373 lines
17 KiB
HTML
373 lines
17 KiB
HTML
|
{% extends "base.html" %}
|
||
|
|
{% block title %}Hash Toolkit - AUTARCH{% endblock %}
|
||
|
|
|
||
|
|
{% block content %}
|
||
|
|
<div class="page-header" style="display:flex;align-items:center;gap:1rem;flex-wrap:wrap">
|
||
|
|
<div>
|
||
|
|
<h1>Hash Toolkit</h1>
|
||
|
|
<p style="margin:0;font-size:0.85rem;color:var(--text-secondary)">
|
||
|
|
Identify unknown hashes, compute file/text digests, and look up threat intelligence.
|
||
|
|
</p>
|
||
|
|
</div>
|
||
|
|
<a href="{{ url_for('analyze.index') }}" class="btn btn-sm" style="margin-left:auto">← Analyze</a>
|
||
|
|
</div>
|
||
|
|
|
||
|
|
<!-- Tab Bar -->
|
||
|
|
<div class="tab-bar">
|
||
|
|
<button class="tab active" data-tab-group="hashtool" data-tab="identify" onclick="showTab('hashtool','identify')">Identify</button>
|
||
|
|
<button class="tab" data-tab-group="hashtool" data-tab="filehash" onclick="showTab('hashtool','filehash')">File Hash</button>
|
||
|
|
<button class="tab" data-tab-group="hashtool" data-tab="texthash" onclick="showTab('hashtool','texthash')">Text Hash</button>
|
||
|
|
<button class="tab" data-tab-group="hashtool" data-tab="mutate" onclick="showTab('hashtool','mutate')">Mutate</button>
|
||
|
|
<button class="tab" data-tab-group="hashtool" data-tab="generate" onclick="showTab('hashtool','generate')">Generate</button>
|
||
|
|
<button class="tab" data-tab-group="hashtool" data-tab="reference" onclick="showTab('hashtool','reference')">Reference</button>
|
||
|
|
</div>
|
||
|
|
|
||
|
|
<!-- ══ Identify Tab ══ -->
|
||
|
|
<div class="tab-content active" data-tab-group="hashtool" data-tab="identify">
|
||
|
|
<div class="section">
|
||
|
|
<h2>Hash Algorithm Detection</h2>
|
||
|
|
<p style="font-size:0.8rem;color:var(--text-muted);margin-bottom:8px">
|
||
|
|
Paste an unknown hash to identify possible algorithms (supports 40+ hash types).
|
||
|
|
</p>
|
||
|
|
<div class="input-row">
|
||
|
|
<input type="text" id="ht-identify-input" placeholder="Paste hash string here..." style="font-family:monospace">
|
||
|
|
<button id="btn-ht-identify" class="btn btn-primary" onclick="htIdentify()">Identify</button>
|
||
|
|
</div>
|
||
|
|
<pre class="output-panel scrollable" id="ht-identify-output"></pre>
|
||
|
|
<div id="ht-threat-links" style="margin-top:8px;display:none">
|
||
|
|
<h3 style="font-size:0.85rem;color:var(--text-secondary);margin-bottom:6px">Threat Intelligence Lookups</h3>
|
||
|
|
<div id="ht-links-container" style="display:flex;flex-wrap:wrap;gap:6px"></div>
|
||
|
|
</div>
|
||
|
|
</div>
|
||
|
|
</div>
|
||
|
|
|
||
|
|
<!-- ══ File Hash Tab ══ -->
|
||
|
|
<div class="tab-content" data-tab-group="hashtool" data-tab="filehash">
|
||
|
|
<div class="section">
|
||
|
|
<h2>File Hashing</h2>
|
||
|
|
<p style="font-size:0.8rem;color:var(--text-muted);margin-bottom:8px">
|
||
|
|
Compute CRC32, MD5, SHA1, SHA256, and SHA512 digests for any file.
