weakpass-lookup 0.1.0

A tool to crack some hashes through the Weakpass API.

weakpass-lookup

A Python script that queries the Weakpass API to attempt cracking various types of password hashes (NTLM, MD5, SHA1, SHA256). This tool is particularly helpful for cracking NTLM hashes obtained via DCSync in a Windows Domain environment, though it supports several other hash types as well.

Features

• Multiple hash type support: NTLM, MD5, SHA1, and SHA256.
• Generic search option: If a hash type is not specified, it attempts a generic search that covers ranges from 32 to 64 characters in length.
• Bulk processing: Reads hashes from a file and checks them concurrently using multiple worker threads.
• Single hash processing: Checks a single hash without needing a file.
• Verbose mode: Provides additional debug output to help with troubleshooting.

Installation

It is recommended to install weakpass-lookup using pipx (preferred) or pip.

Using pipx (Recommended)

pipx install weakpass-lookup

Make sure you have pipx installed and set up on your system.

Using pip

pip install weakpass-lookup

Usage

usage: weakpass-lookup [-h] (-f FILE | -H HASH) [-t {md5,ntlm,sha1,sha256}]
                       [-w WORKERS] [-v]

Searches hashes in the Weakpass API

optional arguments:
  -h, --help            show this help message and exit
  -f FILE, --file FILE  File with list of hashes (one per line)
  -H HASH, --hash HASH  Individual hash to search
  -t {md5,ntlm,sha1,sha256}, --type {md5,ntlm,sha1,sha256}
                        Hash type (optional, if not specified generic search
                        is used)
  -w WORKERS, --workers WORKERS
                        Number of threads to use (default: 10)
  -v, --verbose         Verbose mode to show more debugging details

Examples

1. Crack a single NTLM hash:

   weakpass-lookup --hash <HASH_VALUE> --type ntlm
   

2. Crack multiple hashes from a file (default 10 threads):

   weakpass-lookup --file /path/to/ntlm_hashes.txt --type ntlm --workers 10
   

3. Use verbose mode for debugging:

   weakpass-lookup --file /path/to/hashes.txt --verbose
   

4. Generic search (no specific hash type):

   weakpass-lookup --hash <HASH_VALUE>
   

Output

• When processing a file:

  • <filename>_cracked.txt: Stores all cracked hashes in <hash>:<password> format.
  • <filename>_uncracked.txt: Stores all remaining uncracked hashes.

• When processing a single hash:

  • Prints the result (cracked or uncracked) directly to the terminal.

Contributing

1. Fork the project.
2. Create a new feature branch (git checkout -b feature/my-feature).
3. Commit your changes (git commit -m 'Add some feature').
4. Push to the branch (git push origin feature/my-feature).
5. Open a Pull Request.

License

This project is licensed under the MIT License. Feel free to use, modify, and distribute it as per the terms of the license.

---

Happy cracking with weakpass-lookup!