AboutDFIR.com – The Definitive Compendium Project
Digital Forensics & Incident Response

Hash Lookups

These websites allow a researcher to input a hash and search for its corresponding plaintext (“found”) in databases of already-cracked or known hashes.  It’s like having your own massive password-cracking cluster – but with immediate results!

Service NameDescriptionFee or Free
HashKillerHashKiller.co.uk is a hash lookup service. This allows you to input an hash hash and search for its corresponding plaintext (found") in our database of already-cracked hashes. It's like having your own massive password-cracking cluster - but with immediate results! We have been building our hash database since August 2007."Free
CMD5This site performs reverse query on the globally publicly available encryption algorithms such as md5 and sha1, and creates a plaintext ciphertext corresponding query database through exhaustive character combination. The created records are about 90 trillion, occupying more than 500 TB of hard disk. The success rate is over 95%, and many complex ciphertexts can only be queried by this site. It has been operating stably for more than ten years and enjoys a good reputation.Free
Crack.shBehind crack.sh is a system with 48 Xilinx Virtex-6 LX240T FPGAs. Each FPGA contains a design with 40 fully pipelined DES cores running at 400MHz for a total of 16,000,000,000 keys/sec per FPGA, or 768,000,000,000 keys/sec for the whole system.Fee
CrackStationCrackStation uses massive pre-computed lookup tables to crack password hashes. These tables store a mapping between the hash of a password, and the correct password for that hash. The hash values are indexed so that it is possible to quickly search the database for a given hash. If the hash is present in the database, the password can be recovered in a fraction of a second. This only works for "unsalted" hashes. Crackstation's lookup tables were created by extracting every word from the Wikipedia databases and adding with every password list we could find. We also applied intelligent word mangling (brute force hybrid) to our wordlists to make them much more effective. For MD5 and SHA1 hashes, we have a 190GB, 15-billion-entry lookup table, and for other hashes, we have a 19GB 1.5-billion-entry lookup table. Free
OnlineHashCrackAn online service that attempts to recover passwords (hashes, WPA dumps, MS Office, PDF, iTunes Backup, Archives) obtained in a legal way (pentest, audit,..).Free
Hash.helpLoad your balance with bitcoin or paypal, Post your hashlist & bounty, Get your hashes cracked by a wide variety of professional hash crackers!
CrackPotLanManager (LM) and NTLM hashesFree