pwdcrack V1.2.0

Offline password hash recovery toolkit. Detects, verifies, and cracks hashes across the major algorithm families using CPU, GPU, FPGA, and distributed back ends.

Version: 1.2.0

Status

Read this before relying on any number in this file.

Area	State
Hash detection	Working. 354 hash types are registered for detection.
Hash verification	140 of the 354 types can be verified by this build. The other 214 are detection only: they are recognised and reported, but no candidate is ever hashed against them. pwdcrack list shows the status per type, and any attack against a detection-only target prints a warning before it starts, so a run that could never find anything is never mistaken for a real negative result. See docs/HASH_TYPES.md.
Attacks	Dictionary, brute force mask, combinator, PRINCE, toggle case, substitution, and rules.
Tier builds	tier-low and tier-mid build and run. tier-high requires GPU engine work that is not complete.
Engines	One real kernel: 8 lane multi-buffer MD5 over AVX2, measured at 2.2x to 2.3x over scalar. SHA-NI, NEON, SVE, AVX-512 and SSE2 are documented pass-throughs, not vectorised code. GPU, CUDA, OpenCL, Metal, Vulkan, FPGA, distributed, web, and the remaining engines are incomplete or stubs. See docs/plan.md and docs/PHASE4_STATUS.md.

The honest summary: the CPU core does real work, and several upper tiers are not finished. Nothing in this README claims a capability that has not been verified.

The distinction that matters throughout this project is between a hash type that is detected and one that is verified. A detector recognises a format and produces a type name. A verifier computes the digest. Only the second one can ever find a password, and this project keeps the two separate in the type system so the gap cannot be hidden.

Build

cargo build --release              # default tier-auto
cargo build --release --features tier-low    # low-end and embedded targets

Requires a Rust toolchain with edition 2024 support (Rust 1.85 or newer).

Usage

pwdcrack --help                    # full option list, grouped by category
pwdcrack <COMMAND> --help          # options for one command

Examples

Identify what is in a hash file:

pwdcrack identify hashes.txt
pwdcrack identify hashes.txt -v    # per-hash detail

Hash a password to build a test hash:

pwdcrack hash mypassword -t sha256
pwdcrack hash mypassword -t ntlm

Verify one password against one hash:

pwdcrack verify 5d41402abc4b2a76b9719d911017c592 hello

Dictionary attack:

pwdcrack dictionary hashes.txt rockyou.txt
pwdcrack dictionary hashes.txt rockyou.txt -r rules/best64.rule

Brute force with a mask:

pwdcrack brute-force hashes.txt '?u?l?l?l?l?d?d'
pwdcrack brute-force hashes.txt '?d?d?d?d?d?d'      # 6-digit PIN

Combinator over two wordlists:

pwdcrack combinator hashes.txt left.txt right.txt

Check a hash file for malformed or duplicate entries:

pwdcrack check hashes.txt
pwdcrack check hashes.txt -v

Review what has already been cracked:

pwdcrack show
pwdcrack show -t                  # with hash types
pwdcrack stats                    # breakdown by type

Hash file formats

One hash per line. Blank lines and lines starting with # are ignored.

5d41402abc4b2a76b9719d911017c592            raw MD5
b1b3773a05c0ed0176787a4f1574ff0075          raw SHA-1
8846f7eaee8fb117ad06bdd830b7586c328b8b3     NTLM
$2b$12$...                                   bcrypt
$1$salt$hash                                md5crypt
$6$rounds=5000$salt$hash                    sha512crypt
admin:5d41402abc4b2a76b9719d911017c592       user:hash form

Unparsable lines are reported with a reason and a line number rather than being skipped silently.

Potfile

Cracked hashes are appended to pwdcrack.pot in hash:password form. Use --potfile to change the path and --skip-cracked to skip entries already present.

Platform support

Platform	Status
Linux x86-64	Working
Linux aarch64	Builds via scripts/build-all.sh
macOS	Builds; Metal engine incomplete
Windows	Builds; not tested here
Android / Termux	Partial, via engine-android

Security notice

This tool is for recovering hashes you own or are authorised to test. It performs no network access and stores nothing outside the paths you pass on the command line, with two exceptions you should know about:

• --distributed opens a TCP listener. It binds to all interfaces by default and has no authentication. Do not enable it on an untrusted network.
• --gpu and other engine flags may print device details to the log.

Treat a hash file as sensitive: it contains password material.

Documentation

File	Contents
ARCHITECTURE.md	Design notes and project map. Some sections describe intended structure rather than current code; those are labelled.
docs/plan.md	Full upgrade plan. Phase 0 and Phase 1 are the current work items. Includes a per-item status table and acceptance gates.
pwdcrack --help	Authoritative option reference.

License

MIT, as declared in Cargo.toml. The LICENSE file has not been added to the repository yet; add it before publishing. Copyright AniipID

Attribution

Copyright (c) 2026 Hanif Abdur - AniipID