nowfound

Life & fun · May 21, 2026

ID

I Dedicated 4 Years to Mastering Offline Password Cracking

Hi everyone, I am Bojta Lepenye, and first of all, I want to thank the core developers of Hashcat. In my experience, it is quite literally the most capable tool available for offline password cracking across a wide range of use cases. I have spent the last 4 years (from age 14 to 18) extensively working with Hashcat and the tools surrounding it, and I have documented what I have learned throughout that time (since January 18, 2022) in my first book. During that period, I also had to continuously update and rewrite major sections as the field evolved. One example was the introduction of GPU…

I Dedicated 4 Years to Mastering Offline Password Cracking launched on May 21, 2026 with 268 votes, #85 of 20,538 launches that month and more than 99% of that year's launches.

Alternativestop 1% of May 2026

In plain words

This is a book documenting four years of hands-on experience with offline password cracking tools and techniques, written by Bojta Lepenye from age 14 to 18. It covers extensive work with Hashcat and related tools, with updated sections reflecting field evolution including GPU support for memory-hard algorithms. The guide is intended for those interested in password security and penetration testing, drawing from the author's authorized security work and practical expertise built over years of dedicated study.

written from the facts on this page · September 2026

From the sources

In the maker’s words, at launch

Hi everyone, I am Bojta Lepenye, and first of all, I want to thank the core developers of Hashcat. In my experience, it is quite literally the most capable tool available for offline password cracking across a wide range of use cases. I have spent the last 4 years (from age 14 to 18) extensively working with Hashcat…

Does a similar job

all alternatives →
  • A hash array-mapped trie implementation in C2023 · github.com · ▲171

    Long-simmering side project that is finally ready to see the light. HAMTs are a cool persistent data structure and implementing one has been a lot of fun. Beyond the code, there is likely some value in the extensive and largely complete implementation docs; basic benchmarks are linked in the README, too. Kind of aiming to be "the libavl for HAMTs". That is obviously a high and aspirational bar but a distinct possibility if it stirs up a little interest and/or contribution. Anyways, it's time for this to go out, collect feedback and maybe even some use outside of toy projects. Let me…

  • Cracking passwords with a simple genetic algorithm2016 · github.com · ▲149

    Population based metaheuristic for password cracking. Siga(Simple genetic algorithm) - lyle-nel/siga

  • KA
    Keycat – A self-hosted end-to-end encrypted password manager2019 · key.cat · ▲87
  • I created an off-the-grid password manager that you can save to a file2021 · passpilot.com · ▲48

    Free password manager that you can keep for yourself in a single HTML file. Client side AES encryption, trust no one policy, off the grid password manager. Take full control of your data online or offline.

  • Minimal NIST/OWASP-compliant auth implementation for Cloudflare WorkersFeb 2026 · github.com · ▲33

    This is an educational reference implementation showing how to build reasonably secure, standards-compliant authentication from first principles on Cloudflare Workers. Stack: Hono, Turso (libSQL), PBKDF2-SHA384 + normalization + common-password checks, JWT access + refresh tokens with revocation support, HTTP-only SameSite cookies, device tracking. It's deliberately minimal — no OAuth, no passkeys, no magic links, no rate limiting — because the goal is clarity and auditability. I wrote it mainly to deeply understand edge-runtime auth constraints and to have a clean Apache-2.0 example that…

  • Hashpass2014 · chromewebstore.google.com · ▲68

    A simple, stateless password manager for Chrome

More life & fun this month

the category →

Source: Show HN post ↗ · launch text quoted in part

Launched alongside, May 2026

the whole month →
  • Brew ▲900

    Like Claude design for email marketing

    AI · May 2026 · brew.new

  • Kilo Code for VS Code▲896

    Parallel agents, diff reviewer, and multi-model comparisons

    Dev tools · May 2026 · kilo.ai

  • StoreClaw▲806

    Grow your store profits with agents that know how to sell

    AI · May 2026 · storeclaw.ai

  • PollyReach▲795

    Give your agent a real number and voice to make calls.

    AI · May 2026 · pollyreach.ai

  • Needle: We Distilled Gemini Tool Calling into a 26M Model▲776

    Hey HN, Henry here from Cactus. We open-sourced Needle, a 26M parameter function-calling (tool use) model. It runs at 6000 tok/s prefill and 1200 tok/s decode on consumer devices. We were always frustrated by the little effort made towards building agentic models that run on budget phones, so we conducted investigations that led to an observation: agentic experiences are built upon tool calling, and massive models are overkill for it. Tool calling is fundamentally retrieval-and-assembly (match query to tool name, extract argument values, emit JSON), not reasoning. Cross-attention…

    Life & fun · May 2026 · github.com

  • Files.md – Open-source alternative to Obsidian▲730

    🌱 Private, quiet space for thinking. Simple app for .md files. - zakirullin/files.md

    Dev tools · May 2026 · github.com