HASHCAT(1)
NAME
hashcat — multi-core MD5 brute-forcer
SYNOPSIS
hashcat -m 0 -a 3 <md5hash> hashcat -b
DESCRIPTION
A toy, in-browser take on hashcat. It recovers the plaintext behind an MD5 hash by brute force (hashcat mode 0, mask attack -a 3), trying every candidate of increasing length over a charset.
To "use all the CPU", the search is sharded across one Web Worker per logical core (navigator.hardwareConcurrency): each worker hashes its own slice of the keyspace with a hand-rolled single-block MD5, so every thread runs flat out. A live status line reports the combined hash rate.
The worker is self-contained: its code is embedded in this command and spawned from a Blob URL (the site CSP allows worker-src 'blob:').
With -b it runs a benchmark instead: all cores hash for a few seconds and the aggregate speed is reported, with no target to crack.
Note: the run blocks the terminal until it finds the plaintext, exhausts the keyspace, or hits the time limit (raise it with --timeout).
OPTIONS
-m <num> hash mode; only 0 (MD5) is supported -a <num> attack mode; only 3 (brute-force / mask) is supported -b, --benchmark measure the aggregate hash rate across all cores --max <n> maximum candidate length, 1..8 (default 6) --timeout <s> give up after <s> seconds, 1..120 (default 30) --charset <set> candidate alphabet (default: a-z and 0-9)
EXAMPLES
hashcat -m 0 -a 3 5f4dcc3b5aa765d61d8327deb882cf99 hashcat -m 0 -a 3 900150983cd24fb0d6963f7d28e17f72 --max 4 hashcat -b
SEE ALSO
sha256sum, base64