HASHHACK is a Python and Flask-based password security auditing project developed during the Hash-Hive Hackathon by Team Hackstreet Boys.
The project demonstrates important password-security concepts such as password hashing, hash verification, dictionary-based password testing, and password-strength analysis in a controlled environment.
⚠️ This project is intended for educational purposes and authorized security testing only.
Weak and commonly used passwords can create serious security risks.
HASHHACK was developed to demonstrate how password security mechanisms work and why applications should never store passwords in plain text.
The project provides functionality for:
- 🔑 Password hash generation
- 🔍 Hash verification
- 📖 Dictionary-based password testing
- 💪 Password strength analysis
- 🌐 Web-based interaction through Flask
- 🛡️ Demonstration of secure password-storage concepts
Users can enter a password and generate a secure password hash using bcrypt.
The generated hash can be used to demonstrate password verification without storing the original plaintext password.
HASHHACK can test a target password hash against candidate passwords from a wordlist.
If a matching password is found in the supplied dictionary, the application reports the result.
This demonstrates how weak or commonly used passwords can be vulnerable to dictionary-based attacks.
The project includes a password_strength.py module for analyzing
password strength.
The module evaluates characteristics such as:
- Password length
- Lowercase characters
- Uppercase characters
- Numbers
- Special characters
- Common/weak password patterns
It provides a strength score and recommendations for improving weak passwords.
Current status: The password-strength module has been added to the project and is planned for integration with the Flask web interface.
HASHHACK includes a simple web interface built using:
- HTML
- CSS
- JavaScript
- Flask
The interface follows a cybersecurity-inspired/cyberpunk visual theme.
HASHHACK
│
┌─────────────┴─────────────┐
│ │
▼ ▼
Password Hashing Password Analysis
│ │
▼ ▼
Password_hasher.py password_strength.py
│ │
▼ │
Hash Output │
│ │
▼ ▼
Dictionary_attack.py Strength Assessment
│
▼
Dictionary Testing
│
▼
Result