Skip to content
  • To be a member of the hashpwn community, you must read and follow all forum rules. Repeated violations of these rules will result in a ban.

    5 6
    5 Topics
    6 Posts
    cycloneC
    Terms of Service & Privacy Policy Effective Date: Aug 31, 2025 Welcome to hashpwn.net (“we,” “our,” or “us”). By accessing or using hashpwn.net or any of its subdomains (collectively, the “Services”), you agree to comply with and be bound by these Terms of Service. This includes, but is not limited to, the forum and any Services we may provide under the hashpwn.net domain. If you do not agree, please discontinue use of the Services. 1. Eligibility You must be at least 18 years old to register for or use any hashpwn.net Services. By using our Services, you represent that you meet this requirement. 2. User Conduct When using any hashpwn.net Service, you agree not to: Post, share, or request personally identifiable information (PII). Share, request, or distribute illegally obtained data (e.g., combo lists, stolen data, etc). Engage in hate speech, harassment, or unlawful activities. Attempt to compromise, disrupt, or misuse any Service we provide. Post, share, request, or link to any sexually explicit, pornographic, or sexually suggestive content. Our Services are intended for ethical cybersecurity research, discussion, and learning. Illegal activity is strictly prohibited. 3. User Content You retain ownership of any content you post, upload, or submit to hashpwn.net Services. By submitting content, you grant hashpwn.net a non-exclusive, worldwide license to store, display, and distribute your content as necessary to operate and provide the Services. Requests for deletion of publicly posted content will be honored, except in rare cases where retention is required for legal, security, moderation, or administrative reasons (e.g., evidence of abuse). Account deletion and personal data removal requests will always be honored. 4. Privacy & Data Collection We respect your privacy. We collect basic technical information such as IP address, cookies, browser type, and usage analytics. We use this information only for site functionality, security, and moderation. We may log usage data to maintain service quality. We do not sell, rent, or share your information with third parties for advertising or marketing purposes. Users may request removal of their personal data. 5. Disclaimer of Warranties All Services provided by hashpwn.net are offered “as is” and without warranties of any kind, whether express or implied. We do not guarantee uptime, availability, or error-free operation for any Service. Use of hashpwn.net Services is at your own risk. 6. Limitation of Liability To the fullest extent permitted by law, hashpwn.net, its owners, administrators, moderators, and affiliates are not liable for any damages arising from use of our Services, including but not limited to loss of data, downtime, security issues, or service interruptions. 7. Termination We reserve the right to suspend, restrict, or terminate accounts or access to any hashpwn.net Service at our discretion for violations of these Terms or other reasons deemed necessary to protect the community and infrastructure. 8. Changes to the Terms We may update these Terms at any time. Changes will be posted on this page with a new effective date. Continued use of our Services after updates are posted constitutes acceptance of the revised Terms. 9. Contact For questions, concerns, or requests, please contact: @cyclone (Admin/Owner)
  • This section is dedicated to paid offers, services, and opportunities. Please adhere strictly to the forum rules when posting. All transactions and discussions must maintain a professional tone, and any violation of guidelines will result in penalties. Read the rules carefully before participating.
    https://forum.hashpwn.net/category/1/forum-rules-must-read

    You will need to be granted access status to participate in the Paid Section.

    13 20
    13 Topics
    20 Posts
    No new posts.
  • 53 Topics
    398 Posts
    E
    @crack365 Recovered $6$.nCT4rHHr6TEdB3P$UIhJKBkP9j8aC6Yeg4EM0DnxAzE4je8H/tsuC3WX4c4NZCRziRNxItNEfevUKwQqjiOVIOC01obIMLPon2Lf7.:update159 Left: $6$ahZSYwroxFNBymMM$0ebR7kgW4clzbBxHxBC1Vw4DE8qP1ok5LZ3tdZqPyxwsWFW03FZnhfCpY7Ity2H53IZT.Si.8tEdrSb6DGvoq0 $6$LriPuXOALQ.$BJlCWSZSMcexsOJ2Q5QD3gaQxiCsZGTzlI0bt9BflIC3GgT40O2U4BSVVRfacH0hQuFf0PR5Z9cmnOb/BB0bK/
  • General discussions that don't fit in other categories. All topics must still follow forum rules.

