[ { "regex": "^[a-f0-9]{4}$", "modes": [ { "john": null, "hashcat": null, "extended": false, "name": "CRC-16" }, { "john": null, "hashcat": null, "extended": false, "name": "CRC-16-CCITT" }, { "john": null, "hashcat": null, "extended": false, "name": "FCS-16" } ] }, { "regex": "^[a-f0-9]{8}$", "modes": [ { "john": null, "hashcat": null, "extended": false, "name": "Adler-32" }, { "john": null, "hashcat": null, "extended": false, "name": "CRC-32B" }, { "john": null, "hashcat": null, "extended": false, "name": "FCS-32" }, { "john": null, "hashcat": null, "extended": false, "name": "GHash-32-3" }, { "john": null, "hashcat": null, "extended": false, "name": "GHash-32-5" }, { "john": null, "hashcat": null, "extended": false, "name": "FNV-132" }, { "john": null, "hashcat": null, "extended": false, "name": "Fletcher-32" }, { "john": null, "hashcat": null, "extended": false, "name": "Joaat" }, { "john": null, "hashcat": null, "extended": false, "name": "ELF-32" }, { "john": null, "hashcat": null, "extended": false, "name": "XOR-32" } ] }, { "regex": "^[a-f0-9]{6}$", "modes": [ { "john": null, "hashcat": null, "extended": false, "name": "CRC-24" } ] }, { "regex": "^(\\$crc32\\$)?([a-f0-9]{8}.)?[a-f0-9]{8}$", "modes": [ { "john": "crc32", "hashcat": 11500, "extended": false, "name": "CRC-32", "samples": [ "c762de4a:00000000", "$crc32$00000000.fa455f6b", "$crc32$4ff4f23f.ce6eb863" ] } ] }, { "regex": "^\\+[a-z0-9\\/.]{12}$", "modes": [ { "john": "bfegg", "hashcat": null, "extended": false, "name": "Eggdrop IRC Bot" } ] }, { "regex": "^[a-z0-9\\/.]{13}$", "modes": [ { "john": "descrypt", "hashcat": 1500, "extended": false, "name": "DES(Unix)" }, { "john": "descrypt", "hashcat": 1500, "extended": false, "name": "Traditional DES" }, { "john": "descrypt", "hashcat": 1500, "extended": false, "name": "DEScrypt" } ] }, { "regex": "^[a-f0-9]{16}$", "modes": [ { "john": "mysql", "hashcat": 200, "extended": false, "name": "MySQL323" }, { "john": null, "hashcat": 5100, "extended": false, "name": "Half MD5" }, { "john": null, "hashcat": null, "extended": false, "name": "FNV-164" }, { "john": null, "hashcat": null, "extended": false, "name": "CRC-64" } ] }, { "regex": "^[a-f0-9]{16}:[a-f0-9]{0,30}$", "modes": [ { "john": null, "hashcat": 3100, "extended": false, "name": "DES(Oracle)", "samples": [ "792FCB0AE31D8489:7284616727" ] }, { "john": null, "hashcat": 3100, "extended": false, "name": "Oracle 7-10g", "samples": [ "792FCB0AE31D8489:7284616727" ] } ] }, { "regex": "^[a-z0-9\\/.]{16}$", "modes": [ { "john": "pix-md5", "hashcat": 2400, "extended": false, "name": "Cisco-PIX(MD5)" }, { "john": "dynamic_19", "hashcat": 2400, "extended": true, "name": "md5($pass)" } ] }, { "regex": "^\\([a-z0-9\\/+]{20}\\)$", "modes": [ { "john": "dominosec", "hashcat": 8700, "extended": false, "name": "Lotus Notes/Domino 6" } ] }, { "regex": "^_[a-z0-9\\/.]{19}$", "modes": [ { "john": "bsdicrypt", "hashcat": 12400, "extended": false, "name": "BSDi Crypt", "samples": [ "_GW..8841inaTltazRsQ", "_J9..XXXXsqM/YSSP..Y", "_J9..SDSD5YGyRCr4W4c" ] } ] }, { "regex": "^[a-f0-9]{24}$", "modes": [ { "john": null, "hashcat": null, "extended": false, "name": "CRC-96 (ZIP)" }, { "john": null, "hashcat": 20500, "extended": false, "name": "PKZIP Master Key", "samples": [ "f1eff5c0368d10311dcfc419" ] }, { "john": null, "hashcat": 20510, "extended": false, "name": "PKZIP Master Key (6 byte optimization)", "samples": [ "f1eff5c0368d10311dcfc419" ] } ] }, { "regex": "^[a-z0-9\\/.]{24}$", "modes": [ { "john": null, "hashcat": null, "extended": false, "name": "Crypt16" } ] }, { "regex": "^(\\$md2\\$)?[a-f0-9]{32}$", "modes": [ { "john": "md2", "hashcat": null, "extended": false, "name": "MD2" } ] }, { "regex": "^[a-f0-9]{32}(:.+)?$", "modes": [ { "john": "raw-md5", "hashcat": 0, "extended": false, "name": "MD5", "samples": [ "8743b52063cd84097a65d1633f5c74f5", "098F6BCD4621D373CADE4E832627B4F6" ] }, { "john": "raw-md4", "hashcat": 900, "extended": false, "name": "MD4" }, { "john": null, "hashcat": 2600, "extended": false, "name": "Double MD5" }, { "john": "lm", "hashcat": 3000, "extended": false, "name": "LM" }, { "john": "haval-128-4", "hashcat": null, "extended": false, "name": "Haval-128 (4 rounds)" }, { "john": "dynamic_160", "hashcat": null, "extended": false, "name": "Haval-128 (3 rounds)" }, { "john": "dynamic_180", "hashcat": null, "extended": false, "name": "Haval-128 (5 rounds)" }, { "john": null, "hashcat": null, "extended": false, "name": "Tiger-128" }, { "john": null, "hashcat": null, "extended": false, "name": "Skein-256(128)" }, { "john": null, "hashcat": null, "extended": false, "name": "Skein-512(128)" }, { "john": "lotus5", "hashcat": 8600, "extended": false, "name": "Lotus Notes/Domino 5" }, { "john": null, "hashcat": 23, "extended": false, "name": "Skype" }, { "john": null, "hashcat": null, "extended": true, "name": "ZipMonster" }, { "john": "dynamic_3", "hashcat": 3500, "extended": true, "name": "md5(md5(md5($pass)))", "samples": [ "9882d0778518b095917eb589f6998441" ] }, { "john": "dynamic_2", "hashcat": null, "extended": true, "name": "md5(md5($pass))" }, { "john": null, "hashcat": 4300, "extended": true, "name": "md5(uppercase(md5($pass)))" }, { "john": "dynamic_22", "hashcat": 4400, "extended": true, "name": "md5(sha1($pass))" }, { "john": "dynamic_1", "hashcat": 10, "extended": true, "name": "md5($pass.$salt)" }, { "john": "dynamic_4", "hashcat": 20, "extended": true, "name": "md5($salt.$pass)" }, { "john": null, "hashcat": 30, "extended": true, "name": "md5(unicode($pass).$salt)" }, { "john": null, "hashcat": 40, "extended": true, "name": "md5($salt.unicode($pass))" }, { "john": "hmac-md5", "hashcat": 50, "extended": true, "name": "HMAC-MD5 (key = $pass)" }, { "john": "hmac-md5", "hashcat": 60, "extended": true, "name": "HMAC-MD5 (key = $salt)" }, { "john": "dynamic_8", "hashcat": 3610, "extended": true, "name": "md5(md5($salt).$pass)", "samples": [ "7b57255a15958ef898543ea6cc3313bc:1234" ] }, { "john": "dynamic_9", "hashcat": 3710, "extended": true, "name": "md5($salt.md5($pass))" }, { "john": null, "hashcat": 3720, "extended": true, "name": "md5($pass.md5($salt))", "samples": [ "10ce488714fdbde9453670e0e4cbe99c:1234" ] }, { "john": "dynamic_5", "hashcat": 3810, "extended": true, "name": "md5($salt.$pass.$salt)" }, { "john": "dynamic_14", "hashcat": null, "extended": true, "name": "md5($salt.md5($pass).$salt)" }, { "john": "dynamic_13", "hashcat": 3910, "extended": true, "name": "md5(md5($pass).md5($salt))" }, { "john": "dynamic_12", "hashcat": null, "extended": true, "name": "md5(md5($salt).md5($pass))" }, { "john": "dynamic_6", "hashcat": null, "extended": true, "name": "md5(md5($pass).$salt)" }, { "john": "dynamic_10", "hashcat": 4010, "extended": true, "name": "md5($salt.md5($salt.$pass))" }, { "john": "dynamic_11", "hashcat": 4110, "extended": true, "name": "md5($salt.md5($pass.