{"id":434,"date":"2021-06-08T10:52:32","date_gmt":"2021-06-08T08:52:32","guid":{"rendered":"https:\/\/infosecscout.com\/?p=434"},"modified":"2023-11-22T13:02:16","modified_gmt":"2023-11-22T12:02:16","slug":"decrypt-md5-in-javascript","status":"publish","type":"post","link":"https:\/\/infosecscout.com\/decrypt-md5-in-javascript\/","title":{"rendered":"How to Decrypt MD5 in JavaScript? (Solution with examples)"},"content":{"rendered":"\n<p>Cracking MD5 hashes is interesting for many people, and if you are programming in JavaScript you are at the perfect place. In this article, you&#8217;ll learn how to use MD5 in JavaScript and also how to decrypt MD5 hashes.<\/p>\n\n\n\n<p><strong>The MD5 hash function works in one way only, there is no reverse function, whatever the language used. In JavaScript, it&#8217;s possible to hash strings to get an MD5 digest, but there is no direct method to get back the original word from a MD5 hash.<\/strong><\/p>\n\n\n\n<p>The only way to crack an MD5 in JavaScript is to used advanced techniques, like the one I will show you at the end of this article. But first, let do a quick reminder about the MD5 algorithm.<\/p>\n\n\n\n<p>By the way, if you are interested in how MD5 decryption really works, I highly encourage you to <a rel=\"noreferrer noopener\" href=\"https:\/\/www.md5online.org\/ebook.html\" target=\"_blank\">take a look at my e-book &#8220;The Secrets of MD5 Decryption&#8221;<\/a><a href=\"https:\/\/www.md5online.org\/ebook.html\" target=\"_blank\" rel=\"noreferrer noopener\"> <\/a><a rel=\"noreferrer noopener\" href=\"https:\/\/www.md5online.org\/ebook.html\" target=\"_blank\">here<\/a>. It explains everything you need to know, going directly to the point with practical examples you can test on your computer. You don&#8217;t need any hardware to get started, just a few tips I give in this book. <\/p>\n\n\n\n<div id=\"ez-toc-container\" class=\"ez-toc-v2_0_64 counter-hierarchy ez-toc-counter ez-toc-custom ez-toc-container-direction\">\n<div class=\"ez-toc-title-container\">\n<p class=\"ez-toc-title \" >Table of Contents<\/p>\n<span class=\"ez-toc-title-toggle\"><a href=\"#\" class=\"ez-toc-pull-right ez-toc-btn ez-toc-btn-xs ez-toc-btn-default ez-toc-toggle\" aria-label=\"Toggle Table of Content\"><span class=\"ez-toc-js-icon-con\"><span class=\"\"><span class=\"eztoc-hide\" style=\"display:none;\">Toggle<\/span><span class=\"ez-toc-icon-toggle-span\"><svg style=\"fill: #999;color:#999\" xmlns=\"http:\/\/www.w3.org\/2000\/svg\" class=\"list-377408\" width=\"20px\" height=\"20px\" viewBox=\"0 0 24 24\" fill=\"none\"><path d=\"M6 6H4v2h2V6zm14 0H8v2h12V6zM4 11h2v2H4v-2zm16 0H8v2h12v-2zM4 16h2v2H4v-2zm16 0H8v2h12v-2z\" fill=\"currentColor\"><\/path><\/svg><svg style=\"fill: #999;color:#999\" class=\"arrow-unsorted-368013\" xmlns=\"http:\/\/www.w3.org\/2000\/svg\" width=\"10px\" height=\"10px\" viewBox=\"0 0 24 24\" version=\"1.2\" baseProfile=\"tiny\"><path d=\"M18.2 9.3l-6.2-6.3-6.2 6.3c-.2.2-.3.4-.3.7s.1.5.3.7c.2.2.4.3.7.3h11c.3 0 .5-.1.7-.3.2-.2.3-.5.3-.7s-.1-.5-.3-.7zM5.8 14.7l6.2 6.3 6.2-6.3c.2-.2.3-.5.3-.7s-.1-.5-.3-.7c-.2-.2-.4-.3-.7-.3h-11c-.3 0-.5.1-.7.3-.2.2-.3.5-.3.7s.1.5.3.7z\"\/><\/svg><\/span><\/span><\/span><\/a><\/span><\/div>\n<nav><ul class='ez-toc-list ez-toc-list-level-1 eztoc-toggle-hide-by-default' ><li class='ez-toc-page-1 ez-toc-heading-level-2'><a class=\"ez-toc-link ez-toc-heading-1\" href=\"https:\/\/infosecscout.com\/decrypt-md5-in-javascript\/#What_is_the_MD5_algorithm\" title=\"What is the MD5 algorithm?\">What is the MD5 algorithm?<\/a><ul class='ez-toc-list-level-3' ><li class='ez-toc-heading-level-3'><a class=\"ez-toc-link ez-toc-heading-2\" href=\"https:\/\/infosecscout.com\/decrypt-md5-in-javascript\/#How_MD5_encryption_works\" title=\"How MD5 encryption works?