|
||
|
|
</p>
|
||
|
|
<div class="input-row">
|
||
|
|
<input type="text" id="ht-file-path" placeholder="File path (e.g., /usr/bin/ls)">
|
||
|
|
<button id="btn-ht-file" class="btn btn-primary" onclick="htHashFile()">Hash File</button>
|
||
|
|
</div>
|
||
|
|
<pre class="output-panel scrollable" id="ht-file-output"></pre>
|
||
|
|
</div>
|
||
|
|
</div>
|
||
|
|
|
||
|
|
<!-- ══ Text Hash Tab ══ -->
|
||
|
|
<div class="tab-content" data-tab-group="hashtool" data-tab="texthash">
|
||
|
|
<div class="section">
|
||
|
|
<h2>Text / String Hashing</h2>
|
||
|
|
<div class="form-group" style="margin-bottom:0.75rem">
|
||
|
|
<textarea id="ht-text-input" rows="4" placeholder="Enter text to hash..." style="width:100%;font-family:monospace"></textarea>
|
||
|
|
</div>
|
||
|
|
<div class="input-row">
|
||
|
|
<select id="ht-text-algo">
|
||
|
|
<option value="md5">MD5</option>
|
||
|
|
<option value="sha1">SHA-1</option>
|
||
|
|
<option value="sha224">SHA-224</option>
|
||
|
|
<option value="sha256" selected>SHA-256</option>
|
||
|
|
<option value="sha384">SHA-384</option>
|
||
|
|
<option value="sha512">SHA-512</option>
|
||
|
|
<option value="sha3-256">SHA3-256</option>
|
||
|
|
<option value="sha3-512">SHA3-512</option>
|
||
|
|
<option value="blake2b">BLAKE2b</option>
|
||
|
|
<option value="blake2s">BLAKE2s</option>
|
||
|
|
<option value="crc32">CRC32</option>
|
||
|
|
<option value="all">ALL algorithms</option>
|
||
|
|
</select>
|
||
|
|
<button id="btn-ht-text" class="btn btn-primary" onclick="htHashText()">Hash</button>
|
||
|
|
</div>
|
||
|
|
<pre class="output-panel scrollable" id="ht-text-output"></pre>
|
||
|
|
</div>
|
||
|
|
</div>
|
||
|
|
|
||
|
|
<!-- ══ Mutate Tab ══ -->
|
||
|
|
<div class="tab-content" data-tab-group="hashtool" data-tab="mutate">
|
||
|
|
<div class="section">
|
||
|
|
<h2>Change File Hash</h2>
|
||
|
|
<p style="font-size:0.8rem;color:var(--text-muted);margin-bottom:8px">
|
||
|
|
Append bytes to a copy of a file to change its hash. Original file is not modified.
|
||
|
|
</p>
|
||
|
|
<div class="input-row">
|
||
|
|
<input type="text" id="ht-mutate-path" placeholder="File path to mutate">
|
||
|
|
<select id="ht-mutate-method" style="max-width:140px">
|
||
|
|
<option value="random">Random bytes</option>
|
||
|
|
<option value="null">Null bytes</option>
|
||
|
|
<option value="space">Spaces</option>
|
||
|
|
<option value="newline">Newlines</option>
|
||
|
|
</select>
|
||
|
|
<input type="number" id="ht-mutate-bytes" value="4" min="1" max="1024" style="max-width:80px" title="Bytes to append">
|
||
|
|
<button id="btn-ht-mutate" class="btn btn-primary" onclick="htMutate()">Mutate</button>
|
||
|
|
</div>
|
||
|
|
<pre class="output-panel scrollable" id="ht-mutate-output"></pre>
|
||
|
|
</div>
|
||
|
|
</div>
|
||
|
|
|
||
|
|
<!-- ══ Generate Tab ══ -->
|
||
|
|
<div class="tab-content" data-tab-group="hashtool" data-tab="generate">
|
||
|
|
<div class="section">
|
||
|
|
<h2>Create Dummy Hash Files</h2>
|
||
|
|
<p style="font-size:0.8rem;color:var(--text-muted);margin-bottom:8px">
|
||
|
|
Generate test files with known content for hash verification and testing.