$salt))" }, { "john": null, "hashcat": 4210, "extended": true, "name": "md5($username.0.$pass)", "samples": [ "09ea048c345ad336ebe38ae5b6c4de24:1234" ] }, { "john": "dynamic_15", "hashcat": null, "extended": true, "name": "md5($username.md5($pass).$salt)" }, { "john": "dynamic_16", "hashcat": null, "extended": true, "name": "md5(md5(md5($pass).$salt).$salt2)" }, { "john": "dynamic_18", "hashcat": null, "extended": true, "name": "md5($salt.Y.$pass.0xF7.$salt)" }, { "john": "dynamic_29", "hashcat": null, "extended": true, "name": "md5(utf16($pass))" }, { "john": "dynamic_31", "hashcat": null, "extended": true, "name": "md4($salt.$pass)" }, { "john": "dynamic_32", "hashcat": null, "extended": true, "name": "md4($pass.$salt)" }, { "john": "dynamic_33", "hashcat": null, "extended": true, "name": "md4(utf16($pass))" }, { "john": "dynamic_34", "hashcat": null, "extended": true, "name": "md5(md4($pass))" }, { "john": "dynamic_39", "hashcat": null, "extended": true, "name": "md5($salt.pad16($pass))" } ] }, { "regex": "^[a-f0-9]{32}:.{56}$", "modes": [ { "john": null, "hashcat": 11000, "extended": false, "name": "PrestaShop", "samples": [ "f22cade043e7214200206dbffca49fd9:27167508161455764247627144160038845437138252877014827848", "810e3d12f0f10777a679d9ca1ad7a8d9:M2uZ122bSHJ4Mi54tXGY0lqcv1r28mUluSkyw37ou5oia4i239ujqw0l" ] } ] }, { "regex": "^(\\$netmd5\\$)?([a-f0-9]{88,96}\\$)?[a-f0-9]{32}$", "modes": [ { "john": "net-md5", "hashcat": null, "extended": false, "name": "Keyed MD5: RIPv2, OSPF, BGP, SNMPv2", "samples": [ "02020000ffff0003002c01145267d48d000000000000000000020000ac100100ffffff000000000000000001ffff0001$1e372a8a233c6556253a0909bc3dcce6", "$netmd5$0201002cac1001010000000000000002000001105267ff8fffffff00000a0201000000280000000000000000$445ecbb27272bd791a757a6c85856150" ] } ] }, { "regex": "^(\\$ripemd\\$)?[a-f0-9]{32}(:.+)?$", "modes": [ { "john": "ripemd-128", "hashcat": null, "extended": false, "name": "RIPEMD-128", "samples": [ "cdf26213a150dc3ecb610f18f6b38b46", "$ripemd$cdf26213a150dc3ecb610f18f6b38b46" ] } ] }, { "regex": "^(\\$snefru\\$)?[a-f0-9]{32}$", "modes": [ { "john": "snefru-128", "hashcat": null, "extended": false, "name": "Snefru-128" } ] }, { "regex": "^(\\$NT\\$)?[a-f0-9]{32}$", "modes": [ { "john": "nt", "hashcat": 1000, "extended": false, "name": "NTLM" } ] }, { "regex": "^([^\\\\\\/:*?\"<>|]{1,20}:)?[a-f0-9]{32}(:[^\\\\\\/:*?\"<>|]{1,20})?$", "modes": [ { "john": "mscach", "hashcat": 1100, "extended": false, "name": "Domain Cached Credentials" } ] }, { "regex": "^([^\\\\\\/:*?\"<>|]{1,20}:)?(\\$DCC2\\$10240#[^\\\\\\/:*?\"<>|]{1,20}#)?[a-f0-9]{32}$", "modes": [ { "john": "mscach2", "hashcat": 2100, "extended": false, "name": "Domain Cached Credentials 2" } ] }, { "regex": "^{SHA}[a-z0-9\\/+]{27}=$", "modes": [ { "john": "nsldap", "hashcat": 101, "extended": false, "name": "SHA-1(Base64)" }, { "john": "nsldap", "hashcat": 101, "extended": false, "name": "Netscape LDAP SHA" } ] }, { "regex": "^\\$1\\$[a-z0-9\\/.]{0,8}\\$[a-z0-9\\/.]{22}(:.*)?$", "modes": [ { "john": "md5crypt", "hashcat": 500, "extended": false, "name": "MD5 Crypt" }, { "john": "md5crypt", "hashcat": 500, "extended": false, "name": "Cisco-IOS(MD5)" }, { "john": "md5crypt", "hashcat": 500, "extended": false, "name": "FreeBSD MD5" } ] }, { "regex": "^0x[a-f0-9]{32}$", "modes": [ { "john": null, "hashcat": null, "extended": false, "name": "Lineage II C4" } ] }, { "regex": "^\\$H\\$[a-z0-9\\/.]{31}$", "modes": [ { "john": "phpass", "hashcat": 400, "extended": false, "name": "phpBB v3.x" }, { "john": "phpass", "hashcat": 400, "extended": false, "name": "Wordpress v2.6.0/2.6.1" }, { "john": "phpass", "hashcat": 400, "extended": false, "name": "PHPass' Portable Hash" } ] }, { "regex": "^\\$P\\$[a-z0-9\\/.]{31}$", "modes": [ { "john": "phpass", "hashcat": 400, "extended": false, "name": "Wordpress \u2265 v2.6.2" }, { "john": "phpass", "hashcat": 400, "extended": false, "name": "Joomla \u2265 v2.5.18" }, { "john": "phpass", "hashcat": 400, "extended": false, "name": "PHPass' Portable Hash" } ] }, { "regex": "^[a-f0-9]{32}:[a-z0-9]{2}$", "modes": [ { "john": null, "hashcat": 21, "extended": false, "name": "osCommerce" }, { "john": null, "hashcat": 21, "extended": false, "name": "xt:Commerce" } ] }, { "regex": "^\\$apr1\\$[a-z0-9\\/.]{0,8}\\$[a-z0-9\\/.]{22}$", "modes": [ { "john": null, "hashcat": 1600, "extended": false, "name": "MD5(APR)" }, { "john": null, "hashcat": 1600, "extended": false, "name": "Apache MD5" }, { "john": null, "hashcat": 1600, "extended": false, "name": "md5apr1" } ] }, { "regex": "^{smd5}[a-z0-9$\\/.]{31}$", "modes": [ { "john": "aix-smd5", "hashcat": 6300, "extended": false, "name": "AIX(smd5)" } ] }, { "regex": "^[a-f0-9]{32}:.+$", "modes": [ { "john": null, "hashcat": 3721, "extended": false, "name": "WebEdition CMS", "samples": [ "fa01af9f0de5f377ae8befb03865178e:5678" ] } ] }, { "regex": "^[a-f0-9]{32}:.{5}$", "modes": [ { "john": null, "hashcat": 2811, "extended": false, "name": "IP.Board \u2265 v2+" } ] }, { "regex": "^[a-f0-9]{32}:.{8}$", "modes": [ { "john": null, "hashcat": 2811, "extended": false, "name": "MyBB \u2265 v1.2+" } ] }, { "regex": "^[a-z0-9]{34}$", "modes": [ { "john": null, "hashcat": null, "extended": false, "name": "CryptoCurrency(Adress)" } ] }, { "regex": "^[a-f0-9]{40}(:.+)?$", "modes": [ { "john": "raw-sha1", "hashcat": 100, "extended": false, "name": "SHA-1" }, { "john": null, "hashcat": 4500, "extended": false, "name": "Double SHA-1" }, { "john": "dynamic_190", "hashcat": null, "extended": false, "name": "Haval-160 (3 rounds)" }, { "john": "dynamic_200", "hashcat": null, "extended": false, "name": "Haval-160 (4 rounds)" }, { "john": "dynamic_210", "hashcat": null, "extended": false, "name": "Haval-160 (5 rounds)" }, { "john": null, "hashcat": null, "extended": false, "name": "Tiger-160" }, { "john": null, "hashcat": null, "extended": false, "name": "HAS-160" }, { "john": "raw-sha1-linkedin", "hashcat": 190, "extended": false, "name": "LinkedIn", "samples": [ "b89eaac7e61417341b710b727768294d0e6a277b" ] }, { "john": null, "hashcat": null, "extended": false, "name": "Skein-256(160)" }, { "john": null, "hashcat": null, "extended": false, "name": "Skein-512(160)" }, { "john": "dynamic_35", "hashcat": null, "extended": true, "name": "MangosWeb Enhanced CMS" }, { "john": "dynamic_36", "hashcat": null, "extended": true, "name": "MangosWeb Enhanced CMS v2" }, { "john": "dynamic_35", "hashcat": null, "extended": true, "name": "sha1(uppercase($username).:.$pass)" }, { "john": "dynamic_36", "hashcat": null, "extended": true, "name": "sha1($username.:.$pass)" }, { "john": null, "hashcat": 4600, "extended": true, "name": "sha1(sha1(sha1($pass)))", "samples": [ "dc57f246485e62d99a5110afc9264b4ccbfcf3cc" ] }, { "john": "dynamic_23", "hashcat": 4700, "extended": true, "name": "sha1(md5($pass))" }, { "john": "dynamic_24", "hashcat": 110, "extended": true, "name": "sha1($pass.