#hashpwn — Public Fediverse posts
Live and recent posts from across the Fediverse tagged #hashpwn, aggregated by home.social.
-
GPU accelerated yescrypt hash cracking with yescryp_crack?!
Thanks to hashcat’s yescrypt OpenCL port for making this possible!
https://github.com/hashcat/hashcat/blob/master/OpenCL/inc_hash_yescrypt.clhttps://github.com/cyclone-github/yescrypt_crack/tree/yescrypt_crack_gpu
#yescrypt_crack #hashcracking #gostyescrypt #yescrypt #hashpwn #hashcat
-
GPU accelerated yescrypt hash cracking with yescryp_crack?!
Thanks to hashcat’s yescrypt OpenCL port for making this possible!
https://github.com/hashcat/hashcat/blob/master/OpenCL/inc_hash_yescrypt.clhttps://github.com/cyclone-github/yescrypt_crack/tree/yescrypt_crack_gpu
#yescrypt_crack #hashcracking #gostyescrypt #yescrypt #hashpwn #hashcat
-
GPU accelerated yescrypt hash cracking with yescryp_crack?!
Thanks to hashcat’s yescrypt OpenCL port for making this possible!
https://github.com/hashcat/hashcat/blob/master/OpenCL/inc_hash_yescrypt.clhttps://github.com/cyclone-github/yescrypt_crack/tree/yescrypt_crack_gpu
#yescrypt_crack #hashcracking #gostyescrypt #yescrypt #hashpwn #hashcat
-
GPU accelerated yescrypt hash cracking?!
https://github.com/cyclone-github/yescrypt_crack/tree/yescrypt_crack_gpu
#yescrypt_crack #hashcracking #gostyescrypt #yescrypt #hashpwn
-
hashgen v1.3.2 is out!
v1.3.2 brings 37 new modes since the last published release.
These include KoreLogic’s CMIYC 2026 $cmiyc$2026$ algo, gost-yescrypt, Streebog, LDAP SHA/SSHA, nested modes, multiple bcrypt modes, sm3crypt, the entire MD6 family, plus more.
More info:
https://forum.hashpwn.net/post/89#hashgen #cmicy #korelogic #gostyescrypt #streebog #ldap #ssha #bcrypt #sm3crypt #md6 #hashpwn #hash #algo
-
hashgen v1.3.2 is out!
v1.3.2 brings 37 new modes since the last published release.
These include KoreLogic’s CMIYC 2026 $cmiyc$2026$ algo, gost-yescrypt, Streebog, LDAP SHA/SSHA, nested modes, multiple bcrypt modes, sm3crypt, the entire MD6 family, plus more.
More info:
https://forum.hashpwn.net/post/89#hashgen #cmicy #korelogic #gostyescrypt #streebog #ldap #ssha #bcrypt #sm3crypt #md6 #hashpwn #hash #algo
-
hashgen v1.3.2 is out!
v1.3.2 brings 37 new modes since the last published release.
These include KoreLogic’s CMIYC 2026 $cmiyc$2026$ algo, gost-yescrypt, Streebog, LDAP SHA/SSHA, nested modes, multiple bcrypt modes, sm3crypt, the entire MD6 family, plus more.
More info:
https://forum.hashpwn.net/post/89#hashgen #cmicy #korelogic #gostyescrypt #streebog #ldap #ssha #bcrypt #sm3crypt #md6 #hashpwn #hash #algo
-
hashgen v1.3.2 is out!
v1.3.2 brings 37 new modes since the last published release.
These include KoreLogic’s CMIYC 2026 $cmiyc$2026$ algo, gost-yescrypt, Streebog, LDAP SHA/SSHA, nested modes, multiple bcrypt modes, sm3crypt, the entire MD6 family, plus more.
More info:
https://forum.hashpwn.net/post/89#hashgen #cmicy #korelogic #gostyescrypt #streebog #ldap #ssha #bcrypt #sm3crypt #md6 #hashpwn #hash #algo
-
Was someone looking for a cross-platform gost-yescrypt cracker? Good thing yescrypt_crack supports it in v0.3.1.
https://github.com/cyclone-github/yescrypt_crack/
#yescrypt #gostyescrypt #cmiyc #cmiyc2026 #defcon #hashpwn #hashmob
-
Was someone looking for a cross-platform gost-yescrypt cracker? Good thing yescrypt_crack supports it in v0.3.1.
