HashLion

HashLion is a basic (currently basic) password recovery utility coded in Go

Installation

HashLion is exremely easy to install, you can download the latest release or clone the repository and open it in vscode, then run in the vscode terminal the go build command, in both cases you'll end up with an executable file that you can just double click to start

Usage

Note, these usage instructions are only correct for build 2 pre-release, will be updating this instructions in the future, if you are downloading a newer version for now try understanding the usage with the help command

Step 1 (providing a dictionary)

After double clicking the file you'll get a command prompt window asking you to enter the path to your words file, the words list must be a .txt file

The current version of HashLion can only crack hashes by dictionary attacking them so naturally the bigger your words list is, the better results you'll get as you'll be able to crack more hashes.

some words lists: https://github.com/praetorian-inc/Hob0Rules/tree/master/wordlists

I personally recommend using an updated version of the RockYou list: https://github.com/ohmybahgosh/RockYou2021.txt

picture

Step 2 (choosing a hash type)

After providing a dictionary you need to choose the type of hash algorithm that your password target was hashed with HashLion supports following hash types for recovery:

• sha1
• sha256
• sha512
• md5

Any other hashes are not supported and won't allow you to move to the next step

picture

Step 3 (input target & attack)

Its time to provide our tagret and start the attack we simple copy-paste our hash to the program.

After pressing enter HashLion will ask you if you want want get live information output of the attack, while seeing the live information looks impressive and cool, I recommend to choose the "hide" option as its WAY faster since HashLion can focus on only preforming instructions that are related to the attack itself

Tip! attack mode is set to hide by default, so you can choose it by pressing enter and not writing anything

Output mods

HIDE

HIDE

Performs smallest amount of actions to go through the dictionary as
fast as possible, but provides a smaller amount of data about the attack

SHOW

SHOW

Provides live data about the attack, details every attempt and counts the
amount of attempts

ToDo list

These are some features that will be coming in the future as the project progresses you can also feel free to contirbute and help adding these

• New attack option BruteForce, tries every possible password combination of gives max password size and character sets

• Option to use Goroutines to go through the dictionary faster by splitting the dictionary and letting each routine go through one of the parts at the same time

• Support more hashing algorithms