$salt)" }, { "john": "dynamic_25", "hashcat": 120, "extended": true, "name": "sha1($salt.$pass)" }, { "john": null, "hashcat": 130, "extended": true, "name": "sha1(unicode($pass).$salt)" }, { "john": null, "hashcat": 140, "extended": true, "name": "sha1($salt.unicode($pass))" }, { "john": "hmac-sha1", "hashcat": 150, "extended": true, "name": "HMAC-SHA1 (key = $pass)" }, { "john": "hmac-sha1", "hashcat": 160, "extended": true, "name": "HMAC-SHA1 (key = $salt)" }, { "john": null, "hashcat": 4710, "extended": true, "name": "sha1($salt.$pass.$salt)" }, { "john": "dynamic_37", "hashcat": null, "extended": true, "name": "SMF" }, { "john": "dynamic_37", "hashcat": null, "extended": true, "name": "sha1(lowercase($username).$pass)" }, { "john": "dynamic_38", "hashcat": null, "extended": true, "name": "Wolt3BB" }, { "john": "dynamic_38", "hashcat": null, "extended": true, "name": "sha1($salt.sha1($salt.sha1($pass)))" }, { "john": "dynamic_40", "hashcat": null, "extended": true, "name": "net-sha1" }, { "john": "dynamic_40", "hashcat": null, "extended": true, "name": "sha1($salt.pad20($pass))" } ] }, { "regex": "^(\\$ripemd\\$)?[a-f0-9]{40}(:.+)?$", "modes": [ { "john": "ripemd-160", "hashcat": 6000, "extended": false, "name": "RIPEMD-160", "samples": [ "9c1185a5c5e9fc54612808977ee8f548b2258d31", "$ripemd$9c1185a5c5e9fc54612808977ee8f548b2258d31", "012cb9b334ec1aeb71a9c8ce85586082467f7eb6" ] } ] }, { "regex": "^(\\*)?[a-f0-9]{40}$", "modes": [ { "john": "mysql-sha1", "hashcat": 300, "extended": false, "name": "MySQL5.x", "samples": [ "*2c905879f74f28f8570989947d06a8429fb943e6", "*A8A397146B1A5F8C8CF26404668EFD762A1B7B82" ] }, { "john": "mysql-sha1", "hashcat": 300, "extended": false, "name": "MySQL4.1", "samples": [ "*5AD8F88516BD021DD43F171E2C785C69F8E54ADB", "*be1bdec0aa74b4dcb079943e70528096cca985f8", "fcf7c1b8749cf99d88e5f34271d636178fb5d130" ] } ] }, { "regex": "^[a-z0-9]{43}$", "modes": [ { "john": null, "hashcat": 5700, "extended": false, "name": "Cisco-IOS(SHA-256)" } ] }, { "regex": "^{SSHA}[a-z0-9\\/+]{38}==$", "modes": [ { "john": "nsldaps", "hashcat": 111, "extended": false, "name": "SSHA-1(Base64)" }, { "john": "nsldaps", "hashcat": 111, "extended": false, "name": "Netscape LDAP SSHA" }, { "john": "nsldaps", "hashcat": 111, "extended": true, "name": "nsldaps" } ] }, { "regex": "^[a-z0-9=]{47}$", "modes": [ { "john": "fortigate", "hashcat": 7000, "extended": false, "name": "Fortigate(FortiOS)" } ] }, { "regex": "^[a-f0-9]{48}$", "modes": [ { "john": "dynamic_220", "hashcat": null, "extended": false, "name": "Haval-192 (3 rounds)" }, { "john": "dynamic_230", "hashcat": null, "extended": false, "name": "Haval-192 (4 rounds)" }, { "john": "dynamic_240", "hashcat": null, "extended": false, "name": "Haval-192 (5 rounds)" }, { "john": "tiger", "hashcat": null, "extended": false, "name": "Tiger-192" }, { "john": null, "hashcat": null, "extended": false, "name": "SHA-1(Oracle)" }, { "john": "xsha", "hashcat": 122, "extended": false, "name": "OSX v10.4" }, { "john": "xsha", "hashcat": 122, "extended": false, "name": "OSX v10.5" }, { "john": "xsha", "hashcat": 122, "extended": false, "name": "OSX v10.6" } ] }, { "regex": "^[a-f0-9]{51}$", "modes": [ { "john": null, "hashcat": null, "extended": false, "name": "Palshop CMS" } ] }, { "regex": "^[a-z0-9]{51}$", "modes": [ { "john": null, "hashcat": null, "extended": false, "name": "CryptoCurrency(PrivateKey)" } ] }, { "regex": "^{ssha1}[0-9]{2}\\$[a-z0-9$\\/.]{44}$", "modes": [ { "john": "aix-ssha1", "hashcat": 6700, "extended": false, "name": "AIX(ssha1)" } ] }, { "regex": "^0x0100[a-f0-9]{48}$", "modes": [ { "john": "mssql05", "hashcat": 132, "extended": false, "name": "MSSQL(2005)" }, { "john": "mssql05", "hashcat": 132, "extended": false, "name": "MSSQL(2008)" } ] }, { "regex": "^(\\$md5,rounds=[0-9]+\\$|\\$md5\\$rounds=[0-9]+\\$|\\$md5\\$)[a-z0-9\\/.]{0,16}(\\$|\\$\\$)[a-z0-9\\/.]{22}$", "modes": [ { "john": "sunmd5", "hashcat": 3300, "extended": false, "name": "Sun MD5 Crypt", "samples": [ "$md5$rounds=904$iPPKEBnEkp3JV8uX$0L6m7rOFTVFn.SGqo2M9W1" ] } ] }, { "regex": "^[a-f0-9]{56}$", "modes": [ { "john": "raw-sha224", "hashcat": 1300, "extended": false, "name": "SHA-224" }, { "john": "dynamic_51", "hashcat": null, "extended": true, "name": "sha224($salt.$pass)" }, { "john": "dynamic_52", "hashcat": null, "extended": true, "name": "sha224($pass.$salt)" }, { "john": "dynamic_53", "hashcat": null, "extended": true, "name": "sha224(sha224($pass))" }, { "john": "dynamic_54", "hashcat": null, "extended": true, "name": "sha224(sha224_raw($pass))" }, { "john": "dynamic_55", "hashcat": null, "extended": true, "name": "sha224(sha224($pass).$salt)" }, { "john": "dynamic_56", "hashcat": null, "extended": true, "name": "sha224($salt.sha224($pass))" }, { "john": "dynamic_57", "hashcat": null, "extended": true, "name": "sha224(sha224($salt).sha224($pass))" }, { "john": "dynamic_58", "hashcat": null, "extended": true, "name": "sha224(sha224($pass).sha224($pass))" }, { "john": "dynamic_250", "hashcat": null, "extended": false, "name": "Haval-224 (3 rounds)" }, { "john": "dynamic_260", "hashcat": null, "extended": false, "name": "Haval-224 (4 rounds)" }, { "john": "dynamic_270", "hashcat": null, "extended": false, "name": "Haval-224 (5 rounds)" }, { "john": "dynamic_370", "hashcat": 17300, "extended": false, "name": "SHA3-224" }, { "john": "dynamic_430", "hashcat": 17700, "extended": false, "name": "Keccak-224" }, { "john": null, "hashcat": null, "extended": false, "name": "Skein-256(224)" }, { "john": null, "hashcat": null, "extended": false, "name": "Skein-512(224)" }, { "john": "dynamic_330", "hashcat": null, "extended": false, "name": "Skein-224" }, { "john": null, "hashcat": null, "extended": false, "name": "BLAKE2-224" } ] }, { "regex": "^(\\$2[axy]|\\$2)\\$[0-9]{2}\\$[a-z0-9\\/.]{53}$", "modes": [ { "john": "bcrypt", "hashcat": 3200, "extended": false, "name": "Blowfish(OpenBSD)" }, { "john": null, "hashcat": null, "extended": false, "name": "Woltlab Burning Board 4.x" }, { "john": "bcrypt", "hashcat": 3200, "extended": false, "name": "bcrypt" } ] }, { "regex": "^[a-f0-9]{40}:[a-f0-9]{16}$", "modes": [ { "john": null, "hashcat": 5800, "extended": false, "name": "Android PIN" } ] }, { "regex": "^(S:)?[a-f0-9]{40}(:)?[a-f0-9]{20}$", "modes": [ { "john": "oracle11", "hashcat": 112, "extended": false, "name": "Oracle 11g/12c" } ] }, { "regex": "^\\$bcrypt-sha256\\$(2[axy]|2)\\,[0-9]+\\$[a-z0-9\\/.]{22}\\$[a-z0-9\\/.]{31}$", "modes": [ { "john": null, "hashcat": null, "extended": false, "name": "bcrypt(SHA-256)" } ] }, { "regex": "^[a-f0-9]{32}:.{3}$", "modes": [ { "john": null, "hashcat": 2611, "extended": false, "name": "vBulletin < v3.8.5" } ] }, { "regex": "^[a-f0-9]{32}:.