https://github.com/cyclone-github/yescrypt_crack/
#yescrypt #gostyescrypt #cmiyc #cmiyc2026 #defcon #hashpwn #hashmob
-
Was someone looking for a cross-platform gost-yescrypt cracker? Good thing yescrypt_crack supports it in v0.3.1.
https://github.com/cyclone-github/yescrypt_crack/
#yescrypt #gostyescrypt #cmiyc #cmiyc2026 #defcon #hashpwn #hashmob
-
Was someone looking for a cross-platform gost-yescrypt cracker? Good thing yescrypt_crack supports it in v0.3.1.
https://github.com/cyclone-github/yescrypt_crack/
#yescrypt #gostyescrypt #cmiyc #cmiyc2026 #defcon #hashpwn #hashmob
-
Was someone looking for a cross-platform gost-yescrypt cracker? Good thing yescrypt_crack supports it in v0.3.1.
https://github.com/cyclone-github/yescrypt_crack/
#yescrypt #gostyescrypt #cmiyc #cmiyc2026 #defcon #hashpwn #hashmob
-
pcfg-go v0.5.3 has been released.
This release focuses heavily on pcfg_guesser performance and memory efficiency:
• half the memory usage of v0.5.2
• 2x faster than v0.5.2
• 2,578% faster than the original Python3 pcfg_guesser.pyTwice the speed with half the memory usage? Nice.
-
pcfg-go v0.5.3 has been released.
This release focuses heavily on pcfg_guesser performance and memory efficiency:
• half the memory usage of v0.5.2
• 2x faster than v0.5.2
• 2,578% faster than the original Python3 pcfg_guesser.pyTwice the speed with half the memory usage? Nice.
-
pcfg-go v0.5.3 has been released.
This release focuses heavily on pcfg_guesser performance and memory efficiency:
• half the memory usage of v0.5.2
• 2x faster than v0.5.2
• 2,578% faster than the original Python3 pcfg_guesser.pyTwice the speed with half the memory usage? Nice.
-
pcfg-go v0.5.3 has been released.
This release focuses heavily on pcfg_guesser performance and memory efficiency:
• half the memory usage of v0.5.2
• 2x faster than v0.5.2
• 2,578% faster than the original Python3 pcfg_guesser.pyTwice the speed with half the memory usage? Nice.
-
pcfg-go v0.5.3 has been released.
This release focuses heavily on pcfg_guesser performance and memory efficiency:
• half the memory usage of v0.5.2
• 2x faster than v0.5.2
• 2,578% faster than the original Python3 pcfg_guesser.pyTwice the speed with half the memory usage? Nice.
-
FortiBleed: The ongoing Fortinet / FortiGate compromise campaign
Fortinet edge devices are being targeted in a large-scale compromise campaign involving exposed management interfaces, FortiCloud SSO abuse, credential theft, brute forcing, config exports, and suspicious admin account creation.
This should be treated as a compromise-assessment event, not just a normal patch cycle.
Admins should patch FortiOS, review all local admin accounts, rotate credentials and shared secrets, check for config exports, enforce MFA, and restrict management access to trusted IPs or VPN-only access.
Full details:
https://forum.hashpwn.net/post/14105#fortinet #fortigate #fortibleed #fortios #forticloud #cybersecurity #vpn #hashpwn
-
FortiBleed: The ongoing Fortinet / FortiGate compromise campaign
Fortinet edge devices are being targeted in a large-scale compromise campaign involving exposed management interfaces, FortiCloud SSO abuse, credential theft, brute forcing, config exports, and suspicious admin account creation.
This should be treated as a compromise-assessment event, not just a normal patch cycle.
Admins should patch FortiOS, review all local admin accounts, rotate credentials and shared secrets, check for config exports, enforce MFA, and restrict management access to trusted IPs or VPN-only access.
Full details:
https://forum.hashpwn.net/post/14105#fortinet #fortigate #fortibleed #fortios #forticloud #cybersecurity #vpn #hashpwn
-
FortiBleed: The ongoing Fortinet / FortiGate compromise campaign
Fortinet edge devices are being targeted in a large-scale compromise campaign involving exposed management interfaces, FortiCloud SSO abuse, credential theft, brute forcing, config exports, and suspicious admin account creation.
This should be treated as a compromise-assessment event, not just a normal patch cycle.
Admins should patch FortiOS, review all local admin accounts, rotate credentials and shared secrets, check for config exports, enforce MFA, and restrict management access to trusted IPs or VPN-only access.
