awesome-password-cracking

Password Cracking Collection

A curated list of tools, research, and projects related to password cracking and security

A curated list of awesome tools, research, papers and other projects related to password cracking and password security.

GitHub
641 stars
27 watching
74 forks
last commit: 4 months ago
Linked from 3 awesome lists

awesomeawesome-listhash-crackinghashcatjohn-the-ripperpassword-crackingpassword-safetywordlistwordlist-generatorwordlist-processingwordlists

Awesome Password Cracking
awesome-lint 610 6 months ago If in doubt, use
open an issue 641 4 months ago If you think an item shouldn't be here

Awesome Password Cracking / Books
Hash Crack: Password Cracking Manual (v3) Password Cracking Manual v3 is an expanded reference guide for password recovery (cracking) methods, tools, and analysis techniques

Awesome Password Cracking / Cloud
Cloud_crack 42 over 5 years ago Crack passwords using Terraform and AWS
Cloudcat 16 about 5 years ago A script to automate the creation of cloud infrastructure for hash cracking
Cloudstomp 3 almost 6 years ago Automated deployment of instances on EC2 via plugin for high CPU/GPU applications at the lowest price
Cloudtopolis 393 3 months ago A tool that facilitates the installation and provisioning of Hashtopolis on the Google Cloud Shell platform, quickly and completely unattended (and also, free!)
NPK 525 8 months ago NPK is a distributed hash-cracking platform built entirely of serverless components in AWS including Cognito, DynamoDB, and S3
Penglab 925 over 1 year ago Abuse of Google Colab for cracking hashes
Rook 79 about 5 years ago Automates the creation of AWS p3 instances for use in GPU-based password cracking

Awesome Password Cracking / Conversion
7z2hashcat 352 5 months ago Extract information from password-protected .7z archives (and .sfx files) such that you can crack these "hashes" with hashcat
MacinHash 35 almost 6 years ago Convert macOS plist password file to hash file for password crackers
NetNTLM-Hashcat 33 almost 5 years ago Converts John The Ripper/Cain format hashes (singular, or in bulk) to HashCat compatible hash format
Rubeus-to-Hashcat 12 almost 5 years ago Converts / formats Rubeus kerberoasting output into hashcat readable format
WINHELLO2hashcat 68 over 2 years ago With this tool one can extract the "hash" from a WINDOWS HELLO PIN. This hash can be cracked with Hashcat
bitwarden2hashcat 21 over 2 years ago A tool that converts Bitwarden's data into a hashcat-suitable hash
hc_to_7z 7 7 months ago Convert 7-Zip hashcat hashes back to 7z archives
hcxtools 2,014 10 days ago Portable solution for conversion of cap/pcap/pcapng (gz compressed) WiFi dump files to hashcat formats
itunes_backup2hashcat 105 almost 8 years ago Extract the information needed from the Manifest.plist files to convert it to hashes compatible with hashcat
mongodb2hashcat 7 about 4 years ago Extract hashes from the MongoDB database server to a hash format that hashcat accepts: -m 24100 (SCRAM-SHA-1) or -m 24200 (SCRAM-SHA-256)

Awesome Password Cracking / Hashcat
Autocrack 42 over 1 year ago A set of client and server tools for automatically, and lightly automatically cracking hashes
docker-hashcat 136 over 1 year ago Latest hashcat docker for Ubuntu 18.04 CUDA, OpenCL, and POCL
hashcat.launcher 402 10 months ago Hashcat.launcher is a cross-platform GUI app that run and control hashcat
Hashcat-Stuffs 50 almost 5 years ago Collection of hashcat lists and things
hashcat-utils 1,365 5 months ago Small utilities that are useful in advanced password cracking
Hashfilter 5 over 6 years ago Read a hashcat potfile and parse different types into a sqlite database
known_hosts-hashcat 324 11 months ago A guide and tool for cracking ssh known_hosts files with hashcat
pyhashcat 31 over 3 years ago Python C API binding to libhashcat

Awesome Password Cracking / Hashcat / Automation
autocrack 108 over 6 years ago Hashcat wrapper to help automate the cracking process
hat 298 5 months ago An Automated Hashcat Tool for common wordlists and rules to speed up the process of cracking hashes during engagements
hate_crack 1,662 8 days ago A tool for automating cracking methodologies through Hashcat from the TrustedSec team
Naive hashcat 1,236 almost 3 years ago Naive hashcat is a plug-and-play script that is pre-configured with naive, emperically-tested, "good enough" parameters/attack types

