bcrypt & Web Hash Cracking Service

Web Application Hash Types

bcrypt (Hashcat Mode 3200)

bcrypt is a Blowfish-based password hashing algorithm, intentionally slow with configurable cost factor (typically 10-12). Used by Ruby on Rails, Django, Node.js, and modern frameworks.

Example: $2b$10$N9qo8uLOickgx2ZMRZoMyeIjZAgcfl7p92ldGxad68LJZdL17lhWy

Slow by design, but weak passwords still fall with targeted GPU attacks.

phpass / WordPress (Mode 400)

WordPress, Joomla, phpBB use phpass with MD5-based iterated hashing (8192 iterations). Hashes from wp_users look like: $P$B... or $H$...

Faster than bcrypt but still significantly slower than raw MD5.

OpenCart (Mode 13900)

OpenCart uses SHA1 with salt: sha1(salt + sha1(salt + sha1(password))). Faster than bcrypt, crackable with dictionary attacks.

Common Scenarios

• WordPress admin lockout — Lost access to admin and need the password from database
• Database breach audit — Testing password strength after a security incident
• Legacy system migration — Recovering passwords from old CMS for user migration
• Forensic analysis — Recovering passwords from database dumps for authorized investigations

Pricing

OpenCart: $100. phpass/WordPress: $150. bcrypt: $200. Bulk pricing available. No result = no charge.