yescrypt_crack - Yescrypt Hash Cracker

cyclone

Title: Yescrypt Hash Cracker
Author: cyclone
URL: https://github.com/cyclone-github/yescrypt_crack
Description:

./yescrypt_crack.bin -h hash.txt -w wordlist.txt

 -------------------------------------------------- 
|            Cyclone's Yescrypt Cracker            |
| https://github.com/cyclone-github/yescrypt_crack |
 -------------------------------------------------- 

Hash file:      hash.txt
Total Hashes:   1
CPU Threads:    255
Wordlist:       wordlist.txt
2025/03/06 17:56:12 Working...
$y$j9T$z7lNWyBfW4ZruGHCsFzDz/$Sz1GtrDDnsf0KfUE8mQHNJqGyG32TDWC287DdU97dz.:cyclone123
2025/03/06 17:56:48 Cracked: 1/1 1403.15 h/s 00h:00m:35s

2025/03/06 17:56:48 Finished

Info:

I wrote this tool since yescrypt has become the default /etc/shadow hash for many popular linux distros such as Debian, Ubuntu, RHEL, Fedora, Arch, etc, and due to the very limited hash cracking tools that support yescrypt. Hashcat currently lacks support for yescrypt, and while John the Ripper supports yescrypt in its bleeding-edge version, getting JtR compiled with yescrypt support can be challenging for newer users due to the required linux lib "libxcrypt" -- this is especially true for Windows users.

Since yescrypt_crack is written in pure Go, it easily compiles and runs on just about any OS and architecture such as Intel/ARM, Linux, Windows, Mac.

It is worth noting that JtR is currently faster than yescrypt_crack, so using JtR is recommended when possible.

Example hash:plain:

$y$j9T$z7lNWyBfW4ZruGHCsFzDz/$Sz1GtrDDnsf0KfUE8mQHNJqGyG32TDWC287DdU97dz.:cyclone123

Supported options:

-w {wordlist} (omit -w to read from stdin)
-h {yescrypt_hash}
-o {output} (omit -o to write to stdout)
-t {cpu threads}
-s {print status every nth sec}

-version (version info)
-help (usage instructions)

./yescrypt_crack.bin -h {yescrypt_hash} -w {wordlist} -o {output} -t {cpu threads} -s {print status every nth sec}

./yescrypt_crack.bin -h yescrypt.txt -w wordlist.txt -o cracked.txt -t 16 -s 10

cat wordlist | ./yescrypt_crack.bin -h yescrypt.txt

./yescrypt_crack.bin -h yescrypt.txt -w wordlist.txt -o output.txt

Credits:

yescrypt_crack tool was written by cyclone in pure Go
yescrypt_crack uses Solar Designer's yescrypt-go implementation: https://github.com/openwall/yescrypt-go
The yescrypt algo was written by Solar Designer: https://www.openwall.com/yescrypt/

Changelog:

https://github.com/cyclone-github/yescrypt_crack/blob/main/CHANGELOG.md

Compile from source:

If you want the latest features, compiling from source is the best option since the release version may run several revisions behind the source code.
This assumes you have Go and Git installed
- git clone https://github.com/cyclone-github/yescrypt_crack.git
- cd yescrypt_crack
- go mod init yescrypt_crack
- go mod tidy
- go build -ldflags="-s -w" .
- ./yescrypt_crack -h {hash file} -w {wordlist file} -t {CPU threads to use (optional)}
Compile from source code how-to:
- https://github.com/cyclone-github/scripts/blob/main/intro_to_go.txt

cyclone

Source code v0.2.0; 2025-03-06 uploaded to GitHub.
https://github.com/cyclone-github/yescrypt_crack

hashpwn