β‘οΈ Discord | Website β¬
οΈ
The Modern Hash Identification System
pip3 install name-that-hash && nth
Web App with no install needed
# π€ What is this?
![](images/demo_smaller.gif)
Have you ever come across a hash such as `5f4dcc3b5aa765d61d8327deb882cf99` and wondered what type of hash that is? π€
Name-that-hash will name that hash type!
# π₯ Features
* πΊ **Popularity Ratings** - Name that hash will show you the most popular hashes first. In older systems it would prioritise [Skype Hash](https://en.wikipedia.org/wiki/Skype_security) the same as [Active Directory's NTLM!](https://docs.microsoft.com/en-us/windows-server/security/kerberos/ntlm-overview) Which makes as much sense as saying that my GitHub is as popular as VSCode π
* β **Hash Summaries** - no more wondering whether it's MD5 or NTLM. Name-that-hash will summarise the main usage of each hash, allowing you to make an informed & decisive choice β‘
* π **Colour Output** - Don't worry, the colours were hand-selected with a designer to be 100% accessible and gnarly π
* π€ **JSON output && API** - Want to use Name-That-Hash in your project? We are API first, CLI second. Use JSON output or import us as a Python module! πΎ
* π΅ **Updated!** - HashID was last updated in 2015. Hash-Identifier in 2011! Name-That-Hash is a 2021 project π¦§
* βΏ **Accessible** - We are 100% committed to making this an [accessible hacking tool](https://skerritt.blog/a11y/) π
* π« **Extensible** - Add new hashes as quickly as you can edit this README. No, seriously -- it's that easy! π±
# π₯ Name-That-Hash vs HashID vs Hash-Identifier
| **Features** | Name-That-Hash | HashID | Hash-Identifier |
| ---- | ---- | ---- | ---- |
| **Last updated** | 2021, check commits. | 17/03/2015 | 30/09/2011 |
Honestly, do you need any more convincing? π
But, let's look at the features more in-depth.
## π Feature Comparison
![Name-that-hash proudly displays the most likely hash types](images/example1.png)
Here HashID displays Skype before NTLM, whereas Name-That-Hash understands popularity of hashes so places NTLM before Skype.
![](images/hashid.png)
π You can also see Name-That-Hash displaying a summary, whereas HashID doesn't. In the default view it also displays John + HashCat information. Because let's face it, the only reason you're using this tool is to figure out what to put into HashCat! π±βπ
Name-That-Hash is radically different from HashID, I'm not going to list all the differences -- you can physically see them yourselves π
## π Accessibility
Name-That-Hash is an [accessible hacking tool](https://skerritt.blog/a11y/). That means we spent time designing things, such as....
![No long text or ascii art here](images/accessible.png)
Removing the ASCII Art of very long "least likely" text blocks using `--accessible`.
Doing this means you don't get access to least likely, and if the hash is in that pile it'd suck. So we also have `--no-banner`.
![](images/no-banner.png)
Which removes the ASCII art banner.
# π¨ Installation
**Easy Mode** Use our web app at [https://nth.skerritt.blog](https://nth.skerritt.blog).
You can install using Python's Pip.
```
pip3 install name-that-hash
```
or:
```
pip install name-that-hash
```
And then run:
```
nth
```
To use.
[![Packaging status](https://repology.org/badge/vertical-allrepos/name-that-hash.svg)](https://repology.org/project/name-that-hash/versions)
We're also in:
* [REMnux](https://remnux.org/).
* [The Arch User Repository (AUR)](https://aur.archlinux.org/packages/python-name-that-hash).
* [MacPorts](https://ports.macports.org/port/name-that-hash/summary).
* [Homebrew](https://formulae.brew.sh/formula/name-that-hash).
# β± Fun Facts
* We have a test-matrix which makes sure all of our hashes are up-to-date, including the HashCat mode and John the Ripper modes!
* Unlike other hash identifiers which identify non-hashes, we have removed these so you'll only get real hashes (base64 who?)
* Each and every hash is tested multiple times, for both false positives and true positives. No mistakes here!
* There is a magical lamp that summons a genie somewhere in the source code.
# π‘ Documentation
Want to learn how popularity works?
What about using this in your own programs?
Or maybe even our commitment to accessibility?
Our documentation is for you!
| π **Documentation** | π¦ **My Twitter (@ me for questions)** | π³ **Discord** | 𧩠**Web App**
| --------------- | ----------------------------------- | ---------------- | ---------------- |
| [Wiki](https://github.com/HashPals/Name-That-Hash/wiki) | [https://twitter.com/bee_sec_san](https://twitter.com/bee_sec_san) | [Discord](https://discord.gg/zYTM3rZM4T) | [Web App](https://nth.skerritt.blog) |
# π Contributing
The easiest way to contribute is by adding more hashes, writing descriptions, or changing their REGEX> All you have to do is go to [this file](https://github.com/HashPals/Name-That-Hash/blob/main/name_that_hash/hashes.py) and edit it.
You can read more about [contributing here](https://github.com/HashPals/Name-That-Hash/wiki/Contributing).
# π Thanks
Many thanks to [Jabba](https://github.com/JabbaTheBunny) & Jayyy for their help :)
Thanks to [HashID](https://github.com/psypanda/hashID) and [Hash-Identifier](https://code.google.com/archive/p/hash-identifier/) for their work in this field, which heavily inspired this. π The database of hashes was originally taken from them, but we've significantly modified it. Thank you so much for creating that database of 3000+ hashes π»
Thanks to the TryHackMe Community too, and especially [Oriel](https://twitter.com/OrielOrielOriel) for her feedback on early versions.
And special thanks to Varg on his masterful understanding of colour theory π
Finally, thanks too Blackout for helping write descriptions of hashes π±βπ€
# πΊ What people are saying
![FalconSpy loves it!](images/falconspy.png)
[We're in REMnux!](https://twitter.com/REMnux/status/1355874578405466114)
## Contributors β¨
[![All Contributors](https://img.shields.io/badge/all_contributors-5-orange.svg?style=flat-square)](#contributors-)
Thanks goes to these wonderful people ([emoji key](https://allcontributors.org/docs/en/emoji-key)):
This project follows the [all-contributors](https://github.com/all-contributors/all-contributors) specification. Contributions of any kind welcome!