awesome-password-cracking

Password Cracking Collection

A curated list of tools, research, and projects related to password cracking and security

A curated list of awesome tools, research, papers and other projects related to password cracking and password security.

GitHub

659 stars
27 watching
74 forks
last commit: about 2 years ago
Linked from 3 awesome lists

awesomeawesome-listhash-crackinghashcatjohn-the-ripperpassword-crackingpassword-safetywordlistwordlist-generatorwordlist-processingwordlists

Awesome Password Cracking

awesome-lint614over 2 years agoIf in doubt, use
open an issue659about 2 years agoIf you think an item shouldn't be here

Awesome Password Cracking / Books

Hash Crack: Password Cracking Manual (v3)Password Cracking Manual v3 is an expanded reference guide for password recovery (cracking) methods, tools, and analysis techniques

Awesome Password Cracking / Cloud

Cloud_crack42over 7 years agoCrack passwords using Terraform and AWS
Cloudcat17about 7 years agoA script to automate the creation of cloud infrastructure for hash cracking
Cloudstomp4over 7 years agoAutomated deployment of instances on EC2 via plugin for high CPU/GPU applications at the lowest price
Cloudtopolis397about 2 years agoA tool that facilitates the installation and provisioning of Hashtopolis on the Google Cloud Shell platform, quickly and completely unattended (and also, free!)
NPK532over 2 years agoNPK is a distributed hash-cracking platform built entirely of serverless components in AWS including Cognito, DynamoDB, and S3
Penglab929about 3 years agoAbuse of Google Colab for cracking hashes
Rook82almost 7 years agoAutomates the creation of AWS p3 instances for use in GPU-based password cracking

Awesome Password Cracking / Conversion

7z2hashcat359over 2 years agoExtract information from password-protected .7z archives (and .sfx files) such that you can crack these "hashes" with hashcat
MacinHash35almost 8 years agoConvert macOS plist password file to hash file for password crackers
NetNTLM-Hashcat33almost 7 years agoConverts John The Ripper/Cain format hashes (singular, or in bulk) to HashCat compatible hash format
Rubeus-to-Hashcat12over 6 years agoConverts / formats Rubeus kerberoasting output into hashcat readable format
WINHELLO2hashcat69over 4 years agoWith this tool one can extract the "hash" from a WINDOWS HELLO PIN. This hash can be cracked with Hashcat
bitwarden2hashcat21over 4 years agoA tool that converts Bitwarden's data into a hashcat-suitable hash
hc_to_7z7over 2 years agoConvert 7-Zip hashcat hashes back to 7z archives
hcxtools2,039almost 2 years agoPortable solution for conversion of cap/pcap/pcapng (gz compressed) WiFi dump files to hashcat formats
itunes_backup2hashcat105over 9 years agoExtract the information needed from the Manifest.plist files to convert it to hashes compatible with hashcat
mongodb2hashcat7almost 6 years agoExtract hashes from the MongoDB database server to a hash format that hashcat accepts: -m 24100 (SCRAM-SHA-1) or -m 24200 (SCRAM-SHA-256)

Awesome Password Cracking / Hashcat

Autocrack42over 3 years agoA set of client and server tools for automatically, and lightly automatically cracking hashes
docker-hashcat143almost 2 years agoLatest hashcat docker for Ubuntu 18.04 CUDA, OpenCL, and POCL
hashcat.launcherHashcat.launcher is a cross-platform GUI app that run and control hashcat
Hashcat-Stuffs50almost 7 years agoCollection of hashcat lists and things
hashcat-utils1,382about 2 years agoSmall utilities that are useful in advanced password cracking
Hashfilter5over 8 years agoRead a hashcat potfile and parse different types into a sqlite database
known_hosts-hashcat325over 2 years agoA guide and tool for cracking ssh known_hosts files with hashcat
pyhashcat32over 5 years agoPython C API binding to libhashcat

Awesome Password Cracking / Hashcat / Automation

autocrack108over 8 years agoHashcat wrapper to help automate the cracking process
hat299over 2 years agoAn Automated Hashcat Tool for common wordlists and rules to speed up the process of cracking hashes during engagements
hate_crack1,675almost 2 years agoA tool for automating cracking methodologies through Hashcat from the TrustedSec team
Naive hashcat1,249over 4 years agoNaive hashcat is a plug-and-play script that is pre-configured with naive, emperically-tested, "good enough" parameters/attack types

