Bitcoin Forum

<?php

/*
* Copyright 2014 Jayson Strickland. 
* The right to use, modify and distribute this code is hereby granted provided this notice is left in tact.
* You may not claim authorship, but aside from this notice, no attribution is required if this code is used 
* as part of a larger program.
*/

class Hash 
{
	function hash_password($password, $cost, $salt = null)
	{
		// define result array
		$result = array();
		
		if ($salt == null)
		{
		    // generate a new salt
		    $result['salt'] = substr(hash('sha256', uniqid('', true) . mt_rand(0, mt_getrandmax())), 0, 32);
		    $salt = $result['salt'];
		}

		// create an initial hash
		$result['hash'] = hash('whirlpool', $salt . $password);

		// apply Whirlpool for 1/2 of specified rounds
		for ($i = 0; $i <= ($cost / 2) - 1; $i++)
		{
		    $result['hash'] = hash('whirlpool', $salt . $result['hash']);
		}

		// apply sha-256 for 1/2 of specified rounds
		for ($i = 0; $i <= $cost / 2; $i++)
		{
		    $result['hash'] = hash('sha512', $salt . $result['hash']);
		}

                // return an array containing the salt and final hash
		return $result;
	}
}

$sPassHash = hash( "sha1", $sPassword );

// this is the hash of the password I'm trying to break
$hash_to_crack = '30fca77cebf16fe3c5b5b4db4371dee4';
$found = false;

// until $found is changed to true, keep trying!
while (!$found)
{
     // $this->next_try would be a method designed to supply the next possible password.
     $attempt = md5($this->next_try);
     
     // compare the next hash to the target hash
     if ($attempt == $hash_to_crack)
     {
         // end the loop when we've found the hash
         $found = true;
     }
}

// these are the hashes of the passwords I'm trying to break
$hash_to_crack = array();
$hash_to_crack[] = '30fca77cebf16fe3c5b5b4db4371dee4';
$hash_to_crack[] = '40fceb6cebf16fec15b5b4db4371cef4';
// many more hashes, the entire dbase.
$hash_to_crack[] = '50fca4cebf146fe3c5b5b4db4371bbe4';

$attempt = NULL;
$hashes = sizeof($hash_to_crack);
$cracked = 0;
$pass = "";

while ($cracked < $hashes)
{
     // $this->next_try would be a method designed to supply the next possible password.
     $pass = $this->next_try
     $attempt = md5($pass);
     
     // compare the next hash to the target hash
     for($hash_num = 0; $hash_num  < $hashes; $hash_num++)
     {
	     if ($attempt == $hash_to_crack[$hash_num])
	     {
		echo("FOUND PASSWORD $pass");
		echo("FOR HASH " . ($hash_to_crack[$hash_num]));
		echo(PHP_EOL);
                $cracked++;
	     }
     }
}