updater
2021-02-28 10:45:25 Saturnus root[9275] DEBUG Hashes are from file
2021-02-28 10:45:25 Saturnus root[9275] DEBUG Called NTH to get hash types
2021-02-28 10:45:25 Saturnus root[9275] INFO Returning config
2021-02-28 10:45:25 Saturnus urllib3.connectionpool[9275] DEBUG Starting new HTTPS connection (1): av5b81zg3k.execute-api.us-east-2.amazonaws.com:443
2021-02-28 10:45:26 Saturnus urllib3.connectionpool[9275] DEBUG https://av5b81zg3k.execute-api.us-east-2.amazonaws.com:443 "GET /prod/lookup HTTP/1.1" 200 907
Traceback (most recent call last):
  File "/home/hydra/.local/bin/sth", line 8, in <module>
    sys.exit(main())
  File "/home/hydra/.local/lib/python3.9/site-packages/click/core.py", line 829, in __call__
    return self.main(*args, **kwargs)
  File "/home/hydra/.local/lib/python3.9/site-packages/click/core.py", line 782, in main
    rv = self.invoke(ctx)
  File "/home/hydra/.local/lib/python3.9/site-packages/click/core.py", line 1066, in invoke
    return ctx.invoke(self.callback, **ctx.params)
  File "/home/hydra/.local/lib/python3.9/site-packages/click/core.py", line 610, in invoke
    return callback(*args, **kwargs)
  File "/home/hydra/.local/lib/python3.9/site-packages/search_that_hash/__main__.py", line 89, in main
    cracking_handler = handler.Handler(config)
  File "/home/hydra/.local/lib/python3.9/site-packages/search_that_hash/cracker/handler.py", line 21, in __init__
    self.sth_results, self.config = sth.Sth_api.crack(self, config)
  File "/home/hydra/.local/lib/python3.9/site-packages/search_that_hash/cracker/sth_mod/sth.py", line 27, in crack
    output = response.json()["body"]
KeyError: 'body'

Where

❯ cat hash.txt
$2b$12$SVInH5XmuS3C7eQkmqa6UOM6sDIuumJPrvuiTr.Lbz3GCcUqdf.z6

Gifs on README move too fast

After it's done, sit there for a few seconds so people can read it

Function `perform_search` in `cracking.py` is doing too many things

The function is:

• Running STH
• Printing the output or appending it to greppable
• Running all other APIs
• printing the output or appending to greppable

It should look like this (imo):

• Multi-thread called STH (note: store all found hashes for printing + greppable in one variable), if not greppable and if not all hashes to search have not been found in STH return to main()
• In main print all that's found so far
• multi-thread run all other APIs (a 2nd time).
• Return to main with the one output variable
• Either call Greppable or pretty print it depending on user args

Use Pytest-Mock to mock Hashcat in our testing

Currently the entire hashcat file is not included in code coverage. This is because we'd need hashcat to run the tests against it.

Instead, we can use pytest-mock to mock Hashcat and develop tests based on this.

Let the user decide which hash to crack

Assuming that hashcat cracking is very slow, present the user with an interface like:

1. Bcrypt
2. Sha256
3. sha512

And let the user select which one to try first. Don't show this in greppable mode.

Make CI pass

greppable not working

Installed sth via pip
Command used to test:

1. sth -t 279412f945939ba78ce0758d3fd83daa
2. sth -t 279412f945939ba78ce0758d3fd83daa --greppable

I've attached a screenshot that will explain the issue! :)

Change --greppable to also include -g

so "-g", "--greppable"

READTIMEOUT in STH fails

config = {'api': True, 'api_keys': {'STH': None}, 'greppable': True, 'hashcat': False, ...}

    def crack(config):
        to_del = []
        url = "https://av5b81zg3k.execute-api.us-east-2.amazonaws.com/prod/lookup"
        payload = json.dumps({"Hash": list(config["hashes"].keys())})
        headers = {"Content-Type": "application/json"}
    
        try:
            response = requests.request(
                "GET", url, headers=headers, data=payload, timeout=config["timeout"]
            )
>       except ReadTimeout:
E       NameError: name 'ReadTimeout' is not defined

search_that_hash/cracker/sth_mod/sth.py:23: NameError

Also, set it to 3 seconds -- 2 seconds seems to be breaking it :)

Nitrxgen doesn't work

http://www.nitrxgen.net/md5db/ is one of the third-party website/APIs and it currently doesn't work in STH. It works when visiting the URL in the browser, but it always says Failed when running STH. Run sth -t "5f4dcc3b5aa765d61d8327deb882cf99" --greppable for an example.

Greppable does not push to sth api

Use function self.push() in cracking.py

Verbose mode is turned on by default

Add accessible command to arguments

Add config file which takes API keys

Refactor & Cleanup code

Write documentation on fast json vs json in API

test

Output the hash type even if the hash isn't found

Currently, if the hash is not able to be found, you receive:

Text: Could not find hash

It should still display the hash type which is pulled from Name-That-Hash

Fix amazon DB

Currently, some of the hashcat command outputs are being directed to the amazon DB. We need to make sure it doesn't get mixed up.

