An Openclaw skill that enables AI agents to query hashlists, run automated hashcat attacks, and manage Hashmob resources.
Install & Download
1. ClawHub CLI
The fastest way to install a skill directly from the registry.
npx clawhub@latest install hashmob
2. Manual Installation
Copy the skill folder to one of these locations
~/.openclaw/skills/ <project>/skills/ Priority: Workspace > Local > Bundled
3. Prompt Installation
Copy this prompt to OpenClaw to install it automatically.
Help me install hashmob using Clawhub. If Clawhub is not installed, install it first (npm i -g clawhub).
Prefer to download?
Get the raw skill files in a ZIP archive.
What is Hashmob Integration?
The Hashmob integration brings state-of-the-art hash analysis, verification, and recovery workflows directly to your automated pipelines. It serves as a connector between AI agents and the extensive database of Hashmob.net. By implementing this tool within Openclaw Skills, developers and security engineers can automate the analysis of left or found hashlists, track crack progress, and look up credentials dynamically.\n\nWhether you are verifying the safety of password combinations or managing collaborative hash-cracking tasks, this integration handles everything from public directory listings to secure, authenticated administrative commands. This allows your security agent to operate autonomously, executing logic checks and pulling resources like custom wordlists, masks, or rules when required.
Hashmob Integration Use Cases
- Performing automated credential auditing and monitoring key leakage across hashlists.\n- Downloading left (uncracked) and found (cracked) hash outputs for specific security assessments.\n- Orchestrating multi-layered password recovery attacks using tailored hashcat configurations.\n- Querying password range exposure and evaluating absolute strength indicators dynamically.\n- Managing team-wide hashlists, verifying submissions, and coordinating gold withdrawal events.
How Hashmob Integration Works
- The agent initializes the task and checks for system dependencies like curl.\n2. When looking up public records, the agent queries Hashmob.net unauthenticated endpoints directly.\n3. For restricted actions (such as store purchases or initiating attacks), the agent reads the HASHMOB_API_KEY environment variable.\n4. The agent queries specified endpoints, structured according to Hashmob API specifications, applying required payload formats.\n5. The results (such as matching dictionary lists, search queues, or user preferences) are returned to the agent in structured JSON for execution.
Hashmob Integration Setup
Requirements\n\n- System dependencies: curl installed and accessible in the system PATH.\n- Operating systems supported: Linux, macOS, and Windows.\n\n### Authentication Setup\n\nTo interact with authenticated and paid endpoints, configure your Hashmob API key as an environment variable:\n\nbash\nexport HASHMOB_API_KEY="your_hashmob_api_key_here"\n\n\n### Usage with Openclaw Skills\n\nTo configure and install within your agent environment, register the skill in your project configuration file:\n\nyaml\nskills:\n - name: hashmob\n repository: https://github.com/ibnaleem/hashmob-skill\n\n\nEnsure that you ask for user verification before performing operations that debit the account balance, such as mass searches or store purchases.
Hashmob Integration Data Schema & Taxonomy
The skill interacts with the Hashmob API, utilizing the following structured formats and parameter namespaces:\n\n### Endpoint Parameter Types\n\n| Param Name | Type | Description |\n| :--- | :--- | :--- |\n| api-key | Header | The personal authorization token for Hashmob.net |\n| id / hashlist_id | Path/Form | Unique identifier for hashlists, queues, or attacks |\n| algorithm | Form | The cryptographic algorithm used (e.g., md5, sha256) |\n| visibility | Form | 1 for hidden (private) or 2 for public hashlists |\n| hashes | Form | Raw hash lists submitted as plaintext string or files |\n\n### Resource Folders\n\nWhen downloading files from the platform, use one of the specified resource categories:\n- wordlists: Plaintext word dictionaries\n- rules: Rulesets for generating pattern variations\n- masks: Positional character masks\n- utilities: Diagnostic script utilities\n- torrents: Large compressed archives\n- official: Verified official system assets
Hashmob Integration Advanced Features
- Custom Attack Creation: Configure complex hashcat parameters including wordlists, rules, character increments, and positional masks dynamically.\n- Range Password Auditing: Retrieve K-Anonymity-style password range lookups directly through range queries.\n- Mass-Search Operations: Upload large files of uncracked hashes to queue bulk lookups using account currency.\n- Collaborative Submissions: Submit discovered plaintexts back to specified hashlists to update user statistics and progress in real-time.
SKILL.md
Loading
Related Openclaw Skills
NotebookLM Python Skill
An advanced AI agent skill enabling complete automation and command-line management of Google NotebookLM workspaces, sources, and queries.
Video Metadata Analyzer
An automated multi-stage video analysis pipeline that processes parallel visual frames and audio transcriptions to synthesize optimized, publish-ready metadata for Bilibili.
Autoresearch Loop
A highly structured, metric-driven modify-verify-decide optimization loop with strict safety gates and approval contracts for AI coding agents.
AI Agent Usage Stats
A zero-dependency, local Python CLI tool to monitor token usage and statistics for popular AI coding agents like Hermes, Claude Code, CodeX, and OpenClaw.
Asphalt & Driveway Sealing Marketing Kit
A specialized marketing generation toolkit designed to craft compliant, conversion-driven campaigns for asphalt and driveway sealing contractors.
Internal Audit Mastery
A comprehensive global internal auditing framework integrating IIA standards, AI-driven risk assessments, and value-add execution methodologies.
METADATA
Featured*
