#1Tools for recovering passwords from hashes, encrypted sources, or through brute-force/dictionary attacks.
Kitploit recommended

Unofficial Bitwarden compatible server written in Rust, formerly known as bitwarden_rs
Small utilities that are useful in advanced password cracking

A comprehensive collection of penetration testing cheatsheets, guides, and tools.

Wi-Fi Security Audit & WPA2 Password Testing Guide 2026: Master Monitor Mode

Audit Wi-Fi security on Linux with monitor mode, handshake capture, and offline WPA/WPA2 password testing in one guided GUI

Physical access red team live ISO built on Arch Linux

Bash tool for on-foot Wi-Fi security checks in a loop, with evidence reports. (re-invented wifi WarDriving)

Full black-box penetration test against SecOS:1 (VulnHub) — CSRF exploitation, privilege escalation via CVE-2015-1328 (OverlayFS), post-exploitation

Dictionary Brute Force of the Mikrotik RouterOS 6.x Web Interface

Python script that brute-forces Joomla administrator login credentials using wordlists, with proxy and verbose options for penetration testing.

FortinetHunter (@YogSoth0) binary cracking application. Part of CTF for FortinetHunter. ELF door: a stripped Nuitka onefile, an XOR-scrambled…

Wordlist Bruteforcer for GoFile (gofile.io) Download Passwords

8-14 character Hashcat masks based on analysis of 3.2 million NTLM hashes cracked while pentesting

Markov model-based password guesser in C that enumerates candidates by probability, generating most likely passwords first for hash cracking via…

Hashcat rule analyzer and interpreter - A Rosetta Stone for decoding hashcat rule syntax

Python/Go framework that generates SQL injection PoC requests, automates sqlmap attacks, and manages modular exploit scripts with parameter detection…

Decrypt Ruijie ReyeeOS firmware (v1/v2) and encrypted config backups; recover plaintext passwords

Offset Independent Credential Extraction Tool