Crypto & Cracking

Tools to assist with cracking hashes and to facilitate with the authentication attempts into systems

Tool	Description
bopscrk	bopscrk (Before Outset PaSsword CRacKing) is a tool to generate smart and powerful wordlists for targeted attacks	https://github.com/R3nt0n/bopscrk
Brutex	Automated brute-force tool for dictionary attacks - Uses nmap & hydra	https://github.com/1N3/Brutex
CeWL	Create custom word lists by spidering a targets website and collecting unique words	https://github.com/digininja/CeWL
Ciphey	Fully automated decryption/decoding/cracking/analyses tool using natural language processing and Machine AI. Available in docker.	https://github.com/Ciphey/Ciphey
CrackerJack	Web Interface for Hashcat by Context Information Security	https://github.com/ctxis/crackerjack
Crunch	Brute-Force password generator	https://github.com/jim3ma/crunch
CUPP	Common User Passwords Profiler	https://github.com/Mebus/cupp
Duplicut	Quickly dedupe massive wordlists, without changing the order	https://github.com/nil0x42/duplicut
Fcrackzip	Cracking tool for zip files. Link provided is for Linux, you will have to search for other OS	https://github.com/hyc/fcrackzip
HAITI	A CLI tool to identify the hash type of a given hash	https://github.com/noraj/haiti
Hashcat	Hash cracking tool. Pretty much the standard.	https://hashcat.net/hashcat
Hashcat GUI	Can be added to Hashcat for GUI experience. Requires Hashcat to work.	https://github.com/scandium/hashcat-gui
hash-identifier	Identifies a vast array of hash types based on input. Written in Python	https://github.com/blacksploit/hash-identifier
Hashpump	A tool to exploit the hash length extension attack in various hashing algorithms	https://github.com/bwall/HashPump
Hatch	Brute-Force and Dictionary Attack for Weblogins	https://github.com/FlorianBord2/Hatch-python3-optimised
hate_crack	Script to simplify hashcrack functionality	https://github.com/trustedsec/hate_crack
Hydra	Brute-Force and Dictionary Attack tool for multiple services	https://github.com/vanhauser-thc/thc-hydra
jwt-cracker	Simple HS256 JWT token brute force cracker.	https://github.com/lmammino/jwt-cracker
jwt-hack	Java Web Token encoder/decoder	https://github.com/hahwul/jwt-hack
jwt_tool	jwt_tool.py is a toolkit for validating, forging, scanning and tampering JWTs (JSON Web Tokens).	https://github.com/ticarpi/jwt_tool
Johntheripper	Password and Hash cracking tool	https://openwall.com/john
Mentalist	Mentalist is a graphical tool for custom wordlist generation. It utilizes common human paradigms for constructing passwords and can output the full wordlist as well as rules compatible with Hashcat and John the Ripper.	https://github.com/sc0tfree/mentalist
Ncrack	Ncrack is a high-speed network authentication cracking tool.	https://github.com/nmap/ncrack
Playfair Cipher Encryption/Decryption tool	Tool to decode Playfair cipher	https://github.com/milstrike/Playfair-Encryption-Decryption-Tools
Pnwgen	Phone number wordlist generator	https://github.com/toxydose/pnwgen
RMIScout	RMIScout enables wordlist and bruteforce attacks against exposed Java RMI interfaces to safely guess method signatures without invocation	https://github.com/BishopFox/rmiscout
RSActfTool	RSA Attack Tool for CTF	https://github.com/Ganapati/RsaCtfTool
rsatool	Calculates RSA (p, q, n, d, e) and RSA-CRT (dP, dQ, qInv) parameters	https://github.com/ius/rsatool
Search-That-Hash	Searches the most popular hash cracking sites and automatically inputs your hash(s) for cracking	https://github.com/HashPals/search-that-hash
TTPassGen	TTPassGen is a highly flexible and scriptable password dictionary generator base on Python, you can easily use various rules to generate the desired combination of words.	https://github.com/tp7309/TTPassGen
TwoFi	Generate wordlist based on Twitter feed	https://github.com/digininja/twofi
WordlistCTL	Script to fetch, install, update and search wordlist archives from websites offering wordlists with more than 6400 wordlists available.	https://github.com/BlackArch/wordlistctl
XorTool	A Tool to do XOR analyses	https://github.com/hellman/xortool
Zydra	Brute-Force and Dictionary Attack tool for Zip, RAR, 7Zip, shadowfile etc	https://github.com/hamedA2/Zydra