Skip to content

beginner · crypto · 100 points · 0 working it

Cracking a Captured Hash

You recovered a password hash from a leaked database. Identify the hash type, pick the right tool, and recover the plaintext.

  1. Identify the hash

    Captured value:

    5f4dcc3b5aa765d61d8327deb882cf99

    32 hex characters, no salt prefix — the classic signature of an unsalted MD5. The hash algorithm name is the checkpoint.

    What hash algorithm produced this digest?

    Hint

    Broken, unsalted, still everywhere.

    Sign in to verify this checkpoint.

  2. Choose the tool

    For a fast dictionary attack on GPU you pick the standard cracking tool that ships on Kali and uses mode -m 0 for MD5.

    Which open-source password-cracking tool do you run?

    Hint

    Feline name.

    Sign in to verify this checkpoint.

  3. Recover the plaintext

    The target is d8578edf8458ce06fbc5bb76a58c5ca4. A dictionary pass cracks it instantly — it is one of the most common passwords ever leaked. The plaintext (lowercase) is the checkpoint.

    What is the cracked plaintext?

    Hint

    Two words fused: "___ me in".

    Sign in to verify this checkpoint.