Forensic with HashDeep on Kali Linux 🙂
đź”°Overview:
hashdeep is a cross-platform tool for calculating hashes or message digests for any number of files, supports recursive traversal of the directory structure. It can also search for files by known hashes, or display files that do not match the entered hashes. MD5, SHA-1, SHA-256, Tiger and Whirlpool hashes are supported.
hashdeep is the new name given to the program after all hash support was merged into one executable file. Previously, the program was called md5deep , to which the following were gradually added as separate programs:
* sha1deep
* sha256deep
* sha3deep
* tigerdeep
* whirlpooldeep
On some systems, the md5deep program, or even all of the programs listed, are installed with hashdeep.
đź”°OR-
hashdeep is a set of tools to compute MD5, SHA1, SHA256, tiger and whirlpool hashsums of arbitrary number of files recursively.
đź”°The main hashdeep features are:
- It can compare those hashsums with a list of known hashes;
- The tools can display those that match the list or those that does not match;
- It can display a time estimation when processing large files.
- It can do piecewise hashing (hash input files in arbitrary sized blocks).
This package is useful in forensics investigations.
đź”°Install & Usages:
$ sudo apt update
$ sudo apt install hashdeep
$ sudo man hashdeep
$ sudo apt show hashdeep -a
$ sudo locate hashdeep
$ sudo hashdeep -V
$ sudo hashdeep -h
$ sudo md5deep -h
$ sudo sha1deep -h
$ sudo sha256deep -h
$ sudo tigerdeep -h
$ sudo whirlpooldeep -h
$ sudo hashdeep hash.txt
$ sudo hashdeep -b hash.txt
$ sudo hashdeep -s tik.tiff
$ sudo hashdeep -c md5,sha1,sha256,tiger,whirlpool hash.txt
$ sudo hashdeep -c md5 < /dev/null
$ sudo locate hashdeep
$ sudo hashdeep -c md5 /usr/bin/hashdeep
$ sudo hashdeep -c md5 -p 65536 hash.jpeg
$ sudo hashdeep -c md5 -r /home/kali/Desktop/exe/
$ sudo md5deep -r /home/kali/images
$ sudo md5deep -r -c /home/kali/Desktop/exe/ > hashoutput.txt
$ sudo md5deep *.jpg *.jpeg *.tiff > output.txt
$ sudo less hashoutput.txt
$ sudo hashdeep hash.txt -d
Connect:
đź”—https://www.facebook.com/profile.php?id=100090199510403&mibextid=ZbWKwL
đź”—https://viccyberspaces.blogspot.com/
Closing:
Thanks for watching.
Sources-
đź”—https://viccyberspaces.blogspot.com/
đź”—https://www.kali.org/tools/hashdeep/
đź”—http://md5deep.sf.net/
đź”—http://pkg.kali.org/hashdeep
đź”—https://salsa.debian.org/pkg-security-team/hashdeep
đź”—https://github.com/jessek/hashdeep
đź”—https://kali.tools/?p=3833
đź”—http://md5deep.sourceforge.net/
#hashdeep #md5hashdeep #vic #viccyberspaces #vic_cyber_spaces #vichacker #hackthebox #roothacker #hackerworld #worldhacker #nsa #cia #fbi #hashdeepforensics #osint #informationgathering #penetration #pentesting #websecurity #cybersecurity #ethicalhacking #hacking #anonymous #kalilinux #linux #kali
Comments
Post a Comment