HSHX

Hash Toolkit — hash identification, verification, and controlled cracking workflow support.

---

Overview

HSHX helps identify hash formats, verify candidate passwords, and organize controlled cracking workflows.

This project is intended for labs, CTFs, internal audits, and authorized password security validation.

---

Features

• Hash type identification.
• Single hash verification.
• File-based hash loading.
• Wordlist-based verification.
• Hashcat/John command template generation.
• Masked output.
• JSON/TXT reports.
• Safety gate for cracking workflows.

---

Installation

git clone https://github.com/NeiveZ/Hash-Toolkit.git
cd Hash-Toolkit
chmod +x hshx.sh
./hshx.sh --install

Validate:

./hshx.sh --check

Run tests if available:

python3 -m pytest -q

Optional tools:

sudo apt update
sudo apt install hashcat john -y

---

Usage

./hshx.sh <command> [options]

Help:

./hshx.sh --help

---

Commands

Identify a hash

./hshx.sh identify -H "5f4dcc3b5aa765d61d8327deb882cf99"

Verify a password candidate

./hshx.sh verify -H "5f4dcc3b5aa765d61d8327deb882cf99" -p "password"

Verify using a wordlist

./hshx.sh wordlist -H "5f4dcc3b5aa765d61d8327deb882cf99" -w wordlist.txt --authorized

Generate cracking templates

./hshx.sh template -H hashes.txt --tool hashcat

Analyze hash file

./hshx.sh analyze -f hashes.txt --json --txt --out reports/hashes

---

Recommended Procedure

1. Identify possible hash type:

./hshx.sh identify -H "$HASH"

2. Verify known candidates:

./hshx.sh verify -H "$HASH" -p "$CANDIDATE"

3. Generate a safe tool template:

./hshx.sh template -f hashes.txt --tool hashcat

4. Run cracking only in authorized labs.

---

Output Example

HSHX Hash Summary

Input        single hash
Candidates   4

Results
Severity     Hash Type        Confidence     Detail
INFO         MD5              HIGH           32 hex characters
INFO         NTLM             POSSIBLE       32 hex characters
OK           Verification     MATCH          Candidate matched locally

---

Safety

HSHX must only be used for hashes you own or are authorized to test. Do not process stolen credential material.

---

License

MIT License.