{30}$", "modes": [ { "john": null, "hashcat": 2711, "extended": false, "name": "vBulletin \u2265 v3.8.5" } ] }, { "regex": "^(\\$snefru\\$)?[a-f0-9]{64}$", "modes": [ { "john": "snefru-256", "hashcat": null, "extended": false, "name": "Snefru-256" } ] }, { "regex": "^[a-f0-9]{64}(:.+)?$", "modes": [ { "john": "raw-sha256", "hashcat": 1400, "extended": false, "name": "SHA-256" }, { "john": "dynamic_140", "hashcat": null, "extended": false, "name": "RIPEMD-256", "samples": [ "1419109aa0de60e6ba0b6d2b2f602c13b07e97b5ffc85b6be2297badc699262f", "f156e6c20042057840f3251ee041596d89fde06c2505f61764ad1c03c2fc1375" ] }, { "john": "haval-256-3", "hashcat": null, "extended": false, "name": "Haval-256 (3 rounds)" }, { "john": "dynamic_290", "hashcat": null, "extended": false, "name": "Haval-256 (4 rounds)" }, { "john": "dynamic_300", "hashcat": null, "extended": false, "name": "Haval-256 (5 rounds)" }, { "john": "gost", "hashcat": 6900, "extended": false, "name": "GOST R 34.11-94" }, { "john": null, "hashcat": null, "extended": false, "name": "GOST CryptoPro S-Box" }, { "john": "dynamic_380", "hashcat": 17400, "extended": false, "name": "SHA3-256" }, { "john": "raw-keccak-256", "hashcat": 17800, "extended": false, "name": "Keccak-256" }, { "john": "skein-256", "hashcat": null, "extended": false, "name": "Skein-256" }, { "john": null, "hashcat": null, "extended": false, "name": "Skein-512(256)" }, { "john": null, "hashcat": null, "extended": true, "name": "Ventrilo" }, { "john": "dynamic_62", "hashcat": 1410, "extended": true, "name": "sha256($pass.$salt)" }, { "john": "dynamic_61", "hashcat": 1420, "extended": true, "name": "sha256($salt.$pass)" }, { "john": null, "hashcat": 1430, "extended": true, "name": "sha256(unicode($pass).$salt)" }, { "john": null, "hashcat": 1440, "extended": true, "name": "sha256($salt.unicode($pass))" }, { "john": "hmac-sha256", "hashcat": 1450, "extended": true, "name": "HMAC-SHA256 (key = $pass)" }, { "john": "hmac-sha256", "hashcat": 1460, "extended": true, "name": "HMAC-SHA256 (key = $salt)" }, { "john": "dynamic_63", "hashcat": null, "extended": true, "name": "sha256(sha256($pass))" }, { "john": "dynamic_64", "hashcat": null, "extended": true, "name": "sha256(sha256_raw($pass))" }, { "john": "dynamic_65", "hashcat": null, "extended": true, "name": "sha256(sha256($pass).$salt)" }, { "john": "dynamic_66", "hashcat": null, "extended": true, "name": "sha256($salt.sha256($pass))" }, { "john": "dynamic_67", "hashcat": null, "extended": true, "name": "sha256(sha256($salt).sha256($pass))" }, { "john": "dynamic_68", "hashcat": null, "extended": true, "name": "sha256(sha256($pass).sha256($pass))" }, { "john": "dynamic_320", "hashcat": null, "extended": false, "name": "PANAMA" }, { "john": null, "hashcat": null, "extended": false, "name": "BLAKE2-256" } ] }, { "regex": "^[a-f0-9]{32}:[a-z0-9]{32}$", "modes": [ { "john": null, "hashcat": 11, "extended": false, "name": "Joomla < v2.5.18" } ] }, { "regex": "^[a-f0-9]{32}:[a-f0-9]{32}$", "modes": [ { "john": null, "hashcat": null, "extended": false, "name": "SAM(LM_Hash:NT_Hash)" } ] }, { "regex": "^(\\$chap\\$0\\*)?[a-f0-9]{32}[\\*:][a-f0-9]{32}(:[0-9]{2})?$", "modes": [ { "john": "chap", "hashcat": 4800, "extended": false, "name": "MD5(Chap)" }, { "john": "chap", "hashcat": 4800, "extended": false, "name": "iSCSI CHAP Authentication" } ] }, { "regex": "^\\$episerver\\$\\*0\\*[a-z0-9\\/=+]+\\*[a-z0-9\\/=+]{27,28}$", "modes": [ { "john": "episerver", "hashcat": 141, "extended": false, "name": "EPiServer 6.x < v4" } ] }, { "regex": "^{ssha256}[0-9]{2}\\$[a-z0-9$\\/.]{60}$", "modes": [ { "john": "aix-ssha256", "hashcat": 6400, "extended": false, "name": "AIX(ssha256)" } ] }, { "regex": "^[a-f0-9]{80}$", "modes": [ { "john": "dynamic_150", "hashcat": null, "extended": false, "name": "RIPEMD-320", "samples": [ "303aa1dcb731cd4e4bff2a60971eb7376c6c47cb59947c804776d115470183c8cc2e487337b45412", "3c616c27aa7539c4726388c9e047aa4ea089dd739b3cfc470e964ea12e479da3cce437b9daa90214" ] } ] }, { "regex": "^\\$episerver\\$\\*1\\*[a-z0-9\\/=+]+\\*[a-z0-9\\/=+]{42,43}$", "modes": [ { "john": "episerver", "hashcat": 1441, "extended": false, "name": "EPiServer 6.x \u2265 v4" } ] }, { "regex": "^0x0100[a-f0-9]{88}$", "modes": [ { "john": "mssql", "hashcat": 131, "extended": false, "name": "MSSQL(2000)" } ] }, { "regex": "^[a-f0-9]{96}$", "modes": [ { "john": "raw-sha384", "hashcat": 10800, "extended": false, "name": "SHA-384" }, { "john": "dynamic_390", "hashcat": 17500, "extended": false, "name": "SHA3-384" }, { "john": "dynamic_440", "hashcat": 17900, "extended": false, "name": "Keccak-384" }, { "john": null, "hashcat": null, "extended": false, "name": "Skein-512(384)" }, { "john": null, "hashcat": null, "extended": false, "name": "Skein-1024(384)" }, { "john": "dynamic_71", "hashcat": null, "extended": true, "name": "sha384($salt.$pass)" }, { "john": "dynamic_72", "hashcat": null, "extended": true, "name": "sha384($pass.$salt)" }, { "john": "dynamic_73", "hashcat": null, "extended": true, "name": "sha384(sha384($pass))" }, { "john": "dynamic_74", "hashcat": null, "extended": true, "name": "sha384(sha384_raw($pass))" }, { "john": "dynamic_75", "hashcat": null, "extended": true, "name": "sha384(sha384($pass).$salt)" }, { "john": "dynamic_76", "hashcat": null, "extended": true, "name": "sha384($salt.sha384($pass))" }, { "john": "dynamic_77", "hashcat": null, "extended": true, "name": "sha384(sha384($salt).sha384($pass))" }, { "john": "dynamic_78", "hashcat": null, "extended": true, "name": "sha384(sha384($pass).sha384($pass))" }, { "john": "dynamic_350", "hashcat": null, "extended": true, "name": "Skein-384" }, { "john": null, "hashcat": null, "extended": false, "name": "BLAKE2-384" } ] }, { "regex": "^{SSHA512}[a-z0-9\\/+]{96}$", "modes": [ { "john": "ssha512", "hashcat": 1711, "extended": false, "name": "SSHA-512(Base64)" }, { "john": "ssha512", "hashcat": 1711, "extended": false, "name": "LDAP(SSHA-512)" } ] }, { "regex": "^{ssha512}[0-9]{2}\\$[a-z0-9\\/.]{16,48}\\$[a-z0-9\\/.]{86}$", "modes": [ { "john": "aix-ssha512", "hashcat": 6500, "extended": false, "name": "AIX(ssha512)" } ] }, { "regex": "^[a-f0-9]{128}(:.+)?$", "modes": [ { "john": "raw-sha512", "hashcat": 1700, "extended": false, "name": "SHA-512", "samples": [ "f342aae82952db35b8e02c30115e3deed3d80fdfdadacab336f0ba51ac54e297291fa1d6b201d69a2bd77e2535280f17a54fa1e527abc6e2eddba79ad3be11c0", "7aba4411846c61b08b0f2282a8a4600232ace4dd96593c755ba9c9a4e7b780b8bdc437b5c55574b3e8409c7b511032f98ef120e25467678f0458643578eb60ff", "12b03226a6d8be9c6e8cd5e55dc6c7920caaa39df14aab92d5e3ea9340d1c8a4d3d0b8e4314f1f6ef131ba4bf1ceb9186ab87c801af0d5c95b1befb8cedae2b9" ] }, { "john": "whirlpool", "hashcat": 6100, "extended": false, "name": "Whirlpool" }, { "john": null, "hashcat": null, "extended": false, "name": "Salsa10" }, { "john": null, "hashcat": null, "extended": false, "name": "Salsa20" }, { "john": "raw-sha3", "hashcat": 17600, "extended": false, "name": "SHA3-512" }, { "john": "dynamic_400", "hashcat": 17600, "extended": false, "name": "SHA3-512" }, { "john": "raw-keccak", "hashcat": 18000, "extended": false, "name": "Keccak-512" }, { "john": "raw-blake2", "hashcat": null, "extended": false, "name": "BLAKE2-512" }, { "john": "skein-512", "hashcat": null, "extended": false, "name": "Skein-512" }, { "john": null, "hashcat": null, "extended": false, "name": "Skein-1024(512)" }, { "john": "dynamic_82", "hashcat": 1710, "extended": true, "name": "sha512($pass.