Developer Builds Browser-Based SHA-1 Password Cracker with Key Bug Fixes

·5 views

A developer has released a browser-based SHA-1 password cracking demo that corrects encoding and memory inefficiencies found in earlier implementations. The tool runs entirely in the browser using the Web Crypto API, supporting both salted and unsalted password lookups against a customizable password list. A core bug fix ensures strings are always encoded as UTF-8 bytes before hashing, preventing digest mismatches across languages and environments. For unsalted cracking, the tool precomputes a single hash-to-password map for fast constant-time lookups, while salted searches iterate efficiently to avoid generating memory-heavy cross-product combinations. The project consists of three files — index.html, style.css, and script.js — and is designed to be dropped directly into any static website.

Read the full story at DEV Community

This is an AI-generated summary. ShortSingh links to the original source for the complete article.

Discussion (0)

Chrome Extension Replaces Website Ads with Artworks from Major Public Museums

A developer has released a Chrome extension called Ads Art that substitutes visible advertisements on websites with artworks sourced from two renowned public institutions. The extension draws images from the Art Institute of Chicago and The Metropolitan Museum of Art. It operates locally on the user's computer using a collection of JavaScript scripts. The project is open source, with its code publicly available on GitHub for anyone to explore or contribute to.

0 comments Read more at DEV Community

ProgrammingDEV Community ·

How json_shield Was Built to Be Understood by AI Code Assistants

A Dart package called json_shield has been engineered with AI coding assistants in mind, recognizing that tools like Copilot and Cursor now generate much of the code that consumes open-source packages. The package's author identifies four key artifacts — README, example directory, doc comments, and pubspec.yaml description — that IDE retrieval systems index and feed into AI prompts. Each artifact follows strict rules, such as removing vague adjectives, providing exact input/output examples, and explicitly stating what the package cannot do, to prevent AI models from hallucinating unsupported features. Inline documentation comments are written to specify exception types and failure modes, nudging AI assistants toward correct error-handling patterns rather than generic ones. The approach reflects a broader shift in package development, where authors must now optimize their code and documentation for both human developers and the AI agents assisting them.

0 comments Read more at DEV Community

ProgrammingDEV Community ·

Free API lets course providers issue tamper-proof certificates with one HTTP call

Novadyne has released Attestify, a free API that allows course providers and training programs to issue cryptographically signed completion certificates without requiring an account or API key. Each certificate is backed by a server-side record and an Ed25519 digital signature, making any alteration instantly detectable during verification. Recipients receive a permanent public verification URL that anyone — including employers — can open without creating an account or installing an app. The API integrates with automation tools like n8n and supports batch issuance for multiple recipients in a single request. Attestify positions itself as a lightweight alternative to full credentialing platforms, focusing solely on free, programmatic certificate issuance and public verification.

0 comments Read more at DEV Community

ProgrammingDEV Community ·

Tutorial: How to Build a Full CRUD API in Go Using Only the Standard Library

A developer tutorial published on DEV Community walks through building a complete CRUD API in Go without any third-party packages. The guide extends a previously built task API by adding PUT and DELETE HTTP method handlers alongside existing GET and POST functionality. Tasks are stored in memory using a Go slice, keeping the setup simple and database-free. The tutorial covers how the server matches incoming requests by HTTP method and updates or removes tasks based on a matching ID in the request body. By the end, readers are expected to understand how backend APIs manage resources through the four core CRUD operations.

0 comments Read more at DEV Community