Awesome Password Cracking / Hashcat / Distributed cracking

CrackLord386about 4 years agoQueue and resource system for cracking passwords
fitcrack146about 2 years agoA hashcat-based distributed password cracking system
Hashstation8over 2 years agoHashstation is a BOINC-based distributed password cracking system with a built-in web interface
Hashtopolis1,476almost 2 years agoA multi-platform client-server tool for distributing hashcat tasks to multiple computers
Kraken303over 3 years agoA multi-platform distributed brute-force password cracking system

Awesome Password Cracking / Hashcat / Rules

clem9669 rules420about 2 years agoRule for hashcat or john
hashcat rules collection81almost 2 years agoProbably the largest collection of hashcat rules out there
Hob0Rules1,466about 7 years agoPassword cracking rules for Hashcat based on statistics and industry patterns
Kaonashi1,017over 4 years agoWordlist, rules and masks from Kaonashi project (RootedCON 2019)
nsa-rules530over 9 years agoPassword cracking rules and masks for hashcat generated from cracked passwords
nyxgeek-rules78about 2 years agoCustom password cracking rules for Hashcat and John the Ripper
OneRuleToRuleThemAll1,489almost 5 years ago"One rule to crack all passwords. or atleast we hope so."
OneRuleToRuleThemStill410almost 2 years ago"A revamped and updated version of my original OneRuleToRuleThemAll hashcat rule."
pantagrule391almost 6 years agoLarge hashcat rulesets generated from real-world compromised passwords

Awesome Password Cracking / Hashcat / Rule tools

duprule41almost 5 years agoDetect & filter duplicate hashcat rules
ruleprocessorY30almost 2 years agoA next-gen Rule processor with complex multibyte character support built to support Hashcat

Awesome Password Cracking / Hashcat / Web interfaces

crackerjack358over 2 years agoCrackerJack is a Web GUI for Hashcat developed in Python
CrackQ926about 2 years agoA Python Hashcat cracking queue system
hashpass44about 4 years agoHash cracking WebApp & Server for hashcat
Hashview362almost 2 years agoA web front-end for password cracking and analytics
Wavecrack167about 5 years agoWavestone's web interface for password cracking with hashcat
WebHashCat292almost 3 years agoWebHashcat is a very simple but efficient web interface for hashcat password cracking tool

Awesome Password Cracking / John the Ripper

BitCracker833over 2 years agoBitCracker is the first open source password cracking tool for memory units encrypted with BitLocker
johnny536almost 3 years agoGUI frontend to John the Ripper

Awesome Password Cracking / Misc

hashgen25almost 2 years agoHashgen is a simple yet very fast CLI hash generator written in Go and cross compiled for Linux, Windows & Mac
Name That Hash1,495over 2 years agoDon't know what type of hash it is? Name That Hash will name that hash type! Identify MD5, SHA256 and 300+ other hashes. Comes with a neat web app

Awesome Password Cracking / Misc / Notable People

TwitterAlotdv -
GitHubClem9669 -
GitHubCoolbry95 - /
GitHubDakykilla - /
GitHubDropdeadfu - /
GitHubEpixoip - / /
GitHubEvilmog - / /
GitHubHydraze - / /
GitHubJakeWnuk - /
GitHubKontrast23 - /
GitHubM3g9tr0n - /
GitHubMatrix - /
TwitterMinga -
GitHubN0kovo - / /
GitHubNSAKEY - / /
GitHubNullMode - / /
TwitterPaule965 -
GitHubPhilsmd - /
GitHubRoycewilliams - / /
GitHubRuraPenthe - / /
GitHubS3in!c - / /
GitHubTehnlulz - /
GitHubThe_Mechanic - /
TwitterToXiC -
GitHubUndeath -
GitHubUnix-ninja - / /
GitHubXan - / /

Awesome Password Cracking / Websites / Communities

hashcat ForumForum by the developers of hashcat
HashmobA growing password recovery community aimed towards being a center point of collaboration for cryptography enthusiasts. Huge wordlist collection and a lookup service too
Hashkiller ForumA password cracking forum with over 20,000 registered users