\">How MD5 encryption works?<\/a><\/li><li class='ez-toc-page-1 ez-toc-heading-level-3'><a class=\"ez-toc-link ez-toc-heading-3\" href=\"https:\/\/infosecscout.com\/decrypt-md5-in-javascript\/#What_is_MD5_decryption\" title=\"What is MD5 decryption?\">What is MD5 decryption?<\/a><\/li><\/ul><\/li><li class='ez-toc-page-1 ez-toc-heading-level-2'><a class=\"ez-toc-link ez-toc-heading-4\" href=\"https:\/\/infosecscout.com\/decrypt-md5-in-javascript\/#How_to_Encrypt_a_Password_with_MD5_in_JavaScript\" title=\"How to Encrypt a Password with MD5 in JavaScript?\">How to Encrypt a Password with MD5 in JavaScript?<\/a><\/li><li class='ez-toc-page-1 ez-toc-heading-level-2'><a class=\"ez-toc-link ez-toc-heading-5\" href=\"https:\/\/infosecscout.com\/decrypt-md5-in-javascript\/#How_to_Decrypt_a_MD5_hash_in_JavaScript\" title=\"How to Decrypt a MD5 hash in JavaScript?\">How to Decrypt a MD5 hash in JavaScript?<\/a><\/li><li class='ez-toc-page-1 ez-toc-heading-level-2'><a class=\"ez-toc-link ez-toc-heading-6\" href=\"https:\/\/infosecscout.com\/decrypt-md5-in-javascript\/#Conclusion\" title=\"Conclusion\">Conclusion<\/a><\/li><\/ul><\/nav><\/div>\n<h2 class=\"wp-block-heading\"><span class=\"ez-toc-section\" id=\"What_is_the_MD5_algorithm\"><\/span>What is the MD5 algorithm?<span class=\"ez-toc-section-end\"><\/span><\/h2>\n\n\n\n<h3 class=\"wp-block-heading\"><span class=\"ez-toc-section\" id=\"How_MD5_encryption_works\"><\/span>How MD5 encryption works?<span class=\"ez-toc-section-end\"><\/span><\/h3>\n\n\n\n<p><strong>MD5 is a cryptographic algorithm that generate a string with 32 hexadecimal characters, whatever the word or text length you try to encrypt. Even large files like ISO images with gigabytes of data will be hashed to a 32 characters string.<\/strong><\/p>\n\n\n\n<p>Pseudo-code example:<br><code>MD5(\"MD5Online\") = d49019c7a78cdaac54250ac56d0eda8a<\/code><\/p>\n\n\n\n<p>This information provides the following algorithm results:<\/p>\n\n\n\n<p>The output is always 32 characters long, but you can hash anything in 32 characters.<br>So, the MD5 algorithm output is not unique. Two word or files can have the same MD5 hash (<a rel=\"noreferrer noopener\" href=\"https:\/\/infosecscout.com\/two-files-with-same-md5-hash\/\" data-type=\"post\" data-id=\"402\" target=\"_blank\">as explained in this article<\/a>).<br>Given this information, it\u2019s not possible to reverse a hash to the original word.<\/p>\n\n\n\n<h3 class=\"wp-block-heading\"><span class=\"ez-toc-section\" id=\"What_is_MD5_decryption\"><\/span>What is MD5 decryption?<span class=\"ez-toc-section-end\"><\/span><\/h3>\n\n\n\n<p><strong>When talking about the MD5 algorithm, &#8220;decryption&#8221; is the wrong word. There is no reverse function, so there is no way to &#8220;decrypt&#8221; a MD5 hash. However, there are several techniques that can be used to crack a MD5 hash and recover the original word.<\/strong><\/p>\n\n\n\n<p>Indeed, the MD5 algorithm has a weakness we can exploit, each time you create a MD5 hash of a word, you get the same result. As this algorithm was the most used in the world a few decades ago, many databases exists with the corresponding word for each MD5 they know.<\/p>\n\n\n\n<p>So, there is no decryption algorithm for MD5, but there is a solution.<br>For example, you now know that the MD5 hash from \u201cMD5Online\u201d is d49019c7a78cdaac54250ac56d0eda8a.<br>If someone is looking for the word corresponding to this hash, there is a good chance that \u201cMD5Online\u201d was the original password.<\/p>\n\n\n\n<p>That basically how the website <a rel=\"noreferrer noopener\" href=\"https:\/\/md5online.org\" target=\"_blank\">MD5Online.org<\/a> works. With a giant database of over a trillion hashes stored with their clear text equivalent, there is a high chance to crack the most common words and passwords.<\/p>\n\n\n\n<h2 class=\"wp-block-heading\"><span class=\"ez-toc-section\" id=\"How_to_Encrypt_a_Password_with_MD5_in_JavaScript\"><\/span>How to Encrypt a Password with MD5 in JavaScript?<span class=\"ez-toc-section-end\"><\/span><\/h2>\n\n\n\n<p><strong>In JavaScript, there is no native function to use the MD5 algorithm and hash a word. However, some libraries can be used to add the md5() function and easily use it to encrypt words in MD5.<\/strong><\/p>\n\n\n\n<p>For example, you can use the one from blueimp, <a rel=\"noreferrer noopener\" href=\"https:\/\/github.com\/blueimp\/JavaScript-MD5\/\" target=\"_blank\">available here on GitHub<\/a>.<br>You can either install with NPM by using the following command:<br><code>npm install blueimp-md5<br><\/code>Or just download and import the MD5 JavaScript file in your script:<br><code>&lt;script src=\"md5.js\"&gt;&lt;\/script&gt;<\/code><\/p>\n\n\n\n<p>Once done using it should be pretty easy, as the md5 function will now be available directly, for example:<\/p>\n\n\n\n<pre class=\"wp-block-code\"><code>&lt;script src=\"md5.js\"&gt;&lt;\/script&gt;\n&lt;script&gt;\n\tvar hash = md5(\"MD5Online\");\n\talert(hash);\n&lt;\/script&gt;<\/code><\/pre>\n\n\n\n<p>This short code should display the MD5 hash corresponding to MD5Online in a popup message.<br>Obviously, you can adapt this minimal code to your goals and use the md5 function in a smarter way.<\/p>\n\n\n\n<p><strong>For example, if you have passwords stored somewhere in MD5, you can just compare the MD5 hash of the typed password with the store one. You don&#8217;t necessarily need to decrypt the stored one to confirm the correct authentication.<\/strong><\/p>\n\n\n\n<p>It should be something like this:<\/p>\n\n\n\n<pre class=\"wp-block-code\"><code>if(md5(typed_password) == stored_password) {\n   \/\/authentication confirmed\n}<\/code><\/pre>\n\n\n\n<p>But if that wasn&#8217;t your original question, let&#8217;s see now how to crack the MD5 hash you have.<\/p>\n\n\n\n<h2 class=\"wp-block-heading\"><span class=\"ez-toc-section\" id=\"How_to_Decrypt_a_MD5_hash_in_JavaScript\"><\/span>How to Decrypt a MD5 hash in JavaScript?<span class=\"ez-toc-section-end\"><\/span><\/h2>\n\n\n\n<p><strong>There is no native method to decrypt a MD5 hash in JavaScript, but MD5Online has an API that can be used in JavaScript to try to crack a MD5 hash and recover the original word.<\/strong><\/p>\n\n\n\n<p>This API will look in the huge database I introduced previously, and also use other secret techniques to give you the best chance to crack MD5 hashes (the success rate was 87% last month).<\/p>\n\n\n\n<p>Anyway, here is how to use this API in JavaScript. A documentation is available, but basically, it&#8217;s just a request to a specific URL, including all the parameters in GET (like the API key, the MD5 hash and a few other options).<br>By the way, this is a paid service, you&#8217;ll need a few credits to test it (<a rel=\"noreferrer noopener\" href=\"https:\/\/www.md5online.org\/decrypt-modes.html\" target=\"_blank\">more details here<\/a>).<\/p>\n\n\n\n<p>Here is a basic example:<\/p>\n\n\n\n<pre class=\"wp-block-code\"><code>var key = \"YOUR_API_KEY\";\nvar hash = \"d49019c7a78cdaac54250ac56d0eda8a\";\nvar url = \"https:\/\/www.md5online.org\/api.php?d=1&amp;p=\"+key+\"&amp;h=\"+hash;\n\nconst http = new XMLHttpRequest();\nhttp.open(\"GET\", url);\nhttp.send();\nhttp.onreadystatechange=function()\n{\n  if (http.readyState==4 &amp;&amp; http.status==200)\n  {\n    alert(http.responseText);\n  }\n}<\/code><\/pre>\n\n\n\n<p>If you have a decent level in JavaScript, it should be pretty easy for you. We are just using XMLHttpRequest like for an Ajax request.  