53 matches found
awesome-password-cracking
Awesome Password Cracking In cryptanalysis and computer security, password cracking is the process of recovering passwords from data that has been stored in or transmitted by a computer system in scrambled form. A common approach brute-force attack is to repeatedly try guesses for the password an...
hcxtools
hcxtools A small set of tools to convert packets from capture files to hash files for use with Hashcat or John the Ripper. These tools are 100% compatible with Hashcat and John the Ripper and are endorsed by Hashcat. Brief Description The main purpose of hcxtools is to detect weak points within...
haiti
HAITI HA sh I denT ifI er What is it? A CLI tool to identify the hash type of a given hash. Features 270+ hash types detected Hashcat and John the Ripper references CLI tool & library Hackable References Homepage / Documentation: https://orange-cyberdefense.github.io/haiti/ Author Made by Alexand...
rulesfinder
rulesfinder Machine-learn password mangling rules! This tool finds efficient password mangling rules for John the Ripper or Hashcat for a given dictionary and a list of passwords. The tool is currently alpha quality. tl;dr You need the rust toolchain to build this tool. You can either directly...
john
John the Ripper Esta es la versión "jumbo" mejorada por la comunidad de John the Ripper. Contiene mucho código, documentación y datos aportados por desarrolladores de jumbo y la comunidad de usuarios. Es fácil agregar nuevo código a jumbo, y los requisitos de calidad son bajos, aunque últimamente...
Metasploitable2-Penetration-Testing-Lab
Metasploitable 2 Penetration Testing Lab About the Project...
Security-Writeups
🔐 Security Writeups Welcome! This repository contains my pers...
Penetration-Testing-on-Metasploitable2
Penetration-Testing-on-Metasploitable2...
Microsoft SQL Server NTLM Stealer
This module requires Metasploit: https://metasploit.com/download Current source: https://github.com/rapid7/metasploit-framework class MetasploitModule 'Microsoft SQL Server NTLM Stealer', 'Description' = %q This module can be used to help capture or relay the LM/NTLM credentials of the account...
Exploit for Exposure of Sensitive Information to an Unauthorized Actor in Microsoft
CVE-2023-35636 Microsoft Outlook Information Disclosure Vulner...
Osx-Password-Dumper - A Tool To Dump Users'S .Plist On A Mac OS System And To Convert Them Into A Crackable Hash
OSX Password Dumper Script Overview A bash script to retrieve user's .plist files on a macOS system and to convert the data inside it to a crackable hash format. to use with John The Ripper or Hashcat Useful for CTFs/Pentesting/Red Teaming on macOS systems. Prerequisites The script must be ru...
Franklin Fueling Systems TS-550 Information Disclosure
Exploit Title: Franklin Fueling Systems TS-550 - Exploit and Default Password Date: 3/11/2023 Exploit Author: parsa rezaie khiabanloo Vendor Homepage: Franklin Fueling Systems http://www.franklinfueling.com/ Version: TS-550 Tested on: Linux/Androidtermux Step 1 : attacker can using these dorks an...
hcxpcapngtool pcapng Buffer Overflow DoS
The vulnerability of the pcapngoptionwalk function in the hcxpcapngtool.c component of the WiFi dump file conversion software, which converts WiFi cap/pcap/pcapng files into hashcat and John the Ripper format, is related to buffer overflow attacks. Exploiting this vulnerability allows an attacker...
UNIX Gather Cached AD Hashes
Post Module to obtain all cached AD hashes on the targeted UNIX machine. These can be cracked with John the Ripper JtR. Module Options msf use post/multi/gather/unixcachedadhashes msf postunixcachedadhashes show actions ...actions... msf postunixcachedadhashes set ACTION msf postunixcachedadhashe...
Exploit for OS Command Injection in Webmin
Make-and-Break Create and exploit a vulnerable Virtual Mac...
Password Cracker: Windows
This module uses John the Ripper or Hashcat to identify weak passwords that have been acquired from Windows systems. LANMAN is format 3000 in hashcat. NTLM is format 1000 in hashcat. MSCASH is format 1100 in hashcat. MSCASH2 is format 2100 in hashcat. NetNTLM is format 5500 in hashcat. NetNTLMv2 ...
Password Cracker: Databases
This module uses John the Ripper or Hashcat to identify weak passwords that have been acquired from the mssqlhashdump, mysqlhashdump, postgreshashdump, or oraclehashdump modules. Passwords that have been successfully cracked are then saved as proper credentials. Due to the complexity of some of t...
Password Cracker: AIX
This module uses John the Ripper or Hashcat to identify weak passwords that have been acquired from passwd files on AIX systems. These utilize DES hashing. DES is format 1500 in Hashcat. This module requires Metasploit: https://metasploit.com/download Current source:...
Password Cracker: Linux
This module uses John the Ripper or Hashcat to identify weak passwords that have been acquired from unshadowed passwd files from Unix/Linux systems. The module will only crack MD5, BSDi and DES implementations by default. However, it can also crack Blowfish and SHA256/512, but it is much slower...
Password Cracker: Webapps
This module uses John the Ripper or Hashcat to identify weak passwords that have been acquired from various web applications. Atlassian uses PBKDF2-HMAC-SHA1 which is 12001 in hashcat. PHPass uses phpass which is 400 in hashcat. Mediawiki is MD5 based and is 3711 in hashcat. Apache Superset, some...