Awesome Password Cracking / Websites / Lookup services

CMD5Provides online MD5 / sha1/ mysql / sha256 encryption and decryption services
CrackStationFree hash lookup service supplying wordlists as well
gohashmob10over 3 years agoGo CLI app to quickly lookup hashes using the HashMob API
Hashes.comA hash lookup service with paid features
HashkillerA hash lookup service with a forum
Online Hash CrackCloud password recovery service

Awesome Password Cracking / Wordlist tools / Analysis

PACK807almost 7 years agoA collection of utilities developed to aid in analysis of password lists in order to enhance password cracking through pattern detection of masks, rules, character-sets and other password characteristics
password-smelter18over 2 years agoIngests passwords from hashcat, etc. and outputs to HTML, Markdown, XLSX, PNG, JSON. Dark and light themes supported. Compliments password-stretcher
password-stretcher35almost 4 years agoGenerate "disgusting quantities" of passwords from websites, files, or stdin. Compliments password-smelter
pcfg_cracker322almost 2 years agoThis project uses machine learning to identify password creation habits of users
Pipal634about 3 years agoTHE password analyser
Graphcat154over 3 years agoGenerate graphs and charts based on password cracking result

Awesome Password Cracking / Wordlist tools / Generation/Manipulation

accent_permutator4over 2 years agoA tool to transform characters from ASCII / UTF-8 to accented characters such as "o" to "ò"
anew1,420over 2 years agoAppend lines from stdin to a file, but only if they don't already appear in the file. Outputs new lines to stdout too, making it a bit like a tee -a that removes duplicates
bopscrk907about 2 years agoGenerate smart and powerful wordlists for targeted attacks. Includes song lyrics fetching and different transforms
common-substr63about 6 years agoSimple tool to extract the most common substrings from an input text. Built for password cracking
CrunchCrunch is a wordlist generator where you can specify a standard character set or a character set you specify. Crunch can generate all possible combinations and permutations
CUPP4,559almost 3 years agoA tool that lets you generate wordlists by user profiling data such as birthday, nickname, address, name of a pet or relative etc
duplicut885about 4 years agoRemove duplicates from MASSIVE wordlist, without sorting it (for dictionary-based password cracking)
Gorilla382almost 3 years agoTool for generating wordlists or extending an existing one using mutations
Gramify28about 2 years agoCreate n-grams of wordlists based on words, characters, or charsets to use in offline password attacks and data analysis
Elpscrk793almost 2 years agoElpscrk is like cupp, but it's based on permutations and statistics while being memory efficient
Keyboard-Walk-Generators142over 10 years agoGenerate Keyboard Walk Dictionaries for cracking
kwprocessor552almost 3 years agoAdvanced keyboard-walk generator with configureable basechars, keymap and routes
maskcatUtility tool for Hashcat Masks and Password Cracking
maskprocessor444over 4 years agoHigh-performance word generator with a per-position configureable charset
maskuni6about 4 years agoA standalone fast word generator in the spirit of hashcat's mask generator with unicode support
Mentalist1,818over 3 years agoMentalist is a graphical tool for custom wordlist generation. It utilizes common human paradigms for constructing passwords and can output the full wordlist as well as rules compatible with Hashcat and John the Ripper
PTT27almost 2 years agoThe Password Transformation Tool (ptt) is a versatile utility designed for password cracking. It facilitates the creation of custom rules and transformations, as well as the generation of wordlists. This tool supports processing data from files, URLs, and standard input, streamlining cracking workflows
Phraser49over 10 years agoPhraser is a phrase generator using n-grams and Markov chains to generate phrases for passphrase cracking
princeprocessor434almost 3 years agoStandalone password candidate generator using the PRINCE algorithm
Rephraser62over 4 years agoA Python-based reimagining of Phraser using Markov-chains for linguistically-correct password cracking
Rling81about 3 years agoRLI Next Gen (Rling), a faster multi-threaded, feature rich alternative to rli found in hashcat utilities
statsprocessor172almost 3 years agoWord generator based on per-position markov-chains
StringZilla2,290almost 2 years agoFastest string sort, search, split, and shuffle for long strings and multi-gigabyte files in Python and C
TTPassGen150almost 3 years agoFlexible and scriptable password dictionary generator which supportss brute-force, combination, complex rule modes etc
token-reverser109over 6 years agoWords list generator to crack security tokens
WikiRaider39over 2 years agoWikiRaider enables you to generate wordlists based on country specific databases of Wikipedia

