rhetenor/awesome-awesomeness
1
0
Fork 0
Code Issues Pull Requests Packages Projects Releases Wiki Activity

update lists

Browse Source
This commit is contained in:
Jonas Zeunert
2025-07-18 22:22:32 +02:00
parent 55bed3b4a1
commit 5916c5c074
3078 changed files with 331679 additions and 357255 deletions
Download Patch File Download Diff File Expand all files Collapse all files

42
terminal/passwordcracking
View File

@@ -1,4 +1,4 @@
 Awesome Password Cracking !Awesome (https://awesome.re/badge.svg) (https://awesome.re)
 Awesome Password Cracking !Awesome (https://awesome.re/badge.svg) (https://awesome.re)
In cryptanalysis and computer security, password cracking is the process of recovering passwords from data that has been stored in or transmitted by a computer system in scrambled form. A common approach (brute-force attack 
(https://en.wikipedia.org/wiki/Brute-force_attack)) is to repeatedly try guesses for the password and to check them against an available cryptographic hash of the password.
@@ -39,7 +39,6 @@
 - Other (#other)
- Specific file formats (#specific-file-formats)
 - PDF (#pdf)
 - PEM (#pem)
 - JKS (#jks)
 - ZIP (#zip)
- Artificial Intelligence (#artificial-intelligence)
@@ -51,8 +50,7 @@
Books
- Hash Crack: Password Cracking Manual (v3) (https://www.amazon.com/-/en/Joshua-Picolet/dp/1793458618) - Password Cracking Manual v3 is an expanded reference guide for password recovery (cracking) methods, tools, and analysis 
techniques.
- Hash Crack: Password Cracking Manual (v3) (https://www.amazon.com/-/en/Joshua-Picolet/dp/1793458618) - Password Cracking Manual v3 is an expanded reference guide for password recovery (cracking) methods, tools, and analysis techniques.
@@ -85,7 +83,6 @@
- Autocrack (https://github.com/pry0cc/autocrack) - A set of client and server tools for automatically, and lightly automatically cracking hashes.
- docker-hashcat (https://github.com/dizcza/docker-hashcat) - Latest hashcat docker for Ubuntu 18.04 CUDA, OpenCL, and POCL.
- hashcat.launcher (https://github.com/s77rt/hashcat.launcher) - Hashcat.launcher is a cross-platform GUI app that run and control hashcat.
- Hashcat-Stuffs (https://github.com/xfox64x/Hashcat-Stuffs) - Collection of hashcat lists and things.
- hashcat-utils (https://github.com/hashcat/hashcat-utils/) - Small utilities that are useful in advanced password cracking.
- Hashfilter (https://github.com/bharshbarger/Hashfilter) - Read a hashcat potfile and parse different types into a sqlite database.
@@ -104,7 +101,6 @@
- fitcrack (https://github.com/nesfit/fitcrack) - A hashcat-based distributed password cracking system.
- Hashstation (https://github.com/hashstation/hashstation) - Hashstation is a BOINC-based distributed password cracking system with a built-in web interface.
- Hashtopolis (https://github.com/hashtopolis/server) - A multi-platform client-server tool for distributing hashcat tasks to multiple computers.
- HashtopoloCLI (https://github.com/jakewnuk/HashtopoCLI) - CLI tool for Hashtopolis API incorporating some of the API functionality into a dynamic Python wrapper.
- Kraken (https://github.com/arcaneiceman/kraken) - A multi-platform distributed brute-force password cracking system.
Rules
@@ -117,7 +113,6 @@
- OneRuleToRuleThemAll (https://github.com/NotSoSecure/password_cracking_rules) - "One rule to crack all passwords. or atleast we hope so."
- OneRuleToRuleThemStill (https://github.com/stealthsploit/OneRuleToRuleThemStill) - "A revamped and updated version of my original OneRuleToRuleThemAll hashcat rule."
- pantagrule (https://github.com/rarecoil/pantagrule) - Large hashcat rulesets generated from real-world compromised passwords.
- squid rules (https://github.com/jakewnuk/HIBP-578M) - Hashcat rules ordered by effectiveness from testing HIBPv7.
Rule tools
- duprule (https://github.com/mhasbini/duprule) - Detect & filter duplicate hashcat rules.
@@ -144,9 +139,8 @@
Misc
- 920mPasswordMasks (https://github.com/jakewnuk/920mPasswordMasks) - Hashcat password masks from 920 million breach passwords filtered into groups.
- Hashes (https://github.com/zefr0x/hashes) - Identify hashing algorithms (GUI frontend for Name That Hash).
- hashgen (https://github.com/cyclone-github/hashgen) - Hashgen is a simple yet very fast CLI hash generator written in Go and cross compiled for Linux, Windows & Mac.
