RainbowCrack is a general propose implementation of Philippe Oechslin's faster time-memory trade-off technique. It cracks hashes with rainbow tables. Windows binary release.
e138bf840a9498c6d2c0d0f2ec4f20754c9731b0af83cdb9ef4b5fa28cd308a2
The Remote Web Workplace Attack tool will perform a dictionary attack against a live Microsoft Windows Small Business Server's "Remote Web Workplace" portal. It currently supports both SBS 2003 and SBS 2008 and includes features to avoid account lock out. It is written in Python and requires pycurl.
2b844771a4db3be8199e0c71c40dbca2fe50db3fa961396f158b36beae81c99b
Yet Another Cisco Type 7 Password Decryptor. Written in Python.
6e15cec2ceb247c92bc01c89985a0442897a6a41ad2b520fcece53e31ae6aaf6
MAPDAV, or the More Accurate Password Dictionary Attack Vector, is designed to use what is known about a user or users (ex, username, first name, middle name, last name, etc) on a unix/linux system from a /etc/passwd file and tries to come up with probable combinations that could be the user's password. An administrator could run the output through a cracker and see if their user's passwords are anything easy to guess.
4c539a231681899f26f1275b056ed0eecd96ac227aed64e16f61b780e72584e1
Hi5 brute forcing utility that takes in a wordlist and is written in Python.
20cf2a5a5f41c4cfd2d4f019909b942f71a216d787588a10944ce5e0148869dd
This shell script is a SHA1 cracking utility.
17863126dc8b4d58dafaad3048b04ffe9785901df4ad3bef7f70f1860c330405
Simple Machines Forum MD5 cracking utility.
fb9f5b7348b81f5c30306392007241631c4f9e6928048c9c8897db048a3b1480
MD5 MySQL database brute forcing utility. Written in Python.
812ddd835e746192f01da1dcf222b86c588ac9cdebf484c6cfe2ee1309c1b87b
RainbowCrack is an instant Microsoft Windows password cracker based on Philippe Oechslin's faster time-memory trade-off technique. Windows binary release.
b157006a1521f693c29bea667e4a8c8eba8aca2e83c61d30f1fa72dfda732fc0
Simple Skype account brute forcing utility written in Perl.
3b0f91f8c01c5c49815e3606b3b5677bab209b352ad2741a5ede24884a1c24c5
PHPass hash brute forcer. This cracker works against any hash created by this framework to encrypt and store hashed passwords. Such projects that use it include Wordpress, Drupal, bbPress, phpBB3, and many others.
961a2e5522b52e08738a3bc9be03961d5712e7df699ec03509de6d004107c36f
MySQL version 3.23 hash wordlist cracking utility written in Python.
6773da8b007a1b761b04d1a7a42a40337d23fcb1d34eec0641e2de2c5c59273f
MySQL version 5 hash wordlist cracking utility written in Python.
bece4dda62e10bba5c85577081a3cd915d714d07556356d223bf79971820a267
Simple multithreaded SSH brute forcing utility written in Python using paramiko.
56de15394dbc924a7e7a619264774fae2530f9298094d12926b66dad5c96c890
Simple Machines Forum Destroyer version 0.1 that performs multiple malicious acts.
571c46e28eeed37f560de46ede3b84cc7932ce975f95677b6f5e13c306ebc67c
CUPP is the Common User Passwords Profiler. It takes in various user about a given human target and then generates a logical dictionary for password cracking.
d24f7c8ccdff89c52cbc6dabbf113fd3a7cd1c4d1d3090bf2e9fbedceae05a66
Simple SSH brute forcing utility. Written in Expect.
03d481b8ffdc43333a1f7120ddebc8d3d17c19965174121aa69dd29b71ad2890
Wordpress version 2.7 password hash attack tool.
30d6307236524b8d061f1e23c91bfcbdbb9a483afabb89d74266758f3be6f94f
Small shell script to brute force MD5 hashes.
f87813eabb4710f5991a4f961e02c2c5687de3355ab0e7d9075d5a4268c8e7f9
Small shell script to brute force MD5 hashes on VBulletin.
275dfa67d86676db598d6f5791f4b698a8b065d26ee6f82118668e13f1177b12
Invision Power Board Cracker version 1.0. This tool bruteforces md5 hashes and was written for use on FreeBSD.
3d99cd304a1fff660b0713de817ddfc3a7619ff26cb6fff92bdf0ca2e8ece2d0
VNCcrack is a simple, fast offline-mode VNC password cracker. It takes a set of challenge-response pairs of the type passed during a VNC authentication attempt, and attempts to recover the passwords using a dictionary file.
a6b55baeb838fb9ceba777369bace4a6929bfe58a051349808c800008e0bcaeb
Microsoft NT Hash cracker that uses the LM Password.
bc5a031779d73320766587301307873b258c7af333b249ee287dc5ffbf8fc9e6
Domain Raider is a brute forcing utility to find a target's sub-domains.
f5796f130056d86cedf30f8f27ae002ad298b2b58a2180df1cde76d30ea114b2
DirBuster is a multi-threaded java application designed to brute force directories and files names on web/application servers.
bed7dedb2a1f6762036bf3a7543538797dc21156d30b68448d8203d6f1641c9d