Full details:
https://forum.hashpwn.net/post/14105#fortinet #fortigate #fortibleed #fortios #forticloud #cybersecurity #vpn #hashpwn
-
FortiBleed: The ongoing Fortinet / FortiGate compromise campaign
Fortinet edge devices are being targeted in a large-scale compromise campaign involving exposed management interfaces, FortiCloud SSO abuse, credential theft, brute forcing, config exports, and suspicious admin account creation.
This should be treated as a compromise-assessment event, not just a normal patch cycle.
Admins should patch FortiOS, review all local admin accounts, rotate credentials and shared secrets, check for config exports, enforce MFA, and restrict management access to trusted IPs or VPN-only access.
Full details:
https://forum.hashpwn.net/post/14105#fortinet #fortigate #fortibleed #fortios #forticloud #cybersecurity #vpn #hashpwn
-
NOCIX is currently experiencing an ongoing service-impacting outage affecting customer-hosted servers, with some users also reporting issues accessing the customer portal.
No official root cause has been confirmed by NOCIX, but Reddit users are stating this is a power outage. This should be treated as unverified until NOCIX publishes an incident notice.
More info:
https://forum.hashpwn.net/post/13533#NOCIX #Hosting #DataCenter #Outage #SysAdmin #InfoSec #hashpwn
-
NOCIX is currently experiencing an ongoing service-impacting outage affecting customer-hosted servers, with some users also reporting issues accessing the customer portal.
No official root cause has been confirmed by NOCIX, but Reddit users are stating this is a power outage. This should be treated as unverified until NOCIX publishes an incident notice.
More info:
https://forum.hashpwn.net/post/13533#NOCIX #Hosting #DataCenter #Outage #SysAdmin #InfoSec #hashpwn
-
NOCIX is currently experiencing an ongoing service-impacting outage affecting customer-hosted servers, with some users also reporting issues accessing the customer portal.
No official root cause has been confirmed by NOCIX, but Reddit users are stating this is a power outage. This should be treated as unverified until NOCIX publishes an incident notice.
More info:
https://forum.hashpwn.net/post/13533#NOCIX #Hosting #DataCenter #Outage #SysAdmin #InfoSec #hashpwn
-
NOCIX is currently experiencing an ongoing service-impacting outage affecting customer-hosted servers, with some users also reporting issues accessing the customer portal.
No official root cause has been confirmed by NOCIX, but Reddit users are stating this is a power outage. This should be treated as unverified until NOCIX publishes an incident notice.
More info:
https://forum.hashpwn.net/post/13533#NOCIX #Hosting #DataCenter #Outage #SysAdmin #InfoSec #hashpwn
-
YellowKey: BitLocker Bypass or Backdoor
YellowKey, tracked as CVE-2026-45585, is a public BitLocker bypass that abuses WinRE/recovery-path behavior to expose a protected volume without the Windows password, recovery key, or AES cracking.
At the time of this post, the author’s GitHub and original YellowKey repo appear to be down.
Read more: https://forum.hashpwn.net/post/13339
#BitLocker #YellowKey #CVE202645585 #CyberSecurity #InfoSec #WindowsSecurity #TPM #FullDiskEncryption #hack #exploit #news #hashpwn
-
YellowKey: BitLocker Bypass or Backdoor
YellowKey, tracked as CVE-2026-45585, is a public BitLocker bypass that abuses WinRE/recovery-path behavior to expose a protected volume without the Windows password, recovery key, or AES cracking.
At the time of this post, the author’s GitHub and original YellowKey repo appear to be down.
Read more: https://forum.hashpwn.net/post/13339
#BitLocker #YellowKey #CVE202645585 #CyberSecurity #InfoSec #WindowsSecurity #TPM #FullDiskEncryption #hack #exploit #news #hashpwn
-
YellowKey: BitLocker Bypass or Backdoor
YellowKey, tracked as CVE-2026-45585, is a public BitLocker bypass that abuses WinRE/recovery-path behavior to expose a protected volume without the Windows password, recovery key, or AES cracking.
At the time of this post, the author’s GitHub and original YellowKey repo appear to be down.
Read more: https://forum.hashpwn.net/post/13339
#BitLocker #YellowKey #CVE202645585 #CyberSecurity #InfoSec #WindowsSecurity #TPM #FullDiskEncryption #hack #exploit #news #hashpwn
-
YellowKey: BitLocker Bypass or Backdoor
YellowKey, tracked as CVE-2026-45585, is a public BitLocker bypass that abuses WinRE/recovery-path behavior to expose a protected volume without the Windows password, recovery key, or AES cracking.
