{% extends "base.html" %}

{% block content %}
<h1>Free Password Hash Cracker</h1>

<p>
    Enter up to 20 non-salted hashes, one per line:
</p>

<script src="/js/home.js"></script>

<!-- Hash cracking form. Paste box left, captcha and submit together on the right:
     keeping those two adjacent is why this is not a full-width textarea with the
     button beneath it. -->
<form action="/" method="post">
<div class="io">
    <div class="field">
        <textarea name="hashes" spellcheck="false">{{ submitted_hashes }}</textarea>
    </div>
    <div class="side">
        <div class="g-recaptcha" data-theme="dark" data-sitekey="{{ ctx.recaptcha_site_key }}" data-callback="onRecaptchaChecked" data-expired-callback="onRecaptchaExpired"></div>
        <input id="submitbutton" type="submit" name="crack" value="Crack Hashes" disabled />
    </div>
</div>
</form>

<!-- Supported hash types, directly under the input: the first thing a visitor needs
     in order to know what to paste. -->
<p class="supports">
<b>Supports:</b>
LM, NTLM, md2, md4, md5, md5(md5_hex), md5-half, sha1, sha224, sha256, sha384,
sha512, ripeMD160, whirlpool, MySQL 4.1+ (sha1(sha1_bin)), QubesV3.1BackupDefaults
</p>

<!-- Crack results (only shown after a POST) -->
{% if let Some(error) = error %}
<p class="error"><b>{{ error }}</b></p>
{% endif %}
{% endblock %}

{% block wide %}
{% if let Some(results) = results %}
{% let summary = crate::cracking::ResultSummary::of(results) %}
<div class="crackresults"><div>
<table class="results">
<caption class="summary"><div>
    <span class="stat"><i>hashes:</i> <b>{{ summary.hashes }}</b></span>
    <span class="stat"><i>cracked:</i> <b>{{ summary.cracked }}</b></span>
    <span class="stat"><i>partial:</i> <b>{{ summary.partial }}</b></span>
    <span class="stat"><i>not found:</i> <b>{{ summary.not_found }}</b></span>
    <span class="stat"><i>invalid:</i> <b>{{ summary.invalid }}</b></span>
</div></caption>
<tr><th>Hash</th><th>Type</th><th>Result</th></tr>
{% for result in results %}
{% if result.format_error %}
<tr class="fail"><td>{{ result.hash }}</td><td>Unknown</td><td>Unrecognized hash format.</td></tr>
{% else if result.matches.is_empty() %}
<tr class="fail"><td>{{ result.hash }}</td><td>Unknown</td><td>Not found.</td></tr>
{% else %}
{% for m in result.matches %}
{% if m.is_full_match() %}
<tr class="suc"><td>{{ result.hash }}</td><td>{{ m.algorithm_name }}</td><td>{{ m.plaintext_html()|safe }}</td></tr>
{% else %}
<tr class="part"><td><span class="matched">{{ m.matched_prefix() }}</span>{{ m.unmatched_rest() }}</td><td>{{ m.algorithm_name }}</td><td>{{ m.plaintext_html()|safe }}</td></tr>
{% endif %}
{% endfor %}
{% if result.is_truncated() %}
<tr class="more"><td>{{ result.hash }}</td><td>&nbsp;</td><td>{{ result.hidden_matches_grouped() }} more not shown (of {{ result.total_matches_grouped() }} total).</td></tr>
{% endif %}
{% endif %}
{% endfor %}
</table>
</div></div>
{% endif %}
{% endblock %}

{% block tail %}
<div class="content">
{% if self.results.is_some() %}
<p class="legend"><strong>Color Codes:</strong> <span class="sw" style="background-color: #00FF00;">Green:</span> Exact match, <span class="sw" style="background-color: #FFFF00;">Yellow:</span> Partial match &mdash; the hash column shows what that word really hashes to, with the <span class="matched">part yours matched</span> highlighted, <span class="sw" style="background-color: #FF0000;">Red:</span> Not found.</p>
{% endif %}

<div class="downloaddiv">
    <a href="/crackstation-wordlist-password-cracking-dictionary.htm">
        <span class="dl-main">Download CrackStation's Wordlist</span>
        <span class="dl-sub">1,493,677,782 words &middot; 15 GB &middot; torrent or HTTP</span>
    </a>
    <a href="https://github.com/defuse/preimage">
        <span class="dl-main">Command-Line Tool for Local Index Generation &amp; Lookup</span>
        <span class="dl-sub">$ cargo install preimage</span>
    </a>
</div>

<a name="cracking-hashes"></a>
<h2>How CrackStation Works</h2>

<p>
CrackStation uses massive pre-computed lookup tables to crack password hashes.
These tables store a mapping between the hash of a password, and the correct
password for that hash. The hash values are indexed so that it is possible to
quickly search the database for a given hash. If the hash is present in the
database, the password can be recovered in a fraction of a second.  This only
works for "unsalted" hashes. For information on password hashing systems that
are not vulnerable to pre-computed lookup tables, see our <a
href="hashing-security.htm">hashing security page</a>.
</p>

<p>
Crackstation's lookup tables were created by extracting every word from the
Wikipedia databases and adding every password list we could find. We also
applied intelligent word mangling (brute force hybrid) to our wordlists to make
them much more effective. For MD5 and SHA1 hashes, we have a 190GB,
15-billion-entry lookup table, and for other hashes, we have a 19GB
1.5-billion-entry lookup table.
</p>

<p>
You can download CrackStation's dictionaries <a
href="/crackstation-wordlist-password-cracking-dictionary.htm">here</a>,
the lookup table implementation (PHP and C) is available <a
href="https://github.com/defuse/crackstation-hashdb">here</a>, and a modern Rust
implementation that can be used as either a library or a command-line tool is
available <a href="https://github.com/defuse/preimage">here</a>.
</p>
</div>
{% endblock %}