$salt)" }, { "john": "dynamic_81", "hashcat": 1720, "extended": true, "name": "sha512($salt.$pass)" }, { "john": null, "hashcat": 1730, "extended": true, "name": "sha512(unicode($pass).$salt)" }, { "john": null, "hashcat": 1740, "extended": true, "name": "sha512($salt.unicode($pass))" }, { "john": "hmac-sha512", "hashcat": 1750, "extended": true, "name": "HMAC-SHA512 (key = $pass)" }, { "john": "hmac-sha512", "hashcat": 1760, "extended": true, "name": "HMAC-SHA512 (key = $salt)" }, { "john": "dynamic_83", "hashcat": null, "extended": true, "name": "sha512(sha512($pass))" }, { "john": "dynamic_85", "hashcat": null, "extended": true, "name": "sha512(sha512($pass).$salt)" }, { "john": "dynamic_86", "hashcat": null, "extended": true, "name": "sha512($salt.sha512($pass))" }, { "john": "dynamic_87", "hashcat": null, "extended": true, "name": "sha512(sha512($salt).sha512($pass))" }, { "john": "dynamic_88", "hashcat": null, "extended": true, "name": "sha512(sha512($pass).sha512($pass))" } ] }, { "regex": "^\\$BLAKE2\\$[a-f0-9]{128}$", "modes": [ { "john": "raw-blake2", "hashcat": 600, "extended": false, "name": "BLAKE2-512" } ] }, { "regex": "^[a-f0-9]{136}$", "modes": [ { "john": "xsha512", "hashcat": 1722, "extended": false, "name": "OSX v10.7" } ] }, { "regex": "^0x0200[a-f0-9]{136}$", "modes": [ { "john": "mssql12", "hashcat": 1731, "extended": false, "name": "MSSQL(2012)", "samples": [ "0x0200F733058A07892C5CACE899768F89965F6BD1DED7955FE89E1C9A10E27849B0B213B5CE92CC9347ECCB34C3EFADAF2FD99BFFECD8D9150DD6AACB5D409A9D2652A4E0AF16", "0x0200AB3E1F9028A739EEF62ABF672427276A32D5EDD349E638E7F2CD81DAA247CFE20EE4E3B0A30B2D0AE3C3FA010E61752F1BF45E045041F1B988C083C7F118527E3E5F0562" ] }, { "john": "mssql12", "hashcat": 1731, "extended": false, "name": "MSSQL(2014)", "samples": [ "0x02003788006711b2e74e7d8cb4be96b1d187c962c5591a02d5a6ae81b3a4a094b26b7877958b26733e45016d929a756ed30d0a5ee65d3ce1970f9b7bf946e705c595f07625b1", "0x02006BF4AB05873FF0C8A4AFD1DC5912CBFDEF62E0520A3353B04E1184F05C873C9C76BBADDEAAC1E9948C7B6ABFFD62BFEFD7139F17F6AFE10BE0FEE7A178644623067C2423" ] } ] }, { "regex": "^\\$ml\\$[0-9]+\\$[a-f0-9]{64}\\$[a-f0-9]{128}$", "modes": [ { "john": "pbkdf2-hmac-sha512", "hashcat": 7100, "extended": false, "name": "OSX v10.8" }, { "john": "pbkdf2-hmac-sha512", "hashcat": 7100, "extended": false, "name": "OSX v10.9" } ] }, { "regex": "^[a-f0-9]{256}$", "modes": [ { "john": null, "hashcat": null, "extended": false, "name": "Skein-1024" } ] }, { "regex": "^grub\\.pbkdf2\\.sha512\\.[0-9]+\\.([a-f0-9]{128,2048}\\.|[0-9]+\\.)?[a-f0-9]{128}$", "modes": [ { "john": null, "hashcat": 7200, "extended": false, "name": "GRUB 2" } ] }, { "regex": "^sha1\\$[a-z0-9]+\\$[a-f0-9]{40}$", "modes": [ { "john": null, "hashcat": 124, "extended": false, "name": "Django(SHA-1)" } ] }, { "regex": "^[a-f0-9]{49}$", "modes": [ { "john": "citrix_ns10", "hashcat": 8100, "extended": false, "name": "Citrix Netscaler" } ] }, { "regex": "^\\$S\\$[a-z0-9\\/.]{52}$", "modes": [ { "john": "drupal7", "hashcat": 7900, "extended": false, "name": "Drupal > v7.x" } ] }, { "regex": "^\\$5\\$(rounds=[0-9]+\\$)?[a-z0-9\\/.]{0,16}\\$[a-z0-9\\/.]{43}$", "modes": [ { "john": "sha256crypt", "hashcat": 7400, "extended": false, "name": "SHA-256 Crypt" } ] }, { "regex": "^0x[a-f0-9]{4}[a-f0-9]{16}[a-f0-9]{64}$", "modes": [ { "john": "sybasease", "hashcat": 8000, "extended": false, "name": "Sybase ASE" } ] }, { "regex": "^\\$6\\$(rounds=[0-9]+\\$)?[a-z0-9\\/.]{0,16}\\$[a-z0-9\\/.]{86}$", "modes": [ { "john": "sha512crypt", "hashcat": 1800, "extended": false, "name": "SHA-512 Crypt" } ] }, { "regex": "^\\$sha\\$[a-z0-9]{1,16}\\$([a-f0-9]{32}|[a-f0-9]{40}|[a-f0-9]{64}|[a-f0-9]{128}|[a-f0-9]{140})$", "modes": [ { "john": null, "hashcat": 20711, "extended": false, "name": "Minecraft (AuthMe Reloaded sha256)", "samples": [ "$SHA$7218532375810603$bfede293ecf6539211a7305ea218b9f3f608953130405cda9eaba6fb6250f824" ] } ] }, { "regex": "^sha256\\$[a-z0-9]+\\$[a-f0-9]{64}$", "modes": [ { "john": null, "hashcat": null, "extended": false, "name": "Django(SHA-256)" } ] }, { "regex": "^sha384\\$[a-z0-9]+\\$[a-f0-9]{96}$", "modes": [ { "john": null, "hashcat": null, "extended": false, "name": "Django(SHA-384)" } ] }, { "regex": "^crypt1:[a-z0-9+=]{12}:[a-z0-9+=]{12}$", "modes": [ { "john": null, "hashcat": null, "extended": false, "name": "Clavister Secure Gateway" } ] }, { "regex": "^[a-f0-9]{112}$", "modes": [ { "john": null, "hashcat": null, "extended": false, "name": "Cisco VPN Client(PCF-File)" } ] }, { "regex": "^[a-f0-9]{1329}$", "modes": [ { "john": null, "hashcat": null, "extended": false, "name": "Microsoft MSTSC(RDP-File)" } ] }, { "regex": "^[^\\\\\\/:*?\"<>|]{1,20}[:]{2,3}([^\\\\\\/:*?\"<>|]{1,20})?:[a-f0-9]{48}:[a-f0-9]{48}:[a-f0-9]{16}$", "modes": [ { "john": "netntlm", "hashcat": 5500, "extended": false, "name": "NetNTLMv1-VANILLA / NetNTLMv1+ESS" } ] }, { "regex": "^([^\\\\\\/:*?\"<>|]{1,20}\\\\)?[^\\\\\\/:*?\"<>|]{1,20}[:]{2,3}([^\\\\\\/:*?\"<>|]{1,20}:)?[^\\\\\\/:*?\"<>|]{1,20}:[a-f0-9]{32}:[a-f0-9]+$", "modes": [ { "john": "netntlmv2", "hashcat": 5600, "extended": false, "name": "NetNTLMv2" } ] }, { "regex": "^\\$(krb5pa|mskrb5)\\$([0-9]{2})?\\$.+\\$[a-f0-9]{1,}$", "modes": [ { "john": "krb5pa-md5", "hashcat": 7500, "extended": false, "name": "Kerberos 5 AS-REQ Pre-Auth etype 23" } ] }, { "regex": "^\\$krb5tgs\\$23\\$\\*[^*]*\\*\\$[a-f0-9]{32}\\$[a-f0-9]{64,40960}$", "modes": [ { "john": "krb5tgs", "hashcat": 13100, "extended": false, "name": "Kerberos 5 TGS-REP etype 23" } ] }, { "regex": "^\\$krb5asrep\\$23\\$[^:]+:[a-f0-9]{32,32}\\$[a-f0-9]{64,40960}$", "modes": [ { "john": "krb5asrep", "hashcat": 18200, "extended": false, "name": "Kerberos 5 AS-REP etype 23" } ] }, { "regex": "^\\$krb5asrep\\$18\\$[^:]+:[a-f0-9]{32,32}\\$[a-f0-9]{64,40960}$", "modes": [ { "john": "krb5asrep", "hashcat": null, "extended": false, "name": "Kerberos 5 AS-REP etype 18" } ] }, { "regex": "^\\$krb5asrep\\$17\\$[^:]+:[a-f0-9]{32,32}\\$[a-f0-9]{64,40960}$", "modes": [ { "john": "krb5asrep", "hashcat": null, "extended": false, "name": "Kerberos 5 AS-REP etype 17" } ] }, { "regex": "^\\$krb5tgs\\$17\\$[^$]{1,512}\\$[^$]{1,512}\\$[^$]{1,4}?\\$?