At the time of this post, the author’s GitHub and original YellowKey repo appear to be down.
Read more: https://forum.hashpwn.net/post/13339
#BitLocker #YellowKey #CVE202645585 #CyberSecurity #InfoSec #WindowsSecurity #TPM #FullDiskEncryption #hack #exploit #news #hashpwn
-
Spider v1.0.0 released.
Spider is not just another web crawler -- it is a purpose-built wordlist and ngram processor for hash cracking workflows.
URL Mode:
Point it at a URL and Spider crawls the target, extracts words, and generates frequency-sorted wordlists and/or ngrams.But, Spider does not stop at web crawling...
File Mode:
Feed it local files and it brings the same word-processing engine to your own datasets, scraped content, notes, dumps, configs, or any other plaintext source you want to turn into a targeted wordlist or ngram set.More info:
https://forum.hashpwn.net/post/52#spider #webcrawler #wordlist #generator #sort #ngram #cyclone #hashpwn #hashcracking
-
Spider v1.0.0 released.
Spider is not just another web crawler -- it is a purpose-built wordlist and ngram processor for hash cracking workflows.
URL Mode:
Point it at a URL and Spider crawls the target, extracts words, and generates frequency-sorted wordlists and/or ngrams.But, Spider does not stop at web crawling...
File Mode:
Feed it local files and it brings the same word-processing engine to your own datasets, scraped content, notes, dumps, configs, or any other plaintext source you want to turn into a targeted wordlist or ngram set.More info:
https://forum.hashpwn.net/post/52#spider #webcrawler #wordlist #generator #sort #ngram #cyclone #hashpwn #hashcracking
-
Spider v1.0.0 released.
Spider is not just another web crawler -- it is a purpose-built wordlist and ngram processor for hash cracking workflows.
URL Mode:
Point it at a URL and Spider crawls the target, extracts words, and generates frequency-sorted wordlists and/or ngrams.But, Spider does not stop at web crawling...
File Mode:
Feed it local files and it brings the same word-processing engine to your own datasets, scraped content, notes, dumps, configs, or any other plaintext source you want to turn into a targeted wordlist or ngram set.More info:
https://forum.hashpwn.net/post/52#spider #webcrawler #wordlist #generator #sort #ngram #cyclone #hashpwn #hashcracking
-
Spider v1.0.0 released.
Spider is not just another web crawler -- it is a purpose-built wordlist and ngram processor for hash cracking workflows.
URL Mode:
Point it at a URL and Spider crawls the target, extracts words, and generates frequency-sorted wordlists and/or ngrams.But, Spider does not stop at web crawling...
File Mode:
Feed it local files and it brings the same word-processing engine to your own datasets, scraped content, notes, dumps, configs, or any other plaintext source you want to turn into a targeted wordlist or ngram set.More info:
https://forum.hashpwn.net/post/52#spider #webcrawler #wordlist #generator #sort #ngram #cyclone #hashpwn #hashcracking
-
Spider v1.0.0 released.
Spider is not just another web crawler -- it is a purpose-built wordlist and ngram processor for hash cracking workflows.
URL Mode:
Point it at a URL and Spider crawls the target, extracts words, and generates frequency-sorted wordlists and/or ngrams.But, Spider does not stop at web crawling...
File Mode:
Feed it local files and it brings the same word-processing engine to your own datasets, scraped content, notes, dumps, configs, or any other plaintext source you want to turn into a targeted wordlist or ngram set.More info:
https://forum.hashpwn.net/post/52#spider #webcrawler #wordlist #generator #sort #ngram #cyclone #hashpwn #hashcracking
-
Copy Fail (CVE-2026-31431) is a Linux kernel LPE that gives root access on every major linux distro.
All that is needed is local shell access and a few lines of python.
https://forum.hashpwn.net/post/12727
#cybersecurity #copyfail #linux #exploit #cve202631431 #hashpwn
-
Copy Fail (CVE-2026-31431) is a Linux kernel LPE that gives root access on every major linux distro.
All that is needed is local shell access and a few lines of python.
https://forum.hashpwn.net/post/12727
#cybersecurity #copyfail #linux #exploit #cve202631431 #hashpwn
-
Copy Fail (CVE-2026-31431) is a Linux kernel LPE that gives root access on every major linux distro.
