MD5, SHA-1 and SHA-256 hash generator
Compute MD5, SHA-1, SHA-256, SHA-384, and SHA-512 of any text in the browser, using Web Crypto. Nothing is sent anywhere.
Open in ctfpalEvery input you paste is hashed under all five common algorithms at once. In practice you rarely want one hash - you want to compare a candidate against a target and find out which algorithm the challenge used, which means computing them all and looking for the match.
Confirming a guess
The common workflow: a challenge gives you a digest and hints at the input format. Hash your guess, compare. If none of the five match, the algorithm is something else (check SHA-3 and BLAKE) or the input has trailing whitespace - a newline at the end of a copy-pasted string changes the digest completely and is the single most common cause of a non-match.
Part of a module
3. Hashes, identification and cracking
Identify a digest by shape, understand why hashing is one-way, and learn where wordlist cracking works and where it is a trap.
Practise on real challenges
Related tools
Hash identifier with hashcat mode lookup
Identify a hash from its shape and prefix - MD5, SHA family, bcrypt, NTLM, and the salted formats - and get the hashcat mode number to crack it.
In-browser hash cracker with rule transforms
Crack MD5, SHA-1, SHA-256, SHA-384, and SHA-512 against a wordlist in your browser, with leetspeak, case, reversal, and digit-append rules.
SHA-3, BLAKE2, Keccak and RIPEMD calculator
Compute the hash functions outside the standard set - SHA-3, Keccak, BLAKE2, and RIPEMD-160 - when SHA-2 does not match.
Hash length extension attack
Append data to a message and forge a valid MD5, SHA-1, or SHA-256 signature without knowing the secret - the Merkle-Damgard flaw behind `hash(secret || message)`.