Awesome Password Cracking / Hashcat / Distributed cracking
CrackLord 384 about 2 years ago Queue and resource system for cracking passwords
fitcrack 145 3 months ago A hashcat-based distributed password cracking system
Hashstation 7 10 months ago Hashstation is a BOINC-based distributed password cracking system with a built-in web interface
Hashtopolis 1,457 7 days ago A multi-platform client-server tool for distributing hashcat tasks to multiple computers
Kraken 300 over 1 year ago A multi-platform distributed brute-force password cracking system

Awesome Password Cracking / Hashcat / Rules
clem9669 rules 405 3 months ago Rule for hashcat or john
hashcat rules collection 77 3 months ago Probably the largest collection of hashcat rules out there
Hob0Rules 1,459 over 5 years ago Password cracking rules for Hashcat based on statistics and industry patterns
Kaonashi 1,009 over 2 years ago Wordlist, rules and masks from Kaonashi project (RootedCON 2019)
nsa-rules 528 almost 8 years ago Password cracking rules and masks for hashcat generated from cracked passwords
nyxgeek-rules 77 3 months ago Custom password cracking rules for Hashcat and John the Ripper
OneRuleToRuleThemAll 1,476 almost 3 years ago "One rule to crack all passwords. or atleast we hope so."
OneRuleToRuleThemStill 388 about 1 month ago "A revamped and updated version of my original OneRuleToRuleThemAll hashcat rule."
pantagrule 390 almost 4 years ago Large hashcat rulesets generated from real-world compromised passwords

Awesome Password Cracking / Hashcat / Rule tools
duprule 41 almost 3 years ago Detect & filter duplicate hashcat rules
ruleprocessorY 30 19 days ago A next-gen Rule processor with complex multibyte character support built to support Hashcat

Awesome Password Cracking / Hashcat / Web interfaces
crackerjack 357 10 months ago CrackerJack is a Web GUI for Hashcat developed in Python
CrackQ 923 3 months ago A Python Hashcat cracking queue system
hashpass 42 over 2 years ago Hash cracking WebApp & Server for hashcat
Hashview 360 9 days ago A web front-end for password cracking and analytics
Wavecrack 166 about 3 years ago Wavestone's web interface for password cracking with hashcat
WebHashCat 291 11 months ago WebHashcat is a very simple but efficient web interface for hashcat password cracking tool

Awesome Password Cracking / John the Ripper
BitCracker 823 6 months ago BitCracker is the first open source password cracking tool for memory units encrypted with BitLocker
johnny 534 about 1 year ago GUI frontend to John the Ripper

Awesome Password Cracking / Misc
hashgen 24 17 days ago Hashgen is a simple yet very fast CLI hash generator written in Go and cross compiled for Linux, Windows & Mac
Name That Hash 1,481 11 months ago Don't know what type of hash it is? Name That Hash will name that hash type! Identify MD5, SHA256 and 300+ other hashes. Comes with a neat web app

Awesome Password Cracking / Misc / Notable People
Twitter Alotdv -
GitHub Clem9669 -
GitHub Coolbry95 - /
GitHub Dakykilla - /
GitHub Dropdeadfu - /
GitHub Epixoip - / /
GitHub Evilmog - / /
GitHub Hydraze - / /
GitHub JakeWnuk - /
GitHub Kontrast23 - /
GitHub M3g9tr0n - /
GitHub Matrix - /
Twitter Minga -
GitHub N0kovo - / /
GitHub NSAKEY - / /
GitHub NullMode - / /
Twitter Paule965 -
GitHub Philsmd - /
GitHub Roycewilliams - / /
GitHub RuraPenthe - / /
GitHub S3in!c - / /
GitHub Tehnlulz - /
GitHub The_Mechanic - /
Twitter ToXiC -
GitHub Undeath -
GitHub Unix-ninja - / /
GitHub Xan - / /

Awesome Password Cracking / Websites / Communities
hashcat Forum Forum by the developers of hashcat
Hashmob A growing password recovery community aimed towards being a center point of collaboration for cryptography enthusiasts. Huge wordlist collection and a lookup service too
Hashkiller Forum A password cracking forum with over 20,000 registered users