All that is needed is local shell access and a few lines of python.
https://forum.hashpwn.net/post/12727
#cybersecurity #copyfail #linux #exploit #cve202631431 #hashpwn
-
Copy Fail (CVE-2026-31431) is a Linux kernel LPE that gives root access on every major linux distro.
All that is needed is local shell access and a few lines of python.
https://forum.hashpwn.net/post/12727
#cybersecurity #copyfail #linux #exploit #cve202631431 #hashpwn
-
Copy Fail (CVE-2026-31431) is a Linux kernel LPE that gives root access on every major linux distro.
All that is needed is local shell access and a few lines of python.
https://forum.hashpwn.net/post/12727
#cybersecurity #copyfail #linux #exploit #cve202631431 #hashpwn
-
Released: hashgen v1.3.0
New in this version:
* HMAC modes
* PBKDF2 modes
* scrypt support
* additional BLAKE2 modes
* hashcat UTF-16LE modes
* optimized salt RNG on salted hashes
* 95+ supported hash modes -
Released: hashgen v1.3.0
New in this version:
* HMAC modes
* PBKDF2 modes
* scrypt support
* additional BLAKE2 modes
* hashcat UTF-16LE modes
* optimized salt RNG on salted hashes
* 95+ supported hash modes -
Released: hashgen v1.3.0
New in this version:
* HMAC modes
* PBKDF2 modes
* scrypt support
* additional BLAKE2 modes
* hashcat UTF-16LE modes
* optimized salt RNG on salted hashes
* 95+ supported hash modes -
Released: hashgen v1.3.0
New in this version:
* HMAC modes
* PBKDF2 modes
* scrypt support
* additional BLAKE2 modes
* hashcat UTF-16LE modes
* optimized salt RNG on salted hashes
* 95+ supported hash modes -
Storm-1175 is hitting orgs with chained zero-days and dropping Medusa ransomware in under 24 hours.
Full write-up: https://forum.hashpwn.net/post/12014
#cybersecurity #storm1175 #zeroday #medusa #ransomeware #windows #news #hashpwn
-
Storm-1175 is hitting orgs with chained zero-days and dropping Medusa ransomware in under 24 hours.
Full write-up: https://forum.hashpwn.net/post/12014
#cybersecurity #storm1175 #zeroday #medusa #ransomeware #windows #news #hashpwn
-
Storm-1175 is hitting orgs with chained zero-days and dropping Medusa ransomware in under 24 hours.
Full write-up: https://forum.hashpwn.net/post/12014
#cybersecurity #storm1175 #zeroday #medusa #ransomeware #windows #news #hashpwn
-
Storm-1175 is hitting orgs with chained zero-days and dropping Medusa ransomware in under 24 hours.
Full write-up: https://forum.hashpwn.net/post/12014
#cybersecurity #storm1175 #zeroday #medusa #ransomeware #windows #news #hashpwn
-
Storm-1175 is hitting orgs with chained zero-days and dropping Medusa ransomware in under 24 hours.
Full write-up: https://forum.hashpwn.net/post/12014
#cybersecurity #storm1175 #zeroday #medusa #ransomeware #windows #news #hashpwn
-
Congrats to HashMob for winning Crack the Con 2026!
1. #HashMob Lite
2. #PizzaPlannet
3. #hash_meltdown -
Congrats to HashMob for winning Crack the Con 2026!
1. #HashMob Lite
2. #PizzaPlannet
3. #hash_meltdown -
Congrats to HashMob for winning Crack the Con 2026!
1. #HashMob Lite
2. #PizzaPlannet
3. #hash_meltdown -
Congrats to HashMob for winning Crack the Con 2026!
1. #HashMob Lite
2. #PizzaPlannet
3. #hash_meltdown -
Crack the Con 2026 launched this morning!
https://forum.hashpwn.net/post/11778
#ctc #crackthecon #CypherCon #hashcracking #contest #hashpwn #cybersecurity #infosec
-
Crack the Con 2026 launched this morning!
https://forum.hashpwn.net/post/11778
#ctc #crackthecon #CypherCon #hashcracking #contest #hashpwn #cybersecurity #infosec
-
Crack the Con 2026 launched this morning!
https://forum.hashpwn.net/post/11778
#ctc #crackthecon #CypherCon #hashcracking #contest #hashpwn #cybersecurity #infosec