Unfragile

The request asks what to use for hash attack techniques, which is a security-testing topic rather than a named product. The sources point to hashcat, a password recovery utility for cracking hashes 5, and Trail of Bits' fuzzing and security tooling, including a skill that patches past hash verification barriers during fuzzing 6. Oracle's and Docker's sources do not show hash-attack tooling, so they are left out.

1
hashcathashcat.netwebsite read, tools not yet checked
A password recovery utility for cracking hashes, the most relevant tool for hash attacks 5.
Website
+2 community tools built for it
2
Trail of Bitstrailofbits.comverified and signed
Open-source security tools including fuzzing dictionaries and fuzzing-obstacle skills that deal with hash and checksum verification barriers 6.
Website
for agents: harness-writing · fuzzing-dictionary · fuzzing-obstacles
3
OWASP Foundationowasp.orgfound in code, not yet checked
Free application security projects and standards, useful background for understanding hash-related weaknesses in applications 10.
Website Docs
+16 community tools built for it
for agents: grep · osv_get_vuln · Bash

Sources

5hashcat - advanced password recoveryhashcat.net · read 2026-10-29
6Trail of Bits: Security Research, Audits, and Toolstrailofbits.com · read 2026-10-29
10OWASP Foundation - The Open Source Foundation for Application Securityowasp.org · read 2026-10-29

For agents: the 10 actions behind this answer

github/ossar-action · ossar-action verified and signed
Run open source security static analysis tools without the added complexity with OSSAR (Open Source Static Analysis Runner)
neo4j-cli-tools-skill · neo4j-cli-tools-skill verified and signed
Use when working with Neo4j command-line tools — neo4j-cli (modern unified CLI — Cypher via Bolt, schema inspection, Aura management, Docker containers, credential management, agent skill catalog install; install with curl -sSfL https://neo4j.sh/install.sh | bash), neo4j-admin (backup, restore, impo
list_dbtools_connection_tool · mcp found in code, not yet checked
List all dbtools connections in a given compartment
hashing · argon2-cffi verified and signed
· hashcat website read, tools not yet checked
World's fastest and most advanced password recovery utility
harness-writing · harness-writing verified and signed
Designs and improves fuzzing harnesses for C/C++ and Rust. Covers mapping raw bytes onto a target API, generating structured inputs, avoiding non-determinism and false crashes, and deciding what to fuzz together. Use when writing a first LLVMFuzzerTestOneInput or fuzz_target! harness, when a campaig
· PyCrypto website read, tools not yet checked
search · dd-trace-js found in code, not yet checked
Search for a query
· XMRig website read, tools not yet checked
grep · xpsd found in code, not yet checked
Grep the analyzed project's source code using 'grep -rnE'.

Labels are the instruments' verdict and are never changed by ranking. Agents and robots get this same answer as JSON at /api/v1/find?q=…&answer=1 and through the MCP server.