Terms of Service & Acceptable Use Policy
Last updated: draft. This is a starting draft written for the platform's launch and has not yet had a legal review — treat it as a placeholder to refine, not as finished legal copy.
1. Scope & acceptance
This policy applies to every account, upload, submission, and download on X-Attack! - Hash-Cracker. Creating an account means agreeing to it (you confirm this explicitly at registration), and every hash-list or wordlist/rule upload asks you to reconfirm compliance at the point of upload.
2. What this platform is
X-Attack! is a crowd-sourced hash-cracking platform: you upload hash lists that need cracking, other users upload their cracked results, and everyone benefits from a shared wordlist/rule library and a global cache of already-cracked hashes. It exists for password-security research, education, and authorized security testing — not as a tool for attacking systems or people without permission.
3. Acceptable use
You may upload and crack hashes when:
- They're your own (a password you've forgotten, a hash from your own system).
- You have explicit, documented authorization to test them (a penetration test, a CTF competition, a bug bounty scope).
- They're published for legitimate password-strength research or education, and you have the right to use them that way.
4. Prohibited content
The following are never acceptable, and uploads violating this section will be removed and may result in account suspension:
- Hashes sourced from an unauthorized third-party data breach. If you don't have the legal right to possess or process a set of hashes, don't upload them here — this is the single most important rule on this page.
- Hashes or wordlists assembled to target a specific real, non-consenting individual or a system you don't control or have authorization to test.
- Unlawful content of any kind, in the uploaded file itself or in a list/wordlist title or description.
- Wordlists or rule files you don't have the right to redistribute (respect the license/copyright of the wordlist's original author).
- Spam or junk uploads whose only purpose is to abuse platform storage, the Hall of Fame, or other users' time.
5. Your responsibility
You are solely responsible for having the legal right to upload, process, and share any hash, wordlist, or rule file you submit. The platform does not and cannot verify the provenance of what you upload — that responsibility is yours.
6. Reporting & enforcement
Any user can flag a hash list or wordlist for review using the Report button on its detail page. Reports are reviewed by admins; depending on severity, enforcement may include removing the content, disabling the uploading account, or (per applicable law) reporting the matter further. Repeated or severe violations lead to permanent account termination.
7. No warranty
Cracked results, wordlists, and rule files shared by other users are provided as-is, with no guarantee of accuracy, completeness, or fitness for any purpose. Use your own judgment before relying on anything downloaded from this platform.
8. Changes to this policy
This policy may be updated as the platform evolves. Changes apply going forward; existing accounts are not required to re-accept a revised version, though continued use of the platform after a change constitutes acceptance of it.
9. Contact
For takedown requests, legal inquiries, or questions about this policy, contact [email protected].