    22 206
    22 Topics
    206 Posts
    cycloneC
    Hacked Ledger Nano X Wallets Steal Seed Phrases Via SPI Bus [image: 1791821418903-55a8f487-0c2f-4cca-8e7f-2a35fef9b782-image.jpeg] Security researchers have uncovered modified Ledger Nano X hardware wallets being sold that contain hidden cellular implants designed to steal user's 24-word recovery phrases. Unlike traditional attacks targeting firmware or private keys, this attack intercepts the unencrypted SPI communication between the Ledger's secure element and OLED display. A hidden microcontroller monitors the display traffic, reconstructs recovery words from the transmitted pixels, and sends the stolen phrase to the attacker using a built-in LTE modem and eSIM. [image: 1791821122776-9e6b3e40-eb02-4f44-9f42-39bfa2769e90-image.jpeg] The secure element itself is never compromised. Because the underlying Ledger hardware remains genuine, the device can still pass Ledger Live's authenticity checks while silently exposing the recovery phrase. Hardware hacker Joe Grand first reverse engineered one of these implants, presenting his findings at hardwear.io USA in May 2026. In September 2026, Tibane Labs examined two newer generations of the implant, showing how the attack has evolved from hand-soldered wires into sophisticated, purpose-built hardware. The latest version uses a black-coated flexible PCB concealed beneath the OLED, a Nordic nRF9151 cellular module, an eSIM, and a custom antenna. The original battery remains untouched, and component markings have been deliberately removed to make identification more difficult. The increasingly sophisticated designs suggest these implants are being developed for repeatable, potentially large-scale deployment rather than isolated experiments. Separately, Ledger is investigating reports of cryptocurrency theft involving CryptoBilis, an authorized reseller operating in Southeast Asia. On-chain investigator Specter estimates that more than $86 million in Bitcoin, Ethereum, and Tron may have been stolen. Ledger has not confirmed those losses. Ledger has asked CryptoBilis to suspend sales and shipments while the investigation continues. Importantly, researchers have not established a direct connection between the hardware implants and the reported CryptoBilis thefts. Ledger has not confirmed the cause of the losses. Ledger advises customers who purchased devices from CryptoBilis within the past 90 days not to initialize them. Customers who have already used these devices should consider transferring their assets to a trusted wallet with a newly generated recovery phrase. Sources: Tibane Labs: Ledger Nano X: The Spy Implant https://www.tibane.net/research/ledger-nano-x-implant Grand Idea Studio: Reverse Engineering a Ledger Nano X Hardware Implant https://grandideastudio.com/portfolio/security/ledger-hardware-implant/ Ledger Support: Official CryptoBilis Investigation Statement https://x.com/Ledger_Support/status/2108551100613714002 The Block: Ledger Investigates Wallet Drains, Estimated Losses Exceed $86 Million https://www.theblock.co/news/business/2026-10-09-ledger-cryptobilis-fund-losses-418163
  • Discuss useful tools related to hash cracking. Do not upload binaries or post links to malicious files.
    Follow Posting Template:
    https://forum.hashpwn.net/post/68

    57 255
    57 Topics
    255 Posts
    cycloneC
    v0.6.0; 2026-10-09 https://github.com/cyclone-github/pcfg-go/releases/tag/v0.6.0 0.6.0-dev by @cyclone-github in https://github.com/cyclone-github/pcfg-go/pull/13 pcfg_trainer ~7.9× faster on full RockYou vs v0.5.3 pcfg_guesser ~1.2× faster with ~28% lower RAM usage at 100M guesses vs v0.5.3 Parallelized trainer passes and improved worker scheduling/merge performance Reduced hot-path mutex use, allocations, and temporary buffer churn Added buffer pooling and lower-memory output batching in pcfg_guesser Improved capitalization and OMEN generation hot paths Reduced parse-tree and recursive generation allocation/GC pressure Improved malformed-input, scanner, file I/O, and numeric parsing handling Fixed minor interruption/cleanup issues and Staticcheck/linter warnings
  • A collection of hashcat rules, wordlists, useful links to online services, and other resources related to hash cracking and password recovery.
    Follow Posting Template:
    https://forum.hashpwn.net/post/68

    32 17k
    32 Topics
    17k Posts
    hashpwn-botH
    Escrow ID# 93614 • Algorithm: WPA-PBKDF2-PMKID+EAPOL, -m 22000 • Total hashes: 2 • Price per hash: $5.0008 • Escrow URL: https://hashes.com/en/escrow/item/?id=93614 • Download hashes: 93614_22000.zip
  • Forum announcements, comments and feedback.

    5 35
    5 Topics
    35 Posts
    cycloneC
    Scheduled Host Maintenance Our host will be performing scheduled maintenance that requires a reboot of the VPS hosting hashpwn. During this maintenance, the forum and related hashpwn services will go offline temporarily. Expected downtime is less than 30 minutes, although we have not been given an exact ETA for when the reboot will occur. This notice is just to give everyone a heads up.