首页Home › 编码与加密Encoding & Crypto
🔑 NTLM 哈希生成器NTLM Hash Generator
在浏览器本地生成 Windows NTLM 哈希：把密码按 UTF-16LE 编码后做 MD4，得到 32 位十六进制（即 NT hash / “NTLM 单向函数”）。常用于渗透测试、密码破解演练（hashcat 模式 1000）和账户迁移测试。请只对你有权测试的密码使用。数据不会上传。Generate the Windows NTLM hash locally: the password is encoded as UTF-16LE and run through MD4 to give 32 hex characters (the NT hash, or "NTLM one-way function"). Common in penetration testing, password-cracking practice (hashcat mode 1000) and account-migration tests. Only use it on passwords you are authorised to test. Nothing is uploaded.
使用说明与常见问题How-to & FAQ
「NTLM 哈希生成器」是什么？What is the NTLM Hash Generator tool?
在浏览器本地生成 Windows NTLM 哈希：把密码按 UTF-16LE 编码后做 MD4，得到 32 位十六进制（即 NT hash / “NTLM 单向函数”）。常用于渗透测试、密码破解演练（hashcat 模式 1000）和账户迁移测试。请只对你有权测试的密码使用。数据不会上传。Generate the Windows NTLM hash locally: the password is encoded as UTF-16LE and run through MD4 to give 32 hex characters (the NT hash, or "NTLM one-way function"). Common in penetration testing, password-cracking practice (hashcat mode 1000) and account-migration tests. Only use it on passwords you are authorised to test. Nothing is uploaded.
如何使用「NTLM 哈希生成器」？How do I use the NTLM Hash Generator tool?
在「NTLM 哈希生成器」中，先在上方输入或粘贴内容，然后点击「复制」按钮即可。In the NTLM Hash Generator: Type or paste your input above, then click "Copy".
NTLM 哈希是怎么算的？How is the NTLM hash computed?
NTLM 的 NT hash 就是把密码按 UTF-16 小端（UTF-16LE）编码后做一次 MD4，没有加盐，所以相同密码总是得到相同哈希。空密码为 31d6cfe0d16ae931b73c59d7e0c089c0。The NTLM NT hash is simply MD4 of the password encoded as UTF-16 little-endian (UTF-16LE), with no salt, so the same password always gives the same hash. The empty password is 31d6cfe0d16ae931b73c59d7e0c089c0.
它安全吗？Is it secure?
不安全。NTLM 不加盐、基于已被攻破的 MD4，容易被彩虹表和 GPU 暴力破解，还存在“哈希传递”(pass-the-hash) 攻击。它只是用于与 Windows 认证兼容，不应作为新系统的密码存储方案。No. NTLM is unsalted, based on the broken MD4, and falls quickly to rainbow tables and GPU cracking, and it enables pass-the-hash attacks. It exists for Windows authentication compatibility and should not be used to store passwords in new systems.
能从哈希还原出密码吗？Can the password be recovered from the hash?
哈希是单向的，本工具只能由密码算出哈希，不能反推。要从哈希找回密码只能靠字典或暴力破解（如 hashcat -m 1000），且仅限你有权测试的对象。Hashing is one-way: this tool only turns a password into a hash, not the reverse. Recovering a password from a hash requires dictionary or brute-force cracking (such as hashcat -m 1000), and only on targets you are authorised to test.
为什么和在线某些工具结果不同？Why might results differ from some other tools?
请确认对方算的是 NT hash（UTF-16LE 的 MD4），而不是旧的 LM hash 或加了用户名的 NTLMv2 响应——那些算法完全不同。本工具结果已用 password → 8846f7… 等公开向量核对。Check that the other tool computes the NT hash (MD4 of UTF-16LE) and not the old LM hash or an NTLMv2 response (which also mixes in the username) — those are different algorithms. This tool is checked against public vectors such as password → 8846f7….
编码和加密有什么区别？Is encoding the same as encryption?
编码（如 Base64、URL 编码）可直接还原，不提供保密性；加密需要密钥。「NTLM 哈希生成器」的处理全部在本地完成。No. Encoding (Base64, URL…) is reversible by anyone; encryption needs a key. The NTLM Hash Generator works fully offline in your browser.
「NTLM 哈希生成器」免费吗？需要注册吗？Is the NTLM Hash Generator free? Do I need an account?
「NTLM 哈希生成器」完全免费，无需注册或安装，打开网页即可使用，手机和电脑都能用；输入的内容只在你的浏览器本地处理。The NTLM Hash Generator is completely free with no sign-up or install and works on phones and desktops; what you enter is processed only in your browser.