|
||
|
|
</p>
|
||
|
|
<div class="input-row">
|
||
|
|
<input type="text" id="ht-gen-dir" placeholder="Output directory (e.g., /tmp)" value="/tmp">
|
||
|
|
<input type="text" id="ht-gen-name" placeholder="Filename" value="hashtest.bin" style="max-width:180px">
|
||
|
|
</div>
|
||
|
|
<div class="input-row" style="margin-top:6px">
|
||
|
|
<select id="ht-gen-type">
|
||
|
|
<option value="random">Random data</option>
|
||
|
|
<option value="zeros">All zeros (0x00)</option>
|
||
|
|
<option value="ones">All ones (0xFF)</option>
|
||
|
|
<option value="pattern">Repeating pattern (ABCDEF...)</option>
|
||
|
|
<option value="text">Custom text (repeated)</option>
|
||
|
|
</select>
|
||
|
|
<input type="number" id="ht-gen-size" value="1024" min="1" max="10485760" style="max-width:120px" title="Size in bytes">
|
||
|
|
<button id="btn-ht-gen" class="btn btn-primary" onclick="htGenerate()">Generate</button>
|
||
|
|
</div>
|
||
|
|
<div id="ht-gen-custom-row" class="input-row" style="margin-top:6px;display:none">
|
||
|
|
<input type="text" id="ht-gen-custom" placeholder="Custom text to repeat...">
|
||
|
|
</div>
|
||
|
|
<pre class="output-panel scrollable" id="ht-gen-output"></pre>
|
||
|
|
</div>
|
||
|
|
</div>
|
||
|
|
|
||
|
|
<!-- ══ Reference Tab ══ -->
|
||
|
|
<div class="tab-content" data-tab-group="hashtool" data-tab="reference">
|
||
|
|
<div class="section">
|
||
|
|
<h2>Hash Type Reference</h2>
|
||
|
|
<p style="font-size:0.8rem;color:var(--text-muted);margin-bottom:8px">
|
||
|
|
Common hash types, output lengths, and hashcat mode numbers.
|
||
|
|
</p>
|
||
|
|
<div id="ht-reference-table" style="overflow-x:auto"></div>
|
||
|
|
</div>
|
||
|
|
</div>
|
||
|
|
|
||
|
|
<script>
|
||
|
|
/* ── Hash Toolkit ─────────────────────────────────────────────────── */
|
||
|
|
|
||
|
|
function htIdentify() {
|
||
|
|
var hash = document.getElementById('ht-identify-input').value.trim();
|
||
|
|
if (!hash) return;
|
||
|
|
var btn = document.getElementById('btn-ht-identify');
|
||
|
|
setLoading(btn, true);
|
||
|
|
postJSON('/analyze/hash-detection/identify', {hash: hash}).then(function(data) {
|
||
|
|
setLoading(btn, false);
|
||
|
|
if (data.error) { renderOutput('ht-identify-output', 'Error: ' + data.error); return; }
|
||
|
|
|
||
|
|
var lines = [];
|
||
|
|
lines.push('Input: ' + data.hash);
|
||
|
|
lines.push('Length: ' + data.length + ' characters');
|
||
|
|
lines.push('');
|
||
|
|
|
||
|
|
if (data.matches && data.matches.length) {
|
||
|
|
lines.push('Possible Algorithms (' + data.matches.length + ' match' + (data.matches.length > 1 ? 'es' : '') + '):');
|
||
|
|
lines.push('');
|
||
|
|
data.matches.forEach(function(m, i) {
|
||
|
|
var hc = m.hashcat !== null ? ' [hashcat: ' + m.hashcat + ']' : '';
|
||
|
|
lines.push(' ' + (i + 1) + '. ' + m.name + hc);
|
||
|
|
lines.push(' ' + m.description);
|
||
|
|
});
|
||
|
|
} else {
|
||
|
|
lines.push(data.message || 'No matching hash algorithms found.');
|
||
|
|
}
|
||
|
|
renderOutput('ht-identify-output', lines.join('\n'));
|
||
|
|
|
||
|
|