[a-f0-9]{1,32}\\$[a-f0-9]{64,40960}$", "modes": [ { "john": null, "hashcat": 19600, "extended": false, "name": "Kerberos 5 TGS-REP etype 17 (AES128-CTS-HMAC-SHA1-96)" } ] }, { "regex": "^\\$krb5tgs\\$18\\$[^$]{1,512}\\$[^$]{1,512}\\$[^$]{1,4}?\\$?[a-f0-9]{1,32}\\$[a-f0-9]{64,40960}$", "modes": [ { "john": null, "hashcat": 19700, "extended": false, "name": "Kerberos 5 TGS-REP etype 18 (AES256-CTS-HMAC-SHA1-96)" } ] }, { "regex": "^\\$krb5pa\\$17\\$[^$]{1,512}\\$[^$]{1,512}\\$[a-f0-9]{104,112}$", "modes": [ { "john": "krb5pa-sha1", "hashcat": 19800, "extended": false, "name": "Kerberos 5 AS-REQ Pre-Auth etype 17" } ] }, { "regex": "^\\$krb5pa\\$18\\$[^$]{1,512}\\$[^$]{1,512}\\$[a-f0-9]{104,112}$", "modes": [ { "john": "krb5pa-sha1", "hashcat": 19900, "extended": false, "name": "Kerberos 5 AS-REQ Pre-Auth etype 18" } ] }, { "regex": "^\\$scram\\$[0-9]+\\$[a-z0-9\\/.]{16}\\$sha-1=[a-z0-9\\/.]{27},sha-256=[a-z0-9\\/.]{43},sha-512=[a-z0-9\\/.]{86}$", "modes": [ { "john": null, "hashcat": null, "extended": false, "name": "SCRAM Hash" } ] }, { "regex": "^[a-f0-9]{40}:[a-f0-9]{0,32}$", "modes": [ { "john": null, "hashcat": 4521, "extended": false, "name": "Redmine", "samples": [ "c18e826af2a78c7b9b7261452613233417e65817:28246535720688452723483475753333" ] } ] }, { "regex": "^(.+)?\\$[a-f0-9]{16}$", "modes": [ { "john": "sapb", "hashcat": 7700, "extended": false, "name": "SAP CODVN B (BCODE)" } ] }, { "regex": "^(.+)?\\$[a-f0-9]{40}$", "modes": [ { "john": "sapg", "hashcat": 7800, "extended": false, "name": "SAP CODVN F/G (PASSCODE)" } ] }, { "regex": "^(.+\\$)?[a-z0-9\\/.+]{30}(:.+)?$", "modes": [ { "john": "md5ns", "hashcat": 22, "extended": false, "name": "Juniper Netscreen/SSG(ScreenOS)" } ] }, { "regex": "^0x[a-f0-9]{60}\\s0x[a-f0-9]{40}$", "modes": [ { "john": null, "hashcat": 123, "extended": false, "name": "EPi", "samples": [ "0x326C6D7B4E4F794B79474E36704F35723958397163735263516265456E31 0xAFC55E260B8F45C0C6512BCE776C1AD8312B56E6" ] } ] }, { "regex": "^[a-f0-9]{40}:[^*]{1,25}$", "modes": [ { "john": null, "hashcat": 121, "extended": false, "name": "SMF \u2265 v1.1" } ] }, { "regex": "^(\\$wbb3\\$\\*1\\*)?[a-f0-9]{40}[:*][a-f0-9]{40}$", "modes": [ { "john": "wbb3", "hashcat": 8400, "extended": false, "name": "Woltlab Burning Board 3.x" } ] }, { "regex": "^[a-f0-9]{130}(:[a-f0-9]{40})?$", "modes": [ { "john": null, "hashcat": 7300, "extended": false, "name": "IPMI2 RAKP HMAC-SHA1" } ] }, { "regex": "^[a-f0-9]{32}:[0-9]+:[a-z0-9_.+\\-]+@[a-z0-9\\-]+\\.[a-z0-9\\-.]+$", "modes": [ { "john": null, "hashcat": 6800, "extended": false, "name": "Lastpass" } ] }, { "regex": "^[a-z0-9\\/.]{16}([:$].{1,})?$", "modes": [ { "john": "asa-md5", "hashcat": 2410, "extended": false, "name": "Cisco-ASA(MD5)" }, { "john": "dynamic_20", "hashcat": 2410, "extended": true, "name": "md5($pass.$salt)" } ] }, { "regex": "^\\$vnc\\$\\*[a-f0-9]{32}\\*[a-f0-9]{32}$", "modes": [ { "john": "vnc", "hashcat": null, "extended": false, "name": "VNC" } ] }, { "regex": "^[a-z0-9]{32}(:([a-z0-9\\-]+\\.)?[a-z0-9\\-.]+\\.[a-z]{2,7}:.+:[0-9]+)?$", "modes": [ { "john": null, "hashcat": 8300, "extended": false, "name": "DNSSEC(NSEC3)" } ] }, { "regex": "^(user-.+:)?\\$racf\\$\\*.+\\*[a-f0-9]{16}$", "modes": [ { "john": "racf", "hashcat": 8500, "extended": false, "name": "RACF" } ] }, { "regex": "^\\$3\\$\\$[a-f0-9]{32}$", "modes": [ { "john": null, "hashcat": null, "extended": false, "name": "NTHash(FreeBSD Variant)" } ] }, { "regex": "^\\$sha1\\$[0-9]+\\$[a-z0-9\\/.]{0,64}\\$[a-z0-9\\/.]{28}$", "modes": [ { "john": "sha1crypt", "hashcat": 15100, "extended": false, "name": "SHA-1 Crypt (Juniper/NetBSD)", "samples": [ "$sha1$20000$75552156$HhYMDdaEHiK3eMIzTldOFPnw.s2Q", "$sha1$64000$wnUR8T1U$azjCegpOIk0FjE61qzGWhdkpuMRL" ] } ] }, { "regex": "^[a-f0-9]{70}$", "modes": [ { "john": "hmailserver", "hashcat": 1421, "extended": false, "name": "hMailServer" } ] }, { "regex": "^[:\\$][AB][:\\$]([a-f0-9]{1,8}[:\\$])?[a-f0-9]{32}$", "modes": [ { "john": "mediawiki", "hashcat": 3711, "extended": false, "name": "MediaWiki" } ] }, { "regex": "^[a-f0-9]{140}$", "modes": [ { "john": null, "hashcat": null, "extended": false, "name": "Minecraft(xAuth)" } ] }, { "regex": "^\\$pbkdf2(-hmac)?(-sha1)?\\$([0-9]{1,6}\\$[a-z0-9\\/.]+\\$[a-z0-9\\/.]+|[0-9]{1,6}\\.[a-f0-9]+\\.[a-f0-9]{40})$", "modes": [ { "john": "pbkdf2-hmac-sha1", "hashcat": 20400, "extended": false, "name": "PBKDF2-SHA1 (Generic)", "samples": [ "$pbkdf2$131000$r5WythYixPgfQ2jt3buXcg$8Kdr.QQEOaZIXNOrrru36I/.6Po", "$pbkdf2-hmac-sha1$1000.fd11cde0.27de197171e6d49fc5f55c9ef06c0d8751cd7250", "$pbkdf2-hmac-sha1$1000$6926d45e$231c561018a4cee662df7cd4a8206701c5806af9", "$pbkdf2-hmac-sha1$1000.6834476f733353333654315a5a31494f.1932a843a69dc1e38a29d2691a7abf27ecaa6d55", "$pbkdf2-hmac-sha1$1000.3031323334353637383930313233343536373839303132333435363738393031323334353637383930313233343536373839303132333435363738393031323334353637383930313233343536373839303132333435363738393031323334353637383930313233343536373839303132333435363738393031323334353637383930313233343536373839303132333435363738393031323334353637383930313233343536373839303132333435363738.8f7c89f74233f78f6c8ace00696cf6ed09ae43f4" ] } ] }, { "regex": "^\\$pbkdf2-sha256\\$[0-9]{1,6}\\$[a-z0-9\\/.]+\\$[a-z0-9\\/.]+$", "modes": [ { "john": "pbkdf2-hmac-sha256", "hashcat": 20300, "extended": false, "name": "PBKDF2-SHA256 (Generic)", "samples": [ "$pbkdf2-sha256$29000$x9h7j/Ge8x6DMEao1VqrdQ$kra3R1wEnY8mPdDWOpTqOTINaAmZvRMcYd8u5OBQP9A", "$pbkdf2-sha256$1000$b1dWS2dab3dKQWhPSUg3cg$UY9j5wlyxtsJqhDKTqua8Q3fMp0ojc2pOnErzr8ntLE", "$pbkdf2-sha256$12000$fK8VAoDQuvees5ayVkpp7Q$xfzKAoBR/Iaa68tjn.O8KfGxV.zdidcqEeDoTFvDz2A", "$pbkdf2-sha256$12000$MDEyMzQ1Njc4OTAxMjM0NTY3ODkwMTIzNDU2Nzg5MDEyMzQ1Njc4OTAxMjM0NTY3ODkwMTIzNDU2Nzg5MDEyMzQ1Njc4OTAxMjM0NTY3ODkwMTIzNDU2Nzg5MDEyMzQ1Njc4OTAxMjM0NTY3ODkwMTIzNDU2Nzg5MDEyMzQ1Njc4OTAxMjM0NTY3ODkwMTIzNDU2Nzg5MDEyMzQ1Njc4OTAxMjM0NTY3ODkwMTIzNDU2Nzg$94Z71JhWYUP2E0IrQrexc8AMhHzVB4bwkxh7n0FCnns" ] } ] }, { "regex": "^\\$pbkdf2-sha512\\$[0-9]+\\$[a-z0-9\\/.]+\\$[a-z0-9\\/.]{86}$", "modes": [ { "john": null, "hashcat": null, "extended": false, "name": "PBKDF2-SHA512(Generic)" } ] }, { "regex": "^\\$p5k2\\$[0-9]+\\$[a-z0-9\\/+=\\-]+\\$[a-z0-9\\/+\\-]{27}=$", "modes": [ { "john": null, "hashcat": null, "extended": false, "name": "PBKDF2(Cryptacular)" } ] }, { "regex": "^\\$p5k2\\$[0-9]+\\$[a-z0-9\\/.]+\\$[a-z0-9\\/.]{32}$", "modes": [ { "john": null, "hashcat": null, "extended": false, "name": "PBKDF2(Dwayne Litzenberger)" } ] }, { "regex": "^{FSHP[0123]\\|[0-9]+\\|[0-9]+}[a-z0-9\\/+=]+$", "modes": [ { "john": null, "hashcat": null, "extended": false, "name": "Fairly Secure Hashed Password" } ] }, { "regex": "^\\$PHPS\\$.