- hashID (https://github.com/psypanda/hashID) - Software to identify the different types of hashes.
- Name That Hash (https://github.com/HashPals/Name-That-Hash) - Don't know what type of hash it is? Name That Hash will name that hash type! Identify MD5, SHA256 and 300+ other hashes. Comes with a neat web app.
@@ -159,7 +153,7 @@
- Epixoip - GitHub (https://github.com/epixoip) / Mastodon (https://infosec.exchange/@epixoip) / Twitter (https://twitter.com/jmgosney).
- Evilmog - GitHub (https://github.com/evilmog/) / Mastodon (https://infosec.exchange/@evilmog) / Twitter (https://twitter.com/Evil_Mog).
- Hydraze - GitHub (https://github.com/Hydraze) / Mastodon (https://infosec.exchange/@hydraze) / Twitter (https://twitter.com/Hydraze).
- JakeWnuk - GitHub (https://github.com/jakewnuk) / Mastodon (https://infosec.exchange/@JakeWnuk).
- JakeWnuk - GitHub (https://github.com/jakewnuk).
- Kontrast23 - GitHub (https://github.com/kontrast23) / Twitter (https://twitter.com/marco_preuss).
- M3g9tr0n - GitHub (https://github.com/m3g9tr0n) / Twitter (https://twitter.com/m3g9tr0n).
- Matrix - GitHub (https://github.com/matrix) / Twitter (https://twitter.com/gm4tr1x).
@@ -208,7 +202,6 @@
- password-stretcher (https://github.com/thetechromancer/password-stretcher) - Generate "disgusting quantities" of passwords from websites, files, or stdin. Compliments password-smelter.
- pcfg_cracker (https://github.com/lakiw/pcfg_cracker) - This project uses machine learning to identify password creation habits of users.
- Pipal (https://github.com/digininja/pipal) - THE password analyser.
- PwdStat (https://github.com/jakewnuk/pwdstat) - Tool for identifying systemic password usage, creating password masks, and analyzing cracked password samples with human readable statistics to help defenders.
- Graphcat (https://github.com/Orange-Cyberdefense/graphcat) - Generate graphs and charts based on password cracking result.
Generation/Manipulation
@@ -225,12 +218,12 @@
- Elpscrk (https://github.com/D4Vinci/elpscrk) - Elpscrk is like cupp, but it's based on permutations and statistics while being memory efficient.
- Keyboard-Walk-Generators (https://github.com/Rich5/Keyboard-Walk-Generators) - Generate Keyboard Walk Dictionaries for cracking.
- kwprocessor (https://github.com/hashcat/kwprocessor) - Advanced keyboard-walk generator with configureable basechars, keymap and routes.
- maskcat (https://github.com/jakewnuk/maskcat) - Utility tool for Hashcat Masks and Password Cracking.
- maskprocessor (https://github.com/hashcat/maskprocessor/) - High-performance word generator with a per-position configureable charset.
- maskuni (https://github.com/flbdx/maskuni) - A standalone fast word generator in the spirit of hashcat's mask generator with unicode support.
- Mentalist (https://github.com/sc0tfree/mentalist) - Mentalist is a graphical tool for custom wordlist generation. It utilizes common human paradigms for constructing passwords and can output the full wordlist as well as rules 
compatible with Hashcat and John the Ripper.
- Mode (https://github.com/JakeWnuk/mode) - A program for quickly aggregating and frequency sorting text from multiple sources and supports concurency.
- Mentalist (https://github.com/sc0tfree/mentalist) - Mentalist is a graphical tool for custom wordlist generation. It utilizes common human paradigms for constructing passwords and can output the full wordlist as well as rules compatible with 
Hashcat and John the Ripper.
- PTT (https://github.com/JakeWnuk/ptt) - The Password Transformation Tool (ptt) is a versatile utility designed for password cracking. It facilitates the creation of custom rules and transformations, as well as the generation of wordlists. This 
tool supports processing data from files, URLs, and standard input, streamlining cracking workflows.
- Phraser (https://github.com/Sparell/Phraser) - Phraser is a phrase generator using n-grams and Markov chains to generate phrases for passphrase cracking.
- princeprocessor (https://github.com/hashcat/princeprocessor) - Standalone password candidate generator using the PRINCE algorithm.
- Rephraser (https://github.com/travco/rephraser) - A Python-based reimagining of Phraser using Markov-chains for linguistically-correct password cracking.
@@ -247,8 +240,8 @@
Wordlists
Laguage specific
- Albanian wordlist (https://github.com/its0x08/albanian-wordlist) - A mix of names, last names and some albanian literature.
- Danish Phone Wordlist Generator (https://github.com/narkopolo/danish_phone_wordlist_generator) - This tool can generate wordlists of Danish phone numbers by area and/or usage (Mobile, landline etc.) Useful for password cracking or 
fuzzing Danish targets.