Awesome Password Cracking / Wordlists / Laguage specific

Albanian wordlist5over 3 years agoA mix of names, last names and some albanian literature
Danish Phone Wordlist Generator5over 4 years agoThis tool can generate wordlists of Danish phone numbers by area and/or usage (Mobile, landline etc.) Useful for password cracking or fuzzing Danish targets
Danish Wordlists22over 3 years agoCollection of danish wordlists for cracking danish passwords
French Wordlists269almost 2 years agoThis project aim to provide french word list about everything a person could use as a base password

Awesome Password Cracking / Wordlists / Other

Packet Storm WordlistsA substantial collection of different wordlists in multiple languages
RocktasticIncludes many permutations of passwords and patterns that have been observed in the wild
RockYou2021906over 2 years agoRockYou2021.txt is a MASSIVE WORDLIST compiled of various other wordlists
WeakPassCollection of large wordlists

Awesome Password Cracking / Specific file formats / PDF

pdfrip701over 2 years agoA multi-threaded PDF password cracking utility equipped with commonly encountered password format builders and dictionary attacks

Awesome Password Cracking / Specific file formats / JKS

JKS private key cracker184about 6 years agoCracking passwords of private key entries in a JKS file

Awesome Password Cracking / Specific file formats / ZIP

bkcrack1,702almost 2 years agoCrack legacy zip encryption with Biham and Kocher's known plaintext attack
frackzip448over 3 years agoSmall tool for cracking encrypted ZIP archives

Awesome Password Cracking / Artificial Intelligence

adams21over 2 years agoReducing Bias in Modeling Real-world Password Strength via Deep Learning and Dynamic Dictionaries
neural network cracking229almost 7 years agoCode for cracking passwords with neural networks
RNN-Passwords86over 5 years agoUsing the char-rnn to learn and guess passwords
rulesfinder110about 3 years agoThis tool finds efficient password mangling rules (for John the Ripper or Hashcat) for a given dictionary and a list of passwords
PassGPT51almost 3 years agoPassGPT is a GPT-2 model trained from scratch on password leaks

Awesome Password Cracking / Research / Articles and Blog Posts

Optimizing Wordlists with Masks
Purple Rain Attack - Password Cracking With Random Generation
Smashing Hashes with Token Swapping Attacks

Awesome Password Cracking / Research / Papers

Generating Optimized Guessing Candidates toward Better Password Cracking from Multi-Dictionaries Using Relativistic GAN (2020)
GENPass: A General Deep Learning Model for Password Guessing with PCFG Rules and Adversarial Generation (2018)
Password Cracking Using Probabilistic Context-Free Grammars (2009)
Reducing Bias in Modeling Real-world Password Strength via Deep Learning and Dynamic Dictionaries (2020)
Fast, Lean, and Accurate: Modeling Password Guessability Using Neural Networks (2016)
PassGAN: A Deep Learning Approach for Password Guessing (2017)
PassGPT: Password Modeling and (Guided) Generation with LLMs

Awesome Password Cracking / Research / Talks

BsidesKY2023 - Leveling Up Password Attacks with Breach Data
DEF CON Safe Mode Password Village - Getting Started with Hashcat
DEF CON Safe Mode Password Village - Jeremi Gosney - Cracking at Extreme Scale
DEF CON 28 Safe Mode Password Village – 'Let's Crack RockYou Without Using rockyou txt'
SecTor 2019 - Will Hunt - Hashes, Hashes Everywhere, But All I See Is Plaintext
Tailored, Machine Learning-driven Password Guessing Attacks and Mitigation at DefCamp
UNHash - Methods for better password cracking
USENIX Security '21 - Reducing Bias in Modeling Real-world Password Strength via Deep Learning and Dynamic Dictionaries
USENIX Security '16 - Fast, Lean, and Accurate: Modeling Password Guessability Using Neural Networks

Backlinks from these awesome lists:

More related projects: