This Node.js toolkit includes: hash/dehash (with salting) + dictionary attack (stream/classic) + format matching with regex
Youtube Tutorial: LINK
- Hash Generation: Support for 17 hash algorithms (MD5, SHA-1, SHA-2, SHA-3, BLAKE2, RIPEMD-160, WHIRLPOOL...)
- Dictionary Attack: Two mods (in-memory and stream). In-memory is faster but it eats more RAM, stream if better for low PC power and also works on big (rockyou) files.
- Custom Wordlists: Create your own wordlists on the fly
- Salt Support: Add salt before hashing (head or tail position)
- Hash Pattern Test: Input hash value and test to find out algorithm
- Color-coded UI: Clear visual feedback with loading indicators
- Node.js (v20)
- npm (comes with Node.js)
git clone https://github.com/G0ldenRat10/BrutalHash.git
cd BrutalHashIf you do not have Node.js with version 20.0.0, pick one of the options:
-
Manually: install via Node Version Manager (NVM)
curl -o- https://raw.githubusercontent.com/nvm-sh/nvm/v0.39.7/install.sh | bash source ~/.bashrc # ~/.zshrc -> if user shell ZSH nvm install 20 nvm use 20
-
Download an LTS installer from https://nodejs.org and follow the prompts.
-
Built-in installer (easiest): install via bash script that comes with downloading BrutalHash
chmod +x install_node_20.sh ./install_node_20.sh
IMPORTANT: After installation, you must reload your shell configuration:
source ~/.bashrc # for bash users source ~/.zshrc # for zsh users
Or simply close and reopen your terminal, then verify with:
node -v # should show v20.x.x
After Node.js is installed, install npm dependencies (built-in installer will do it for you):
npm installFirst time only (make the runner executable before starting):
chmod +x run.shThen start the program via npm (this calls run.sh under the hood):
npm start- Linux/macOS: works out of the box (uses bash to run run.sh).
- Windows: run from Git Bash or WSL for the same behavior. If you prefer plain Command Prompt/PowerShell, change the npm start script to
node main.js(loses the auto-restart behavior from run.sh).
Choose from 17 supported algorithms and optionally add salt to your text before hashing.
- Select a wordlist (or create a custom one)
- Choose attack method (Dictionary or Stream)
- Enter the hash to crack
- Select the hash algorithm type
- View status and start the attack
- Paste hash value into input field
- Tool runs regex for MD5, SHA1, SHA2, SHA3, BLAKE2, RIPEMD-160, SHAKE128/256, SM3 ...
- Writes down the list of the potential algorithms used for that specific hash value.
- MD5, MD5-SHA1
- SHA-1
- SHA-224, SHA-256, SHA-384, SHA-512
- SHA3-224, SHA3-256, SHA3-384, SHA3-512
- BLAKE2s-256, BLAKE2b-512
- RIPEMD-160
- WHIRLPOOL
This tool is for educational and authorized security testing purposes only. Use responsibly.