// Show threat intel links for hex hashes of typical lengths
|
||
|
|
var linksDiv = document.getElementById('ht-threat-links');
|
||
|
|
var container = document.getElementById('ht-links-container');
|
||
|
|
var hexLens = [32, 40, 64, 128];
|
||
|
|
if (/^[a-fA-F0-9]+$/.test(hash) && hexLens.indexOf(hash.length) !== -1) {
|
||
|
|
container.innerHTML = '';
|
||
|
|
htGetThreatLinks(hash).forEach(function(link) {
|
||
|
|
var a = document.createElement('a');
|
||
|
|
a.href = link.url;
|
||
|
|
a.target = '_blank';
|
||
|
|
a.rel = 'noopener';
|
||
|
|
a.className = 'btn btn-sm';
|
||
|
|
a.textContent = link.name;
|
||
|
|
a.style.fontSize = '0.8rem';
|
||
|
|
container.appendChild(a);
|
||
|
|
});
|
||
|
|
linksDiv.style.display = '';
|
||
|
|
} else {
|
||
|
|
linksDiv.style.display = 'none';
|
||
|
|
}
|
||
|
|
}).catch(function() { setLoading(btn, false); });
|
||
|
|
}
|
||
|
|
|
||
|
|
function htGetThreatLinks(hash) {
|
||
|
|
return [
|
||
|
|
{name: 'VirusTotal', url: 'https://www.virustotal.com/gui/file/' + hash},
|
||
|
|
{name: 'Hybrid Analysis', url: 'https://www.hybrid-analysis.com/search?query=' + hash},
|
||
|
|
{name: 'MalwareBazaar', url: 'https://bazaar.abuse.ch/browse.php?search=' + hash},
|
||
|
|
{name: 'AlienVault OTX', url: 'https://otx.alienvault.com/indicator/file/' + hash},
|
||
|
|
{name: 'Shodan', url: 'https://www.shodan.io/search?query=' + hash},
|
||
|
|
];
|
||
|
|
}
|
||
|
|
|
||
|
|
function htHashFile() {
|
||
|
|
var filepath = document.getElementById('ht-file-path').value.trim();
|
||
|
|
if (!filepath) return;
|
||
|
|
var btn = document.getElementById('btn-ht-file');
|
||
|
|
setLoading(btn, true);
|
||
|
|
postJSON('/analyze/hash-detection/file', {filepath: filepath}).then(function(data) {
|
||
|
|
setLoading(btn, false);
|
||
|
|
if (data.error) { renderOutput('ht-file-output', 'Error: ' + data.error); return; }
|
||
|
|
var lines = [];
|
||
|
|
lines.push('File: ' + data.path);
|
||
|
|
lines.push('Size: ' + data.size + ' bytes');
|
||
|
|
lines.push('');
|
||
|
|
lines.push('Digests:');
|
||
|
|
if (data.hashes) {
|
||
|
|
lines.push(' CRC32: ' + (data.hashes.crc32 || ''));
|
||
|
|
lines.push(' MD5: ' + (data.hashes.md5 || ''));
|
||
|
|
lines.push(' SHA1: ' + (data.hashes.sha1 || ''));
|
||
|
|
lines.push(' SHA256: ' + (data.hashes.sha256 || ''));
|
||
|
|
lines.push(' SHA512: ' + (data.hashes.sha512 || ''));
|
||
|
|
}
|
||
|
|
renderOutput('ht-file-output', lines.join('\n'));
|
||
|
|
}).catch(function() { setLoading(btn, false); });
|
||
|
|
}
|
||
|
|
|
||
|
|
function htHashText() {
|
||
|
|
var text = document.getElementById('ht-text-input').value;
|
||
|
|
if (!text) return;
|
||
|
|
var algo = document.getElementById('ht-text-algo').value;
|
||
|
|
var btn = document.getElementById('btn-ht-text');
|
||
|
|
setLoading(btn, true);
|
||
|
|
postJSON('/analyze/hash-detection/text', {text: text, algorithm: algo}).then(function(data) {
|
||
|
|
setLoading(btn, false);
|
||
|
|
if (data.error) { renderOutput('ht-text-output', 'Error: ' + data.error); return; }
|
||
|
|
var lines = [];
|
||
|
|
lines.push('Input length: ' + data.text_length + ' characters');
|
||
|
|
lines.push('');
|
||
|
|
if (data.algorithm === 'all' && data.hashes) {
|
||
|
|
lines.push('All Digests:');
|
||
|
|
Object.keys(data.hashes).sort().forEach(function(name) {
|
||
|
|
var pad = ' '.slice(0, 10 - name.length);
|
||
|
|
lines.push(' ' + name + ':' + pad + data.hashes[name]);
|
||
|
|
});
|
||
|
|
} else {
|
||
|
|
lines.push('Algorithm: ' + data.algorithm.toUpperCase());
|
||
|
|
lines.push('Hash: ' + data.hash);
|
||
|
|
}
|
||
|
|
renderOutput('ht-text-output', lines.join('\n'));
|
||
|
|
}).catch(function() { setLoading(btn, false); });
|
||
|
|
}
|
||
|
|
|
||
|
|
function htMutate() {
|
||
|
|
var filepath = document.getElementById('ht-mutate-path').value.trim();
|
||
|
|
if (!filepath) return;
|
||
|
|
var method = document.getElementById('ht-mutate-method').value;
|
||
|
|
var numBytes = document.getElementById('ht-mutate-bytes').value || '4';
|
||
|
|
var btn = document.getElementById('btn-ht-mutate');
|
||
|
|
setLoading(btn, true);
|
||
|
|
postJSON('/analyze/hash-detection/mutate', {filepath: filepath, method: method, num_bytes: numBytes}).then(function(data) {
|
||
|
|
setLoading(btn, false);
|
||
|
|
if (data.error) { renderOutput('ht-mutate-output', 'Error: ' + data.error); return; }
|
||
|
|
var lines = [];
|
||
|
|
lines.push('Original: ' + data.original_path + ' (' + data.original_size + ' bytes)');
|
||
|
|
lines.push('Mutated: ' + data.mutated_path + ' (' + data.mutated_size + ' bytes)');
|
||
|
|
lines.push('Method: ' + data.method + ' (' + data.bytes_appended + ' bytes appended)');
|
||
|
|
lines.push('');
|
||
|
|
lines.push('Before:');
|
||
|
|
lines.push(' MD5: ' + data.original_hashes.md5);
|
||
|
|
lines.push(' SHA256: ' + data.original_hashes.sha256);
|
||
|
|
lines.push('');
|
||
|
|
lines.push('After:');
|
||
|
|
lines.push(' MD5: ' + data.new_hashes.md5);
|
||
|
|
lines.push(' SHA256: ' + data.new_hashes.sha256);
|
||
|
|
renderOutput('ht-mutate-output', lines.join('\n'));
|
||
|
|
}).catch(function() { setLoading(btn, false); });
|
||
|
|
}
|
||
|
|
|
||
|
|
function htGenerate() {
|
||
|
|
var dir = document.getElementById('ht-gen-dir').value.trim();
|
||
|
|
var name = document.getElementById('ht-gen-name').value.trim();
|
||
|
|
var type = document.getElementById('ht-gen-type').value;
|
||
|
|
var size = document.getElementById('ht-gen-size').value || '1024';
|
||
|
|
var custom = document.getElementById('ht-gen-custom').value;
|
||
|
|
if (!dir || !name) return;
|
||
|
|
var btn = document.getElementById('btn-ht-gen');
|
||
|
|
setLoading(btn, true);
|
||
|
|
postJSON('/analyze/hash-detection/generate', {
|
||
|
|
output_dir: dir, filename: name, content_type: type, size: size, custom_text: custom
|
||
|
|
}).then(function(data) {
|
||
|
|
setLoading(btn, false);
|
||
|
|
if (data.error) { renderOutput('ht-gen-output', 'Error: ' + data.error); return; }
|
||
|
|
var lines = [];
|
||
|
|
lines.push('Created: ' + data.path);
|
||
|
|
lines.push('Size: ' + data.size + ' bytes');
|
||
|
|