Awesome Password Cracking / Websites / Lookup services
CMD5 Provides online MD5 / sha1/ mysql / sha256 encryption and decryption services
CrackStation Free hash lookup service supplying wordlists as well
gohashmob 9 over 1 year ago Go CLI app to quickly lookup hashes using the HashMob API
Hashes.com A hash lookup service with paid features
Hashkiller A hash lookup service with a forum
Online Hash Crack Cloud password recovery service

Awesome Password Cracking / Wordlist tools / Analysis
PACK 796 almost 5 years ago A collection of utilities developed to aid in analysis of password lists in order to enhance password cracking through pattern detection of masks, rules, character-sets and other password characteristics
password-smelter 17 10 months ago Ingests passwords from hashcat, etc. and outputs to HTML, Markdown, XLSX, PNG, JSON. Dark and light themes supported. Compliments password-stretcher
password-stretcher 33 almost 2 years ago Generate "disgusting quantities" of passwords from websites, files, or stdin. Compliments password-smelter
pcfg_cracker 321 4 months ago This project uses machine learning to identify password creation habits of users
Pipal 631 about 1 year ago THE password analyser
Graphcat 154 almost 2 years ago Generate graphs and charts based on password cracking result

Awesome Password Cracking / Wordlist tools / Generation/Manipulation
accent_permutator 4 7 months ago A tool to transform characters from ASCII / UTF-8 to accented characters such as "o" to "ò"
anew 1,382 10 months ago Append lines from stdin to a file, but only if they don't already appear in the file. Outputs new lines to stdout too, making it a bit like a tee -a that removes duplicates
bopscrk 885 3 months ago Generate smart and powerful wordlists for targeted attacks. Includes song lyrics fetching and different transforms
common-substr 62 over 4 years ago Simple tool to extract the most common substrings from an input text. Built for password cracking
Crunch Crunch is a wordlist generator where you can specify a standard character set or a character set you specify. Crunch can generate all possible combinations and permutations
CUPP 4,511 about 1 year ago A tool that lets you generate wordlists by user profiling data such as birthday, nickname, address, name of a pet or relative etc
duplicut 881 over 2 years ago Remove duplicates from MASSIVE wordlist, without sorting it (for dictionary-based password cracking)
Gorilla 379 about 1 year ago Tool for generating wordlists or extending an existing one using mutations
Gramify 28 5 months ago Create n-grams of wordlists based on words, characters, or charsets to use in offline password attacks and data analysis
Elpscrk 788 about 1 month ago Elpscrk is like cupp, but it's based on permutations and statistics while being memory efficient
Keyboard-Walk-Generators 142 almost 9 years ago Generate Keyboard Walk Dictionaries for cracking
kwprocessor 545 about 1 year ago Advanced keyboard-walk generator with configureable basechars, keymap and routes
maskcat Utility tool for Hashcat Masks and Password Cracking
maskprocessor 441 over 2 years ago High-performance word generator with a per-position configureable charset
maskuni 6 over 2 years ago A standalone fast word generator in the spirit of hashcat's mask generator with unicode support
Mentalist 1,813 over 1 year ago Mentalist is a graphical tool for custom wordlist generation. It utilizes common human paradigms for constructing passwords and can output the full wordlist as well as rules compatible with Hashcat and John the Ripper
PTT 21 4 days ago The Password Transformation Tool (ptt) is a versatile utility designed for password cracking. It facilitates the creation of custom rules and transformations, as well as the generation of wordlists. This tool supports processing data from files, URLs, and standard input, streamlining cracking workflows
Phraser 49 almost 9 years ago Phraser is a phrase generator using n-grams and Markov chains to generate phrases for passphrase cracking
princeprocessor 430 about 1 year ago Standalone password candidate generator using the PRINCE algorithm
Rephraser 61 over 2 years ago A Python-based reimagining of Phraser using Markov-chains for linguistically-correct password cracking
Rling 81 about 1 year ago RLI Next Gen (Rling), a faster multi-threaded, feature rich alternative to rli found in hashcat utilities
statsprocessor 172 about 1 year ago Word generator based on per-position markov-chains
StringZilla 2,223 9 days ago Fastest string sort, search, split, and shuffle for long strings and multi-gigabyte files in Python and C
TTPassGen 148 about 1 year ago Flexible and scriptable password dictionary generator which supportss brute-force, combination, complex rule modes etc
token-reverser 110 over 4 years ago Words list generator to crack security tokens
WikiRaider 39 10 months ago WikiRaider enables you to generate wordlists based on country specific databases of Wikipedia