+\\$[a-f0-9]{32}$", "modes": [ { "john": "phps", "hashcat": 2612, "extended": false, "name": "PHPS" } ] }, { "regex": "^[0-9]{4}:[a-f0-9]{16}:[a-f0-9]{2080}$", "modes": [ { "john": null, "hashcat": 6600, "extended": false, "name": "1Password(Agile Keychain)" } ] }, { "regex": "^[a-f0-9]{64}:[a-f0-9]{32}:[0-9]{5}:[a-f0-9]{608}$", "modes": [ { "john": null, "hashcat": 8200, "extended": false, "name": "1Password(Cloud Keychain)" } ] }, { "regex": "^[a-f0-9]{256}:[a-f0-9]{256}:[a-f0-9]{16}:[a-f0-9]{16}:[a-f0-9]{320}:[a-f0-9]{16}:[a-f0-9]{40}:[a-f0-9]{40}:[a-f0-9]{32}$", "modes": [ { "john": null, "hashcat": 5300, "extended": false, "name": "IKE-PSK MD5" } ] }, { "regex": "^[a-f0-9]{256}:[a-f0-9]{256}:[a-f0-9]{16}:[a-f0-9]{16}:[a-f0-9]{320}:[a-f0-9]{16}:[a-f0-9]{40}:[a-f0-9]{40}:[a-f0-9]{40}$", "modes": [ { "john": null, "hashcat": 5400, "extended": false, "name": "IKE-PSK SHA1" } ] }, { "regex": "^[a-z0-9\\/+]{27}=$", "modes": [ { "john": null, "hashcat": 133, "extended": false, "name": "PeopleSoft" } ] }, { "regex": "^crypt\\$[a-f0-9]{5}\\$[a-z0-9\\/.]{13}$", "modes": [ { "john": null, "hashcat": null, "extended": false, "name": "Django(DES Crypt Wrapper)" } ] }, { "regex": "^(\\$django\\$\\*1\\*)?pbkdf2_sha256\\$[0-9]+\\$[a-z0-9]+\\$[a-z0-9\\/+=]{44}$", "modes": [ { "john": "django", "hashcat": 10000, "extended": false, "name": "Django (PBKDF2-HMAC-SHA256)" } ] }, { "regex": "^pbkdf2_sha1\\$[0-9]+\\$[a-z0-9]+\\$[a-z0-9\\/+=]{28}$", "modes": [ { "john": null, "hashcat": null, "extended": false, "name": "Django(PBKDF2-HMAC-SHA1)" } ] }, { "regex": "^bcrypt(\\$2[axy]|\\$2)\\$[0-9]{2}\\$[a-z0-9\\/.]{53}$", "modes": [ { "john": null, "hashcat": null, "extended": false, "name": "Django(bcrypt)" } ] }, { "regex": "^md5\\$[a-f0-9]+\\$[a-f0-9]{32}$", "modes": [ { "john": null, "hashcat": null, "extended": false, "name": "Django(MD5)" } ] }, { "regex": "^\\{PKCS5S2\\}[a-z0-9\\/+]{64}$", "modes": [ { "john": null, "hashcat": null, "extended": false, "name": "PBKDF2(Atlassian)" } ] }, { "regex": "^md5[a-f0-9]{32}$", "modes": [ { "john": null, "hashcat": null, "extended": false, "name": "PostgreSQL MD5" } ] }, { "regex": "^\\([a-z0-9\\/+]{49}\\)$", "modes": [ { "john": null, "hashcat": 9100, "extended": false, "name": "Lotus Notes/Domino 8" } ] }, { "regex": "^SCRYPT:[0-9]{1,}:[0-9]{1}:[0-9]{1}:[a-z0-9:\\/+=]{1,}$", "modes": [ { "john": null, "hashcat": 8900, "extended": false, "name": "scrypt" } ] }, { "regex": "^\\$8\\$[a-z0-9\\/.]{14}\\$[a-z0-9\\/.]{43}$", "modes": [ { "john": "cisco8", "hashcat": 9200, "extended": false, "name": "Cisco Type 8" } ] }, { "regex": "^\\$9\\$[a-z0-9\\/.]{14}\\$[a-z0-9\\/.]{43}$", "modes": [ { "john": "cisco9", "hashcat": 9300, "extended": false, "name": "Cisco Type 9" } ] }, { "regex": "^\\$office\\$\\*2007\\*[0-9]{2}\\*[0-9]{3}\\*[0-9]{2}\\*[a-z0-9]{32}\\*[a-z0-9]{32}\\*[a-z0-9]{40}$", "modes": [ { "john": "office", "hashcat": 9400, "extended": false, "name": "Microsoft Office 2007" } ] }, { "regex": "^\\$office\\$\\*2010\\*[0-9]{6}\\*[0-9]{3}\\*[0-9]{2}\\*[a-z0-9]{32}\\*[a-z0-9]{32}\\*[a-z0-9]{64}$", "modes": [ { "john": "office", "hashcat": 9500, "extended": false, "name": "Microsoft Office 2010" } ] }, { "regex": "^\\$office\\$\\*2013\\*[0-9]{6}\\*[0-9]{3}\\*[0-9]{2}\\*[a-z0-9]{32}\\*[a-z0-9]{32}\\*[a-z0-9]{64}$", "modes": [ { "john": "office", "hashcat": 9600, "extended": false, "name": "Microsoft Office 2013 - 2019" } ] }, { "regex": "^\\$office\\$2016\\$[0-9]\\$[0-9]{6}\\$[^$]{24}\\$[^$]{88}$", "modes": [ { "john": null, "hashcat": 25300, "extended": false, "name": "Microsoft Office 2016 - SheetProtection" } ] }, { "regex": "^\\$fde\\$[0-9]{2}\\$[a-f0-9]{32}\\$[0-9]{2}\\$[a-f0-9]{32}\\$[a-f0-9]{3072}$", "modes": [ { "john": "fde", "hashcat": 8800, "extended": false, "name": "Android FDE \u2264 4.3" } ] }, { "regex": "^\\$oldoffice\\$[01]\\*[a-f0-9]{32}\\*[a-f0-9]{32}\\*[a-f0-9]{32}$", "modes": [ { "john": "oldoffice", "hashcat": 9700, "extended": false, "name": "Microsoft Office \u2264 2003 (MD5+RC4)" }, { "john": "oldoffice", "hashcat": 9710, "extended": false, "name": "Microsoft Office \u2264 2003 (MD5+RC4) collider-mode #1" }, { "john": "oldoffice", "hashcat": 9720, "extended": false, "name": "Microsoft Office \u2264 2003 (MD5+RC4) collider-mode #2" } ] }, { "regex": "^\\$oldoffice\\$[34]\\*[a-f0-9]{32}\\*[a-f0-9]{32}\\*[a-f0-9]{40}$", "modes": [ { "john": "oldoffice", "hashcat": 9800, "extended": false, "name": "Microsoft Office \u2264 2003 (SHA1+RC4)" }, { "john": "oldoffice", "hashcat": 9810, "extended": false, "name": "Microsoft Office \u2264 2003 (SHA1+RC4) collider-mode #1" }, { "john": "oldoffice", "hashcat": 9820, "extended": false, "name": "Microsoft Office \u2264 2003 (SHA1+RC4) collider-mode #2" } ] }, { "regex": "^(\\$radmin2\\$)?[a-f0-9]{32}$", "modes": [ { "john": "radmin", "hashcat": 9900, "extended": false, "name": "RAdmin v2.x" } ] }, { "regex": "^{x-issha,\\s[0-9]{4}}[a-z0-9\\/+=]+$", "modes": [ { "john": "saph", "hashcat": 10300, "extended": false, "name": "SAP CODVN H (PWDSALTEDHASH) iSSHA-1" } ] }, { "regex": "^\\$cram_md5\\$[a-z0-9\\/+=\\-]+\\$[a-z0-9\\/+=\\-]{52}$", "modes": [ { "john": null, "hashcat": 10200, "extended": false, "name": "CRAM-MD5" } ] }, { "regex": "^[a-f0-9]{16}:2:4:[a-f0-9]{32}$", "modes": [ { "john": null, "hashcat": 10100, "extended": false, "name": "SipHash" } ] }, { "regex": "^[a-f0-9]{4,}$", "modes": [ { "john": null, "hashcat": null, "extended": true, "name": "Cisco Type 7" } ] }, { "regex": "^[a-z0-9\\/.]{13,}$", "modes": [ { "john": "bigcrypt", "hashcat": null, "extended": true, "name": "BigCrypt" } ] }, { "regex": "^(\\$cisco4\\$)?[a-z0-9\\/.]{43}$", "modes": [ { "john": "cisco4", "hashcat": null, "extended": false, "name": "Cisco Type 4" } ] }, { "regex": "^bcrypt_sha256\\$\\$(2[axy]|2)\\$[0-9]+\\$[a-z0-9\\/.]{53}$", "modes": [ { "john": null, "hashcat": null, "extended": false, "name": "Django(bcrypt-SHA256)" } ] }, { "regex": "^\\$postgres\\$.[^\\*]+[*:][a-f0-9]{1,32}[*:][a-f0-9]{32}$", "modes": [ { "john": "postgres", "hashcat": 11100, "extended": false, "name": "PostgreSQL Challenge-Response Authentication (MD5)" } ] }, { "regex": "^\\$siemens-s7\\$[0-9]{1}\\$[a-f0-9]{40}\\$[a-f0-9]{40}$", "modes": [ { "john": "siemens-s7", "hashcat": null, "extended": false, "name": "Siemens-S7" } ] }, { "regex": "^(\\$pst\\$)?[a-f0-9]{8}$", "modes": [ { "john": null, "hashcat": null, "extended": false, "name": "Microsoft Outlook PST" } ] }, { "regex": "^sha256[:$][0-9]+[:$][a-z0-9\\/+]+[:$][a-z0-9\\/+]{32,128}$", "modes": [ { "john": null, "hashcat": 10900, "extended": false, "name": "PBKDF2-HMAC-SHA256 (PHP)", "samples": [ "sha256:1000:NjI3MDM3:vVfavLQL9ZWjg8BUMq6/FB8FtpkIGWYk" ] } ] }, { "regex": "^(\\$dahua\\$)?