- Danish Phone Wordlist Generator (https://github.com/narkopolo/danish_phone_wordlist_generator) - This tool can generate wordlists of Danish phone numbers by area and/or usage (Mobile, landline etc.) Useful for password cracking or fuzzing 
Danish targets.
- Danish Wordlists (https://github.com/narkopolo/danish-wordlists) - Collection of danish wordlists for cracking danish passwords.
- French Wordlists (https://github.com/clem9669/wordlists) - This project aim to provide french word list about everything a person could use as a base password.
@@ -264,11 +257,8 @@
PDF
- pdfrip (https://github.com/mufeedvh/pdfrip) - A multi-threaded PDF password cracking utility equipped with commonly encountered password format builders and dictionary attacks.
PEM
- pemcracker (https://github.com/bwall/pemcracker) - Tool to crack encrypted PEM files.
JKS
- JKS private key cracker (https://github.com/floyd-fuh/JKS-private-key-cracker-hashcat) - Cracking passwords of private key entries in a JKS fileCracking passwords of private key entries in a JKS file.
- JKS private key cracker (https://github.com/floyd-fuh/JKS-private-key-cracker-hashcat) - Cracking passwords of private key entries in a JKS file.
ZIP
- bkcrack (https://github.com/kimci86/bkcrack) - Crack legacy zip encryption with Biham and Kocher's known plaintext attack.
@@ -278,7 +268,7 @@
Artificial Intelligence
- adams (https://github.com/TheAdamProject/adams) - Reducing Bias in Modeling Real-world Password Strength via Deep Learning and Dynamic Dictionaries.
 (https://github.com/cupslab/neural_network_cracking) - Code for cracking passwords with neural networks.
- neural network cracking (https://github.com/cupslab/neural_network_cracking) - Code for cracking passwords with neural networks.
- RNN-Passwords (https://github.com/gehaxelt/RNN-Passwords) - Using the char-rnn to learn and guess passwords.
- rulesfinder (https://github.com/synacktiv/rulesfinder) - This tool finds efficient password mangling rules (for John the Ripper or Hashcat) for a given dictionary and a list of passwords.
- PassGPT (https://github.com/javirandor/passgpt) - PassGPT is a GPT-2 model trained from scratch on password leaks.
@@ -302,7 +292,8 @@
- PassGPT: Password Modeling and (Guided) Generation with LLMs (https://arxiv.org/abs/2306.01545)
Talks
- BsidesKY2023 - Leveling Up Password Attacks with Breach Data (https://github.com/JakeWnuk/Security-Conferences/blob/main/BsidesKY2023%20-%20Leveling%20Up%20Password%20Attacks%20with%20Breach%20Data.pdf)
- BSides Cayman Islands 2024 - No Cap Cracking: Improving Offline Hash Recovery Methodologies (https://jakewnuk.com/static/No%20Cap%20Cracking%20Improving%20Offline%20Hash%20Recovery%20Methodologies.pdf)
- BSides Cayman Islands 2023 - Leveling Up Password Attacks with Breach Data (https://jakewnuk.com/static/Leveling%20Up%20Password%20Attacks%20with%20Breach%20Data.pdf)
- DEF CON Safe Mode Password Village - Getting Started with Hashcat (https://www.youtube.com/watch?v=MBTJ8f6Fsmg)
- DEF CON Safe Mode Password Village - Jeremi Gosney - Cracking at Extreme Scale (https://www.youtube.com/watch?v=4Ell1Tt23NI)
- DEF CON 28 Safe Mode Password Village – 'Let's Crack RockYou Without Using rockyou txt' (https://www.youtube.com/watch?v=8FtXntEsZdU)
@@ -310,5 +301,6 @@
- Tailored, Machine Learning-driven Password Guessing Attacks and Mitigation at DefCamp (https://www.youtube.com/watch?v=iK6ZbD6v9Gg)
- UNHash - Methods for better password cracking (https://media.ccc.de/v/31c3_-_5966_-_en_-_saal_1_-_201412292245_-_unhash_-_methods_for_better_password_cracking_-_tonimir_kisasondi)
- USENIX Security '21 - Reducing Bias in Modeling Real-world Password Strength via Deep Learning and Dynamic Dictionaries (https://www.youtube.com/watch?v=Jvp3UTdCeag)
- USENIX Security '16 - Fast, Lean, and Accurate: Modeling Password Guessability Using Neural Networks
 (https://www.youtube.com/watch?v=GgaZ_LxsL_8)
- USENIX Security '16 - Fast, Lean, and Accurate: Modeling Password Guessability Using Neural Networks (https://www.youtube.com/watch?v=GgaZ_LxsL_8)
passwordcracking Github: https://github.com/n0kovo/awesome-password-cracking