Awesome Password Cracking / Wordlists / Laguage specific
Albanian wordlist 4 almost 2 years ago A mix of names, last names and some albanian literature
Danish Phone Wordlist Generator 5 over 2 years ago This tool can generate wordlists of Danish phone numbers by area and/or usage (Mobile, landline etc.) Useful for password cracking or fuzzing Danish targets
Danish Wordlists 22 almost 2 years ago Collection of danish wordlists for cracking danish passwords
French Wordlists 262 6 days ago This project aim to provide french word list about everything a person could use as a base password

Awesome Password Cracking / Wordlists / Other
Packet Storm Wordlists A substantial collection of different wordlists in multiple languages
Rocktastic Includes many permutations of passwords and patterns that have been observed in the wild
RockYou2021 899 9 months ago RockYou2021.txt is a MASSIVE WORDLIST compiled of various other wordlists
WeakPass Collection of large wordlists

Awesome Password Cracking / Specific file formats / PDF
pdfrip 676 5 months ago A multi-threaded PDF password cracking utility equipped with commonly encountered password format builders and dictionary attacks

Awesome Password Cracking / Specific file formats / JKS
JKS private key cracker 184 about 4 years ago Cracking passwords of private key entries in a JKS file

Awesome Password Cracking / Specific file formats / ZIP
bkcrack 1,674 about 1 month ago Crack legacy zip encryption with Biham and Kocher's known plaintext attack
frackzip 444 over 1 year ago Small tool for cracking encrypted ZIP archives

Awesome Password Cracking / Artificial Intelligence
adams 21 7 months ago Reducing Bias in Modeling Real-world Password Strength via Deep Learning and Dynamic Dictionaries
neural network cracking 228 almost 5 years ago Code for cracking passwords with neural networks
RNN-Passwords 86 over 3 years ago Using the char-rnn to learn and guess passwords
rulesfinder 109 over 1 year ago This tool finds efficient password mangling rules (for John the Ripper or Hashcat) for a given dictionary and a list of passwords
PassGPT 49 about 1 year ago PassGPT is a GPT-2 model trained from scratch on password leaks

Awesome Password Cracking / Research / Articles and Blog Posts
Optimizing Wordlists with Masks
Purple Rain Attack - Password Cracking With Random Generation
Smashing Hashes with Token Swapping Attacks

Awesome Password Cracking / Research / Papers
Generating Optimized Guessing Candidates toward Better Password Cracking from Multi-Dictionaries Using Relativistic GAN (2020)
GENPass: A General Deep Learning Model for Password Guessing with PCFG Rules and Adversarial Generation (2018)
Password Cracking Using Probabilistic Context-Free Grammars (2009)
Reducing Bias in Modeling Real-world Password Strength via Deep Learning and Dynamic Dictionaries (2020)
Fast, Lean, and Accurate: Modeling Password Guessability Using Neural Networks (2016)
PassGAN: A Deep Learning Approach for Password Guessing (2017)
PassGPT: Password Modeling and (Guided) Generation with LLMs

Awesome Password Cracking / Research / Talks
BsidesKY2023 - Leveling Up Password Attacks with Breach Data
DEF CON Safe Mode Password Village - Getting Started with Hashcat
DEF CON Safe Mode Password Village - Jeremi Gosney - Cracking at Extreme Scale
DEF CON 28 Safe Mode Password Village – 'Let's Crack RockYou Without Using rockyou txt'
SecTor 2019 - Will Hunt - Hashes, Hashes Everywhere, But All I See Is Plaintext
Tailored, Machine Learning-driven Password Guessing Attacks and Mitigation at DefCamp
UNHash - Methods for better password cracking
USENIX Security '21 - Reducing Bias in Modeling Real-world Password Strength via Deep Learning and Dynamic Dictionaries
USENIX Security '16 - Fast, Lean, and Accurate: Modeling Password Guessability Using Neural Networks

Backlinks from these awesome lists:

More related projects: