https://github.com/manuelberrueta/hashfinder
Go script that finds a matching hash or a diff of a target hash in a directory.
https://github.com/manuelberrueta/hashfinder
blueteam blueteam-tools dfir dfir-automation hashing security security-tools
Last synced: 12 months ago
JSON representation
Go script that finds a matching hash or a diff of a target hash in a directory.
- Host: GitHub
- URL: https://github.com/manuelberrueta/hashfinder
- Owner: ManuelBerrueta
- License: gpl-3.0
- Created: 2020-10-26T19:10:16.000Z (over 5 years ago)
- Default Branch: main
- Last Pushed: 2020-10-28T17:59:38.000Z (over 5 years ago)
- Last Synced: 2025-06-23T03:07:10.407Z (about 1 year ago)
- Topics: blueteam, blueteam-tools, dfir, dfir-automation, hashing, security, security-tools
- Language: Go
- Homepage:
- Size: 22.5 KB
- Stars: 3
- Watchers: 1
- Forks: 1
- Open Issues: 0
-
Metadata Files:
- Readme: README.md
- License: LICENSE.md
Awesome Lists containing this project
README
# **HashFinder**
HashFinder finds if a file in a directory and subdirectories full of the same file is different (modified) by using the targetfile hash or hash as input string. *
Also will help you find a file matching a hash in a directory and subdirectories.
This is useful for forensics and possibly finding interesting files like malware or other artifacts.
## Sample Use Cases:
### Find a file with a different hash from the input target file hash in a dir
```bash
hashfinder -diff -t tesfile.bin -dir testDir
```
### Find a file with a matching hash to the hash of the input target file in a dir
```bash
hashfinder -t tesfile.bin -dir testDir
```
### Find a file with a different hash from given input string hash in a dir
```bash
hashfinder -diff -i inputHashString -dir testDir
```
### Find a file with a matching hash to the input string hash in a dir
```bash
hashfinder -t tesfile.bin -i inputHashString -dir testDir
```
### Find a file with a matching MD5 hash to the input string MD5 hash in a dir
```bash
hashfinder -t tesfile.bin -m md5 -i inputHashString -dir testDir
```
*HashFinder default hashing is sha2. Specify hash with -m cryptoType*
## TODO:
- Logging findings to a file