Password Cracking
The process of recovering passwords from data that has been stored in or transmitted by a system in scrambled form.
Contents
Cloud
A script to automate the creation of cloud infrastructure for hash cracking.
Automated deployment of instances on EC2 via plugin for high CPU/GPU applications at the lowest price.
A tool that facilitates the installation and provisioning of Hashtopolis on the Google Cloud Shell platform, quickly and completely unattended (and also, free!).
Conversion
Extract information from password-protected .7z archives (and .sfx files) such that you can crack these "hashes" with hashcat.
Converts John The Ripper/Cain format hashes (singular, or in bulk) to HashCat compatible hash format.
Converts / formats Rubeus kerberoasting output into hashcat readable format.
With this tool one can extract the "hash" from a WINDOWS HELLO PIN. This hash can be cracked with Hashcat.
A tool that converts Bitwarden's data into a hashcat-suitable hash.
Portable solution for conversion of cap/pcap/pcapng (gz compressed) WiFi dump files to hashcat formats.
Hashcat
Automation
Distributed cracking
Rules
Probably the largest collection of hashcat rules out there.
Password cracking rules for Hashcat based on statistics and industry patterns.
Password cracking rules and masks for hashcat generated from cracked passwords.
Rule tools
Web interfaces
John the Ripper
Misc
Websites
Wordlist tools
Analysis
A collection of utilities developed to aid in analysis of password lists in order to enhance password cracking through pattern detection of masks, rules, character-sets and other password characteristics.
Ingests passwords from hashcat, etc. and outputs to HTML, Markdown, XLSX, PNG, JSON. Dark and light themes supported. Compliments password-stretcher.
Generate "disgusting quantities" of passwords from websites, files, or stdin. Compliments password-smelter.
Generation/Manipulation
A tool to transform characters from ASCII / UTF-8 to accented characters such as "o" to "ò".
Append lines from stdin to a file, but only if they don't already appear in the file. Outputs new lines to stdout too, making it a bit like a tee -a that removes duplicates.
Generate smart and powerful wordlists for targeted attacks. Includes song lyrics fetching and different transforms.
Simple tool to extract the most common substrings from an input text. Built for password cracking.
A tool that lets you generate wordlists by user profiling data such as birthday, nickname, address, name of a pet or relative etc.
Remove duplicates from MASSIVE wordlist, without sorting it (for dictionary-based password cracking).
Tool for generating wordlists or extending an existing one using mutations.
Create n-grams of wordlists based on words, characters, or charsets to use in offline password attacks and data analysis.
Elpscrk is like cupp, but it's based on permutations and statistics while being memory efficient.
Advanced keyboard-walk generator with configureable basechars, keymap and routes.
High-performance word generator with a per-position configureable charset.
A standalone fast word generator in the spirit of hashcat's mask generator with unicode support.
Mentalist is a graphical tool for custom wordlist generation. It utilizes common human paradigms for constructing passwords and can output the full wordlist as well as rules compatible with Hashcat and John the Ripper.
The Password Transformation Tool (ptt) is a versatile utility designed for password cracking. It facilitates the creation of custom rules and transformations, as well as the generation of wordlists. This tool supports processing data from files, URLs, and standard input, streamlining cracking workflows.
Phraser is a phrase generator using n-grams and Markov chains to generate phrases for passphrase cracking.
Standalone password candidate generator using the PRINCE algorithm.
A Python-based reimagining of Phraser using Markov-chains for linguistically-correct password cracking.
RLI Next Gen (Rling), a faster multi-threaded, feature rich alternative to rli found in hashcat utilities.
Fastest string sort, search, split, and shuffle for long strings and multi-gigabyte files in Python and C.