I Dedicated 4 Years to Mastering Offline Password Cracking
Details
- External ID
- 48221896
- Source
- HN
- Company
- —
- Product
- —
- Website domain
- —
- Launched
- May 21, 2026
- Cohort
- —
- Upvotes
- 268
- Upvotes percentile
- 0.9733441033925686
- Tags
- —
- Fetched at
- Sept. 7, 2026, 9:26 p.m.
- Updated at
- Sept. 7, 2026, 9:26 p.m.
Description
Hi everyone,I am Bojta Lepenye, and first of all, I want to thank the core developers of Hashcat. In my experience, it is quite literally the most capable tool available for offline password cracking across a wide range of use cases.I have spent the last 4 years (from age 14 to 18) extensively working with Hashcat and the tools surrounding it, and I have documented what I have learned throughout that time (since January 18, 2022) in my first book. During that period, I also had to continuously update and rewrite major sections as the field evolved. One example was the introduction of GPU support for Argon2 and other memory-hard password hashing algorithms, which significantly changed some cracking workflows.My passion for this book, or its “quick starter,” if you will, came from an ethically conducted penetration test I performed with full authorization at my school. This is something I am both hesitant and quite proud to acknowledge.At the beginning, I simply wrote down everything I had learned from YouTube videos and online blogs. However, not long after starting my project, I realized I practically knew nothing about password security, and that small 10 to 15 pages I had written would never be enough if someone was looking for a professional guide to cracking passwords.The other main driving force behind the book was the fact that while researching online, browsing forums, reading academic papers and white papers, watching videos, exploring blogs, inspecting presentations, and examining infographics, I did not find a single source that comprehensively covers and explains everything one needs to understand about offline password cracking. Literally. Not one.Therefore, I continued my research and learned about password hashing algorithms, the security properties of hash functions, advanced hash cracking techniques, password analysis, attack optimization, and much, much more.From the very beginning, I wanted to share this knowledge with the community because having access to a resource like this would have helped me tremendously when I first started learning password cracking.I sincerely hope this work will be useful to both beginners and experienced professionals alike, and I look forward to hearing your thoughts and feedback.I have also put together a little video to give you a little sneak peek into it. It is on Google Drive. It is the official domain, and you do not need to download anything. Here it is: https://drive.google.com/file/d/13LeysSZO8Mx-LGKt8UQjUGBKOYH...If you are interested, the book is now publicly available on Amazon, and can be read for free with a Kindle Unlimited subscription: https://www.amazon.com/dp/B0GX36XRCD
Enrichment
- Theme
- self-hosted infrastructure and security tools
- Vertical
- Security
- Function
- Dev tools
- Audience
- Developer
- AI stance
- Not AI
- Project type
- Hobby / open-source project
- Normalized one-liner
- offline password cracking tool
- Manually corrected
- False
Could you build this?
No Offline password cracking research and writing high-performance GPU hash cracking kernels (OpenCL/CUDA) requires deep cryptographic knowledge, mathematical cryptanalysis, and hardware-level performance optimization.
What it would actually take: Building tools comparable to Hashcat involves writing hand-optimized OpenCL/CUDA assembly kernels targeting specific GPU register architectures to maximize compute throughput for hashing primitives (MD5, SHA, bcrypt, scrypt, Argon2). It also requires advanced rule engine development, dictionary generation heuristics, and deep cryptanalytic domain expertise.
Discussion
20 comments analyzed.
Competitors mentioned: vast.ai (GPU rental for password cracking), Rainbow tables
Concerns raised: Grammar and style issues in the book, Whether hashcat book has sufficient market size, AI-written content concerns (but book praised as human-written)
Feature requests: Newsletter or website for future books and blog articles
Competitors
Other products that read as similar to this one — 109 launches clear the similarity bar, closest 8 shown.
Attention rank: #5 of 110 (itself plus its competitors, highest first — normalized so YC and Product Hunt are compared fairly).
Launched 203 days after the earliest competitor.
- What I learned building a local-only password manager (PassForgePro) · hn · 2026-01-21 · 5 upvotes · similarity 0.44
- Shrouded, secure memory management in Rust · hn · 2026-03-23 · 5 upvotes · similarity 0.43
- Compute polynomials twice as fast · hn · 2026-09-09 · 137 upvotes · similarity 0.43
- I built a smart blocker after destroying my dopamine baseline · hn · 2025-11-02 · 20 upvotes · similarity 0.42
- If you lose your memory, how to regain access to your computer? · hn · 2026-02-06 · 402 upvotes · similarity 0.42
- Brute · github · 2026-09-18 · 8 upvotes · similarity 0.41
- Anonymous age verification with passkey-powered encryption · hn · 2026-08-19 · 45 upvotes · similarity 0.40
- polyxor · github · 2026-09-26 · 53 upvotes · similarity 0.40
Other launches for this product
- No other launches for this product.
Same idea, different domain
Nobody's really built a dev tools tool for Sales yet.