Skip to content

Add NTLM support, replace dead lookup services, and add tests - #64

Open
0x01code wants to merge 20 commits into
s0md3v:masterfrom
0x01code:master
Open

Add NTLM support, replace dead lookup services, and add tests#64
0x01code wants to merge 20 commits into
s0md3v:masterfrom
0x01code:master

Conversation

@0x01code

Copy link
Copy Markdown

Summary

Hash Buster's crackers were pointing at services that are now dead or have
changed their APIs (nitrxgen, the old md5decrypt endpoint), so most lookups silently returned nothing. This PR replaces them
with working services, adds NTLM support, and introduces a test suite.

What changed

  • New database.py – all lookup logic moved into a Database class with
    five working services: weakpass, md5decrypt (new API), gromweb,
    md5hashing (Meteor DDP-over-SockJS websocket), and crackcrypt. The old
    alpha/beta/gamma/theta/delta functions and their broken endpoints
    are removed.
  • NTLM support – NTLM and MD5 are both 32 chars and can't be told apart, so
    any 32-char hash is looked up as both and both results are reported:
    [!] Hash function : MD5 / NTLM
    MD5 : (not found)
    NTLM : password
    Services that auto-detect the hash type filter matches by detected type so
    MD5 and NTLM don't cross over.
  • -m flag – force a single hash type (md5, ntlm, sha1, sha256, sha384, sha512), e.g. buster -s <hash> -m ntlm. Needed because NTLM can't be
    auto-detected.
  • Refactor – shared lookup() helper plus display_result() /
    inline_result() for consistent single-hash vs. file/multi-hash output.
  • Teststest_database.py with a network pytest marker for live
    lookups, plus pytest.ini, requirements.txt, and makefile updated to
    install database.py alongside the buster binary.
  • README – documents NTLM behaviour and the -m flag; feature list now
    includes NTLM.

Testing

pytest (unit tests). Live lookups are gated behind -m network since they
hit third-party services

Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Labels

None yet

Projects

None yet

Development

Successfully merging this pull request may close these issues.

1 participant