Extract a PDF hash for a controlled test

Upload an encrypted PDF

The converter extracts the format used by pdf2john and pdf2hashcat. Upload a file only when you have permission to test it; the source is deleted after extraction.

Select a PDF file

No file selected Choose file

Files are processed for extraction and deleted after extraction. Maximum upload size: 100 MB.

Extracted hash or conversion output

What the output is for

Use the extracted hash to test password strength with an approved audit plan, then document the finding and remediate the credential. PDF versions and encryption settings determine the exact hash format.

PDF hash formats

The extractor relies on pdf2john from the John the Ripper project. Four kinds of output can be generated, depending on the PDF encryption revision.

PDF 1.1 - 1.3 (Acrobat 2 - 4) - Hashcat mode 10400

$pdf$1*2*40*-1*0*16*51726437280452826511473255744374*32*9b09be05c226214fa1178342673d86f273602b95104f2384b6c9b709b2cbc058*32*0000000000000000000000000000000000000000000000000000000000000000

PDF 1.4 - 1.6 (Acrobat 5 - 8) - Hashcat mode 10500

$pdf$2*3*128*-1028*1*16*da42ee15d4b3e08fe5b9ecea0e02ad0f*32*c9b59d72c7c670c42eeb4fca1d2ca15000000000000000000000000000000000*32*c4ff3e868dc87604626c2b8c259297a14d58c6309c70b00afdfb1fbba10ee571

PDF 1.7 Level 3 (Acrobat 9) - Hashcat mode 10600

$pdf$5*5*256*-1028*1*16*20583814402184226866485332754315*127*f95d927a94829db8e2fbfbc9726ebe0a391b22a084ccc2882eb107a74f7884812058381440218422686648533275431500000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000*127*00000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000*32*0000000000000000000000000000000000000000000000000000000000000000*32*0000000000000000000000000000000000000000000000000000000000000000

PDF 1.7 Level 8 (Acrobat 10 - 11) - Hashcat mode 10700

$pdf$5*6*256*-4*1*16*381692e488413f5502fa7314a78c25db*48*e5bf81a2a23c88f3dccb44bc7da68bb5606b653b733bcf9adaa5eb2c8ccf53abba66539044eb1957eda68469b1d0b9b5*48*b222df06deb308bf919d13447e688775fdcab972faed2c866dc023a126cb4cd4bbffab3683ecde243cf8d88967184680

Responsible use

Hashcat and John the Ripper are powerful and can be misused. Use them only with permission, and follow local laws and organizational security policies. Misuse can have serious legal consequences.

Credits

Credits go to the John the Ripper project.