If it works correctly on your side, you can then start from there and change the code to do whatever you want. For example, get your MD5 hashes from a specific source and then call the API for each hash in a loop.<\/p>\n\n\n\n<h2 class=\"wp-block-heading\"><span class=\"ez-toc-section\" id=\"Conclusion\"><\/span>Conclusion<span class=\"ez-toc-section-end\"><\/span><\/h2>\n\n\n\n<p>That&#8217;s it, you now know how to use MD5 hashes in JavaScript. You know how to generate MD5 hashes but also the only way to crack them.<\/p>\n","protected":false},"excerpt":{"rendered":"<p>Cracking MD5 hashes is interesting for many people, and if you are programming in JavaScript you are at the perfect place. In this article, you&#8217;ll learn how to use MD5 in JavaScript and also how to decrypt MD5 hashes. The MD5 hash function works in one way only, there is no reverse function, whatever the&#8230;<\/p>\n","protected":false},"author":1,"featured_media":437,"comment_status":"open","ping_status":"open","sticky":false,"template":"","format":"standard","meta":{"_kad_blocks_custom_css":"","_kad_blocks_head_custom_js":"","_kad_blocks_body_custom_js":"","_kad_blocks_footer_custom_js":"","_kad_post_transparent":"","_kad_post_title":"","_kad_post_layout":"","_kad_post_sidebar_id":"","_kad_post_content_style":"","_kad_post_vertical_padding":"","_kad_post_feature":"","_kad_post_feature_position":"","_kad_post_header":false,"_kad_post_footer":false,"footnotes":""},"categories":[15],"tags":[],"taxonomy_info":{"category":[{"value":15,"label":"Hacking"}]},"featured_image_src_large":["https:\/\/infosecscout.com\/wp-content\/uploads\/2021\/06\/decrypt-md5-javascript-1024x683.jpg",1024,683,true],"author_info":{"display_name":"Patrick Fromaget","author_link":"https:\/\/infosecscout.com\/about\/"},"comment_info":0,"category_info":[{"term_id":15,"name":"Hacking","slug":"hacking","term_group":0,"term_taxonomy_id":15,"taxonomy":"category","description":"Ready to level up? Our Hacking Guides have you covered with step-by-step instructions on using tools like Hashcat. It's hacking made simple and fun!","parent":0,"count":15,"filter":"raw","cat_ID":15,"category_count":15,"category_description":"Ready to level up? Our Hacking Guides have you covered with step-by-step instructions on using tools like Hashcat. It's hacking made simple and fun!","cat_name":"Hacking","category_nicename":"hacking","category_parent":0}],"tag_info":false,"_links":{"self":[{"href":"https:\/\/infosecscout.com\/wp-json\/wp\/v2\/posts\/434"}],"collection":[{"href":"https:\/\/infosecscout.com\/wp-json\/wp\/v2\/posts"}],"about":[{"href":"https:\/\/infosecscout.com\/wp-json\/wp\/v2\/types\/post"}],"author":[{"embeddable":true,"href":"https:\/\/infosecscout.com\/wp-json\/wp\/v2\/users\/1"}],"replies":[{"embeddable":true,"href":"https:\/\/infosecscout.com\/wp-json\/wp\/v2\/comments?post=434"}],"version-history":[{"count":4,"href":"https:\/\/infosecscout.com\/wp-json\/wp\/v2\/posts\/434\/revisions"}],"predecessor-version":[{"id":463,"href":"https:\/\/infosecscout.com\/wp-json\/wp\/v2\/posts\/434\/revisions\/463"}],"wp:featuredmedia":[{"embeddable":true,"href":"https:\/\/infosecscout.com\/wp-json\/wp\/v2\/media\/437"}],"wp:attachment":[{"href":"https:\/\/infosecscout.com\/wp-json\/wp\/v2\/media?parent=434"}],"wp:term":[{"taxonomy":"category","embeddable":true,"href":"https:\/\/infosecscout.com\/wp-json\/wp\/v2\/categories?post=434"},{"taxonomy":"post_tag","embeddable":true,"href":"https:\/\/infosecscout.com\/wp-json\/wp\/v2\/tags?post=434"}],"curies":[{"name":"wp","href":"https:\/\/api.w.org\/{rel}","templated":true}]}}