crack-js

pure-javascript hashcat-format engine — benchmark · generate · extract · identify · brute. hundreds of hash modes, archive/file hash extraction, and dynamic cracking workflows — no server, no dependency beyond crypto-js. everything runs in your browser.

booting crack-js…

./benchmark — hashes/sec per mode

measures raw calculation throughput for every mode, in-browser. “fast” = single-shot unsalted hash (md5, sha1, ntlm…) — millions/sec. “slow” = salted & iterated by design (bcrypt, pbkdf2, scrypt, argon2) — far fewer.

hit [ benchmark ] to measure throughput for every mode.

./generate — password → hash

pick a mode, type a password, and emit its hash. choose “all generatable” to emit every mode at once. click a hash to copy it.

echo -n
pick a mode + password, then generate.

./extract — file → hashcat hash

drop an encrypted .zip / .7z / .docx / .xlsx / .rar, a Wi-Fi capture (.hccapx / .pcap), or a hash file — crack-js sniffs the format and pulls out a ready-to-crack hashcat line.

drop a file here or click to choose zip · 7z · office · rar · hccapx · pmkid/22000 text — nothing is uploaded, it stays in your browser
waiting for a file…

./identify — what is this hash?

paste a hash — it is matched against every known format.

try: md5 sha1 bcrypt md5crypt

./brute — crack hashes

paste target hashes, or drop a file to auto-extract and crack it. run a wordlist, wordlist + rules, pure bruteforce (charset + length), or one of your saved workflows. each task shows live speed and estimated time remaining.

drop an encrypted file to auto-extract its hash & start zip · 7z · docx · rar · hccapx — extracts, sets the mode, and launches with the current attack
wordlists
each task runs in the background — launch as many as you like.

./workflows — chained attacks

build a sequence of steps — e.g. fast wordlist → wordlist + rules → bruteforce. crack-js runs them in order and stops the moment a hash falls. saved in this browser; pick one from the brute tab.