Penetration testing commands for Cracking
Cracking involves the recovery of passwords and cryptographic keys through various methods such as brute force, dictionary attacks, and rainbow tables. This category highlights tools and techniques for effective password and hash cracking.
| Name | Description | Price |
|---|---|---|
| BEWGor | Bull's Eye Wordlist Generator, password wordlist generator based on target information | Free |
| bkcrack | Crack legacy zip encryption with Biham and Kocher's known plaintext attack | Free |
| Bopscrk | Before Outset PaSsword CRacKing, password wordlist generator with exclusive features like lyrics based mode | Free |
| CeWL | Custom wordlist generator based on website crawling | Free |
| ComPP | Company Passwords Profiler helps making a bruteforce wordlist for a targeted company | Free |
| cook | Wordlist generator: create permutations and combinations of words with predefined sets of extensions, words and patterns/function to create complex endpoints, wordlists and passwords | Free |
| Cracken | Password wordlist generator, Smartlist creation and password hybrid-mask | Free |
| CrackerJack | Hashcat WebUI; session management, mask generation, API, notifications, local and LDAP authentication | Free |
| Cracklord | Scalable, pluggable, and distributed system for hash cracking, supports Hashcat | Free |
| crackpkcs12 | Multithreaded program to crack PKCS#12 files (p12 and pfx extensions) | Free |
| CrackQ | Hashcat cracking queue system, API and WebUI | Free |
| CrackStation | Pre-computed lookup tables to crack password hashes | Free |
| crunch | Wordlist generator | Free |
| CUPP | Common User Passwords Profiler, wordlist generator based on user profiling | Free |
| Duplicut | Remove duplicates from massive wordlist, without sorting it (for dictionary-based password cracking) | Free |
| elpscrk | Wordlist generator based on user profiling | Free |
| Fitcrack | Hashcat-based distributed password cracking system with WebUI | Free |
| GAU | Fetch known URLs from AlienVault's Open Threat Exchange, the Wayback Machine, Common Crawl, and URLScan for any given domain | Free |
| GeoWordlists | Generate wordlists of passwords containing cities at a defined distance around the client city | Free |
| GoCrack | Management frontend for hash cracking tools, supporting hashcat | Free |
| graphcat | Generate graphs and charts based on password cracking results; supports hashcat and john the ripper potfile as well as ntds file | Free |
| Hashcat | Hash cracking tool | Free |
| hashcobra | Hash cracking tool using rainbow tables | Free |
| HashKitty | Web interface for Hashcat | Free |
| Hashpass | Hashcat WebUI; queuing, local authentication, SMS and email notifications, map integration | Free |
| Hashtopolis | Hashcat wrapper for distributed hashcracking | Free |
| Hashview | Web-UI for managing, organizing, automating Hashcat commands/tasks | Free |
| John The Ripper | Hash cracking tool | Free |
| John the Ripper, Jumbo version | Hash cracking tool, community-enhanced version of John The Ripper | Free |
| johnny | GUI frontend to John the Ripper | Free |
| kh2hc | Convert OpenSSH known_hosts file hashed with HashKnownHosts to hashes crackable by Hashcat | Free |
| Kraken | Hashcat-based distributed password cracking system with WebUI; has a desktop client in addition | Free |
| Kraker | Distributed password brute-force system, supports Hashcat | Free |
| longtongue | Password wordlist generator based on target information | Free |
| lyricpass | Tool to generate wordlists based on lyrics | Free |
| Mentalist | Graphical tool for custom wordlist generation, can output rules compatible with Hashcat and John the Ripper | Free |
| Narthex | Modular personalized dictionary generator | Free |
| npk | Distributed hash cracking platform meant to be deployed on AWS (Cognito, DynamoDB, S3) so you pay only when you have a task running | Free |
| NTLM to password | NTLM hash lookup table, billions of passwords indexed | Free |
| Ophcrack | Windows hash cracker based on rainbow tables | Free |
| PACK | A collection of utilities developed to aid in analysis of password lists in order to enhance password cracking through pattern detection of masks, rules, character-sets and other password characteristics | Free |
| pnwgen | Phone number wordlist generator | Free |
| PowerSniper | Password spraying script and helper for creating password lists | Free |
| pydictor | Multi-method password wordlist generator | Free |
| RubyHashcat | Command line wrapper, library, and REST API for oclHashcat | Free |
| rulesfinder | Machine-learn password mangling rules; finds efficient password mangling rules (for John the Ripper or Hashcat) for a given dictionary and a list of passwords | Free |
| Spraygen | Permutation-based password list generator | Free |
| TTPassGen | Flexible and scriptable password dictionary/wordlist generator | Free |
| Wavecrack | Hashcat WebUI; asynchronous task, chain tasks, statistics, export, segregation, local and LDAP authentication | Free |
| WebHashcat | Hashcat WebUI with distributed cracking sessions and analytics | Free |
| WOG | Weakpass rule-based online generator; generates a wordlist based on a set of words entered by the user | Free |
| wordlist.rb | Library for reading, combining, manipulating, and building wordlists, efficiently | Free |
| wordlistctl | Fetch, install and search wordlist archives from websites and torrent peers | Free |
| wordlistgen | Generate context-specific wordlists for content discovery from lists of URLs or paths | Free |