Description

Python based salt bruteforcer for known hashes. Useful when you want to find out how a certain application hashes its passwords when you have both the password and the hash. This project is still in its inception but we plan on supporting more hashes and complex functions in the near future.

For example, you were able to obtain a list of application password hashes stored in a database, including your own. To be able to brute force for other users' passwords you would first need to know how the application hashes these passwords. Salty-py attempts to guess the salt used to hash the passwords by prepending/appending user supplied salt and comparing the resultant hash to the known hash.

Example usage

python salty-py -a MD5 -p password -r 9e107d9d372bb6826bd81d3542a419d6 -w wordlist.txt