The Twelve Days of Christmas 2025 Challenge - Double Time

cyclone

Christmas is quickly approaching! As we did last year with our Merry Christmas 2024 - hashpwn Wordlist Challenge, hashpwn will be hosting another challenge, The Twelve Days of Christmas Challenge - Double Time, where we will be posting 12 challenges over the 6 days leading up to Christmas Day... so, double time! Also, in addition to releasing an updated hashpwn wordlist, we will also have daily prizes for participants to win.

When:

Start: December 20, 2025, 00:00 UTC
End: December 25, 2025

What:

A series of daily hash cracking challenges, each designed to test your understanding of hashing algorithms, encoding, and most importantly, critical thinking.

Who:

While this year's challenge will start off beginner friendly, users from all experience levels from newb to pro are encouraged to participate.
Only the brightest critical thinkers will be able to complete the entire challenge.
A modest GPU / CPU, experience with a few tools like hashcat, mdxfind, hashgen, cyberchef, and a smart brain are all that is needed to participate.

Challenges:

Two challenges per day (12 challenges in total).
Each challenge will include a small puzzle which should be solvable during your coffee break... how long of a coffee break depends on how well you're able to work through the puzzle.
Less experienced users will find some of these puzzles very difficult, while experienced users will find some of these puzzles very easy.
Every user, regardless of experience level, will likely get stumped at some point during the 12 challenges. This is expected and planned for.
After the challenge has been posted, hints will later be posted for users who may be stuck. If you're still suck after reading the hint, go back and read through the previous challenges and any notes you made (take notes... you will need them).
First to solve and submit the correct answer for that challenge will claim the prize for that challenge. All 12 challenges have prizes.
The entire challenge is automated, so prize info will be immediately displayed to the winner for each challenge.

Prizes:

Each challenge slot is sponsored by one or more of our community partners.
The winner of each challenge will receive instructions for redeeming their prize(s).
Make sure to copy these instructions as they will not be shown again!
Prizes range from vouchers from our community sponsors to cash.
Rumor has it there will be a Grand Prize, so stay tuned for more info.
A big thank you to this year's sponsors! (will be announced when the challenge starts)

How to participate:

Follow this page.
Anyone may participate.
No signup / entry required.
More info will be posted here a day or two before the challenge starts.
See you in a few weeks!

Last updated: 2025/12/08@20:55UTC

cyclone

Challenge Sample Hashes

Test your skills out on these sample hashes.

Sample Hashes 01:

Hint: These hashes look sick, might need to call an MD.

03d3435836d6c779224596f2e107a96a73cbf591
c5f5d9aa0f22346cb0f2fefa967b39580c5caeee
bcaa486211c29cac4decc528f6f8ef56fb23a67a
88f44391df1071314ac6d4301cb7f5cf381c33e6
aa29ebc703b6cff77eb7d94483481c365e5fcf09

Sample Hashes 02:

Hint: Let's touch base before we do anything crazy.

aWwwdmVicml0
cXdlcnR5MDIx
Y3VlbnRhc3A=
NDU1MzU0
bW9wYXI3NA==

Sample Hashes 03:

Hint: What appears hard becomes easy, if you know where to look.

$2a$10$RsDUNnVUjr90Ir9aBL8Peez7d/dWFb/ppinmDnkrzW29qe2Jvfqma
$2a$10$VxIJpXYdcI/c5PWipJSP9u1IC9E/iqJlPAhDo2fgN0pYgoVvxgwTK
$2a$10$iRCROUFD7s2w6vpjyWc82eBTQGIcpLt16dSSb1H1k8Z/YBIA1kSg2
$2a$10$WeN7yY96nXwwYysBtneU9..nmKixtpWMJfXQZCjW6XRFMjI6c.uc.
$2a$10$LjEdGXgwtrMekDVNCDjQ7.MC3z9Yr2f4OItmmxuVg8YS7kMzST45a

Last updated: 2025/12/08@23:47UTC

cyclone

Recommended Tools

It would be helpful to be familiar with some of the following tools:

hash cracking
- hashcat: https://github.com/hashcat/hashcat
  - https://hashcat.net/wiki/doku.php?
- mdxfind: https://www.techsolvency.com/pub/bin/mdxfind/
- jtr: https://github.com/openwall/john
encoding
- hashgen: https://github.com/cyclone-github/hashgen
- cyberchef: https://gchq.github.io/CyberChef/

Last updated: 2025/12/08@23:47UTC

cyclone

Challenge Submission Info

Everyone participating will need to be familiar with the Challenge Submission page as you'll be using it for each of the 12 challenges.

Each challenge will be posted with a unique Word of the Day Challenge URL
- ie: https://contest.hashpwn.net/foobar/[uuid1234]
There are no tips, tricks, secrets or hidden messages on the submission page, it is solely for submitting your puzzle results
The submission page is not case-sensitive
Make sure to properly copy/paste your puzzle results in the correct order before submitting
If you make a mistake when submitting, you can try again
Abusive IPs will be rate limited / banned
Any and all participants found attempting to cheat or abuse *hashpwn.net will be fully disqualification from the Challenge without question

Challenge Submission (example)

Submission accepted (won)

Submission recorded (completed, not won)

Submission rejected (wrong plaintext)

Submission rejected (incorrect word of the day)

Rate limited

IP Banned

Last updated: 2025/12/08@23:48UTC

test123456

good nice

hashpwn