Hash-Collider

Hash-Collider is a CLI for testing and discovering hash collisions. It allows you to specify your own hashing function and evaluate it for potential collisions.

Disclaimer

While brute-force attacks are generally ineffective against most modern hashing algorithms, they can still be useful to easily determine if a custom hash function is weak. Using Hash-Collider, you can evaluate the collision resistance of your own hash implementations and identify potential weaknesses. In addition, with some analysis and the use of targeted word lists, you may be able to find collisions more efficiently than relying solely on generating random character combinations.

Installation

build from source:

First make sure you have go 1.23.2 or more installed

then you can run:

git clone https://github.com/NeKroFR/HashQuake.git
cd HashQuake
make

Usage:

Usage:
    ./HashQuake [OPTIONS] <command to run the algorithm>
Options:
   -h, --help            Display this help message
   -v, --version         Display the version of the program
   -w, --wordlist <filepath>   Specify a wordlist file
   -s, --size <num>      Specify the length of words to generate (default 3)
   -t, --threads <num>   Specify the number of threads to use (default 1)
   -d --display          Display the collisions in real time
   -o, --output <filepath>      Specify an output file
Example:
    ./HashQuake -w wordlist.txt 'python3 examples/custom_hash1.py'
    ./HashQuake -t 8 -o report.txt -d './examples/custom_hash2'

Examples

• Use a custom wordlist and run the custom_hash1.py python3 script:

./HashQuake -w wordlist.txt 'python3 examples/custom_hash1.py'

• Generate words with a length of 8 characters, save the output to a file, display collisions in real-time running the custom_hash2 binary.

./HashQuake -t 8 -o report.txt -d './examples/custom_hash2'

make sure the binary exist, you can compile it first using gcc examples/custom_hash2.c -o examples/custom_hash2

Importing Your Own Hash Functions

You can use the templates in the /templates directory and edit the hashing function as needed.

If you do not want to use the template or there are no templates for your language, you can create your own. However, note that the program will run the command and add the word as the last argument, and it expects the hash to appear in the program's stdout (standard output).