Summary: A utility to quickly determine the possible type of a given cryptographic hash string.

The identify Command

The identify command is a utility to quickly determine the possible type of a given cryptographic hash string. It analyzes the string's length and character set to match it against common hash formats.

Supported Formats

The command can identify a variety of common hash types, including:

  • Standard hashes like MD5, NTLM, SHA1, SHA256, and SHA512.
  • Common Linux password hashes like bcrypt, md5crypt, sha256crypt, and sha512crypt.
  • Hashes from specific applications like MySQL5.

Core Use Cases

  • Hash Identification: Quickly check if a found string is a known hash type like MD5, SHA1, or SHA256.
  • Placeholder Integration: Directly identify hashes stored as loot or in notes without copy-pasting.

Syntax

identify <hash_string_or_placeholder>

Examples:

# Identify a raw hash string
identify 5f4dcc3b5aa765d61d8327deb882cf99

# Identify a hash that was previously saved as loot
loot add hash 5f4dcc3b5aa765d61d8327deb882cf99
identify $loot.0.value