Use of optimised kernels

By default, the script uses the unoptimised kernels, by adding -O to:

Search-That-Hash/search_that_hash/cracker/offline_mod/hashcat.py

Line 12 in d5f5f0f

command = f"cd {config['hashcat_folder']} && {config['hashcat_exe_name']} -a 0 -m {possible_type} {hash_formatted} {config['wordlist']}"

It should get an easy and free speed increase with the only draw back of a slightly reduced max plain length, typically from 255 to 32 characters

> hashcat -m 0 -w 4 -b --quiet
Hashmode: 0 - MD5

Speed.#1.........:  4996.0 MH/s (170.43ms) @ Accel:64 Loops:1024 Thr:1024 Vec:1

> hashcat -m 0 -w 4 -b --quiet -O
Hashmode: 0 - MD5

Speed.#1.........:  9154.5 MH/s (90.30ms) @ Accel:64 Loops:1024 Thr:1024 Vec:1

[Cracking bcrypt hash] None: No such file or directory

Hi,

Came across the script on reddit, was trying to crack hash from HTB's delivery machine. Just before it proceeds there's an error saying None: No such file or directory

---

On Phonebook's web challenge:

---

Tested on Pop! OS 20.04 LTS:

┌──(umar_0x01@b0x)-[~/HTB]
└─$ cat /etc/*release
DISTRIB_ID=Pop
DISTRIB_RELEASE=20.04
DISTRIB_CODENAME=focal
DISTRIB_DESCRIPTION="Pop!_OS 20.04 LTS"
NAME="Pop!_OS"
VERSION="20.04 LTS"
ID=pop
ID_LIKE="ubuntu debian"
PRETTY_NAME="Pop!_OS 20.04 LTS"
VERSION_ID="20.04"
HOME_URL="https://pop.system76.com"
SUPPORT_URL="https://support.system76.com"
BUG_REPORT_URL="https://github.com/pop-os/pop/issues"
PRIVACY_POLICY_URL="https://system76.com/privacy"
VERSION_CODENAME=focal
UBUNTU_CODENAME=focal
LOGO=distributor-logo-pop-os

Let me know if you need more details, the hashes, or if it's an error on my side.

Thanks!

Greppable does not return anything

It currently returns []

Originally posted by @Jayy001 in #21 (comment)

Manual type inputs

Most databases use a single type of hash, if we manually input that single type we can search all hash APIs for that type and then just crack that one type :)

turn into if statement

Why the try; except, add a comment to explain? At least except <Error> so we know the reason why the error is happening?

Originally posted by @bee-san in #38 (comment)

Write tests for these issues to make sure they don't happen again

• #50
• Fast API #49

Fix nitrgxen for the PyPi version

PyPi either doesn't include the .pem file with it, or something else is going wrong. We need to fix it so nitrxgen works with it.

Automatically rate limit requests made to third-party website/APIs

STH should automatically rate limit requests made to third-party website/APIs so ideally #67 doesn't happen. For example http://md5.my-addr.com says Using of our online md5 database is limited in time with 15-20 requests, otherwise IP will be blocked permanently. on their site. STH should not make a request if the rate limit has been reached for a specific website/API.

Windows Errors

If you want to use hashcat on windows you have to specify the PATH of where the hashcat binary is located,

Also, for the wordlist, we need to make it OS dependant as windows uses \ not /

Incorrect error

Using the PyPi installation of sth, it displays that it's failed for seemingly for no reason, when the hash has been cracked. Log:
https://pastebin.com/v2mcCctQ

Timeout is far too small

STH takes >1 second to run on cold bootup

Notify user when the program fails

The program does not notify the user when no hashes are found.

Print help menu when no arguments are given.

Currently this happens:

➜ sth
Error. No hashes were inputted. Use the help menu --help

Print help menu on no input given

Output the website/API that successfully got the plaintext in verbose mode

When using verbose mode it should output the website/API that successfully found the plaintext of the hash. It should also say which website/APIs didn't find the hash in their database.

{Important} Add logging to the program

We already have verbose flags, just need to add in the statements :)

Output the hash type when found in third-party websites/APIs

Currently STH will only output the hash type when found in our database. Most if not all of the third-party websites/APIs we use also output the hash type when found, so it should be easy to implement.

Add "-o" to output hashes to a file

Adding -o will output the result to a file in the format hash:plain

Add option to send request(s) without verifying

Package Manager Submissions

• Macports (reserved for https://github.com/harens if they want)
• Homebrew (reserved for https://github.com/harens if they want)

ToDo

• Offliine mode
• Accessible Mode
• Typehints
• Comments
• Documentation
• Possible Google search?
• Documentation on adding APIS <---- VERY IMPORTANT
• Exit when an API returns True
• Colour scheme
• Design README
• Import Name-That-Hash and use it
• Release on PyPi
• Create Setuptools to release on AUR
• Make it as an API <---- VERY IMPORTANT (writing tests will help with this)
• Writie Tests
• Create GitHub action to run tests

Make greppable return all sites