[a-z0-9]{8}$", "modes": [ { "john": "dahua", "hashcat": null, "extended": false, "name": "Dahua" } ] }, { "regex": "^\\$mysqlna\\$[a-f0-9]{40}[:*][a-f0-9]{40}$", "modes": [ { "john": null, "hashcat": 11200, "extended": false, "name": "MySQL Challenge-Response Authentication (SHA1)" } ] }, { "regex": "^\\$pdf\\$1\\*2\\*[0-9]{2}\\*[-0-9]{1,6}\\*[0-9]\\*[0-9]{2}\\*[a-f0-9]{32}\\*[0-9]{2}\\*[a-f0-9]{64}\\*[0-9]{2}\\*[a-f0-9]{64}$", "modes": [ { "john": "pdf", "hashcat": 10400, "extended": false, "name": "PDF 1.1 - 1.3 (Acrobat 2 - 4)" }, { "john": "pdf", "hashcat": 10410, "extended": false, "name": "PDF 1.1 - 1.3 (Acrobat 2 - 4), collider #1" } ] }, { "regex": "^\\$pdf\\$1\\*2\\*[0-9]{2}\\*[-0-9]{1,6}\\*[0-9]\\*[0-9]{2}\\*[a-f0-9]{32}\\*[0-9]{2}\\*[a-f0-9]{64}\\*[0-9]{2}\\*[a-f0-9]{64}:[a-f0-9]{10}$", "modes": [ { "john": "pdf", "hashcat": 10420, "extended": false, "name": "PDF 1.1 - 1.3 (Acrobat 2 - 4), collider #2" } ] }, { "regex": "^\\$pdf\\$[24]\\*[34]\\*128\\*[0-9\\-]{1,6}\\*1\\*(16|32)\\*[a-f0-9]{32,64}\\*32\\*[a-f0-9]{64}\\*(8|16|32)\\*[a-f0-9]{16,64}$", "modes": [ { "john": "pdf", "hashcat": 10500, "extended": false, "name": "PDF 1.4 - 1.6 (Acrobat 5 - 8)" } ] }, { "regex": "^\\$pdf\\$5\\*[5|6]\\*[0-9]{3}\\*[-0-9]{1,6}\\*[0-9]\\*[0-9]{1,4}\\*[a-f0-9]{0,1024}\\*[0-9]{1,4}\\*[a-f0-9]{0,1024}\\*[0-9]{1,4}\\*[a-f0-9]{0,1024}\\*[0-9]{1,4}\\*[a-f0-9]{0,1024}\\*[0-9]{1,4}\\*[a-f0-9]{0,1024}$", "modes": [ { "john": "pdf", "hashcat": 10600, "extended": false, "name": "PDF 1.7 Level 3 (Acrobat 9)" }, { "john": "pdf", "hashcat": 10700, "extended": false, "name": "PDF 1.7 Level 8 (Acrobat 10 - 11)" } ] }, { "regex": "^\\$bitcoin\\$[0-9]{2,4}\\$[a-f0-9$]{250,360}$", "modes": [ { "john": "bitcoin", "hashcat": 11300, "extended": false, "name": "Bitcoin/Litecoin Wallet", "samples": [ "$bitcoin$96$c265931309b4a59307921cf054b4ec6b6e4554369be79802e94e16477645777d948ae1d375191831efc78e5acd1f0443$16$8017214013543185$200460$96$480008005625057442352316337722323437108374245623701184230273883222762730232857701607167815448714$66$014754433300175043011633205413774877455616682000536368706315333388", "$bitcoin$96$c265931309b4a59307921cf054b4ec6b6e4554369be79802e94e16477645777d948ae1d375191831efc78e5acd1f0443$16$8017214013543185$200460$96$480008005625057442352316337722323437108374245623701184230273883222762730232857701607167815448714$66$014754433300175043011633205413774877455616682000536368706315333388", "$bitcoin$96$a8d2a30b9a5419934cbb7cb0727ddc16c4bebdbf30d7e099ca35f2b1b7ba04cc42eb5b865bff8f65fc6ba9e15428d84f$16$872581181d72f577$128205$96$0a8d43558ed2b55f4a53491df66e6a71003db4588d11dc0a88b976122c2849a74c2bfaace36424cf029795db6fd2c78f$130$04ff53a6f68eab1c52e5b561b4616edb5bed4d7510cdb4931c8da68732a86d86f3a3f7de266f17c8d03e02ebe8e2c86e2f5de0007217fd4aaf5742ca7373113060" ] } ] }, { "regex": "^\\$ethereum\\$[a-z0-9*]{150,1400}$", "modes": [ { "john": "ethereum-presale-opencl", "hashcat": 16300, "extended": false, "name": "Ethereum Presale Wallet" } ] }, { "regex": "^\\$ethereum\\$[a-z0-9*]{150,250}$", "modes": [ { "john": "Ethereum Wallet", "hashcat": 15600, "extended": false, "name": "ethereum-opencl" } ] }, { "regex": "^\\$monero\\$(0)\\*[a-f0-9]{32,4096}$", "modes": [ { "john": "monero", "hashcat": null, "extended": false, "name": "monero Wallet" } ] }, { "regex": "^\\$ab\\$[0-9]{1}\\*[0-9]{1}\\*[0-9]{1,6}\\*[a-f0-9]{128}\\*[a-f0-9]{128}\\*[a-f0-9]{32}\\*[a-f0-9]{192}$", "modes": [ { "john": "AndroidBackup", "hashcat": 18900, "extended": false, "name": "Android Backup" } ] }, { "regex": "^\\$zip2\\$\\*[0-9]{1}\\*[0-9]{1}\\*[0-9]{1}\\*[a-f0-9]{16,32}\\*[a-f0-9]{1,6}\\*[a-f0-9]{1,6}\\*[a-f0-9]{0,16384}\\*[a-f0-9]{20}\\*\\$\/zip2\\$$", "modes": [ { "john": "zip", "hashcat": 13600, "extended": false, "name": "WinZip" } ] }, { "regex": "^\\$itunes_backup\\$\\*[0-9]{1,2}\\*[a-f0-9]{80}\\*[0-9]{1,6}\\*[a-f0-9]{40}\\*[0-9]{0,10}\\*[a-f0-9]{0,40}$", "modes": [ { "john": "itunes-backup", "hashcat": 14700, "extended": false, "name": "iTunes backup < 10.0" }, { "john": "itunes-backup", "hashcat": 14800, "extended": false, "name": "iTunes backup >= 10.0" } ] }, { "regex": "^\\$telegram\\$0\\*[a-f0-9]{64}\\*[0-9]{32}$", "modes": [ { "john": null, "hashcat": 22301, "extended": false, "name": "Telegram Mobile App Passcode (SHA256)" } ] }, { "regex": "^\\$telegram\\$1\\*4000\\*[a-f0-9]{64}\\*[a-f0-9]{576}$", "modes": [ { "john": "telegram", "hashcat": null, "extended": false, "name": "Telegram Desktop 1.3.9" } ] }, { "regex": "^\\$telegram\\$2\\*100000\\*[a-f0-9]{64}\\*[a-f0-9]{576}$", "modes": [ { "john": "telegram", "hashcat": null, "extended": false, "name": "Telegram Desktop \u2265 2.1.14-beta / 2.2.0" } ] }, { "regex": "^\\$7z\\$[0-9]{1,3}\\$[0-9]{1,2}\\$[0-9]{1}\\$[^$]{0,64}\\$[0-9]{1,2}\\$[a-f0-9]{32}\\$[0-9]{1,10}\\$[0-9]{1,6}\\$[0-9]{1,6}\\$[a-f0-9]{2,}$", "modes": [ { "john": "7z", "hashcat": 11600, "extended": false, "name": "7-zip" } ] }, { "regex": "^\\$zip3\\$\\*[0-9]\\*[0-9]\\*128\\*[0-9]\\*[a-f0-9]{0,32}\\*[a-f0-9]{288}\\*[0-9]\\*[0-9]\\*[0-9]\\*[^\\s]{0,64}$", "modes": [ { "john": "securezip", "hashcat": 23001, "extended": false, "name": "SecureZIP AES-128" } ] }, { "regex": "^\\$zip3\\$\\*[0-9]\\*[0-9]\\*192\\*[0-9]\\*[a-f0-9]{0,32}\\*[a-f0-9]{288}\\*[0-9]\\*[0-9]\\*[0-9]\\*[^\\s]{0,64}$", "modes": [ { "john": "securezip", "hashcat": 23002, "extended": false, "name": "SecureZIP AES-192" } ] }, { "regex": "^\\$zip3\\$\\*[0-9]\\*[0-9]\\*256\\*[0-9]\\*[a-f0-9]{0,32}\\*[a-f0-9]{288}\\*[0-9]\\*[0-9]\\*[0-9]\\*[^\\s]{0,64}$", "modes": [ { "john": "securezip", "hashcat": 23003, "extended": false, "name": "SecureZIP AES-256" } ] }, { "regex": "^\\$pkzip2?\\$[a-f0-9\\*]+\\$\/pkzip2?\\$$", "modes": [ { "john": "pkzip", "hashcat": null, "extended": false, "name": "PKZIP" } ] }, { "regex": "^\\$argon2d\\$v=19\\$m=[0-9]{1,6},t=[0-9]{1,2},p=[0-9]{1,2}\\$[^$]+\\$[^\\s]{6,}$", "modes": [ { "john": "argon2", "hashcat": null, "extended": false, "name": "argon2d", "samples": [ "$argon2d$v=19$m=4096,t=3,p=1$ZGFtYWdlX2RvbmU$w9w3s5/zV8+PcAZlJhnTCOE+vBkZssmZf6jOq3dKv50", "$argon2d$v=19$m=4096,t=3,p=1$c2hvcnRfc2FsdA$zMrTcOAOUje6UqObRVh84Pe1K6gumcDqqGzRM0ILzYmj", "$argon2d$v=19$m=16384,t=3,p=1$c2hvcnRfc2FsdA$TLSTPihIo+5F67Y1vJdfWdB9", "$argon2d$v=19$m=16384,t=4,p=3$YW5vdGhlcl9zYWx0$yw93eMxC8REPAwbQ0e/q43jR9+RI9HI/DHP75uzm7tQfjU734oaI3dzcMWjYjHzVQD+J4+MG+7oyD8dN/PtnmPCZs+UZ67E+rkXJ/wTvY4WgXgAdGtJRrAGxhy4rD7d5G+dCpqhrog" ] } ] }, { "regex": "^\\$argon2i\\$v=19\\$m=[0-9]{1,6},t=[0-9]{1,2},p=[0-9]{1,2}\\$[^$]+\\$[^\\s]{6,}$", "modes": [ { "john": "argon2", "hashcat": null, "extended": false, "name": "argon2i", "samples": [ "$argon2i$v=19$m=4096,t=3,p=1$ZGFtYWdlX2RvbmU$N59QwnpxDQZRj1/cO6bqm408dD6Z2Z9LKYpwFJSPVKA", "$argon2i$v=19$m=4096,t=3,p=1$c2hvcnRfc2FsdA$1l4kAwUdAApoCbFH7ghBEf7bsdrOQzE4axIJ3PV0Ncrd", "$argon2i$v=19$m=16384,t=3,p=1$c2hvcnRfc2FsdA$vvjDVog22A5x9eljmB+2yC8y", "$argon2i$v=19$m=16384,t=4,p=3$YW5vdGhlcl9zYWx0$K7unxwO5aeuZCpnIJ06FMCRKod3eRg8oIRzQrK3E6mGbyqlTvvl47jeDWq/5drF1COJkEF9Ty7FWXJZHa+vqlf2YZGp/4qSlAvKmdtJ/6JZU32iQItzMRwcfujHE+PBjbL5uz4966A" ] } ] }, { "regex": "^\\$argon2id\\$v=19\\$m=[0-9]{1,6},t=[0-9]{1,2},p=[0-9]{1,2}\\$[^$]+\\$[^\\s]{6,}$", "modes": [ { "john": null, "hashcat": null, "extended": false, "name": "argon2id" } ] } ]