lines.push('Content: ' + data.content_type);
|
||
|
|
lines.push('');
|
||
|
|
lines.push('Digests:');
|
||
|
|
if (data.hashes) {
|
||
|
|
lines.push(' CRC32: ' + (data.hashes.crc32 || ''));
|
||
|
|
lines.push(' MD5: ' + (data.hashes.md5 || ''));
|
||
|
|
lines.push(' SHA1: ' + (data.hashes.sha1 || ''));
|
||
|
|
lines.push(' SHA256: ' + (data.hashes.sha256 || ''));
|
||
|
|
lines.push(' SHA512: ' + (data.hashes.sha512 || ''));
|
||
|
|
}
|
||
|
|
renderOutput('ht-gen-output', lines.join('\n'));
|
||
|
|
}).catch(function() { setLoading(btn, false); });
|
||
|
|
}
|
||
|
|
|
||
|
|
/* Show/hide custom text input when content type changes */
|
||
|
|
document.getElementById('ht-gen-type').addEventListener('change', function() {
|
||
|
|
document.getElementById('ht-gen-custom-row').style.display = this.value === 'text' ? '' : 'none';
|
||
|
|
});
|
||
|
|
|
||
|
|
/* Build static reference table */
|
||
|
|
(function() {
|
||
|
|
var el = document.getElementById('ht-reference-table');
|
||
|
|
if (!el) return;
|
||
|
|
var ref = [
|
||
|
|
['CRC32', '8', 'Hex', '11500'],
|
||
|
|
['MD4', '32', 'Hex', '900'],
|
||
|
|
['MD5', '32', 'Hex', '0'],
|
||
|
|
['NTLM', '32', 'Hex', '1000'],
|
||
|
|
['LM', '32', 'Hex', '3000'],
|
||
|
|
['MySQL323', '16', 'Hex', '200'],
|
||
|
|
['MySQL41', '41', '*Hex', '300'],
|
||
|
|
['RIPEMD-160', '40', 'Hex', '6000'],
|
||
|
|
['SHA-1', '40', 'Hex', '100'],
|
||
|
|
['Tiger-192', '48', 'Hex', '10000'],
|
||
|
|
['SHA-224', '56', 'Hex', '--'],
|
||
|
|
['SHA-256', '64', 'Hex', '1400'],
|
||
|
|
['SHA-384', '96', 'Hex', '10800'],
|
||
|
|
['SHA-512', '128', 'Hex', '1700'],
|
||
|
|
['SHA3-256', '64', 'Hex', '17400'],
|
||
|
|
['SHA3-512', '128', 'Hex', '17600'],
|
||
|
|
['BLAKE2b', '128', 'Hex', '600'],
|
||
|
|
['BLAKE2s', '64', 'Hex', '--'],
|
||
|
|
['Whirlpool', '128', 'Hex', '6100'],
|
||
|
|
['bcrypt', '60', '$2a$...', '3200'],
|
||
|
|
['MD5 crypt', '34', '$1$...', '500'],
|
||
|
|
['SHA-256 crypt', '63', '$5$...', '7400'],
|
||
|
|
['SHA-512 crypt', '98', '$6$...', '1800'],
|
||
|
|
['Argon2', 'var', '$argon2...', '--'],
|
||
|
|
['PBKDF2', 'var', '$pbkdf2...', '10900'],
|
||
|
|
['WordPress', '34', '$P$...', '400'],
|
||
|
|
['Drupal7', '55', '$S$...', '7900'],
|
||
|
|
];
|
||
|
|
var html = '<table style="width:100%;font-size:0.82rem;border-collapse:collapse">';
|
||
|
|
html += '<thead><tr style="border-bottom:2px solid var(--border);text-align:left">';
|
||
|
|
html += '<th style="padding:6px 10px">Algorithm</th>';
|
||
|
|
html += '<th style="padding:6px 10px">Length</th>';
|
||
|
|
html += '<th style="padding:6px 10px">Format</th>';
|
||
|
|
html += '<th style="padding:6px 10px">Hashcat Mode</th></tr></thead><tbody>';
|
||
|
|
ref.forEach(function(r) {
|
||
|
|
html += '<tr style="border-bottom:1px solid var(--border)">';
|
||
|
|
r.forEach(function(c) { html += '<td style="padding:5px 10px;font-family:monospace">' + c + '</td>'; });
|
||
|
|
html += '</tr>';
|
||
|
|
});
|
||
|
|
html += '</tbody></table>';
|
||
|
|
el.innerHTML = html;
|
||
|
|
})();
|
||
|
|
</script>
|
||
|
|
{% endblock %}
|