#1Tools for recovering passwords from hashes, encrypted sources, or through brute-force/dictionary attacks.
Kitploit recommended
rarecoil/pantagrulelarge hashcat rulesets generated from real-world compromised passwords
moloch--/leakdbWeb-Scale NoSQL Idempotent Cloud-Native Big-Data Serverless Plaintext Credential Search
r3nt0n/bopscrkGenerates targeted password wordlists by combining personal info, applying case/leet transforms, and scraping artist lyrics for enhanced cracking…
hakluke/haklistgenTurns any junk text into a usable wordlist for brute-forcing.
sensepost/assless-chapsCrack MSCHAPv2 challenge/responses quickly using a database of NT hashes
login-securite/donpapiAutomated remote credential dumper for Windows environments, extracting DPAPI secrets, browser credentials, certificates, and configuration files…
offxec/thedocAutomates SQL injection exploitation with SQLMAP, crawls for vulnerabilities, extracts database credentials, finds admin login pages, and cracks…
zzzteph/weakpassBrowser-based password cracking toolkit with hash lookup, wordlist generation, rule-based attack simulation, and client-side hash cracking for…
kaonashi-passwords/kaonashiCurated wordlists, hashcat rules, and masks derived from billions of real passwords, with statistical analysis and research slides from RootedCON…
kingsabri/jwtearModular command-line tool to parse, create and manipulate JWT tokens for hackers
we1h0/securitymanageframworkSecurity Manage Framwork is a security management platform for enterprise intranet, which includes asset management, vulnerability management,…
t3l3machus/psudohashGenerates millions of keyword-based password mutations in seconds.
puckblush/tofuWindows offline filesystem hacking tool for Linux
tw1sm/spraycharlesLow and slow password spraying tool, designed to spray on an interval over a long period of time
hellgatecorp/docxnginxfxDeep File Forensic. Create or manipulate Wordlists out of Text Documents (ex: for BruteForcing). Save it Line by Line as a Binary .BIN File or as a…
joelgmsec/evilnovncReal-time phishing platform that bypasses 2FA via a live noVNC browser session, capturing cookies, saved passwords, browsing history, and downloaded…
yukselberkay/pmanagerStore and retrieve your passwords from a secure offline database. Check if your passwords has leaked previously to prevent targeted password reuse…
harelsegev/prefetch-hash-crackerBrute-force tool that recovers full executable paths from Windows prefetch hashes using bodyfiles, supporting XP, Vista, and 2008 hash functions for…
